Skip to content
OpenAdvisories

Archive

16 August 2005

Vulnerabilities first published on this day (UTC), newest first.

132 results · Feed

  • Unscored —

    xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of ser…

  • Unscored —
    CVE-2005-2587 Public exploit

    SQL injection vulnerability in emailvalidate.php in PHPTB Topic Boards 2.0 allows remote attackers to execute arbitrary…

  • Unscored —

    CaLogic 1.22, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct reque…

  • Unscored —

    BEA Weblogic Express and Server 8.0 through 8.1 SP 1, when using a foreign Java Message Service (JMS) provider, echoes …

  • Unscored —

    The Node Manager for BEA WebLogic Express and Server 6.1 through 8.1 SP 1 allows remote attackers to cause a denial of …

  • Unscored —

    BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores certain secrets concerning password encryption insecurely in con…

  • Unscored —

    BEA WebLogic Express and Server 7.0 through 8.1 SP 1, under certain circumstances when a request to use T3 over SSL (t3…

  • Unscored —

    The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk,…

  • Unscored —
    CVE-2003-1227 Public exploit

    PHP remote file include vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configura…

  • Unscored —
    CVE-2003-1228 Public exploit EPSS 14%

    Buffer overflow in the prepare_reply function in request.c for Mathopd 1.2 through 1.5b13, and possibly earlier version…

  • Unscored —

    BEA WebLogic Server proxy plugin for BEA Weblogic Express and Server 6.1 through 8.1 SP 1 allows remote attackers to ca…

  • Unscored —

    Weblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the JDBCConnectionPoolRuntimeMBean password…