Archive
17 August 2005
Vulnerabilities first published on this day (UTC), newest first.
49 results · Feed
-
Unscored —
Stack-based buffer overflow in Ipswitch IMail Express Web Messaging before 8.05 might allow remote attackers to execute…
-
Unscored —
Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client …
-
Unscored —
Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 character…
-
Unscored —
The roster import functionality in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8, when usi…
-
Unscored —
Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large number of f…
-
Unscored —
Cross-site scripting (XSS) vulnerability in YaBB.pl in YaBB 1 GOLD SP 1.3.2 allows remote attackers to inject arbitrary…
-
Unscored —
Unknown vulnerability in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attac…
-
Unscored —
Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service (CPU consumpti…
-
Unscored —
libuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via unknown attack vectors, re…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized…
-
Unscored —
Netenberg Fantastico De Luxe 2.8 uses database file names that contain the associated usernames, which allows local use…
-
Unscored —
WinFTP Server 1.6 stores username and password credentials in plaintext in the data\user.wfd file, which allows local u…
-
Unscored —
Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attackers to cause a denial of…
-
Unscored —
passwd 0.68 does not check the return code for the pam_start function, which has unknown impact and attack vectors that…
-
Unscored —
The web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 and 3.2.1, when importing a priv…
-
Unscored —
User.php in Gallery, as used in Postnuke, allows users with any Admin privileges to gain access to all galleries.
-
Unscored —CVE-2005-2588 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in DVBBS 7.1 SP2 and earlier allow remote attackers to inject arbit…
-
Unscored —
FUDForum 2.6.15 with "Tree View" enabled, as used in other products such as phpgroupware and egroupware, allows remote …
-
Unscored —
PHP file include vulnerability in download.php in PHPSimplicity Simplicity oF Upload before 1.3.1 allows remote attacke…
-
Unscored —
VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup fo…
-
Unscored —
index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to obtain the full server path …
-
Unscored —
Mozilla Thunderbird 1.0 and Firefox 1.0.6 allows remote attackers to obfuscate URIs via a long URI, which causes the ad…
-
Unscored —
AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitr…
-
Unscored —
The syscall32_setup_pages function in syscall32.c for Linux kernel 2.6.12 and later, on the 64-bit x86 platform, does n…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remo…
-
Unscored —CVE-2005-2594 Public exploit
Apple Safari 1.3 (132) on Mac OS X 1.3.9 allows remote attackers to cause a denial of service (crash) via certain Javas…
-
Unscored —
Parlano MindAlign 5.0 and later versions uses weak encryption, with unknown impact and attack vectors.
-
Unscored —
Discuz! 4.0 rc4 does not properly restrict types of files that are uploaded to the server, which allows remote attacker…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to inject …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Dada Mail before 2.10 Alpha 1 allows remote attackers to execute arbitrary …
-
Unscored —
SQL injection vulnerability in MidiCart allows remote attackers to execute arbitrary SQL commands via the code_no param…
-
Unscored —CVE-2005-2603 Public exploit
Cross-site scripting (XSS) vulnerability in index.php for My Image Gallery (Mig ) 1.4.1 allows remote attackers to inje…
-
Unscored —
Unknown vulnerability in Lasso Professional Server8.0.4 and 8.0.5 allows attackers to bypass authentication, related to…
-
Unscored —
Hummingbird FTP for Connectivity 10.0 uses weak encryption (trivial encoding) to store the user's password in the FTP p…
-
Unscored —
langen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names, which allows local us…
-
Unscored —
Unknown vulnerability in session.php in EQdkp before 1.3.0 has unknown impact and attack vectors, possibly involving au…
-
Unscored —
SafeHTML before 1.3.5 does not properly filter script in UTF-7 and CSS comments, which allows remote attackers to condu…
-
Unscored —
Unknown vulnerability in CPAINT Ajax Toolkit before 1.3-SP allows attackers to execute arbitrary PHP or ASP code or rea…
-
Unscored —
Unknown vulnerability in the "frontend authentication" in PHlyMail 3.02.00 has unknown impact and attack vectors.
-
Unscored —
Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP c…