Skip to content
OpenAdvisories

Archive

18 August 2005

Vulnerabilities first published on this day (UTC), newest first.

30 results · Feed

  • Unscored —

    WinAgents TFTP Server 3.0 allows remote attackers to cause a denial of service (crash) via a request for a file with a …

  • Unscored —

    Unknown vulnerability in phpGroupWare before 0.9.14.002 has unknown attack vectors and impact, related to a "security h…

  • Unscored —

    Unknown vulnerability in the Web calendaring component of Ipswitch IMail Server before 8.13 allows remote attackers to …

  • Unscored —

    Davenport before 0.9.10 allows attackers to cause a denial of service (resource consumption) via (1) a very large XML f…

  • Unscored —

    Keene Digital Media Server 1.0.2 allows local users to obtain usernames and passwords by reading the dmscore.db file on…

  • Unscored —

    Multiple stack-based and heap-based buffer overflows in EnderUNIX spamGuard before 1.7-BETA allow remote attackers to e…

  • Unscored —

    Unknown vulnerability in Hitachi Job Management Partner (JP1) JP1/File Transmission Server/FTP 6 and 7, when running on…

  • Unscored —
    CVE-2004-2418 Public exploit

    Buffer overflow in SlimFTPd 3.15 and earlier allows local users to execute arbitrary code via a long command, such as (…

  • Unscored —

    Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual an…

  • Unscored —

    Format string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote attackers to execute arbitrary cod…

  • Unscored —

    Unknown vulnerability in The Ignition Project ignitionServer 0.1.2 through 0.3.1, with the linking service enabled, all…

  • Unscored —
    CVE-2004-2434 Public exploit EPSS 33%

    Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser crash) via a link wit…

  • Unscored —

    BEA WebLogic Server and WebLogic Express 8.1 through 8.1 SP2 allow remote attackers to cause a denial of service (netwo…

  • Unscored —

    Hitachi Job Management Partner (JP1) JP1/File Transmission Server/FTP 6 and 7 allows remote attackers to cause a denial…

  • Unscored —

    Abczone.it WWWguestbook 1.1 stores db/dbase.mdb under the web document root with insufficient access control, which all…

  • Unscored —
    CVE-2004-2413 Public exploit

    SQL injection vulnerability in VP-ASP Shopping Cart 4.0 through 5.0 allows remote attackers to execute arbitrary SQL co…

  • Unscored —

    Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom installation with…

  • Unscored —
    CVE-2004-2416 Public exploit EPSS 61%

    Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP G…

  • Unscored —
    CVE-2004-2425 Public exploit EPSS 14%

    Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary c…

  • Unscored —

    Unknown "overflow" in the phpgw_config table for phpGroupWare before 0.9.14.002 has unknown attack vectors and impact.

  • Unscored —

    Buffer overflow in the IsValidFile function in the ADM ActiveX control for Altnet Download Manager 4.0.0.4 and earlier,…

  • Unscored —

    Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote…

  • Unscored —

    Trend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening a help window from a …

  • Unscored —

    Multiple features in Ipswitch IMail Server before 8.13 allow remote attackers to cause a denial of service (crash) via …

  • Unscored —

    Multiple SQL injection vulnerabilities in VP-ASP Shopping Cart 4.0 through 5.0 allow remote attackers to execute arbitr…

  • Unscored —

    Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive in…

  • Unscored —

    Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows re…

  • Unscored —

    Buffer overflow in the sh_hash_compdata function for Samhain 1.8.9 through 2.0.1, when running in update mode ("-t upda…

  • Unscored —
    CVE-2004-2411 Public exploit

    The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse input…

  • Unscored —

    Unknown vulnerability in sh_hash_compdata for Samhain 1.8.9 through 2.0.1 might allow attackers to cause a denial of se…