Archive
20 August 2005
Vulnerabilities first published on this day (UTC), newest first.
55 results · Feed
-
Unscored —CVE-2004-2447 Public exploit
Cross-site scripting (XSS) vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web …
-
Unscored —
wmFrog weather monitor 0.1.6 and other versions before 0.2.0 allows local users to overwrite arbitrary files via a syml…
-
Unscored —
Unspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote attack vectors, relate…
-
Unscored —
cplay 1.49 on Linux allows local users to overwrite arbitrary files via a symlink attack on the cplay_control temporary…
-
Unscored —CVE-2004-2445 Public exploit
Directory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view arbitrary files via a .…
-
Unscored —CVE-2004-2464 Public exploit
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or l…
-
Unscored —CVE-2004-2456 Public exploit
SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2004-2449 Public exploit
Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier allows remote attackers to cause a denial…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PHP-Fusion 4.01 allows remote attackers to inject arbitrary web script or H…
-
Unscored —
Unknown vulnerability in Tutti Nova 0.10 through 0.12 (Beta) and 0.9.4, when register_globals is enabled, has unknown i…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System (HRMS) 7.0, when "web enabled"…
-
Unscored —
SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowsta…
-
Unscored —
Cross-site scripting (XSS) vulnerability in SillySearch 2.3 and earlier allows remote attackers to inject arbitrary web…
-
Unscored —
SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid para…
-
Unscored —
Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (infinite loop and crash) via an I…
-
Unscored —
Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories…
-
Unscored —
Unknown vulnerability in gnubiff 1.2.0 and earlier allows local users to obtain passwords, related to the password tabl…
-
Unscored —
Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the Tnd…
-
Unscored —
S-Mart Shopping Cart or RediCart 3.9.5b stores smart.cfg under the web document root with insufficient access control, …
-
Unscored —
Agnitum Outpost Pro Firewall 2.1 allows remote attackers to cause a denial of service (CPU consumption) via a flood of …
-
Unscored —CVE-2004-2475 Public exploit
Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web sc…
-
Unscored —
Unspecified vulnerability in MadBMS before 1.1.5 has unknown impact and attack vectors, related to logins.
-
Unscored —
Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials …
-
Unscored —
The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote at…
-
Unscored —
aMSN 0.90 for Microsoft Windows allows local users to obtain sensitive information such as hashed passwords from (1) ho…
-
Unscored —
Buffer overflow in pop3.c in gnubiff before 2.0.0 allows attackers to cause a denial of service (crash) and possibly ex…
-
Unscored —
Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service (application…
-
Unscored —
SQL injection vulnerability in the sloth TCL script in QuoteEngine before 1.2.0 allow remote attackers to execute arbit…
-
Unscored —
chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long usernam…
-
Unscored —CVE-2004-2451 Public exploit
Roger Wilco 1.4.1.6 and earlier, or Roger Wilco Base Station 0.30a or earlier, allows remote attackers to send audio to…
-
Unscored —
Buffer overflow in ADA Image Server (ImgSvr) 0.4 allows remote attackers to cause a denial of service (web server crash…
-
Unscored —
Sweex Wireless Broadband Router/Accesspoint 802.11g (LC000060) allows remote attackers to obtain sensitive information …
-
Unscored —CVE-2004-2443 Public exploit
Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie s…
-
Unscored —
Unspecified vulnerability in 3Com OfficeConnect ADSL 11g Router allows remote attackers to cause a denial of service (c…
-
Unscored —
Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows …
-
Unscored —
Unknown vulnerability in Hitachi Cosminexus Portal Framework 01-00, 01-01, 01-02, 02-01, 02-02, 02-03, and other versio…
-
Unscored —
The client and server for Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier report sensitiv…
-
Unscored —
chat.ghp in Easy Chat Server 1.2 allows remote attackers to add a large number of fake users, then eventually cause a d…
-
Unscored —
Directory traversal vulnerability in 1st Class Mail Server 4.01 allows remote attackers to read arbitrary files via a "…
-
Unscored —
Cross-site scripting (XSS) vulnerability in chat.ghp in Easy Chat Server 1.2 allows remote attackers to inject arbitrar…