Skip to content
OpenAdvisories

Archive

21 August 2005

Vulnerabilities first published on this day (UTC), newest first.

20 results · Feed

  • Unscored —

    MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server, …

  • Unscored —

    Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid host…

  • Unscored —
    CVE-2004-2480 Public exploit

    Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via…

  • Unscored —

    Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries, which allows remote at…

  • Unscored —

    DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the…

  • Unscored —
    CVE-2004-2482 EPSS 13%

    Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwa…

  • Unscored —

    Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Uni…

  • Unscored —
    CVE-2005-2651 Public exploit

    gorum/prod.php in Zorum 3.5 allows remote attackers to execute arbitrary code via shell metacharacters in the argv para…

  • Unscored —

    Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490,…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in sign.asp in Emefa Guestbook 1.2 allows remote attackers to inject arbitrary…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in BBCaffe 2.0 allows remote attackers to inject arbitrary web script or HTML …

  • Unscored —
    CVE-2005-2648 Public exploit

    Directory traversal vulnerability in index.php in W-Agora 4.2.0 and earlier allows remote attackers to read arbitrary f…

  • Unscored —

    Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to (1) gorum/notification.ph…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 34…

  • Unscored —

    Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when u…

  • Unscored —
    CVE-2005-2649 Public exploit

    Cross-site scripting (XSS) vulnerability in ATutor 1.5.1 allows remote attackers to inject arbitrary web script or HTML…

  • Unscored —
    CVE-2005-2644 Public exploit

    Buffer overflow in JaguarEditControl.dll in Isemarket JaguarControl allows remote attackers to cause a denial of servic…

  • Unscored —

    Buffer overflow in the mutt_decode_xbit function in Handler.c for Mutt 1.5.10 allows remote attackers to execute arbitr…

  • Unscored —

    Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490,…

  • Unscored —

    Unknown vulnerability in pam_ldap before 180 does not properly handle a new password policy control, which could allow …