Archive
August 2005
Vulnerabilities first published in this month (UTC), newest first.
577 results · Feed
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PHPOpenChat 3.0.2 allow remote attackers to inject arbitrary web…
-
Unscored —
Race condition in the sysfs_read_file and sysfs_write_file functions in Linux kernel before 2.6.10 allows local users t…
-
Unscored —
Buffer overflow in the xdr_xcode_array2 function in xdr.c in Linux kernel 2.6.12, as used in SuSE Linux Enterprise Serv…
-
Unscored —CVE-2005-2488 Public exploit
Cross-site scripting (XSS) vulnerability in Web Content Management News System allows remote attackers to inject arbitr…
-
Unscored —
Buffer overflow in the rdb_query function for Denora IRC Stats 1.0 might allow attackers to execute arbitrary code.
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Helpdesk in Logicampus before 1.1.1 allows remote attackers to inject a…
-
Unscored —
Unknown vulnerability in Sun McData switches and directors 4300, 4500, 6064, and 6140 before E/OS 6.0.0 may allow attac…
-
Unscored —CVE-2005-2483 Public exploit
Eval injection vulnerability in Karrigell before 2.1.8 allows remote attackers to execute arbitrary Python code via mod…
-
Unscored —
The StateToOptions function in msfweb in Metasploit Framework 2.4 and earlier, when running with the -D option (defange…
-
Unscored —CVE-2005-2486 Public exploit
SQL injection vulnerability in mod_forum/read_message.php in PortailPHP allows remote attackers to execute arbitrary SQ…
-
Unscored —
Web Content Management News System allows remote attackers to create arbitrary accounts and gain privileges via a direc…
-
Unscored —
Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GE…
-
Unscored —
Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbit…
-
Unscored —
Novell Internet Messaging System (NIMS) 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authenti…
-
Unscored —
Eudora before 6.1.1 allows remote attackers to cause a denial of service (crash) via an e-mail with a long "To:" field,…
-
Unscored —
Buffer overflow in (1) HttpSaveCVP.dll and (2) HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote a…
-
Unscored —
Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument.
-
Unscored —
The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, …
-
Unscored —
Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as cer…
-
Unscored —
Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to …
-
Unscored —
Buffer overflow in smtpscan.dll for Trend Micro InterScan VirusWall 3.51 for Windows NT has allows remote attackers to …
-
Unscored —
Apple Personal Web Sharing (PWS) 1.1, 1.5, and 1.5.5, when Web Sharing authentication is enabled, allows remote attacke…
-
Unscored —
Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when …
-
Unscored —
Joe Testa hellbent 01 webserver allows attackers to read files that are specified in the hellbent.prefs file by creatin…
-
Unscored —CVE-2002-2117 EPSS 12%
Microsoft Windows XP allows remote attackers to cause a denial of service (CPU consumption) by flooding UDP port 500 (I…
-
Unscored —
Multiple buffer overflows in QNX RTOS 4.25 may allow attackers to execute arbitrary code via long filename arguments to…
-
Unscored —
Artekopia Netjuke before 1.0 b7 allows remote attackers to execute arbitrary code on the web server, possibly via the s…
-
Unscored —
Buffer overflow in axspawn.c in Axspawn-pam before 0.2.1a allows remote attackers to execute arbitrary code via large p…
-
Unscored —CVE-2002-2105 Public exploit
Microsoft Windows XP allows local users to prevent the system from booting via a corrupt explorer.exe.manifest file.
-
Unscored —
Unknown vulnerability in the "VAIO Manual" software in certain Sony VAIO personal computers sold from November 2001 to …
-
Unscored —CVE-2002-2106 Public exploit
PHP remote file inclusion vulnerability in WikkiTikkiTavi before 0.21 allows remote attackers to execute arbitrary PHP …
-
Unscored —
The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video", allows attackers to access…
-
Unscored —
Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address…
-
Unscored —CVE-2002-2100 EPSS 11%
Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HT…
-
Unscored —
Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized …
-
Unscored —
Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request wi…
-
Unscored —
Buffer overflow in rcp in Solaris 9.0 allows local users to execute arbitrary code via a long command line argument.
-
Unscored —
Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root path via requests for MS-…
-
Unscored —
InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service (NullPointerException) …
-
Unscored —
The compression code in MaraDNS before 0.9.01 allows remote attackers to cause a denial of service via crafted DNS pack…