Archive
August 2005
Vulnerabilities first published in this month (UTC), newest first.
577 results · Feed
-
Unscored —
The MOSIX Project clump/os 5.4 creates a default VNC account without a password, which allows remote attackers to gain …
-
Unscored —
Netgear RM-356 and RT-338 series SOHO routers allow remote attackers to cause a denial of service (crash) via a UDP por…
-
Unscored —
Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct b…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the lookup script in Veridis OpenKeyServer (OKS) 1.2 allows remote attacker…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Hyper NIKKI System (HNS) Lite before 0.9 and HNS before 2.10-pl2 allows rem…
-
Unscored —
Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local u…
-
Unscored —
Pointsec before 1.2 for PalmOS stores a user's PIN number in memory in plaintext, which allows a local attacker who ste…
-
Unscored —CVE-2002-2101 EPSS 11%
Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, v…
-
Unscored —
Format string vulnerability in Deception Finger Daemon, decfingerd, 0.7 may allow remote attackers to execute arbitrary…
-
Unscored —
RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface…
-
Unscored —
Buffer overflow in Blue World Lasso Web Data Engine 3.6.5 allows remote attackers to cause a denial of service via a lo…
-
Unscored —CVE-2002-2087 Public exploit
Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment …
-
Unscored —
Fwmon before 1.0.10 allows remote attackers to cause a denial of service (crash) by causing the kernel to return a larg…
-
Unscored —
Buffer overflow in Novell Remote Manager module, httpstk.nlm, in NetWare 5.1 and NetWare 6 allows remote attackers to e…
-
Unscored —
graph.php in Ganglia PHP RRD Web Client 1.0.2 allows remote attackers to execute arbitrary commands via the command par…
-
Unscored —
SurfControl SuperScout Email filter for SMTP 3.5.1 allows remote attackers to cause a denial of service (crash) via a l…
-
Unscored —
Buffer overflow in the GNU DataDisplay Debugger (DDD) 3.3.1 allows local users to execute arbitrary code and possibly g…
-
Unscored —
The RCA Digital Cable Modems DCM225 and DCM225E allow remote attackers to cause a denial of service (modem device reset…
-
Unscored —CVE-2002-2113 Public exploit
search.cgi in AGH HTMLsearch 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the …
-
Unscored —
Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via pt…
-
Unscored —
traps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack, which allows local use…
-
Unscored —
Unknown vulnerability in apt-cacher in Debian 3.1, related to "missing input sanitising," allows remote attackers to ex…
-
Unscored —
Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to u…
-
Unscored —
Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Se…
-
Unscored —
SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user …
-
Unscored —
ChurchInfo allows remote attackers to execute obtain sensitive information via the PersonID parameter to (1) PersonView…
-
Unscored —
pstopnm in netpbm does not properly use the "-dSAFER" option when calling Ghostscript to convert a PostScript file into…
-
Unscored —
run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a …
-
Unscored —CVE-2005-2479 Public exploit
Quick 'n Easy FTP Server 3.0 allows remote attackers to cause a denial of service (application crash or CPU consumption…
-
Unscored —CVE-2005-2472 Public exploit
Multiple buffer overflows in BusinessMail 4.60.00 allow remote attackers to cause a denial of service (application cras…
-
Unscored —CVE-2005-2476 Public exploit
Cross-site scripting (XSS) vulnerability in lost_passowrd.php in Naxtor Shopping Cart 1.0 allows remote attackers to in…
-
Unscored —
shop_display_products.php in Naxtor Shopping Cart 1.0 allows remote attackers to obtain sensitive information via a cat…
-
Unscored —
Multiple SQL injection vulnerabilities in ChurchInfo allow remote attackers to execute arbitrary SQL commands via the P…
-
Unscored —
ColdFusion Fusebox 4.1.0 allows remote attackers to obtain sensitive information via an invalid fuseaction parameter, w…
-
Unscored —
Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a fi…
-
Unscored —CVE-2005-2480 Public exploit
Cross-site scripting (XSS) vulnerability in ColdFusion Fusebox 4.1.0 allows remote attackers to inject arbitrary web sc…
-
Unscored —
Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded scrip…
-
Unscored —
Microsoft Windows XP Explorer allows attackers to execute arbitrary code via a HTML and script in a self-executing fold…
-
Unscored —CVE-2004-2286 Public exploit
Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash)…
-
Unscored —CVE-2004-2292 EPSS 12%
Buffer overflow in Alt-N MDaemon 7.0.1 allows remote attackers to cause a denial of service (application crash) via a l…