Archive
August 2005
Vulnerabilities first published in this month (UTC), newest first.
577 results · Feed
-
Unscored —
MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server, …
-
Unscored —
Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid host…
-
Unscored —CVE-2004-2480 Public exploit
Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via…
-
Unscored —
Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries, which allows remote at…
-
Unscored —
DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the…
-
Unscored —CVE-2004-2482 EPSS 13%
Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwa…
-
Unscored —
Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Uni…
-
Unscored —CVE-2005-2651 Public exploit
gorum/prod.php in Zorum 3.5 allows remote attackers to execute arbitrary code via shell metacharacters in the argv para…
-
Unscored —
Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490,…
-
Unscored —
Cross-site scripting (XSS) vulnerability in sign.asp in Emefa Guestbook 1.2 allows remote attackers to inject arbitrary…
-
Unscored —
Cross-site scripting (XSS) vulnerability in BBCaffe 2.0 allows remote attackers to inject arbitrary web script or HTML …
-
Unscored —CVE-2005-2648 Public exploit
Directory traversal vulnerability in index.php in W-Agora 4.2.0 and earlier allows remote attackers to read arbitrary f…
-
Unscored —
Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to (1) gorum/notification.ph…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 34…
-
Unscored —
Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when u…
-
Unscored —CVE-2005-2649 Public exploit
Cross-site scripting (XSS) vulnerability in ATutor 1.5.1 allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —CVE-2005-2644 Public exploit
Buffer overflow in JaguarEditControl.dll in Isemarket JaguarControl allows remote attackers to cause a denial of servic…
-
Unscored —
Buffer overflow in the mutt_decode_xbit function in Handler.c for Mutt 1.5.10 allows remote attackers to execute arbitr…
-
Unscored —
Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490,…
-
Unscored —
Unknown vulnerability in pam_ldap before 180 does not properly handle a new password policy control, which could allow …
-
Unscored —CVE-2004-2447 Public exploit
Cross-site scripting (XSS) vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web …
-
Unscored —
wmFrog weather monitor 0.1.6 and other versions before 0.2.0 allows local users to overwrite arbitrary files via a syml…
-
Unscored —
Unspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote attack vectors, relate…
-
Unscored —
cplay 1.49 on Linux allows local users to overwrite arbitrary files via a symlink attack on the cplay_control temporary…
-
Unscored —CVE-2004-2445 Public exploit
Directory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view arbitrary files via a .…
-
Unscored —CVE-2004-2464 Public exploit
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or l…
-
Unscored —CVE-2004-2456 Public exploit
SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2004-2449 Public exploit
Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier allows remote attackers to cause a denial…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PHP-Fusion 4.01 allows remote attackers to inject arbitrary web script or H…
-
Unscored —
Unknown vulnerability in Tutti Nova 0.10 through 0.12 (Beta) and 0.9.4, when register_globals is enabled, has unknown i…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System (HRMS) 7.0, when "web enabled"…
-
Unscored —
SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowsta…
-
Unscored —
Cross-site scripting (XSS) vulnerability in SillySearch 2.3 and earlier allows remote attackers to inject arbitrary web…
-
Unscored —
SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid para…
-
Unscored —
Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (infinite loop and crash) via an I…
-
Unscored —
Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories…
-
Unscored —
Unknown vulnerability in gnubiff 1.2.0 and earlier allows local users to obtain passwords, related to the password tabl…
-
Unscored —
Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the Tnd…
-
Unscored —
S-Mart Shopping Cart or RediCart 3.9.5b stores smart.cfg under the web document root with insufficient access control, …
-
Unscored —
Agnitum Outpost Pro Firewall 2.1 allows remote attackers to cause a denial of service (CPU consumption) via a flood of …