Archive
August 2005
Vulnerabilities first published in this month (UTC), newest first.
577 results · Feed
-
Unscored —CVE-2004-2475 Public exploit
Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web sc…
-
Unscored —
Unspecified vulnerability in MadBMS before 1.1.5 has unknown impact and attack vectors, related to logins.
-
Unscored —
Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials …
-
Unscored —
The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote at…
-
Unscored —
aMSN 0.90 for Microsoft Windows allows local users to obtain sensitive information such as hashed passwords from (1) ho…
-
Unscored —
Buffer overflow in pop3.c in gnubiff before 2.0.0 allows attackers to cause a denial of service (crash) and possibly ex…
-
Unscored —
Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service (application…
-
Unscored —
SQL injection vulnerability in the sloth TCL script in QuoteEngine before 1.2.0 allow remote attackers to execute arbit…
-
Unscored —
chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long usernam…
-
Unscored —CVE-2004-2451 Public exploit
Roger Wilco 1.4.1.6 and earlier, or Roger Wilco Base Station 0.30a or earlier, allows remote attackers to send audio to…
-
Unscored —
Buffer overflow in ADA Image Server (ImgSvr) 0.4 allows remote attackers to cause a denial of service (web server crash…
-
Unscored —
Sweex Wireless Broadband Router/Accesspoint 802.11g (LC000060) allows remote attackers to obtain sensitive information …
-
Unscored —CVE-2004-2443 Public exploit
Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie s…
-
Unscored —
Unspecified vulnerability in 3Com OfficeConnect ADSL 11g Router allows remote attackers to cause a denial of service (c…
-
Unscored —
Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows …
-
Unscored —
Unknown vulnerability in Hitachi Cosminexus Portal Framework 01-00, 01-01, 01-02, 02-01, 02-02, 02-03, and other versio…
-
Unscored —
The client and server for Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier report sensitiv…
-
Unscored —
chat.ghp in Easy Chat Server 1.2 allows remote attackers to add a large number of fake users, then eventually cause a d…
-
Unscored —
Directory traversal vulnerability in 1st Class Mail Server 4.01 allows remote attackers to read arbitrary files via a "…
-
Unscored —
Cross-site scripting (XSS) vulnerability in chat.ghp in Easy Chat Server 1.2 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2004-2444 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Jaws 0.3 allows remote attackers to inject arbitrary web scrip…
-
Unscored —
Unspecified vulnerability in Reservation.class.php for phpScheduleIt 1.01 and earlier allows attackers to modify or del…
-
Unscored —
EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verif…
-
Unscored —
The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 thro…
-
Unscored —
EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX…
-
Unscored —
SQL injection vulnerability in login_admin_mediabox404.php in mediabox404 1.2 and earlier allows remote attackers to ex…
-
Unscored —CVE-2005-2638 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to inject ar…
-
Unscored —CVE-2005-2637 Public exploit
Multiple SQL injection vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2005-2639 Public exploit
Buffer overflow in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service…
-
Unscored —
SQL injection vulnerability in lib-view-direct.inc.php in phpAdsNew and phpPgAds before 2.0.6 allows remote attackers t…
-
Unscored —
Buffer overflow in the Log-SCR function in the "Log to Screen" feature in WinFtp Server 1.6.8 allows remote attackers t…
-
Unscored —
Multiple directory traversal vulnerabilities in phpAdsNew and phpPgAds before 2.0.6 allow remote attackers to include a…
-
Unscored —CVE-2005-2633 Public exploit
Multiple PHP file inclusion vulnerabilities in (1) admin_o.php, (2) board_o.php, (3) dev_o.php, (4) file_o.php or (5) t…
-
Unscored —CVE-2005-2640 Public exploit
Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE wit…
-
Unscored —
Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when i…
-
Unscored —
The make_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the…
-
Unscored —
HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the add_new_client command, causes the TFTP server to s…
-
Unscored —
Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks,…
-
Unscored —
Unknown vulnerability in Mac OS X 10.4.2 and earlier, when using Kerberos authentication with LDAP, allows attackers to…
-
Unscored —
Unknown vulnerability in HItoolbox for Mac OS X 10.4.2 allows VoiceOver services to read secure input fields.