Archive
August 2005
Vulnerabilities first published in this month (UTC), newest first.
577 results · Feed
-
Unscored —
Format string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote attackers to execute arbitrary cod…
-
Unscored —
Unknown vulnerability in The Ignition Project ignitionServer 0.1.2 through 0.3.1, with the linking service enabled, all…
-
Unscored —
Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser crash) via a link wit…
-
Unscored —
BEA WebLogic Server and WebLogic Express 8.1 through 8.1 SP2 allow remote attackers to cause a denial of service (netwo…
-
Unscored —
Hitachi Job Management Partner (JP1) JP1/File Transmission Server/FTP 6 and 7 allows remote attackers to cause a denial…
-
Unscored —
Abczone.it WWWguestbook 1.1 stores db/dbase.mdb under the web document root with insufficient access control, which all…
-
Unscored —CVE-2004-2413 Public exploit
SQL injection vulnerability in VP-ASP Shopping Cart 4.0 through 5.0 allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom installation with…
-
Unscored —
Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP G…
-
Unscored —
Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary c…
-
Unscored —
Unknown "overflow" in the phpgw_config table for phpGroupWare before 0.9.14.002 has unknown attack vectors and impact.
-
Unscored —
Buffer overflow in the IsValidFile function in the ADM ActiveX control for Altnet Download Manager 4.0.0.4 and earlier,…
-
Unscored —
Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote…
-
Unscored —
Trend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening a help window from a …
-
Unscored —
Multiple features in Ipswitch IMail Server before 8.13 allow remote attackers to cause a denial of service (crash) via …
-
Unscored —
Multiple SQL injection vulnerabilities in VP-ASP Shopping Cart 4.0 through 5.0 allow remote attackers to execute arbitr…
-
Unscored —
Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive in…
-
Unscored —
Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows re…
-
Unscored —
Buffer overflow in the sh_hash_compdata function for Samhain 1.8.9 through 2.0.1, when running in update mode ("-t upda…
-
Unscored —CVE-2004-2411 Public exploit
The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse input…
-
Unscored —
Unknown vulnerability in sh_hash_compdata for Samhain 1.8.9 through 2.0.1 might allow attackers to cause a denial of se…
-
Unscored —
Stack-based buffer overflow in Ipswitch IMail Express Web Messaging before 8.05 might allow remote attackers to execute…
-
Unscored —
Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client …
-
Unscored —
Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 character…
-
Unscored —
The roster import functionality in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8, when usi…
-
Unscored —
Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large number of f…
-
Unscored —
Cross-site scripting (XSS) vulnerability in YaBB.pl in YaBB 1 GOLD SP 1.3.2 allows remote attackers to inject arbitrary…
-
Unscored —
Unknown vulnerability in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attac…
-
Unscored —
Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service (CPU consumpti…
-
Unscored —
libuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via unknown attack vectors, re…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized…
-
Unscored —
Netenberg Fantastico De Luxe 2.8 uses database file names that contain the associated usernames, which allows local use…
-
Unscored —
WinFTP Server 1.6 stores username and password credentials in plaintext in the data\user.wfd file, which allows local u…
-
Unscored —
Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attackers to cause a denial of…
-
Unscored —
passwd 0.68 does not check the return code for the pam_start function, which has unknown impact and attack vectors that…
-
Unscored —
The web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 and 3.2.1, when importing a priv…
-
Unscored —
User.php in Gallery, as used in Postnuke, allows users with any Admin privileges to gain access to all galleries.
-
Unscored —CVE-2005-2588 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in DVBBS 7.1 SP2 and earlier allow remote attackers to inject arbit…
-
Unscored —
FUDForum 2.6.15 with "Tree View" enabled, as used in other products such as phpgroupware and egroupware, allows remote …
-
Unscored —
PHP file include vulnerability in download.php in PHPSimplicity Simplicity oF Upload before 1.3.1 allows remote attacke…