Archive
August 2005
Vulnerabilities first published in this month (UTC), newest first.
577 results · Feed
-
Medium 5.3
The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6,…
-
Unscored —CVE-2004-2310 Public exploit
Cross-site scripting (XSS) vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arb…
-
Unscored —
Cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitrary web scri…
-
Unscored —
Alcatel OmniSwitch 7000 and 7800 allows remote attackers to cause a denial of service (reboot) via certain network scan…
-
Unscored —CVE-2004-2367 Public exploit
The Control Panel applet in WFTPD and WFTPD Pro 3.21 R1 and R2 allows remote authenticated users to cause a denial of s…
-
Unscored —CVE-2004-2303 Public exploit
MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissio…
-
Unscored —
Buffer overflow in the HandleCPCCommand function of sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote atta…
-
Unscored —
Vizer Web Server 1.9.1 allows remote attackers to cause a denial of service (crash) via multiple malformed requests inc…
-
Unscored —
PHP file include injection vulnerability in isearch.inc.php for iSearch allows remote attackers to execute arbitrary co…
-
Unscored —CVE-2004-2368 Public exploit
PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP c…
-
Unscored —
Computer Associates eTrust Antivirus EE 6.0 through 7.0 allows remote attackers to bypass virus scanning by including a…
-
Unscored —CVE-2004-2350 Public exploit
SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2004-2344 Public exploit
Unknown vulnerability in the ASN.1/H.323/H.225 stack of VocalTec VGW120 and VGW480 allows remote attackers to cause a d…
-
Unscored —
The Macromedia installers and e-licensing client on Mac OS X, as used for Macromedia Contribute 2, Director, Dreamweave…
-
Unscored —
Multiple SQL injection vulnerabilities in Tunez before 1.20-pre2 allow remote attackers to execute arbitrary SQL querie…
-
Unscored —
Integer overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote attackers to cause a de…
-
Unscored —CVE-2004-2347 Public exploit
blog.cgi in Leif M. Wright Web Blog 1.1 and 1.1.5 allows remote attackers to execute arbitrary commands via shell metac…
-
Unscored —
The embedded MySQL 4.0 server for Proofpoint Protection Server does not require a password for the root user of MySQL, …
-
Unscored —CVE-2004-2309 Public exploit
Directory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside the FTP root via multip…
-
Unscored —CVE-2004-2375 Public exploit
Buffer overflow in the POP3 server in 1st Class Mail Server 4.0 allows remote attackers to cause a denial of service (c…
-
Unscored —CVE-2004-2366 Public exploit
Buffer overflow in GlobalSCAPE Secure FTP Server 2.0 B03.11.2004.2 allows remote attackers to cause a denial of service…
-
Unscored —
Sun Solaris 7 through 9, when Basic Security Module (BSM) is enabled and the SUNWscpu package has been removed as a res…
-
Unscored —
Sybari AntiGen for Domino 7.0 Build 722 SR2 allows remote attackers to cause a denial of service (hang) via an encrypte…
-
High 8.4
Microsoft Windows 2000, XP, and possibly 2003 allows local users with the SeDebugPrivilege privilege to execute arbitra…
-
Unscored —CVE-2004-2374 Public exploit
BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.ph…
-
Unscored —
Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct password…
-
Unscored —
@Mail 3.64 for Windows allows remote attackers to cause a denial of service ("unusable" server) via a large number of P…
-
Unscored —CVE-2004-2359 Public exploit
Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started…
-
Unscored —
Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote at…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in @Mail 3.64 for Windows allow remote attackers to inject arbitrar…
-
Unscored —
Buffer overflow in Bochs before 2.1.1, if installed setuid, allows local users to execute arbitrary code via a long HOM…
-
Unscored —CVE-2004-2360 Public exploit
Targem Battle Mages 1.0 allows remote attackers to cause a denial of service (infinite loop) via a UDP packet with inco…
-
Unscored —
BugPort before 1.099 stores its configuration file (conf/config.conf) under the web document root with a file extension…
-
Unscored —
rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the…
-
Unscored —
Buffer overflow in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to cause a denial of …
-
Unscored —
The /.inlook/.crypt file for inlook 0.7.3 and earlier is installed with world readable permissions, which allows local …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2004-2385 Public exploit
EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory) via an HTTP request for…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Forum Web Server 1.6 and earlier allow remote attackers to injec…
-
Unscored —CVE-2004-2312 Public exploit
Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long …