Archive
September 2005
Vulnerabilities first published in this month (UTC), newest first.
312 results · Feed
-
Unscored —
fs/exec.c in Linux 2.6, when one thread is tracing another thread that shares the same memory map, might allow local us…
-
Unscored —
mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users to overwrite arbitrary …
-
Unscored —
mm/ioremap.c in Linux 2.6 on 64-bit x86 systems allows local users to cause a denial of service or an information leak …
-
Unscored —
Buffer overflow in the ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to caus…
-
Unscored —
Buffer overflow in getconf in IBM AIX 5.2 to 5.3 allows local users to execute arbitrary code via unknown vectors.
-
Unscored —
The mprotect code (mprotect.c) in Linux 2.6 on Itanium IA64 Montecito processors does not properly maintain cache coher…
-
Unscored —
The ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to download and execute ar…
-
Unscored —
The "reset password" feature in Macromedia Breeze 5.0 stores passwords in plaintext in the database instead of the hash…
-
Unscored —
The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local…
-
Medium 4.7
Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as linuxthreads and vfork), mig…
-
Unscored —
The HFS and HFS+ (hfsplus) modules in Linux 2.6 allow attackers to cause a denial of service (oops) by using hfsplus to…
-
Unscored —
Race condition in ebtables netfilter module (ebtables.c) in Linux 2.6, when running on an SMP system that is operating …
-
Unscored —
apachetop 0.12.5 and earlier, when running in debug mode, allows local users to create or append to arbitrary files via…
-
Unscored —
The post-installation script for ntlmaps before 0.9.9 sets world-readable permissions for the configuration file, which…
-
Unscored —
Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequence…
-
Unscored —
Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to execute arbitrary code via…
-
Unscored —
Nokia 7610 and 3210 phones allows attackers to cause a denial of service via certain characters in the filename of a Bl…
-
Unscored —
Avi Alkalay man-cgi script allows remote attackers to execute arbitrary code via shell metacharacters in the topic para…
-
Unscored —
Cross-site scripting (XSS) vulnerability in bug_actiongroup_page.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote a…
-
Unscored —
Unspecified vulnerability in the (1) Xsun and (2) Xprt commands in Solaris 7, 8, 9, and 10 allows local users to execut…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Movable Type before 3.2 allows remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2005-3098 Public exploit
poppassd in Qualcomm qpopper 4.0.8 allows local users to modify arbitrary files and gain privileges via the -t (trace f…
-
Unscored —
Avi Alkalay notify program, dated 19 Aug 2001, allows remote attackers to execute arbitrary commands via shell metachar…
-
Unscored —
Firefox 1.0.6 allows attackers to cause a denial of service (crash) via a Proxy Auto-Config (PAC) script that uses an e…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web scri…
-
Unscored —
Avi Alkalay nslookup.cgi program, dated 16 June 2002, allows remote attackers to execute arbitrary commands via shell m…
-
Unscored —
Directory traversal vulnerability in Avi Alkalay contribute.cgi (aka contribute.pl), dated 16 Jun 2002, allows remote a…
-
Unscored —
The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user ex…
-
Unscored —
mt-comments.cgi in Movable Type before 3.2 allows attackers to redirect users to other web sites via URLs in comments.
-
Unscored —
The administrative interface in Movable Type allows attackers to upload files with arbitrary extensions under the web r…
-
Unscored —
Unspecified "PPTP Remote DoS Vulnerability" in Astaro Security Linux 4.027 allows attackers to cause a denial of servic…
-
Unscored —CVE-2005-2557 Public exploit
Cross-site scripting (XSS) vulnerability in view_all_set.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers…
-
Unscored —
Stack-based buffer overflow in AbiWord before 2.2.10 allows attackers to execute arbitrary code via the RTF import mech…
-
Unscored —
SQL injection vulnerability in Zengaia before 0.2 allows remote attackers to execute arbitrary SQL commands via unknown…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in AlstraSoft E-Friends 4.0 allows remote attackers to execute arb…
-
Unscored —
Buffer overflow in the TIFF library in the Photo Viewer for Sony PSP 2.0 firmware allows remote attackers to cause a de…
-
Unscored —
Cross-site scripting (XSS) vulnerability in perldiver.cgi in PerlDiver 2.x allows remote attackers to inject arbitrary …
-
Unscored —
Directory traversal vulnerability in admin/about.php in contentServ 3.1 allows remote attackers to read or include arbi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in perldiver.pl in PerlDiver 1.x allows remote attackers to inject arbitrary w…
-
Unscored —
PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection.