Archive
25 October 2005
Vulnerabilities first published on this day (UTC), newest first.
80 results · Feed
-
Unscored —
Unspecified vulnerability in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier allows remot…
-
Unscored —CVE-2004-2526 Public exploit
Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers …
-
Unscored —CVE-2004-2502 Public exploit
im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the…
-
Unscored —CVE-2004-2487 Public exploit
Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or lis…
-
Unscored —
INweb Mail Server 2.40 allows remote attackers to cause a denial of service (crash) via a large number of connect/disco…
-
Unscored —CVE-2004-2528 Public exploit
Cross-site scripting (XSS) vulnerability in sresult.exe in Webcam Watchdog 4.0.1a allows remote attackers to inject arb…
-
Unscored —
The exit_thread function (process.c) in Linux kernel 2.6 through 2.6.5 does not invalidate the per-TSS io_bitmap pointe…
-
Unscored —CVE-2004-2509 Public exploit
Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Thread…
-
Unscored —
Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to execute arbitrary code…
-
Unscored —CVE-2004-2494 Public exploit
Cross-site scripting (XSS) vulnerability in _error in Ability Mail Server 1.18 allows remote attackers to inject arbitr…
-
Unscored —
Mail server in Gattaca Server 2003 1.1.10.0 allows remote attackers to perform a denial of service (application crash) …
-
Unscored —
Gadu-Gadu allows remote attackers to bypass the "image send" option by sending a very small image file, which could be …
-
Unscored —
The DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which might allow remote at…
-
Unscored —
Format string vulnerability in IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to execute arbitrar…
-
Unscored —CVE-2004-2520 Public exploit
POP3 protocol in Gattaca Server 2003 1.1.10.0 allows remote authenticated users to cause a denial of service (applicati…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Ente…
-
Unscored —CVE-2005-3304 Public exploit
Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitra…
-
Unscored —CVE-2005-3308 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Zomplog 3.4 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2005-3307 Public exploit
Directory traversal vulnerability in index.php for FlatNuke 2.5.6 allows remote attackers to read arbitrary files via "…
-
Unscored —
BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary file…
-
Unscored —CVE-2005-3305 Public exploit
Multiple SQL injection vulnerabilities in Nuked Klan 1.7 allow remote attackers to execute arbitrary SQL commands via t…
-
Unscored —
Interpretation conflict in phpBB 2.0.17, with remote avatars and avatar uploading enabled, allows remote authenticated …
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php for FlatNuke 2.5.6 allows remote attackers to inject arbitrary we…
-
Unscored —
Multiple SQL injection vulnerabilities in Zomplog 3.4 allow remote attackers to execute arbitrary SQL commands via (1) …
-
Unscored —
Incomplete blacklist vulnerability in sudo 1.6.8 and earlier allows local users to gain privileges via the (1) SHELLOPT…
-
Unscored —
Stack-based buffer overflow in (1) backupsh and (2) authsh in SCO Openserver 5.0.7 allows local users to execute arbitr…
-
Unscored —
The malloc function in the libSystem library in Apple Mac OS X 10.3.9 and 10.4.2 allows local users to overwrite arbitr…
-
Unscored —
The search_binary_handler function in exec.c in Linux 2.4 kernel on 64-bit x86 architectures does not check a return co…
-
Unscored —
Safari after 2.0 in Apple Mac OS X 10.3.9 allows remote attackers to bypass domain restrictions via crafted web archive…
-
Unscored —
Buffer overflow in QuickDraw Manager for Apple OS X 10.3.9 and 10.4.2, as used by applications such as Safari, Mail, an…
-
Unscored —CVE-2005-2970 EPSS 14%
Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a den…
-
Unscored —
Mail.app in Mail for Apple Mac OS X 10.3.9, when using Kerberos 5 for SMTP authentication, can include uninitialized me…
-
Unscored —
Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as used by applications such as WebCore and Safari, allows remote…
-
Unscored —
The Java extensions for QuickTime 6.52 and earlier in Apple Mac OS X 10.3.9 allow untrusted applets to call arbitrary f…
-
Unscored —
Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users t…
-
Unscored —
Multiple format string vulnerabilities in the GNOME Data Access library for GNOME2 (libgda2) 1.2.1 and earlier allow at…
-
Unscored —
Authorization Services in securityd for Apple Mac OS X 10.3.9 allows local users to gain privileges by granting themsel…
-
Unscored —
The rw_vm function in usercopy.c in the 4GB split patch for the Linux kernel in Red Hat Enterprise Linux 4 does not per…
-
Unscored —
Mail.app in Mail for Apple Mac OS X 10.3.9 and 10.4.2 includes message contents when using auto-reply rules, which coul…
-
Unscored —
SecurityAgent in Apple Mac OS X 10.4.2, under certain circumstances, can cause the "Switch User..." button to appear ev…