Archive
16 November 2005
Vulnerabilities first published on this day (UTC), newest first.
191 results · Feed
-
Unscored —
The Printer Administration module for Webmin 0.990 and earlier allows remote attackers to execute arbitrary commands vi…
-
Unscored —
The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership re…
-
Unscored —
Outlook Express 6.0 does not delete messages from dbx files, even when a user empties the Deleted items folder, which a…
-
Unscored —
The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local u…
-
Unscored —
RFC-NETBIOS in HP Advanced Server/9000 B.04.05 through B.04.09, when running HP-UX 11.00 or 11.11, allows remote attack…
-
Unscored —
Directory traversal vulnerability in function_foot_1.inc.php for Thorsten Korner 123tkShop before 0.3.1 allows remote a…
-
Unscored —
Informed (1) Designer and (2) Filler 3.05 does not zero out newly allocated disk blocks as an encrypted file grows in s…
-
Unscored —CVE-2002-2170 Public exploit
Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP…
-
Unscored —
Digi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat users via a "Showip" para…
-
Unscored —
Cisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs for a user's VPN sessi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in FuseTalk 2.0 and 3.0 allows remote attackers to insert arbitrary HTML and w…
-
Unscored —
BEA WebLogic Server and Express 7.0 and 7.0.0.1, when running Servlets and Enterprise JavaBeans (EJB) on more than one …
-
Unscored —
SonicWall Content Filtering allows local users to access prohibited web sites via requests to the web site's IP address…
-
Unscored —
Buffer overflow in Trillian 0.73 allows remote IRC servers to execute arbitrary code via a long PING response.
-
Unscored —
Directory traversal vulnerability in BearShare 4.0.5 and 4.0.6 allows remote attackers to read files outside of the web…
-
Unscored —
Macromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files via Unicode encoded char…
-
Unscored —CVE-2002-2193 Public exploit
Cross-site scripting (XSS) vulnerability in mojo.cgi for Mojo Mail 2.7 allows remote attackers to inject arbitrary web …
-
Unscored —
Unknown vulnerability in the System Serial Console terminal in Solaris 2.5.1, 2.6, and 7 allows local users to monitor …
-
Unscored —CVE-2002-2154 Public exploit
Directory traversal vulnerability in Monkey HTTP Daemon 0.1.4 allows remote attackers to read arbitrary files via .. (d…
-
Unscored —CVE-2002-2165 Public exploit
The IMHO Webmail module 0.97.3 and earlier for Roxen leaks the REFERER from the browser's previous login session in an …
-
Unscored —CVE-2002-2149 Public exploit
Buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers allows remote attackers to cause a denial of …
-
Unscored —CVE-2002-2192 Public exploit
Cross-site scripting (XSS) vulnerability in Perception LiteServe 2.0.1 allows remote attackers to execute arbitrary web…
-
Unscored —
The POP3 proxy service (POPROXY.EXE) in Norton AntiVirus 2001 allows local users to cause a denial of service (CPU cons…
-
Unscored —CVE-2002-2169 Public exploit
Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote attacker…
-
Unscored —CVE-2002-2143 Public exploit
The admin.html file in MySimple News 1.0 stores its administrative password in plaintext, which allows remote attackers…
-
Unscored —
The dynamic initialization feature of the ClearPath MCP environment allows remote attackers to cause a denial of servic…
-
Unscored —
Buffer overflow in ssldump 0.9b2 and earlier, when running in decryption mode, allows remote attackers to execute arbit…
-
Unscored —
Buffer overflow in Cisco PIX Firewall 5.2.x to 5.2.8, 6.0.x to 6.0.3, 6.1.x to 6.1.3, and 6.2.x to 6.2.1 allows remote …
-
Unscored —
Buffer overflow in Seunghyun Seo's MSN666 MSN Sniffer 1.0 and 1.0.1 allows remote attackers to execute arbitrary code v…
-
Unscored —
cgitest.exe in Savant Web Server 3.1 and earlier allows remote attackers to cause a denial of service (crash) via a lon…
-
Unscored —CVE-2002-2178 Public exploit
Cross-site scripting (XSS) vulnerability in article.php module for phpWebSite 0.8.3 allows remote attackers to execute …
-
Unscored —CVE-2002-2174 Public exploit
The Telnet proxy of 602Pro LAN SUITE 2002 does not restrict the number of outstanding connections to the local host, wh…
-
Unscored —CVE-2002-2145 Public exploit
Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders …
-
Unscored —CVE-2002-2171 Public exploit
Cross-site scripting (XSS) vulnerability in acWEB 1.8 and 1.14 allows remote attackers to insert arbitrary HTML and web…
-
Unscored —
phpShare.php in phpShare before 0.6 beta 3 allows remote attackers to include and execute arbitrary PHP scripts from re…
-
Unscored —
Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote attackers to execute arbitrary code via a …
-
Unscored —
Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to cause a denial of service (hang and CPU cons…
-
Unscored —
Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to f…
-
Unscored —
KvPoll 1.1 allows remote authenticated users to vote more than once by setting the "already_voted" cookie by various me…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ActiveXperts Software ActiveWebserver allows remote attackers to execute ar…