Archive
16 November 2005
Vulnerabilities first published on this day (UTC), newest first.
191 results · Feed
-
Unscored —
Buffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (cr…
-
Unscored —
Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC…
-
Unscored —CVE-2002-2176 Public exploit
SQL injection vulnerability in Gender MOD 1.1.3 allows remote attackers to gain administrative access via the user_leve…
-
Unscored —
The default --checksig setting in RPM Package Manager 4.0.4 checks that a package's signature is valid without listing …
-
Unscored —CVE-2002-2200 Public exploit
Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP …
-
Unscored —CVE-2002-2190 Public exploit
ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote atta…
-
Unscored —CVE-2002-2191 Public exploit
Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to ob…
-
Unscored —
zenTrack 2.0.3 and earlier allows remote attackers to obtain the full path to the web root via an invalid ticket ID, wh…
-
Unscored —
Format string vulnerability in the administrative pages of the PL/SQL module for Oracle Application Server 4.0.8 and 4.…
-
Unscored —
GlobalSunTech Wireless Access Points (1) WISECOM GL2422AP-0T, and possibly OEM products such as (2) D-Link DWL-900AP+ B…
-
Unscored —
SQL injection vulnerability in Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to execute arbitrary SQL …
-
Unscored —
BEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause BEA to send the same …
-
Unscored —
OpenBSD before 3.2 allows local users to cause a denial of service (kernel crash) via a call to getrlimit(2) with inval…
-
Unscored —
Buffer overflow in Webresolve 0.1.0 and earlier allows remote attackers to execute arbitrary code by connecting to the …
-
Unscored —
Unknown vulnerability in Sun Solaris 8.0 allows local users to cause a denial of service (kernel panic) via a program t…
-
Unscored —
An undocumented extension for the Servlet mappings in the Servlet 2.3 specification, when upgrading to WebLogic Server …
-
Unscored —
Unknown "file disclosure" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log file or jrun.ini, with u…
-
Unscored —
Buffer overflow in ZMailer before 2.99.51_1 allows remote attackers to execute arbitrary code during HELO processing fr…
-
Unscored —
Samba before 2.2.5 does not properly terminate the enum_csc_policy data structure, which may allow remote attackers to …
-
Unscored —CVE-2002-2162 Public exploit
Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the T…
-
Unscored —CVE-2002-2195 Public exploit
Buffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers who can spoof www.winam…
-
Unscored —
Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with the firmware 1.42.7 upgrade installed opens TCP port 567…
-
Unscored —
The Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to gain administrator privi…
-
Unscored —
The default aide.conf file in Advanced Intrusion Detection Environment (AIDE) before 0.7_1 on FreeBSD before 2002-08-28…
-
Unscored —
phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows…
-
Unscored —
Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allo…
-
Unscored —
BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for rest…
-
Unscored —CVE-2005-3639 Public exploit
PHP file inclusion vulnerability in the osTicket module in Help Center Live before 2.0.3 allows remote attackers to acc…
-
Unscored —CVE-2005-3640 Public exploit
Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers t…
-
Unscored —CVE-2005-3636 Public exploit
Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arb…
-
Unscored —CVE-2005-3638 Public exploit
Cross-site scripting (XSS) vulnerabilities in Ekinboard 1.0.3 allow remote attackers to inject arbitrary web script or …
-
Unscored —
frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log us…
-
Unscored —
IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to…
-
Unscored —
Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authenticati…
-
Unscored —CVE-2005-3635 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote …
-
Unscored —
IBM DB2 Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authe…
-
Unscored —
HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remo…
-
Medium —
phpMyAdmin CRLF Injection Vulnerability
CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts.
-
Unscored —
phpMyAdmin 2.7.0-beta1 and earlier allows remote attackers to obtain the full path of the server via direct requests to…
-
Unscored —
readObject in (1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.0 through 1.4.2_05 allows r…