2005

Multiple interpretation error in unspecified versions of (1) eTrust-Iris and (2) eTrust-Vet Antivirus allows remote atta

Multiple interpretation error in unspecified versions of ArcaVir Antivirus allows remote attackers to bypass virus detec

Multiple interpretation error in unspecified versions of UNA Antivirus allows remote attackers to bypass virus detection

Multiple interpretation error in unspecified versions of Ikarus AntiVirus allows remote attackers to bypass virus detect

Multiple interpretation error in unspecified versions of ClamAV Antivirus allows remote attackers to bypass virus detect

Multiple interpretation error in unspecified versions of Panda Antivirus allows remote attackers to bypass virus detecti

Multiple interpretation error in unspecified versions of CAT Quick Heal allows remote attackers to bypass virus detectio

Multiple interpretation error in unspecified versions of TheHacker allows remote attackers to bypass virus detection via

Multiple interpretation error in unspecified versions of Trustix Antivirus allows remote attackers to bypass virus detec

Multiple interpretation error in unspecified versions of Grisoft AVG Antivirus allows remote attackers to bypass virus d

Multiple interpretation error in unspecified versions of Proland Protector Plus 2000 Antivirus allows remote attackers t

iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service

The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS liste

Planet Technology Corp FGSW2402RS switch with firmware 1.2 has a default password, which allows attackers with physical

Webroot Desktop Firewall before 1.3.0build52 allows local users to disable the firewall, even when password protection i

The manual installation of Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 stores the SYS password in install.lst in plaintext

Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) contro

Multiple cross-site scripting (XSS) vulnerabilities in Utopia News Pro (UNP) 1.1.3 and 1.1.4 allow remote attackers to i

Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or

Cross-site scripting (XSS) vulnerability in Cyphor 0.19 allows remote attackers to inject arbitrary web script or HTML v

Cross-site scripting (XSS) vulnerability in iSQL*Plus (iSQLPlus) in Oracle9i Database Server Release 2 9.0.2.4 allows re

Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2

Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a lon

Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcu

Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows r

arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a differe

The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all

The Client Service for NetWare (CSNW) on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, al

Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows

Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1

Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Busin

The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers to cause a denial of se

COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attac

runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metachar

Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC servic

Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC servic

The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) alloca

QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an A

The Orinoco driver (orinoco.c) in Linux kernel 2.6.13 and earlier does not properly clear memory from a previously used

The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an

Memory leak in the request_key_auth_destroy function in request_key_auth in Linux kernel 2.6.10 up to 2.6.13 allows loca

drm.c in Linux kernel 2.6.10 to 2.6.13 creates a debug file in sysfs with world-readable and world-writable permissions,

Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level

Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code vi

Linux 2.6.11 on 64-bit x86 (x86_64) platforms does not use a guard page for the 47-bit address page to protect against a

sysreport before 1.3.7 allows local users to obtain sensitive information via a symlink attack on a temporary directory.

Mason before 1.0.0 does not install the init script after the user uses Mason to configure a firewall, which causes the

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to execute arbitrary SQL comm

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.106 and 6.00.107 allows remote attackers to execute arbit

SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via