2005

Mail in Mac OS X 10.3.7, when generating a Message-ID header, generates a GUUID that includes information that identifie

ClamAV 0.80 and earlier allows remote attackers to cause a denial of service (clamd daemon crash) via a ZIP file with ma

Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Javas

Thunderbird before 0.9, when running on Windows systems, uses the default handler when processing javascript: links, whi

Cisco IOS 12.0S through 12.3YH allows remote attackers to cause a denial of service (device restart) via a crafted IPv6

Cisco IOS 12.0 through 12.3YL, with BGP enabled and running the bgp log-neighbor-changes command, allows remote attacker

Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote at

The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (application crash)

The Amp II engine as used by Gore: Ultimate Soldier 1.50 and earlier allows remote attackers to cause a denial of servic

Directory traversal vulnerability in WinHKI 1.4d allows remote attackers to overwrite arbitrary files via a .. (dot dot)

Directory traversal vulnerability in Simple PHP Blog (SPHPBlog) 0.3.7c allows remote attackers to read or create arbitra

Mozilla 1.6 and possibly other versions allows remote attackers to cause a denial of service (application crash) via a X

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: (RFC 2397

Cross-site scripting vulnerability in login.php in Gallery 1.4.4-pl2 allows remote attackers to inject arbitrary web scr

main.php in Gallery 2.0 Alpha allows remote attackers to gain sensitive information by changing the value of g2_subView

The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attackers

The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode

The International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain names using punycode e

The International Domain Name (IDN) support in Omniweb 5 allows remote attackers to spoof domain names using punycode en

The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain name

The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode enc

The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context

The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via cra

String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::R

The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service

TFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) via a GET

Multiple format string vulnerabilities in the FTP service in 3Com 3CDaemon 2.0 revision 10 allow remote attackers to cau

Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service

The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command

Soldner Secret Wars 30830 and earlier does not properly handle the "message too long" socket error, which allows remote

eMotion MediaPartner Web Server 5.0 and 5.1 allows remote attackers to obtain sensitive information via an HTTP request

Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Service (WDS), allows rem

Directory traversal vulnerability in minis.php in Minis 0.2.1 allows remote attackers to read arbitrary files via a .. (

The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, whi

Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a

Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files vi

Exponent 0.95 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) search.info.php,

Infinite Mobile Delivery Webmail 2.6 allows remote attackers to gain sensitive information via an HTTP request that cont

Xpand Rally 1.0.0.0 allows remote attackers or remote malicious game servers to cause a denial of service (application c

pafiledb.php in PaFileDB 3.1 allows remote attackers to gain sensitive information via an invalid or missing action para

Zyxel P310, P314, P324 and Netgear RT311, RT314 running the latest firmware, allows remote attackers on the WAN to obtai

LANChat Pro Revival 1.666c allows remote attackers to cause a denial of service (application crash) via a malformed UDP

Linksys PSUS4 running firmware 6032 allows remote attackers to cause a denial of service (device crash) via an HTTP POST

Directory traversal vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to read arbitrary files

Integer signedness error in Apple File Service (AFP Server) allows remote attackers to cause a denial of service (applic

Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote authenticated users to upload and execute

viewthread.php in php-fusion 4.x does not check the (1) forum_id or (2) forum_cat parameters, which allows remote attack

The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback (CFB) mode, all

Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of s

Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of s