2003

Multiple SQL injection vulnerabilities in IMP 2.2.8 and earlier allow remote attackers to perform unauthorized database

Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE cap

Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service (crash).

dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that

Buffer overflows in (1) circle_poly, (2) path_encode and (3) path_add (also incorrectly identified as path_addr) for Pos

The daemon for GeneWeb before 4.09 does not properly handle requested paths, which allows remote attackers to read arbit

Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote att

Memory leak in libmcrypt before 2.5.5 allows attackers to cause a denial of service (memory exhaustion) via a large numb

Buffer overflow in the date parser for PostgreSQL before 7.2.2 allows attackers to cause a denial of service and possibl

Buffer overflows in the (1) TZ and (2) SET TIME ZONE enivronment variables for PostgreSQL 7.2.1 and earlier allow local

faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to m

Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obta

The data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 sets world-

gsinterf.c in bmv 1.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary file

Polycom ViewStation before 7.2.4 has a default null password for the administrator account, which allows arbitrary users

The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass authentication and read files via

The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which mak

The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via

The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via

rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to

Multiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to execute arbitrary code v

OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads t

Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to exe

Buffer overflow in traceroute-nanog (aka traceroute-ng) may allow local users to execute arbitrary code via a long hostn

The spray mode in traceroute-nanog (aka traceroute-ng) may allow local users to overwrite arbitrary memory locations via

Buffer overflow in typespeed 0.4.2 and earlier allows local users to gain privileges via long input.

Cross-site scripting (XSS) vulnerability in MHonArc before 2.5.14 allows remote attackers to inject arbitrary HTML into