2005

Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.

** SPLIT ** The jlucaller program in LiveUpdate for Symantec Norton AntiVirus 9.0.3 on Macintosh runs setuid when execut

A rule file in module-assistant before 0.9.10 causes a temporary file to be created insecurely, which allows local users

yiff server (yiff-server) 2.14.2 on Debian GNU/Linux runs as root and does not properly verify ownership of files that i

Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute

Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary c

Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbit

Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via for

Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitr

The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial o

getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows remo

Stack-based buffer overflow in the NMAP Agent for Novell NetMail 3.52C and possibly earlier versions allows local users

Multiple cross-site scripting (XSS) vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to

Cross-site scripting (XSS) vulnerability in thread.php for Zeroblog 1.1f and 1.2a allows remote attackers to inject arbi

pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converti

The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local

The CGIwrap program before 3.9 on Debian GNU/Linux uses an incorrect minimum value of 100 for a UID to determine whether

Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to exec

The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSL

The (1) cgiwrap and (2) php-cgiwrap packages before 3.9 in Debian GNU/Linux provide access to debugging CGIs under the w

The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have addi

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbit

Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include a

Unknown vulnerability in Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors related

The OLE2 unpacker in clamd in Clam AntiVirus (ClamAV) 0.87-1 allows remote attackers to cause a denial of service (segme

Multiple unspecified vulnerabilities in Solaris 10 SCTP Socket Option Processing allows local users to cause a denial of

Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows r

Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allo

Multiple SQL injection vulnerabilities in aradmin.asp for aspReady FAQ allow remote attackers to execute arbitrary SQL c

SQL injection vulnerability in news.php for Utopia News Pro (UNP) 1.1.3, when magic_quotes_gpc is disabled and register_

Stack-based buffer overflow in PWIWrapper.dll for Webroot Desktop Firewall before 1.3.0build52 allows local users to exe

Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 allow remote attackers

Multiple SQL injection vulnerabilities in (1) aeNovo, (2) aeNovoShop and (3) aeNovoWYSI allow remote attackers to execut

Multiple SQL injection vulnerabilities in Cyphor 0.19 allow remote attackers to execute arbitrary SQL and obtain adminis

Multiple buffer overflows in ALZip 6.12 (Korean), 6.1 (International), and 5.52 (English) allow remote attackers to exec

Multiple interpretation error in unspecified versions of Kaspersky Antivirus allows remote attackers to bypass virus det

Multiple interpretation error in unspecified versions of BitDefender Antivirus allows remote attackers to bypass virus d

Multiple interpretation error in unspecified versions of NOD32 Antivirus allows remote attackers to bypass virus detecti

Multiple interpretation error in unspecified versions of F-Prot Antivirus allows remote attackers to bypass virus detect

Multiple interpretation error in unspecified versions of Avast Antivirus allows remote attackers to bypass virus detecti

Multiple interpretation error in unspecified versions of McAfee Antivirus allows remote attackers to bypass virus detect

Multiple interpretation error in unspecified versions of Sophos Antivirus allows remote attackers to bypass virus detect

Multiple interpretation error in unspecified versions of Symantec Antivirus allows remote attackers to bypass virus dete

Multiple interpretation error in unspecified versions of Dr.Web Antivirus allows remote attackers to bypass virus detect

Multiple interpretation error in unspecified versions of Avira Antivirus allows remote attackers to bypass virus detecti

Multiple interpretation error in unspecified versions of Norman Virus Control Antivirus allows remote attackers to bypas

Multiple interpretation error in unspecified versions of Fortinet Antivirus allows remote attackers to bypass virus dete

Multiple interpretation error in unspecified versions of VBA32 Antivirus allows remote attackers to bypass virus detecti

Multiple interpretation error in unspecified versions of Rising Antivirus allows remote attackers to bypass virus detect

Multiple interpretation error in unspecified versions of AntiVir Antivirus allows remote attackers to bypass virus detec