2005

Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy

Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that

iCab 2.9.8 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote a

Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which a

Opera 7.x and 8 before 8.01 does not clearly associate a Javascript dialog box with the web page that generated it, whic

Microsoft Internet Explorer 6.0 does not clearly associate a Javascript dialog box with the web page that generated it,

Electronic Mail Operator (elmo) 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows local

High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on

ftpd in IBM AIX 5.1, 5.2 and 5.3 allows remote authenticated users to cause a denial of service (port exhaustion and mem

xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temp

Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 befor

gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passe

Multiple cross-site scripting (XSS) vulnerabilities in McAfee IntruShield Security Management System allow remote authen

Bugzilla 2.17.x, 2.18 before 2.18.2, 2.19.x, and 2.20 before 2.20rc1 inserts a bug into the database before it is marked

The control for Adobe Reader 5.0.9 and 5.0.10 on Linux, Solaris, HP-UX, and AIX creates temporary files with the permiss

The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attack

kpopper 1.0 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the .popper-n

Lpanel 1.59 and earlier, and other versions before 1.597, allows remote authenticated users to modify certain critical v

The (1) clcs and (2) emuxki drivers in NetBSD 1.6 through 2.0.2 allow local users to cause a denial of service (kernel c

Directory traversal vulnerability in Golden FTP Server 2.60 allows remote authenticated attackers to list arbitrary dire

Prevx Pro 2005 1.0 allows local users to bypass file protection and modify files by using MapViewOfFile to perform memor

The Quantum archive decompressor in Clam AntiVirus (ClamAV) before 0.86.1 allows remote attackers to cause a denial of s

D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows loc

Unknown vulnerability in IBM DB2 8.1.4 through 8.1.9 and 8.2.0 through 8.2.2 allows local users with SELECT privileges t

HP Version Control Repository Manager (VCRM) before 2.1.1.730 does not properly handle the "@" character in a proxy pass

BisonFTP Server V4R1 allows remote authenticated users to cause a denial of service via an invalid command with a long a

Race condition in shtool 2.0.1 and earlier allows local users to modify or create arbitrary files via a symlink attack o

Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file,

The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end addre

AFP Server for Mac OS X 10.4.1, when using an ACL enabled volume, does not properly remove an ACL when a file is copied

Unknown vulnerability in lpadmin on Sun Solaris 7, 8, and 9 allows local users to overwrite arbitrary files.

A regression error in Firefox 1.0.3 and Mozilla 1.7.7 allows remote attackers to inject arbitrary Javascript from one pa

Directory traversal vulnerability in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users t

xmysqladmin 1.0 and earlier allows local users to delete arbitrary files via a symlink attack on a database backup file

GIPTables Firewall 1.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the temp.ip.a

Apple Mac OS X 10.4.x up to 10.4.1 sets insecure world- and group-writable permissions for the (1) system cache folder a

ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cau

launchd 106 in Apple Mac OS X 10.4.x up to 10.4.1 allows local users to overwrite arbitrary files via a symlink attack o

FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a s

Buffer overflow in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to execute arbitrar

Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to caus

User32.DLL in Microsoft Windows 98SE, and possibly other operating systems, allows local and remote attackers to cause a

Cross-site scripting (XSS) vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to inject arbitrary w

syscall in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform, when running in 32-bit compatibility mode, allows

WEB-DAV Linux File System (davfs2) 0.2.3 does not properly enforce Unix permissions, which allows local users to write a

Microsoft Internet Explorer 6 SP2 (6.0.2900.2180) crashes when the user attempts to add a URI to the restricted zone, in

The vCard viewer in Nokia 9500 allows attackers to cause a denial of service (crash) via a vCard with a long Name field,

Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack o

popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with gro

Multiple cross-site scripting (XSS) vulnerabilities in the RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allow remot