2005

main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite

The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users to

Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption

Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Window

The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, a

The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial

dispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files via a symlink attack on t

qpkg in Gentoolkit 0.2.0_pre10 and earlier allows local users to overwrite arbitrary files via a symlink attack on a tem

The mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite arbitrary files via a symlink a

KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the user or (2) created by t

SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that h

FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service (application crash) by calling Xman

lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt th

lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lpp

IglooFTP 0.6.1, when recursively uploading a directory, allows local users to overwrite the files that are being uploade

The slip_down function in slip.c for the uml_net program in uml-utilities 20030903, when uml_net is installed setuid roo

Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still

Race condition in SELinux 2.6.x through 2.6.9 allows local users to cause a denial of service (kernel crash) via SOCK_SE

Race condition in SuSE Linux 8.1 through 9.2, when run on SMP systems that have more than 4GB of memory, could allow loc

ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 app

Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of serv

The mod_dosevasive module 1.9 and earlier for Apache creates temporary files with predictable filenames, which could all

Cross-site scripting (XSS) vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject a

FORE PowerHub before 5.0.1 allows remote attackers to cause a denial of service (hang) via a TCP SYN scan with TCP/IP OS

Format string vulnerability in Soldner Secret Wars 30830 and earlier allows remote attackers to cause a denial of servic

Directory traversal vulnerability in index.php in QwikiWiki allows remote attackers to read arbitrary files via a .. (do

Cross-site scripting (XSS) vulnerability in Bugzilla before 2.18, including 2.16.x before 2.16.11, allows remote attacke

A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote

Direct code injection vulnerability in FlatNuke 2.5.1 allows remote attackers to execute arbitrary PHP code by placing t

Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL

Multiple cross-site scripting (XSS) vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers t

Cross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote attackers to inject arbitrary web sc