Latest CVE Feed
-
4.3
MEDIUMCVE-2005-2653
Cross-site scripting (XSS) vulnerability in BBCaffe 2.0 allows remote attackers to inject arbitrary web script or HTML via e-mail data in a message.... Read more
Affected Products : bbcaffe- Published: Aug. 23, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2005-2667
Unknown vulnerability in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows attackers to cause a denial of service via unknown vectors, aka the "CAM TCP port vulnerability."... Read more
- Published: Aug. 23, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2005-2678
Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass security checks and conduct various attacks via a GET request with an http://localhost URI, which makes it appear as if the request is coming from localhost.... Read more
- Published: Aug. 23, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2005-2514
Buffer overflow in ping in Mac OS X 10.3.9 allows local users to execute arbitrary code.... Read more
Affected Products : mac_os_x- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2005-2515
Quartz Composer Screen Saver in Mac OS X 10.4.2 allows local users to access links from the RSS Visualizer even when a password is required.... Read more
Affected Products : mac_os_x- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
2.6
LOWCVE-2005-2517
Safari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page that is browsed by the user, which causes form data to be sent to the wrong site.... Read more
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2005-2519
slpd in Directory Services in Mac OS X 10.3.9 creates insecure temporary files as root, which allows local users to gain privileges.... Read more
Affected Products : mac_os_x- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2005-2511
Unknown vulnerability in Mac OS X 10.4.2 and earlier, when using Kerberos authentication with LDAP, allows attackers to gain access to a root Terminal window.... Read more
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2005-2513
Unknown vulnerability in HItoolbox for Mac OS X 10.4.2 allows VoiceOver services to read secure input fields.... Read more
Affected Products : mac_os_x- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2005-2526
CUPS in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to cause a denial of service (CPU consumption) by sending a partial IPP request and closing the connection.... Read more
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2005-2505
Buffer overflow in CoreFoundation in Mac OS X 10.3.9 allows attackers to execute arbitrary code via command line arguments to an application that uses CoreFoundation.... Read more
Affected Products : mac_os_x- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2005-2523
Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.... Read more
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-2509
Unknown vulnerability in loginwindow in Mac OS X 10.4.2 and earlier, when Fast User Switching is enabled, allows attackers to log into other accounts if they know the passwords to at least two accounts.... Read more
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2005-2507
Buffer overflow in Directory Services in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.... Read more
Affected Products : mac_os_x_server- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2005-2518
Buffer overflow in servermgrd in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.... Read more
Affected Products : mac_os_x- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2005-2525
CUPS in Mac OS X 10.3.9 and 10.4.2 does not properly close file descriptors when handling multiple simultaneous print jobs, which allows remote attackers to cause a denial of service (printing halt).... Read more
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2005-2626
Unspecified vulnerability in Kismet before 2005-08-R1 allows remote attackers to have an unknown impact via unprintable characters in the SSID.... Read more
Affected Products : kismet- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2005-2520
The password assistant in Mac OS X 10.4 to 10.4.2, when used to create multiple accounts from the same process, does not reset the suggested password list when the assistant is displayed, which allows attackers to view recently used passwords.... Read more
Affected Products : mac_os_x- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
7.6
HIGHCVE-2005-2501
Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2 allows external user-assisted attackers to execute arbitrary code via a crafted Rich Text Format (RTF) file.... Read more
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2005-2504
The System Profiler in Mac OS X 10.4.2 labels a Bluetooth device with "Requires Authentication: No" even when the user has selected the "Require pairing for security" option, which could confuse users about which setting is valid.... Read more
- Published: Aug. 19, 2005
- Modified: Apr. 03, 2025