CVE-2002-2175: Undefined Security Weakness

phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to effectively delete other usernames via a short username that matches the end of the targeted username...

CVE-2005-2984: Undefined Security Weakness

Avocent CCM console server running firmware 2.1 CCM4850 allows remote authenticated attackers to bypass port restrictions by connecting to the server via SSH and using the connect command to access the serial port...

CVE-2005-1981: Undefined Security Weakness

Unknown vulnerability in Microsoft Windows 2000 Server and Windows Server 2003 domain controllers allows remote authenticated users to cause a denial of service system crash via a crafted Kerberos message...

CVE-2005-2219: Undefined Security Weakness

Hosting Controller 6.1 Hotfix 2.1 allows remote authenticated users to perform unauthorized actions, such as modifying the credit limit, via a direct request to AccountActions.asp and modifying the CreditLimit parameter in an UpdateCreditLimit action...

CVE-2002-1876: Uncontrolled Resource Consumption

Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consumes all of the licenses that are granted to Exchange by IIS...

CVE-2005-0845: Undefined Security Weakness

Directory traversal vulnerability in the Webmail interface in SurgeMail 2.2g3 allows remote authenticated users to write arbitrary files or directories via a .. dot dot in the attachid parameter...

CopperExport XP_Publish.PHP SQL Injection Vulnerability

The remote host is running CopperExport, a plugin for iPhoto that allows an iPhoto user to export images to a Coppermine gallery. The remote version of this software fails to sanitize unspecified input to the 'xppublish.php' script before using it in a SQL query. Note that successful exploitation...

CVE-2004-1653: Undefined Security Weakness

The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, when configured with an anonymous access program such as AnonCVS...

[Full-Disclosure] iDEFENSE Security Advisory 11.08.04: Samba SMBD Remote Denial of Service Vulnerability

Samba SMBD Remote Denial of Service Vulnerability iDEFENSE Security Advisory 11.08.04 www.idefense.com/application/poi/display?id=156&type=vulnerabilities November 08, 2004 I. BACKGROUND Samba is an Open Source/Free Software suite that provides seamless file and print services to SMB/CIFS clients...

CVE-2004-0794

Multiple signal handler race conditions in lukemftpd aka tnftpd before 20040810 allow remote authenticated attackers to cause a denial of service or execute arbitrary code...

MDaemon POP Server Multiple Command Remote Overflow DoS

According to its banner, the remote POP server has a denial of service vulnerability. Input to the DELE and UIDL commands are not properly handled. A remote, authenticated attacker could exploit this to crash the POP service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2003-0082

The Key Distribution Center KDC in Kerberos 5 krb5 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service crash on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap aka "buffer underrun"...

MITKRB5-SA-2003-003: faulty length checks in xdrmem_getbytes

-----BEGIN PGP SIGNED MESSAGE----- MIT krb5 Security Advisory 2003-003 2003-03-18 Topic: faulty length checks in xdrmemgetbytes Severity: serious SUMMARY ======= The MIT Kerberos 5 implementation includes an RPC library derived from SUNRPC. We have been notified that the xdrmemgetbytes function...

MIT Kerberos V5 KDC vulnerable to denial-of-service via null pointer dereference

Overview A vulnerability exists in MIT Kerberos V5 Key Distribution Center that may allow attackers to crash multiple KDC servers within the same realm. Description The MIT Kerberos V5 Key Distribution Center KDC contains a vulnerability that allows certain protocol requests to crash the KDC by...

CVE-2002-0924: Undefined Security Weakness

CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the "Advanced Settings" capability...

CVE-2001-0027: Undefined Security Weakness

modsqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which allows authenticated attackers to gain privileges of other users...

CVE-2023-47205

CVE-2023-47205 is rejected as unused by its CNA, representing no active vulnerability.

CVE-2023-47205

...

Security Update for Windows Vista (KB2503665)

A security issue has been identified that could allow an authenticated local attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system...