CWE-264 (page 55)
Page 55 of 55 — CVEs classified under CWE-264, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2005-1425 | | 2005-05-03 | Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a datab… | |
CVE-2005-0970 | | 2005-05-02 | Mac OS X 10.3.9 and earlier allows users to install, create, and execute setuid/setgid scripts, contrary to the intended design, which may allow attackers to c… | |
CVE-2005-0735 | | 2005-05-02 | newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin. | |
CVE-2005-0244 | | 2005-05-02 | PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command. | |
CVE-2004-1029 | | 2005-03-01 | The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between… | |
CVE-2004-1193 | | 2005-01-10 | Prevx Home 1.0 allows local users with administrator privileges to bypass the intrusion prevention features by directly writing to \device\physicalmemory, whic… | |
CVE-2004-2743 | | 2004-12-31 | upload.cgi in Mega Upload Progress Bar before 1.45 allows remote attackers to copy or overwrite arbitrary files via unspecified parameters related to names of… | |
CVE-2004-2739 | | 2004-12-31 | The setup routine (setup.php) in PHProjekt 4.2.1 and earlier allows remote attackers to modify system configuration via unknown attack vectors. | |
CVE-2004-2733 | | 2004-12-31 | Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to (1) block arbitrary IP addresses via pop_up_ip_blocking.a… | |
CVE-2004-2730 | | 2004-12-31 | Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before… | |
CVE-2004-2729 | | 2004-12-31 | Inetd32 Administration Tool of Hummingbird Connectivity 7.1 and 9.0 allows local users to execute arbitrary code by changing the program for handling incoming… | |
CVE-2004-2718 | | 2004-12-31 | PHPMyChat 0.14.5 does not remove or protect setup.php3 after installation, which allows attackers to obtain sensitive information including database passwords… | |
CVE-2004-2713 | | 2004-12-31 | Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\* to the EVERYONE group, which allows local users to cause a denial of service by mo… | |
CVE-2004-2700 | | 2004-12-31 | Unrestricted file upload vulnerability in AspDotNetStorefront 3.3 allows remote authenticated administrators to upload arbitrary files with executable extensio… | |
CVE-2004-2699 | | 2004-12-31 | deleteicon.aspx in AspDotNetStorefront 3.3 allows remote attackers to delete arbitrary product images via a modified ProductID parameter. | |
CVE-2004-2694 | | 2004-12-31 | Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitrary sources into the Outlook context, and… | |
CVE-2004-2693 | | 2004-12-31 | HP-UX B.11.00 and B.11.11 with B6848AB GTK+ Support Libraries installed uses insecure directory permissions, which allows local users to gain privileges via fi… | |
CVE-2004-2692 | | 2004-12-31 | The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands… | |
CVE-2004-2689 | | 2004-12-31 | NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autorized=admin; root=admin" value. | |
CVE-2004-2608 | | 2004-12-31 | SmartWebby Smart Guest Book stores SmartGuestBook.mdb (aka the "news database") under the web document root with insufficient access control, which allows remo… | |
CVE-2004-1767 | | 2004-12-31 | The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly involving the modload… | |
CVE-2004-1338 | | 2004-12-23 | The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXEC_CBK_F… | |
CVE-2004-0867 | | 2004-12-23 | Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote a… | |
CVE-2004-0793 | | 2004-10-20 | The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitra… | |
CVE-2004-0041 | | 2004-02-03 | The mod_auth_shadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, which could allow remote authenticated user… | |
CVE-2003-1026 | | 2004-01-20 | Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the hi… | |
CVE-2003-1552 | | 2003-12-31 | Unrestricted file upload vulnerability in uploader.php in Uploader 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable… | |
CVE-2003-1541 | | 2003-12-31 | PlanetMoon Guestbook tr3.a stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin… | |
CVE-2003-1524 | | 2003-12-31 | PGPi PGPDisk 6.0.2i does not unmount a PGP partition when the switch user function in Windows XP is used, which could allow local users to access data on anoth… | |
CVE-2003-1515 | | 2003-12-31 | Origo ASR-8100 ADSL Router 3.21 has an administration service running on port 254 that does not require a password, which allows remote attackers to cause a de… | |
CVE-2003-1495 | | 2003-12-31 | Unspecified vulnerability in the non-SSL web agent in various HP Management Agent products allows local users or remote attackers to gain privileges or cause a… | |
CVE-2003-1474 | | 2003-12-31 | slashem-tty in the FreeBSD Ports Collection is installed with write permissions for the games group, which allows local users with group games privileges to mo… | |
CVE-2003-1460 | | 2003-12-31 | Worker Filemanager 1.0 through 2.7 sets the permissions on the destination directory to world-readable and executable while copying data, which could allow loc… | |
CVE-2003-1423 | | 2003-12-31 | Petitforum stores the liste.txt data file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive infor… | |
CVE-2003-1386 | | 2003-12-31 | AXIS 2400 Video Server 2.00 through 2.33 allows remote attackers to obtain sensitive information via an HTTP request to /support/messages, which displays the s… | |
CVE-2003-1383 | | 2003-12-31 | WEB-ERP 0.1.4 and earlier allows remote attackers to obtain sensitive information via an HTTP request for the logicworks.ini file, which contains the MySQL dat… | |
CVE-2003-1378 | | 2003-12-31 | Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML… | |
CVE-2003-1358 | | 2003-12-31 | rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which all… | |
CVE-2003-1356 | | 2003-12-31 | The "file handling" in sort in HP-UX 10.01 through 10.20, and 11.00 through 11.11 is "incorrect," which allows attackers to gain access or cause a denial of se… | |
CVE-2003-1346 | | 2003-12-31 | D-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory default settings by upgrading the firmware using AirPl… | |
CVE-2003-0857 | | 2003-12-31 | The (1) ipq_read and (2) ipulog_read functions in iptables allow local users to cause a denial of service by sending spoofed messages as other users to the ker… | |
CVE-2003-1081 | | 2003-09-09 | Aspppls for Solaris 8 allows local users to overwrite arbitrary files via a symlink attack on the .asppp.fifo temporary file. | |
CVE-2003-0230 | | 2003-08-27 | Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another user, aka the "Name… | |
CVE-2003-0497 | | 2003-08-07 | Caché Database 5.x installs /cachesys/bin/cache with world-writable permissions, which allows local users to gain privileges by modifying cache and executing i… | |
CVE-2002-2425 | | 2002-12-31 | Sun AnswerBook2 1.2 through 1.4.2 allows remote attackers to execute administrative scripts such as (1) AdminViewError and (2) AdminAddadmin via a direct reque… | |
CVE-2002-2407 | | 2002-12-31 | Certain patches for QNX Neutrino realtime operating system (RTOS) 6.2.0 set insecure permissions for the files (1) /sbin/io-audio by OS Update Patch A, (2) /bi… | |
CVE-2002-2405 | | 2002-12-31 | Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, F… | |
CVE-2002-2401 | | 2002-12-31 | NT Virtual DOS Machine (NTVDM.EXE) in Windows 2000, NT and XP does not verify user execution permissions for 16-bit executable files, which allows local users… | |
CVE-2002-2395 | | 2002-12-31 | InterScan VirusWall 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 gzip content encoding. | |
CVE-2002-2394 | | 2002-12-31 | InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 chun… | |
CVE-2002-2363 | | 2002-12-31 | VJE.VJE-RUN in HP-UX 11.00 adds bin to /etc/PATH, which could allow local users to gain privileges. | |
CVE-2002-2361 | | 2002-12-31 | The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spo… | |
CVE-2002-2360 | | 2002-12-31 | The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to read and write to arbitrary files and e… | |
CVE-2002-2356 | | 2002-12-31 | HAMweather 2.x allows remote attackers to modify administrative settings and obtain sensitive information via a direct request to hwadmin.cgi. | |
CVE-2002-2353 | | 2002-12-31 | tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT requests. | |
CVE-2002-2344 | | 2002-12-31 | Ensim WEBppliance 3.0 and 3.1 allows remote attackers to read mail intended for other users by defining an alias that is the target's email address. | |
CVE-2002-2334 | | 2002-12-31 | Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid an… | |
CVE-2002-2327 | | 2002-12-31 | Unspecified vulnerability in the environmental monitoring subsystem in Solaris 8 running on Sun Fire 280R, V480 and V880 allows local users to cause a denial o… | |
CVE-2002-2324 | | 2002-12-31 | The "System Restore" directory and subdirectories, and possibly other subdirectories in the "System Volume Information" directory on Windows XP Professional, h… | |
CVE-2002-2320 | | 2002-12-31 | MySimpleNews 1.0 allows remote attackers to delete arbitrary email messages via a direct request to vider.php3. | |
CVE-2002-2311 | | 2002-12-31 | Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaS… | |
CVE-2002-2302 | | 2002-12-31 | 3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field. | |
CVE-2002-2283 | | 2002-12-31 | Microsoft Windows XP with Fast User Switching (FUS) enabled does not remove the "show processes from all users" privilege when the user is removed from the adm… | |
CVE-2002-2270 | | 2002-12-31 | Unspecified vulnerability in the ied command in HP-UX 10.10, 10.20, and 11.0 allows local users to view "normally invisible data" via unknown attack vectors. | |
CVE-2002-2265 | | 2002-12-31 | Unspecified vulnerability in LDAP Module in System Authentication of Open Source Internet Solutions (OSIS) 5.4 running on Tru64 UNIX 4.0G and 4.0F allows remot… | |
CVE-2002-2261 | | 2002-12-31 | Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'check_relay' function by spoofing a blank DNS hostname. | |
CVE-2002-2254 | | 2002-12-31 | The experimental IP packet queuing feature in Netfilter / IPTables in Linux kernel 2.4 up to 2.4.19 and 2.5 up to 2.5.31, when a privileged process exits and n… | |
CVE-2002-2242 | | 2002-12-31 | The Apple Package Manager in KisMAC 0.02a and earlier modifies file permissions of sensitive files after installation, which could allow attackers to conduct u… | |
CVE-2002-1978 | | 2002-12-31 | IPFilter 3.1.1 through 3.4.28 allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP se… | |
CVE-2002-1877 | | 2002-12-31 | NETGEAR FM114P allows remote attackers to bypass access restrictions for web sites via a URL that uses the IP address instead of the hostname. | |
CVE-2002-1590 | | 2002-10-29 | The Web-Based Enterprise Management (WBEM) packages (1) SUNWwbdoc, (2) SUNWwbcou, (3) SUNWwbdev and (4) SUNWmgapp packages, when installed using Solaris 8 Upda… | |
CVE-2002-1111 | | 2002-10-04 | print_all_bug_page.php in Mantis 0.17.3 and earlier does not verify the limit_reporters option, which allows remote attackers to view bug summaries for bugs th… | |
CVE-2002-0013 | | 2002-02-13 | Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges… | |
CVE-2002-0012 | | 2002-02-13 | Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as d… | |
CVE-2001-1371 | | 2002-02-06 | The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-serv… | |
CVE-2001-1247 | | 2001-12-06 | PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the error_l… | |
CVE-2001-0771 | | 2001-10-18 | Spytech SpyAnywhere 1.50 allows remote attackers to gain administrator access via a single character in the "loginpass" field. | |
CVE-2001-1009 | | 2001-08-31 | Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain pr… | |
CVE-2000-0844 | | 2000-11-14 | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbit… | |
CVE-2000-0219 | | 2000-02-23 | Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt. | |
CVE-1999-0839 | | 1999-11-29 | Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after it has been scheduled. | |
CVE-1999-0899 | | 1999-11-04 | The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate… | |
CVE-1999-0777 | | 1999-09-23 | IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions. | |
CVE-1999-0909 | | 1999-09-20 | Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Poin… | |
CVE-1999-1011 | | 1999-07-19 | The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote a… | |
CVE-1999-0728 | | 1999-07-06 | A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them. | |
CVE-1999-0344 | | 1998-08-01 | NT users can gain debug-level access on a system process using the Sechole exploit. | |
CVE-1999-0227 | | 1997-06-01 | Access violation in LSASS.EXE (LSA/LSARPC) program in Windows NT allows a denial of service. | |
CVE-1999-0496 | | 1997-01-01 | A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regardless of the user's permissions, aka GetAdmin. | |
CVE-1999-1383 | | 1996-09-13 | (1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can c… |