Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2005-08-23 CVE-2005-2632 SQL Injection vulnerability in Mediabox404 Login_Admin_Mediabox404.PHP
SQL injection vulnerability in login_admin_mediabox404.php in mediabox404 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the User field.
network
low complexity
mediabox404
7.5
2005-08-23 CVE-2005-2631 Unspecified vulnerability in Cisco Network Admission Control Manager and Server System Software
Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate users when invoking API methods, which could allow remote attackers to bypass security checks, change the assigned role of a user, or disconnect users.
network
low complexity
cisco
7.5
2005-08-23 CVE-2005-0358 Multiple vulnerability in EMC Legato Networker
EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token.
network
low complexity
emc sun
7.5
2005-08-23 CVE-2005-0357 Multiple vulnerability in EMC Legato Networker
EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.
network
low complexity
emc sun
7.5
2005-08-19 CVE-2005-2627 Remote vulnerability in Kismet
Multiple integer underflows in Kismet before 2005-08-R1 allow remote attackers to execute arbitrary code via (1) kernel headers in a pcap file or (2) data frame dissection, which leads to heap-based buffer overflows.
network
low complexity
kismet
7.5
2005-08-19 CVE-2005-2625 Remote Security vulnerability in CPAINT
Incomplete blacklist vulnerability in the checkBlacklist function in CPAINT allows remote attackers to execute arbitrary commands via the (1) ExecuteGlobal function or (2) GetRef statement, which is not included in the blacklist.
network
low complexity
cpaint
7.5
2005-08-19 CVE-2005-2519 Unspecified vulnerability in Apple mac OS X 10.3.9
slpd in Directory Services in Mac OS X 10.3.9 creates insecure temporary files as root, which allows local users to gain privileges.
local
low complexity
apple
7.2
2005-08-19 CVE-2005-2518 Unspecified vulnerability in Apple mac OS X 10.3.9/10.4.2
Buffer overflow in servermgrd in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.
network
low complexity
apple
7.5
2005-08-19 CVE-2005-2516 Unspecified vulnerability in Apple mac OS X and Safari
Safari in Mac OS X 10.3.9 and 10.4.2, when rendering Rich Text Format (RTF) files, can directly access URLs without performing the normal security checks, which allows remote attackers to execute arbitrary commands.
network
low complexity
apple
7.5
2005-08-19 CVE-2005-2514 Unspecified vulnerability in Apple mac OS X 10.3.9
Buffer overflow in ping in Mac OS X 10.3.9 allows local users to execute arbitrary code.
network
low complexity
apple
7.5