Vulnerabilities > Low

DATE CVE VULNERABILITY TITLE RISK
2005-05-26 CVE-2005-1801 Remote Denial of Service vulnerability in Nokia 9500 vCard Viewer
The vCard viewer in Nokia 9500 allows attackers to cause a denial of service (crash) via a vCard with a long Name field, which causes the crash when the user views it.
network
high complexity
nokia
2.6
2005-05-25 CVE-2005-1751 Unspecified vulnerability in Shtool
Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack on the .shtool.$$ temporary file, a different vulnerability than CVE-2005-1759.
local
high complexity
shtool
3.7
2005-05-25 CVE-2005-1152 Unspecified vulnerability in Debian Qpopper 4.0.4/4.0.5
popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with group or world-writable permissions.
local
low complexity
debian
2.1
2005-05-24 CVE-2005-1696 Unspecified vulnerability in Postnuke Software Foundation Postnuke 0.750/0.760Rc3
Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.750 and 0.760RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) skin or (2) paletteid parameter to demo.php in the Xanthia module, or (3) the serverName parameter to config.php in the Multisites (aka NS-Multisites) module.
network
high complexity
postnuke-software-foundation
2.6
2005-05-24 CVE-2005-1695 Unspecified vulnerability in Postnuke Software Foundation Postnuke 0.750/0.760Rc2/0.760Rc3
Multiple cross-site scripting (XSS) vulnerabilities in the RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) rss_url parameter to magpie_slashbox.php, or the url parameter to (2) magpie_simple.php or (3) magpie_debug.php.
network
high complexity
postnuke-software-foundation
2.6
2005-05-20 CVE-2005-1686 Unspecified vulnerability in Gnome Gedit 2.10.2
Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename.
network
high complexity
gnome
2.6
2005-05-20 CVE-2005-1683 Buffer Overflow vulnerability in Microsoft Word MCW File Handler
Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted mcw file.
network
high complexity
microsoft
2.6
2005-05-20 CVE-2005-1678 Remote Security vulnerability in Groove Workspace and Virtual Office
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded files in a compound document, which may allow remote attackers to trick users into executing malicious code.
network
high complexity
groove
2.6
2005-05-19 CVE-2005-1671 Information Disclosure vulnerability in Messenger
The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a single ypager.log file, even when there are multiple users, and does not properly warn later users that the feature has been enabled, which allows local users to obtain sensitive information from other users.
local
low complexity
yahoo
2.1
2005-05-19 CVE-2005-1472 Unspecified vulnerability in Apple mac OS X 10.4.1
Certain system calls in Apple Mac OS X 10.4.1 do not properly enforce the permissions of certain directories without the POSIX read bit set, but with the execute bits set for group or other, which allows local users to list files in otherwise restricted directories.
local
low complexity
apple
2.1