# CVEs published 2005-04-14 31 CVEs were published on April 14, 2005: 0 critical, 0 high. Days are UTC. - [CVE-2001-0161](https://cve.now/CVE-2001-0161.md): Cisco 340-series Aironet access point using firmware 11.01 does not use 6 of the 24 available IV bits for WEP encryption, which makes it eas (no CVSS) - [CVE-2001-0162](https://cve.now/CVE-2001-0162.md): WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections. (no CVSS) - [CVE-2001-0163](https://cve.now/CVE-2001-0163.md): Cisco AP340 base station produces predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP conn (no CVSS) - [CVE-2002-1280](https://cve.now/CVE-2002-1280.md): Memory leak in RealSecure Event Collector 6.5 allows attackers to cause a denial of service (memory consumption and crash). (no CVSS) - [CVE-2002-1312](https://cve.now/CVE-2002-1312.md): Buffer overflow in the Web management interface in Linksys BEFW11S4 wireless access point router 2 and BEFSR11, BEFSR41, and BEFSRU31 EtherF (no CVSS) - [CVE-2002-1351](https://cve.now/CVE-2002-1351.md): Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service (chat server crash) and possibly execute ar (no CVSS) - [CVE-2002-1353](https://cve.now/CVE-2002-1353.md): LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obt (no CVSS) - [CVE-2003-0420](https://cve.now/CVE-2003-0420.md): Information leak in dsimportexport for Apple Macintosh OS X Server 10.2.6 allows local users to obtain the username and password of the acco (no CVSS) - [CVE-2003-0626](https://cve.now/CVE-2003-0626.md): psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the (1) headername or (2) footer (no CVSS) - [CVE-2003-0627](https://cve.now/CVE-2003-0627.md): psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to cause a denial of service (application crash), possibly v (no CVSS) - [CVE-2003-0791](https://cve.now/CVE-2003-0791.md): The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string (no CVSS) - [CVE-2003-0900](https://cve.now/CVE-2003-0900.md): Perl 5.8.1 on Fedora Core does not properly initialize the random number generator when forking, which makes it easier for attackers to pred (no CVSS) - [CVE-2003-0954](https://cve.now/CVE-2003-0954.md): Buffer overflow in rcp for AIX 4.3.3, 5.1 and 5.2 allows local users to gain privileges. (no CVSS) - [CVE-2003-1005](https://cve.now/CVE-2003-1005.md): The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (service crash) via malformed ASN.1 (no CVSS) - [CVE-2004-0369](https://cve.now/CVE-2004-0369.md): Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gatewa (no CVSS) - [CVE-2004-0390](https://cve.now/CVE-2004-0390.md): SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attac (no CVSS) - [CVE-2004-0533](https://cve.now/CVE-2004-0533.md): Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to (no CVSS) - [CVE-2004-0534](https://cve.now/CVE-2004-0534.md): Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows rem (no CVSS) - [CVE-2004-0637](https://cve.now/CVE-2004-0637.md): Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload pack (no CVSS) - [CVE-2004-0641](https://cve.now/CVE-2004-0641.md): Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numb (no CVSS) - [CVE-2004-0823](https://cve.now/CVE-2004-0823.md): OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authenticatio (no CVSS) - [CVE-2004-0824](https://cve.now/CVE-2004-0824.md): PPPDialer for Mac OS X 10.2.8 through 10.3.5 allows local users to overwrite system files via a symlink attack on PPPDialer log files. (no CVSS) - [CVE-2004-1081](https://cve.now/CVE-2004-1081.md): The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and 10.3.6 does not properly restrict access to a secure text input field, whic (no CVSS) - [CVE-2004-1083](https://cve.now/CVE-2004-1083.md): Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses fil (no CVSS) - [CVE-2004-1084](https://cve.now/CVE-2004-1084.md): Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain spe (no CVSS) - [CVE-2004-1085](https://cve.now/CVE-2004-1085.md): Human Interface Toolbox (HIToolBox) for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-quit key combination, ev (no CVSS) - [CVE-2004-1086](https://cve.now/CVE-2004-1086.md): Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input f (no CVSS) - [CVE-2004-1087](https://cve.now/CVE-2004-1087.md): Terminal for Apple Mac OS X 10.3.6 may indicate that "Secure Keyboard Entry" is enabled even when it is not, which could result in a false s (no CVSS) - [CVE-2004-1088](https://cve.now/CVE-2004-1088.md): Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying auth (no CVSS) - [CVE-2004-1089](https://cve.now/CVE-2004-1089.md): Unknown vulnerability in Apple Mac OS X 10.3.6 server, when using Kerberos authentication and Cyrus IMAP allows local users to access mailbo (no CVSS) - [CVE-2004-1121](https://cve.now/CVE-2004-1121.md): Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2005-04-14 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.