Archive
12 April 2005
Vulnerabilities first published on this day (UTC), newest first.
44 results · Feed
-
Unscored —
Buffer overflow in the HTTP redirection capability in conn.c for Axel before 1.0b may allow remote attackers to execute…
-
Unscored —
The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit len…
-
Unscored —CVE-2005-1073 Public exploit
Directory traversal vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to read arbitrary …
-
Unscored —CVE-2005-1081 Public exploit
Cross-site scripting (XSS) vulnerability in view.php in AzDGDatingPlatinum 1.1.0 allows remote attackers to inject arbi…
-
Unscored —
tetex in Novell Linux Desktop 9 allows local users to determine the existence of arbitrary files via a symlink attack i…
-
Unscored —CVE-2005-1051 Public exploit
SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to execute arbitrary SQL co…
-
Unscored —CVE-2005-1077 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.4.x allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2005-1079 Public exploit
SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL …
-
Unscored —
Unknown vulnerability in HP OpenView Network Node Manager (NMM) 6.2 through 6.4, and 7.01 through 7.50, allows remote a…
-
Unscored —
exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an …
-
Unscored —CVE-2005-1075 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in RadScripts RadBids Gold 2 allow remote attackers to inject arbit…
-
Unscored —
Meilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded,…
-
Unscored —
index.php in aeDating 3.2 allows remote attackers to include arbitrary files via the skin parameter.
-
Unscored —
SQL injection vulnerability in modules.php in PostNuke 0.760 RC3 allows remote attackers to execute arbitrary SQL state…
-
Unscored —CVE-2005-1076 Public exploit
Cross-site scripting (XSS) vulnerability in the discussion board functionality for WebCT Campus Edition 4.1 allows remo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PunBB before 1.2.5 allows remote attackers to inject arbitrary web script o…
-
Unscored —
Cisco IOS 12.2T, 12.3 and 12.3T, when using Easy VPN Server XAUTH version 6 authentication, allows remote attackers to …
-
Unscored —
The copy_symlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink point…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the control panel in aeDating 3.2 allows remote attackers to inject arbitra…
-
Unscored —
Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticat…
-
Unscored —
SQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to execute arbitrary SQL commands fi…
-
Unscored —
Race condition in rpdump in Pine 4.62 and earlier allows local users to overwrite arbitrary files via a symlink attack.
-
Unscored —
Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 ne…
-
Unscored —CVE-2005-1054 Public exploit
PHP remote file inclusion vulnerability in news.php in ModernBill 4.3.0 and earlier allows remote attackers to execute …
-
Unscored —
TowerBlog 0.6 and earlier stores the login data file under the web root, which allows remote attackers to obtain the MD…
-
Unscored —CVE-2005-1082 Public exploit
Multiple SQL injection vulnerabilities in AzDGDatingPlatinum 1.1.0 allows remote attackers to execute arbitrary SQL com…
-
Unscored —
Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From …
-
Unscored —
Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows…
-
Unscored —CVE-2005-1071 Public exploit
SQL injection vulnerability in banner.inc.php in JPortal Web Portal 2.3.1 allows remote attackers to execute arbitrary …
-
Unscored —
The modload op in the Reviews module for PostNuke 0.760-RC3 allows remote attackers to obtain sensitive information via…
-
Unscored —
OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, …
-
Unscored —
Cross-site scripting (XSS) vulnerability in sCssBoard 1.11 and earlier allows remote attackers to execute arbitrary Jav…
-
Unscored —
Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to exec…
-
Unscored —CVE-2005-1078 Public exploit
XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges.
-
Unscored —
Unknown vulnerability in the TCP/IP functionality (TCPIP.NLM) in Novell Netware 6.x allows remote attackers to cause a …
-
Unscored —CVE-2005-1053 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in orderwiz.php in ModernBill 4.3.0 and earlier allow remote attack…
-
Unscored —
Vulnerability in Access_user Class before 1.75 allows local users to gain access as other users via the password "new".
-
Unscored —CVE-2005-1049 Public exploit
Multiple cross-site scripting vulnerabilities in PostNuke 0.760-RC3 allow remote attackers to inject arbitrary web scri…
-
Unscored —
Unknown vulnerability in sCssBoard 1.11 and earlier has unknown impact, related to "an exploit on the Profile page."
-
Unscored —CVE-2005-1070 Public exploit
SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to exe…