Archive
16 April 2005
Vulnerabilities first published on this day (UTC), newest first.
43 results · Feed
-
Unscored —
NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in the login command in cale…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow remote attackers to in…
-
Unscored —CVE-2005-1112 Public exploit
IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attac…
-
Unscored —CVE-2005-1149 Public exploit
SQL injection vulnerability in admin/login.asp in aspclick.it ACNews 1.0 allows remote attackers to execute arbitrary S…
-
Unscored —
Unknown vulnerability in Veritas i3 Focalpoint Server 7.1 and earlier has unknown attack vectors and unknown but "criti…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in IlohaMail 0.8.14 and earlier allow remote attackers to inject ar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in myBloggie 2.1.1 allows remote attackers to inject arbitrary web script or H…
-
Unscored —CVE-2005-1130 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Pinnacle Cart allows remote attackers to inject arbitrary web …
-
Unscored —
The SIOCGIFCONF ioctl (ifconf function) in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffe…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in EasyPHPCalendar before 6.2.8 allows remote attackers to inject…
-
Unscored —
Multiple SQL injection vulnerabilities in album_search.php in Photo Album 2.0.53 for phpBB allow remote attackers to ex…
-
Unscored —CVE-2005-1118 Public exploit
Cross-site scripting (XSS) vulnerability in IISWebAgentIF.dll in the RSA Authentication Agent for Web 5.2 allows remote…
-
Unscored —CVE-2005-1134 Public exploit
SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —
Format string vulnerability in the log function in Net::Server 0.87 and earlier, as used in Postfix Greylisting Policy …
-
Unscored —
calendar.pl in CalendarScript 3.21 allows remote attackers to obtain sensitive information via invalid (1) year or (2) …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PhpBB Plus 1.52 and earlier allow remote attackers to inject arb…
-
Unscored —
Simple PHP Blog (sphpBlog) 0.4.0 allows remote attackers to obtain sensitive information via a direct request to sb_fun…
-
Unscored —
Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service (memory corruption) via a req…
-
Unscored —
Simple PHP Blog (sphpBlog) 0.4.0 stores the (1) password.txt and (2) config.txt files under the web document root, whic…
-
Unscored —
Unknown vulnerability in WebMail in Kerio MailServer before 6.0.9 allows remote attackers to cause a denial of service …
-
Unscored —
Opera 8 Beta 3, when using first-generation vetted digital certificates, displays the Organizational information of an …
-
Unscored —
eGroupWare 1.0.6 and earlier, when an e-mail is composed with an attachment but not sent, will send that attachment in …
-
Unscored —
Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial…
-
Unscored —
NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in calendar.pl in CalendarSc…
-
Unscored —
popup.php in EasyPHPCalendar before 6.2.8 allows remote attackers to obtain sensitive information via an invalid ev par…
-
Unscored —
Multiple SQL injection vulnerabilities in VHCS 2.4 and earlier allow remote attackers to execute arbitrary SQL commands…
-
Unscored —
Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier, when running on Windows systems, allows attack…
-
Unscored —CVE-2005-1135 Public exploit
Cross-site scripting (XSS) vulnerability in search.php for Simple PHP Blog (sphpBlog) 0.4.0 allows remote attackers to …
-
Unscored —
calendar.pl in CalendarScript 3.20 allows remote attackers to obtain sensitive information via invalid (1) calendar or …
-
Unscored —CVE-2005-1117 Public exploit
PHP remote file inclusion vulnerability in index.php in All4WWW-Homepagecreator 1.0a allows remote attackers to execute…
-
Unscored —
Format string vulnerability in the my_xlog function in lib.c for Oops! Proxy Server 1.5.23 and earlier, as called by th…
-
Unscored —
The ij_untrusted_url function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows remote attackers to ove…
-
Unscored —
Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers…
-
Unscored —CVE-2005-1110 Public exploit
Stack-based buffer overflow in the RespondeHTTPPendiente function in the HTTP server for SUMUS 0.2.2 allows remote atta…
-
Unscored —
Heap-based buffer overflow in the readpgm function in pnm.c for GOCR 0.40, when it is not using netpbm, allows remote a…
-
Unscored —
Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link atta…
-
Unscored —
Unknown vulnerability in the libgss Generic Security Services Library in Solaris 7, 8, and 9 allows local users to gain…
-
Unscored —
The filtering of URLs in JunkBuster before 2.0.2-r3 allows remote attackers to cause a denial of service (application c…
-
Unscored —
Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files.
-
Unscored —
LG U8120 mobile phone allows remote attackers to cause a denial of service (device crash) via a malformed MIDI file.