Skip to content
OpenAdvisories

Archive

24 April 2005

Vulnerabilities first published on this day (UTC), newest first.

18 results · Feed

  • Unscored —

    The unw_unwind_to_user function in unwind.c on Itanium (ia64) architectures in Linux kernel 2.6 allows local users to c…

  • Unscored —

    Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote atta…

  • Unscored —

    Linux kernel 2.6 on Itanium (ia64) architectures allows local users to cause a denial of service via a "missing Itanium…

  • Unscored —

    Directory traversal vulnerability in the third party tool from Castlehill, as used to secure the iSeries AS/400 FTP ser…

  • Unscored —

    By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the NewTerm function in GlossaryModel.php in JAWS 0.4 allows remote attacke…

  • Unscored —
    CVE-2005-1237 Public exploit

    SQL injection vulnerability in news.php in FlexPHPNews 0.0.3 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.2, when using HTML Tidy ($wgUseTidy), allows remote at…

  • Unscored —

    Buffer overflow in Sun Java System Web Proxy Server (aka Sun ONE Proxy Server) 3.6 SP6 allows remote attackers to execu…

  • Unscored —
    CVE-2005-1233 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary w…

  • Unscored —

    Directory traversal vulnerability in the third party tool from Bsafe, as used to secure the iSeries AS/400 FTP server, …

  • Unscored —

    Directory traversal vulnerability in the third party tool from Powertech, as used to secure the iSeries AS/400 FTP serv…

  • Unscored —

    Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP serv…

  • Unscored —
    CVE-2005-1236 Public exploit

    Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitra…

  • Unscored —

    auction_my_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via a…

  • Unscored —

    Directory traversal vulnerability in the third party tool from NetIQ, as used to secure the iSeries AS/400 FTP server, …

  • Unscored —

    Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via th…

  • Unscored —

    Directory traversal vulnerability in the third party tool from Raz-Lee, as used to secure the iSeries AS/400 FTP server…