Skip to content
OpenAdvisories

Archive

27 April 2005

Vulnerabilities first published on this day (UTC), newest first.

26 results · Feed

  • Unscored —

    CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not ex…

  • Unscored —

    CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authenticatio…

  • Unscored —

    Buffer overflow in htdigest in Apache 1.3.26 and 1.3.27 may allow attackers to execute arbitrary code via a long user a…

  • Unscored —

    SQL injection vulnerability in bBlog 0.7.4 allows remote attackers to execute arbitrary SQL commands via the postid par…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Horde Passwd module before 2.2.2 allows remote attackers to inject arbitrar…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Horde Nag Task List Manager before 1.1.3 allows remote attackers to inject …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in index.php for phpMyVisites allow remote attackers to inject arbi…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attacke…

  • Unscored —
    CVE-2005-1329 Public exploit

    owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder param…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Horde Mnemo Note Manager before 1.1.4 allows remote attackers to inject arb…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Horde Chora module before 1.2.3 allows remote attackers to inject arbitrary…

  • Unscored —

    Buffer overflow in VooDoo cIRCle BOTNET before 1.0.33 allows remote authenticated attackers to cause a denial of servic…

  • Unscored —
    CVE-2005-1325 Public exploit

    set_lang.php in phpMyVisites 1.3 allows remote attackers to read and include arbitrary files via the mylang parameter.

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Horde Vacation module before 2.2.2 allows remote attackers to inject arbitr…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Yappa-NG before 2.3.2 allows remote attackers to inject arbitrary web scrip…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Horde Turba module before 1.2.5 allows remote attackers to inject arbitrary…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Horde Kronolith module before 1.1.4 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2005-1344 Public exploit EPSS 29%

    Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. N…

  • Unscored —
    CVE-2005-1323 Public exploit EPSS 63%

    Buffer overflow in NetFtpd for NetTerm 5.1.1 and earlier allows remote attackers to execute arbitrary code via a long U…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in pms.php for Woltlab Burning Board 2.3.1 PL2 and earlier allows remote attac…

  • Unscored —
    CVE-2005-1308 Public exploit

    SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter f…

  • Unscored —

    OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnec…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Horde Accounts module before 2.1.2 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2005-1312 Public exploit

    PHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to execute arbitrary PHP code …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Horde IMP Webmail client before 3.2.8 allows remote attackers to inject arb…