Archive
April 2005
Vulnerabilities first published in this month (UTC), newest first.
154 results · Clear filters · Feed
-
Unscored —CVE-2005-1201 Public exploit
Multiple directory traversal vulnerabilities in AZ Bulletin board (AZbb) before 1.0.08 allow (1) remote authenticated u…
-
Unscored —CVE-2005-1203 Public exploit
Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote attackers to execute ar…
-
Unscored —CVE-2005-1061 Public exploit
The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via c…
-
Unscored —CVE-2005-1200 Public exploit
PHP remote file inclusion vulnerability in main_index.php in AZ Bulletin Board (AZbb) 1.0.07a through 1.0.07c allows re…
-
Unscored —CVE-2004-1774 Public exploit
Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0…
-
Unscored —CVE-2005-1183 Public exploit
Cross-site scripting (XSS) vulnerability in mvnForum 1.0 RC4 allows remote attackers to inject arbitrary web script or …
-
Unscored —
The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service (CPU consumption) v…
-
Unscored —CVE-2005-1188 Public exploit
Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to…
-
Unscored —
The Web View DLL (webvw.dll), as used in Windows Explorer on Windows 2000 systems, does not properly filter an apostrop…
-
Unscored —CVE-2005-1181 Public exploit
NOTE: this issue has been disputed by the vendor. PHP remote code injection vulnerability in loader.php for Ariadne CMS…
-
Unscored —CVE-2005-1165 Public exploit
Yager 5.24 and earlier allows remote attackers to cause a denial of service (application crash) via certain malformed d…
-
Unscored —CVE-2005-1170 Public exploit
SQL injection vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2005-1162 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2005-1164 Public exploit
Yager 5.24 and earlier allows remote attackers to cause a denial of service (application hang) via a packet with a game…
-
Unscored —CVE-2005-1173 Public exploit
Buffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary code via a long GET re…
-
Unscored —CVE-2005-1161 Public exploit
Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —
Multiple buffer overflows in Yager 5.24 and earlier allow remote attackers to execute arbitrary code via (1) a crafted …
-
Unscored —CVE-2005-1171 Public exploit
Cross-site scripting (XSS) vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to inject…
-
Unscored —CVE-2005-1112 Public exploit
IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attac…
-
Unscored —CVE-2005-1149 Public exploit
SQL injection vulnerability in admin/login.asp in aspclick.it ACNews 1.0 allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2005-1130 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Pinnacle Cart allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2005-1118 Public exploit
Cross-site scripting (XSS) vulnerability in IISWebAgentIF.dll in the RSA Authentication Agent for Web 5.2 allows remote…
-
Unscored —CVE-2005-1134 Public exploit
SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2005-1135 Public exploit
Cross-site scripting (XSS) vulnerability in search.php for Simple PHP Blog (sphpBlog) 0.4.0 allows remote attackers to …
-
Unscored —CVE-2005-1117 Public exploit
PHP remote file inclusion vulnerability in index.php in All4WWW-Homepagecreator 1.0a allows remote attackers to execute…
-
Unscored —CVE-2005-1110 Public exploit
Stack-based buffer overflow in the RespondeHTTPPendiente function in the HTTP server for SUMUS 0.2.2 allows remote atta…
-
Unscored —CVE-2005-1125 Public exploit
Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass l…
-
Unscored —CVE-2004-0824 Public exploit
PPPDialer for Mac OS X 10.2.8 through 10.3.5 allows local users to overwrite system files via a symlink attack on PPPDi…
-
Unscored —
Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via th…
-
Unscored —CVE-2004-0390 Public exploit
SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, whic…
-
Unscored —CVE-2004-0641 Public exploit
Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP …
-
Unscored —CVE-2004-1121 Public exploit
Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags.
-
Unscored —CVE-2001-0163 Public exploit
Cisco AP340 base station produces predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spo…
-
Unscored —
WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hij…
-
Unscored —CVE-2002-1351 Public exploit
Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service (chat server crash) an…
-
Unscored —
Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduct…
-
Unscored —
Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) vi…
-
Unscored —
Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause…
-
Unscored —
Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attacker…
-
Unscored —
Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000…