Archive
April 2005
Vulnerabilities first published in this month (UTC), newest first.
154 results · Clear filters · Feed
-
Unscored —
Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Serve…
-
Unscored —
Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5…
-
Unscored —
Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers t…
-
Unscored —
The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server…
-
Unscored —
Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a…
-
Unscored —CVE-2005-0404 Public exploit
KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digital…
-
Unscored —
Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execu…
-
Unscored —CVE-2005-1095 Public exploit
Cross-site scripting (XSS) vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to …
-
Unscored —CVE-2005-1097 Public exploit
Rebrand P2P Share Spy 2.2 stores the user password in plaintext in the txtPassword value in the registry, which allows …
-
Unscored —
Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote att…
-
Unscored —CVE-2005-1086 Public exploit
Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via…
-
Unscored —
Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is …
-
Unscored —CVE-2005-1105 Public exploit
Directory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows remote attackers to w…
-
Unscored —CVE-2005-1087 Public exploit
CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide…
-
Unscored —CVE-2005-1094 Public exploit
FTP Now 2.6.14 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local us…
-
Unscored —CVE-2005-1098 Public exploit
GetDataBack for NTFS 2.31 stores the username and license key in plaintext in the Name value in the License registry ke…
-
Unscored —CVE-2005-1092 Public exploit
Lightspeed DeluxeFTP 6.01 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allo…
-
Unscored —CVE-2005-1073 Public exploit
Directory traversal vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to read arbitrary …
-
Unscored —CVE-2005-1081 Public exploit
Cross-site scripting (XSS) vulnerability in view.php in AzDGDatingPlatinum 1.1.0 allows remote attackers to inject arbi…
-
Unscored —CVE-2005-1051 Public exploit
SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to execute arbitrary SQL co…
-
Unscored —CVE-2005-1077 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.4.x allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2005-1079 Public exploit
SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2005-1075 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in RadScripts RadBids Gold 2 allow remote attackers to inject arbit…
-
Unscored —CVE-2005-1076 Public exploit
Cross-site scripting (XSS) vulnerability in the discussion board functionality for WebCT Campus Edition 4.1 allows remo…
-
Unscored —
Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticat…
-
Unscored —CVE-2005-1054 Public exploit
PHP remote file inclusion vulnerability in news.php in ModernBill 4.3.0 and earlier allows remote attackers to execute …
-
Unscored —CVE-2005-1082 Public exploit
Multiple SQL injection vulnerabilities in AzDGDatingPlatinum 1.1.0 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2005-1071 Public exploit
SQL injection vulnerability in banner.inc.php in JPortal Web Portal 2.3.1 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2005-1078 Public exploit
XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges.
-
Unscored —CVE-2005-1053 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in orderwiz.php in ModernBill 4.3.0 and earlier allow remote attack…
-
Unscored —CVE-2005-1049 Public exploit
Multiple cross-site scripting vulnerabilities in PostNuke 0.760-RC3 allow remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2005-1070 Public exploit
SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to exe…
-
Unscored —CVE-2005-1059 Public exploit
Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data…
-
Unscored —CVE-2005-1074 Public exploit
SQL injection vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2005-1023 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x to 7.6 allow remote attackers to inject arbitrary w…
-
Unscored —CVE-2005-1019 Public exploit
Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOM…
-
Unscored —CVE-2005-1027 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x through 7.6 allow remote attackers to inject arbitr…
-
Unscored —CVE-2005-1029 Public exploit
Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2005-1026 Public exploit
Multiple SQL injection vulnerabilities in SnailSource phpBB 2.0.x mods allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2005-1033 Public exploit
CubeCart 2.0.6 allows remote attackers to obtain sensitive information via an invalid (1) language parameter to index.p…