Archive
April 2005
Vulnerabilities first published in this month (UTC), newest first.
154 results · Clear filters · Feed
-
Unscored —CVE-2005-1030 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary …
-
Unscored —CVE-2005-0464 Public exploit
gr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files …
-
Unscored —CVE-2005-0465 Public exploit
gr_osview in SGI IRIX does not drop privileges before opening files, which allows local users to overwrite arbitrary fi…
-
Unscored —CVE-2005-1011 Public exploit
SQL injection vulnerability in content.asp in SiteEnable allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2005-1013 Public exploit
The SMTP service in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to…
-
Unscored —
Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a mo…
-
Unscored —CVE-2005-1008 Public exploit
Cross-site scripting (XSS) vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitr…
-
Unscored —CVE-2005-0999 Public exploit
SQL injection vulnerability in the Top module for PHP-Nuke 6.x through 7.6 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2005-0994 Public exploit
Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2005-0992 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject …
-
Unscored —CVE-2005-0993 Public exploit
Buffer overflow in nwprint in SCO OpenServer 5.0.7 allows local users to execute arbitrary code via a long command line…
-
Unscored —CVE-2005-0997 Public exploit
Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 7.6 allow remote attackers to execute arbit…
-
Unscored —CVE-2005-1006 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SonicWALL SOHO 5.1.7.0 allow remote attackers to inject arbitrar…
-
Unscored —CVE-2005-1002 Public exploit
logwebftbs2000.exe in Logics Software File Transfer (LOG-FT) allows remote attackers to read arbitrary files via modifi…
-
Unscored —CVE-2005-1005 Public exploit
ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the ad…
-
Unscored —CVE-2005-1004 Public exploit
Cross-site scripting (XSS) vulnerability in usrdetails.php in ProfitCode PayProCart 3.0 allows remote attackers to inje…
-
Unscored —CVE-2005-1000 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary web scri…
-
Unscored —
The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Nets…
-
Unscored —CVE-2005-0986 Public exploit
NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote atta…
-
Unscored —CVE-2005-0979 Public exploit
Multiple buffer overflows in RUMBA 7.3 and earlier allow remote attackers to cause a denial of service and possibly exe…
-
Unscored —CVE-2005-0984 Public exploit
Buffer overflow in the G_Printf function in Star Wars Jedi Knight: Jedi Academy 1.011 and earlier allows remote attacke…
-
Unscored —CVE-2005-0978 Public exploit
Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload ar…
-
Unscored —CVE-2005-0980 Public exploit
PHP remote file inclusion vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbi…
-
Unscored —CVE-2005-0981 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Pro 2.0 allow remote attackers to inject arbitra…
-
Unscored —CVE-2005-0952 Public exploit
Cross-site scripting vulnerability in pafiledb.php in PaFileDB 3.1 allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2005-0750 Public exploit
The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.…
-
Unscored —CVE-2005-0962 Public exploit
SQL injection vulnerability in index.php for Lighthouse Squirrelcart allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2005-0945 Public exploit
Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1 allows remote attackers to inject arbitrary web script or HT…
-
Unscored —CVE-2005-0958 Public exploit
Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enab…
-
Unscored —CVE-2005-0955 Public exploit
SQL injection vulnerability in InterAKT MX Shop 1.1.1 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —
Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0, related to insufficient data validation, al…
-
Unscored —CVE-2005-0950 Public exploit
Directory traversal vulnerability in FastStone 4in1 Browser 1.2 allows remote attackers to read arbitrary files via a (…
-
Unscored —CVE-2005-0948 Public exploit
SQL injection vulnerability in ad_click.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2005-0959 Public exploit
Buffer overflow in the mt_do_dir function in YepYep mtftpd 0.0.3 may allow attackers to execute arbitrary code via a lo…