April 2005

506 results · Feed

• Unscored —
  CVE-2005-1314

  Cross-site scripting (XSS) vulnerability in Horde Kronolith module before 1.1.4 allows remote attackers to inject arbit…

  Apr 27, 2005
• Unscored —
  CVE-2005-1344 Public exploit EPSS 29%

  Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. N…

  apache2 Debian
  Apr 27, 2005
• Unscored —
  CVE-2005-1323 Public exploit EPSS 63%

  Buffer overflow in NetFtpd for NetTerm 5.1.1 and earlier allows remote attackers to execute arbitrary code via a long U…

  Apr 27, 2005
• Unscored —
  CVE-2005-1327

  Cross-site scripting (XSS) vulnerability in pms.php for Woltlab Burning Board 2.3.1 PL2 and earlier allows remote attac…

  Apr 27, 2005
• Unscored —
  CVE-2005-1308 Public exploit

  SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter f…

  courier Debian
  Apr 27, 2005
• Unscored —
  CVE-2005-1328

  OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnec…

  Apr 27, 2005
• Unscored —
  CVE-2005-1316

  Cross-site scripting (XSS) vulnerability in Horde Accounts module before 2.1.2 allows remote attackers to inject arbitr…

  Apr 27, 2005
• Unscored —
  CVE-2005-1312 Public exploit

  PHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to execute arbitrary PHP code …

  Apr 27, 2005
• Unscored —
  CVE-2005-1319

  Cross-site scripting (XSS) vulnerability in Horde IMP Webmail client before 3.2.8 allows remote attackers to inject arb…

  Apr 27, 2005
• Unscored —
  CVE-2004-1077

  Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE b…

  Apr 26, 2005
• Unscored —
  CVE-2004-1078

  Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Ci…

  Apr 26, 2005
• Unscored —
  CVE-2005-0684 Public exploit EPSS 69%

  Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary…

  Apr 26, 2005
• Unscored —
  CVE-2005-1304

  The citat.pl script allows remote attackers to execute arbitrary files via shell metacharacters in the argument.

  Apr 26, 2005
• Unscored —
  CVE-2005-1288

  inc_login_check.asp ACS Blog 0.8 through 1.1.3 allows remote attackers to gain administrator privileges via the "in" va…

  Apr 26, 2005
• Unscored —
  CVE-2005-1292

  Multiple cross-site scripting (XSS) vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web …

  Apr 26, 2005
• Unscored —
  CVE-2005-1283

  Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1…

  Apr 26, 2005
• Unscored —
  CVE-2005-1285 Public exploit

  Cross-site scripting (XSS) vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier allows remote attacke…

  Apr 26, 2005
• Unscored —
  CVE-2005-1294 Public exploit

  The affix_sock_register in the Affix Bluetooth Protocol Stack for Linux might allow local users to gain privileges via …

  Apr 26, 2005
• Unscored —
  CVE-2005-1305

  The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

  Apr 26, 2005
• Unscored —
  CVE-2005-1281

  Ethereal 0.10.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted RSVP pa…

  Apr 26, 2005
• Unscored —
  CVE-2005-1279 Public exploit EPSS 19%

  tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP pa…

  tcpdump Debian
  Apr 26, 2005
• Unscored —
  CVE-2005-1293 Public exploit

  Multiple SQL injection vulnerabilities in default.asp in StorePortal 2.63 allow remote attackers to execute arbitrary S…

  Apr 26, 2005
• Unscored —
  CVE-2005-1303

  The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.

  Apr 26, 2005
• Unscored —
  CVE-2005-1284

  The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Al…

  Apr 26, 2005
• Unscored —
  CVE-2005-1287 Public exploit

  Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the…

  Apr 26, 2005
• Unscored —
  CVE-2005-1290

  Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.14 and earlier allow remote attackers to inject arbitr…

  Apr 26, 2005
• Unscored —
  CVE-2005-1282

  Multiple cross-site scripting (XSS) vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to injec…

  Apr 26, 2005
• Unscored —
  CVE-2005-1301

  nProtect:Netizen 2005.3.17.1 does not properly verify that the update module is downloaded from an authorized site, whi…

  Apr 26, 2005
• Unscored —
  CVE-2005-1302

  SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via t…

  Apr 26, 2005
• Unscored —
  CVE-2005-1274

  Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 all…

  Apr 26, 2005
• Unscored —
  CVE-2005-1278 Public exploit EPSS 11%

  The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a de…

  tcpdump Debian
  Apr 26, 2005
• Unscored —
  CVE-2005-1275 Public exploit EPSS 14%

  Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attack…

  imagemagick Debian
  Apr 26, 2005
• Unscored —
  CVE-2005-1297

  Cross-site scripting (XSS) vulnerability in the include.cgi script allows remote attackers to inject arbitrary web scri…

  Apr 26, 2005
• Unscored —
  CVE-2005-1299

  The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.

  Apr 26, 2005
• Unscored —
  CVE-2005-1298

  The inserter.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

  Apr 26, 2005
• Unscored —
  CVE-2005-1289 Public exploit

  index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters…

  Apr 26, 2005
• Unscored —
  CVE-2005-1296

  include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.

  Apr 26, 2005
• Unscored —
  CVE-2005-1300

  Cross-site scripting (XSS) vulnerability in the inserter.cgi script allows remote attackers to inject arbitrary web scr…

  Apr 26, 2005
• Unscored —
  CVE-2005-1295

  include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

  Apr 26, 2005
• Unscored —
  CVE-2005-1286

  Unquoted Windows search path vulnerability in BitDefender 8 allows local users to prevent BitDefender from starting by …

  Apr 26, 2005