Archive
April 2005
Vulnerabilities first published in this month (UTC), newest first.
506 results · Feed
-
Unscored —
The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loo…
-
Unscored —
Multiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2005-1246 Public exploit
Format string vulnerability in the snmppd_log function in snmppd_util.c for snmppd 0.4.5 and earlier may allow remote a…
-
Unscored —
Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows rem…
-
Unscored —
webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packe…
-
Unscored —
The unw_unwind_to_user function in unwind.c on Itanium (ia64) architectures in Linux kernel 2.6 allows local users to c…
-
Unscored —
Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote atta…
-
Unscored —
Linux kernel 2.6 on Itanium (ia64) architectures allows local users to cause a denial of service via a "missing Itanium…
-
Unscored —
Directory traversal vulnerability in the third party tool from Castlehill, as used to secure the iSeries AS/400 FTP ser…
-
Unscored —
By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the NewTerm function in GlossaryModel.php in JAWS 0.4 allows remote attacke…
-
Unscored —CVE-2005-1237 Public exploit
SQL injection vulnerability in news.php in FlexPHPNews 0.0.3 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.2, when using HTML Tidy ($wgUseTidy), allows remote at…
-
Unscored —
Buffer overflow in Sun Java System Web Proxy Server (aka Sun ONE Proxy Server) 3.6 SP6 allows remote attackers to execu…
-
Unscored —CVE-2005-1233 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary w…
-
Unscored —
Directory traversal vulnerability in the third party tool from Bsafe, as used to secure the iSeries AS/400 FTP server, …
-
Unscored —
Directory traversal vulnerability in the third party tool from Powertech, as used to secure the iSeries AS/400 FTP serv…
-
Unscored —
Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP serv…
-
Unscored —CVE-2005-1236 Public exploit
Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitra…
-
Unscored —
auction_my_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via a…
-
Unscored —
Directory traversal vulnerability in the third party tool from NetIQ, as used to secure the iSeries AS/400 FTP server, …
-
Unscored —
Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —
Directory traversal vulnerability in the third party tool from Raz-Lee, as used to secure the iSeries AS/400 FTP server…
-
High 7.5
PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess …
-
Unscored —
Mac OS X 10.3.9 and earlier allows users to install, create, and execute setuid/setgid scripts, contrary to the intende…
-
Unscored —
Integer signedness error in the parse_machfile function in the mach-o loader (mach_loader.c) for the Darwin Kernel as u…
-
Unscored —
SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
SQL injection vulnerability in login.asp for Ecommerce-Carts EcommPro 3.0 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2005-1222 Public exploit
cat_for_gen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the ad_direct p…
-
Unscored —CVE-2005-1223 Public exploit
Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL…
-
Unscored —
Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PHProjekt 4.2 and earlier allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2005-1224 Public exploit
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL comma…
-
Unscored —
Directory traversal vulnerability in Yawcam 0.2.5 allows remote attackers to read arbitrary files via "..\" (dot dot ba…
-
Unscored —
Shoutbox SCRIPT 3.0.2 and earlier allows remote attackers to obtain sensitive information via a direct request to db/se…
-
Unscored —
Coppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to obtain sensitive informa…
-
Unscored —
Directory traversal vulnerability in cpio 2.6 and earlier allows remote attackers to write to arbitrary directories via…
-
Unscored —
Unknown vulnerability in the dotlock implementation in mailutils before 1:0.5-4 on Debian GNU/Linux allows attackers to…
-
Unscored —
The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to …
-
Unscored —
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client respons…