Archive
3 May 2005
Vulnerabilities first published on this day (UTC), newest first.
53 results · Feed
-
Unscored —
A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of serv…
-
Unscored —
Skype 0.92.0.12 and 1.0.0.1 for Linux, and possibly other versions, creates the /usr/share/skype/lang directory with wo…
-
Unscored —
The confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail addresses by using a va…
-
Unscored —
SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGD_PA…
-
Unscored —
PHP remote file inclusion vulnerability in main.php in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers…
-
Unscored —
SQL injection vulnerability in the admin login panel for Ocean12 Mailing List Manager 1.06 allows remote attackers to e…
-
Unscored —
SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to upload and execute arbitrary files such as PHP scri…
-
Unscored —
The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) sp…
-
Unscored —
HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before 6.5.4 and 6.0.x befor…
-
Unscored —
SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2005-1414 Public exploit
ExoticSoft FilePocket 1.2 stores sensitive proxy information, including proxy passwords, in plaintext in the registry, …
-
Unscored —
The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial …
-
Unscored —
Serendipity before 0.8 allows Chief users to "hide plugins installed by other users."
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers…
-
Unscored —
Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via ..…
-
Unscored —
Mac OS X 10.3.x and earlier uses insecure permissions for a pseudo terminal tty (pty) that is managed by a non-setuid p…
-
Unscored —
Buffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote authenticated users to execute arbitrary code via …
-
Unscored —CVE-2005-1411 Public exploit
Cybration ICUII 7.0 stores passwords in plaintext in the world-readable icuii.ini file, which allows local users to gai…
-
Unscored —CVE-2005-1423 Public exploit
Directory traversal vulnerability in the mail program in 602LAN SUITE 2004.0.05.0413 allows remote attackers to cause a…
-
Unscored —
Directory traversal vulnerability in Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to read arbitr…
-
Unscored —CVE-2005-1417 Public exploit
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute …
-
Unscored —CVE-2005-1403 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to…
-
Unscored —
Multiple SQL injection vulnerabilities in osTicket allow remote attackers to execute arbitrary SQL commands via the (1)…
-
Unscored —
Multiple unknown vulnerabilities in OpenView Network Node Manager (OV NNM) 6.2, 6.4, 7.01, and 7.50 allow attackers to …
-
Unscored —
Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which all…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script o…
-
Unscored —CVE-2005-1401 Public exploit
Format string vulnerability in the client for Mtp-Target 1.2.2 and earlier allows remote attackers to execute arbitrary…
-
Unscored —
Skype for Windows 1.2.0.0 to 1.2.0.46 allows local users to bypass the identity check for an authorized application, th…
-
Unscored —
Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allow…
-
Unscored —CVE-2005-1413 Public exploit
Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the BBCode plugin for Serendipity before 0.8 allows remote attackers to inj…
-
Unscored —
Format string vulnerability in Lotus Domino 6.0.x before 6.0.5 and 6.5.x before 6.5.4 allows remote attackers to cause …
-
Unscored —
Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to conduct administrator operations and cause a den…
-
Unscored —
Directory traversal vulnerability in 04WebServer 1.81 allows remote attackers to read files outside of the web root but…
-
Unscored —
MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser parameter to post.php or (2) …
-
Unscored —CVE-2005-1424 Public exploit
StumbleInside GoText 1.01 stores sensitive username, mail address,and phone number information in plaintext in the GoTe…
-
Unscored —
Open WebMail (OWM) before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metac…
-
Unscored —
Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to determine the full pathname of the server via a …
-
Unscored —
PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unpr…
-
Unscored —CVE-2005-1412 Public exploit
SQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote attackers to execute arbit…