Archive
10 May 2005
Vulnerabilities first published on this day (UTC), newest first.
360 results · Feed
-
Unscored —
The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS…
-
Unscored —
Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service (crash) via a …
-
Unscored —
Format string vulnerability in test_func_func in LCDProc 0.4.1 and earlier allows remote attackers to execute arbitrary…
-
Unscored —CVE-2004-1973 Public exploit
DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request that con…
-
Unscored —CVE-2004-1797 Public exploit
Cross-site scripting (XSS) vulnerability in search.php for FreznoShop 1.3.0 RC1 and earlier allows remote attackers to …
-
Unscored —
SMC Barricade broadband router 7008ABR and 7004VBR enable remote administration by default, which allows remote attacke…
-
Unscored —
devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to u…
-
Unscored —CVE-2004-1835 Public exploit
Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitra…
-
Unscored —CVE-2004-1793 Public exploit
Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to exec…
-
Unscored —
The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from prop…
-
Unscored —
DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, whi…
-
Unscored —CVE-2004-1881 Public exploit
SQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x allows remote attackers to execu…
-
Unscored —
Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file via carriage return ch…
-
Unscored —CVE-2004-1996 Public exploit
Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.0 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2004-1855 Public exploit
Dark Age of Camelot before 1.68 live patch does not sign the RSA public key, which could allow remote malicious servers…
-
Unscored —
The Rage 1.01 and earlier allows remote attackers to cause a denial of service (infinite loop) via a TCP packet with th…
-
Unscored —CVE-2004-1907 Public exploit
The Web Filtering functionality in Kerio Personal Firewall (KPF) 4.0.13 allows remote attackers to cause a denial of se…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Mod_survey 3.0.x before 3.0.16-pre2 and 3.2.x before 3.2.0-pre4 allows remo…
-
Unscored —CVE-2004-1826 Public exploit
SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to e…
-
Unscored —
Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP…
-
Unscored —CVE-2004-1985 Public exploit
Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to …
-
Unscored —CVE-2004-1908 Public exploit
McFreeScan.CoMcFreeScan.1 ActiveX object in Mcafee FreeScan allows remote attackers to obtain sensitive information via…
-
Unscored —
Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allow…
-
Unscored —
ZoneAlarm Pro 4.5.538.001 and possibly other versions allows remote attackers to bypass e-mail protection via attachmen…
-
Unscored —
Etherlords I 1.07 and earlier and Etherlords II 1.03 and earlier allows remote attackers to cause a denial of service (…
-
Unscored —CVE-2004-1935 Public exploit
Cross-site scripting (XSS) vulnerability in SCT Campus Pipeline allows remote attackers to inject arbitrary web script …
-
Unscored —CVE-2004-1911 Public exploit
Cross-site scripting (XSS) vulnerability in AzDGDatingLite 2.1.1 allows remote attackers to inject arbitrary web script…
-
Unscored —CVE-2004-1929 Public exploit
SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attacker…
-
Unscored —CVE-2004-1978 Public exploit
Cross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary H…
-
Unscored —CVE-2004-1828 Public exploit
Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote att…
-
Unscored —
Directory traversal vulnerability in Aldo's Web Server (aweb) 1.5 allows remote attackers to view arbitrary files via a…
-
Unscored —CVE-2004-1888 Public exploit
display.cgi in Aborior Encore WebForum allows remote to execute arbitrary commands via shell metacharacters in the file…
-
Unscored —CVE-2004-1868 Public exploit
Stack-based buffer overflow in WinSig.exe in eSignal 7.5 and 7.6 allows remote attackers to execute arbitrary code via …
-
Unscored —CVE-2004-1945 Public exploit
Buffer overflow in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via a long MAIL FROM fiel…
-
Unscored —CVE-2004-1939 Public exploit
Cross-site scripting (XSS) vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2004-1887 Public exploit
Ada Image Server (ImgSvr) 0.4 allows remote attackers to view directories or download files via an HTTP request with a …
-
Unscored —CVE-2004-1989 Public exploit
PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to exec…
-
Unscored —
Buffer overflow in Terminator 3: War of the Machines 1.0 allows remote attackers to cause a denial of service via a lon…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in (1) deliver.asp and (2) billing.asp in A-CART Pro and A-CART 2.0…
-
Unscored —
Format string vulnerability in the PRINT_ERROR function in common.c for Cherokee Web Server 0.4.16 and earlier allows l…