Archive
10 May 2005
Vulnerabilities first published on this day (UTC), newest first.
360 results · Feed
-
Unscored —
Buffer overflow in the GUI admin service in Mac OS X Server 10.3 allows remote attackers to cause a denial of service (…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0 allow remote attackers to inject arbitrary web scri…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to…
-
Unscored —
Unknown vulnerability in Sun Java System Application Server 7.0 Update 2 and earlier, when a SOAP web service expects a…
-
Unscored —
X-Micro WLAN 11b Broadband Router 1.6.0.1 has a hardcoded "1502" username and password, which could allow remote attack…
-
Unscored —CVE-2004-1962 Public exploit
SQL injection vulnerability in index.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection fil…
-
Unscored —CVE-2004-1783 Public exploit
Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary…
-
Unscored —
The SSL HTTP Server in HP Web-enabled Management Software 5.0 through 5.92, with anonymous access enabled, allows remot…
-
Unscored —CVE-2004-1906 Public exploit
Mcafee FreeScan allows remote attackers to cause a denial of service and possibly arbitrary code via a long string in t…
-
Unscored —CVE-2004-1875 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to inject arbitrary web …
-
Unscored —
MS Analysis module 2.0 for PHP-Nuke allows remote attackers to obtain sensitive information via a direct request to (1)…
-
Unscored —
YaST Online Update (YOU) in SuSE 8.2 and 9.0 allows local users to overwrite arbitrary files via a symlink attack on yo…
-
Unscored —
Dameware Mini Remote Control 4.1.0.0 uses insufficiently random data to create the encryption key, which makes it easie…
-
Unscored —
RealOne player 6.0.11.868 allows remote attackers to execute arbitrary script in the "My Computer" zone via a Synchroni…
-
Unscored —
paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (2) category.…
-
Unscored —CVE-2004-1867 Public exploit
Cross-site scripting (XSS) vulnerability in guest.cgi in Fresh Guest Book allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2004-1820 Public exploit
PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web management interface in ZyWALL 10 4.07 allows remote attackers to i…
-
Unscored —
The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password, which also …
-
Unscored —CVE-2004-1883 Public exploit
Multiple buffer overflows in Ipswitch WS_FTP Server 4.0.2 (1) allow remote authenticated users to execute arbitrary cod…
-
Unscored —CVE-2004-1784 Public exploit
Buffer overflow in the web server of Webcam Watchdog 3.63 allows remote attackers to execute arbitrary code via a long …
-
Unscored —
Stack-based buffer overflow in DecodeBase16 function, as used in the (1) IRC module and (2) web server in eMule 0.42d, …
-
Unscored —CVE-2004-1821 Public exploit
SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to gain privileges or …
-
Unscored —
Buffer overflow in Chrome 1.2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet…
-
Unscored —
Info Touch Surfnet kiosk allows local users to access the underlying filesystem via a 'file://' URI.
-
Unscored —
phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote a…
-
Unscored —
Chat Anywhere 2.72 and earlier allows remote attackers to hide their IP address by using %00 before the nickname, which…
-
Unscored —CVE-2004-1943 Public exploit
PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to …
-
Unscored —CVE-2004-1882 Public exploit
Cross-site scripting (XSS) vulnerability in popuplargeimage.asp in CactuShop 5.x allows remote attackers to inject arbi…
-
Unscored —CVE-2004-1861 Public exploit
Invision NetSupport School Pro uses a weak encryption algorithm to encrypt passwords, which allows local users to obtai…
-
Unscored —CVE-2004-1824 Public exploit
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary we…
-
Unscored —
SQL injection vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to execute SQL commands via the (1) …
-
Unscored —
Microsoft Internet Explorer 5.5 and 6.0 allocates memory based on the memory size written in the BMP file instead of th…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allow …
-
Unscored —
Format string vulnerability in the logging function in IGI 2 Covert Strike server 1.3 and earlier allows remote attacke…
-
Unscored —CVE-2004-1788 Public exploit
ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control, which al…
-
Unscored —
Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects an array of objects a…
-
Unscored —CVE-2004-1812 EPSS 45%
Multiple stack-based buffer overflows in Agent Common Services (1) cam.exe and (2) awservices.exe in Unicenter TNG 2.4 …
-
Medium 5.5
Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles.
-
Unscored —CVE-2004-1987 EPSS 10%
picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privi…