Archive
10 May 2005
Vulnerabilities first published on this day (UTC), newest first.
360 results · Feed
-
Unscored —CVE-2004-1937 Public exploit
Multiple directory traversal vulnerabilities in Nuked-KlaN 1.4b and 1.5b allow remote attackers to read or include arbi…
-
Unscored —
The patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete, which allows remote attackers …
-
Unscored —
athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters…
-
Unscored —CVE-2004-1796 Public exploit
PHP remote file inclusion vulnerability in HotNews 0.7.2 and earlier allows remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2004-1822 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject a…
-
Unscored —
Directory traversal vulnerability in glossary.php in PROPS 0.6.1 allows remote attackers to view arbitrary files via a …
-
Unscored —
SQL injection vulnerability in Extreme Messageboard (XMB) 1.9 beta allows remote attackers to execute arbitrary SQL com…
-
Unscored —
Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which re…
-
Unscored —CVE-2004-1792 Public exploit
swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via…
-
Unscored —CVE-2004-1847 Public exploit
News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the…
-
Unscored —
blocker_query.php in Protector System 1.15b1 for PHP-Nuke allows remote attackers to gain sensitive information via a s…
-
Unscored —CVE-2004-1952 Public exploit
SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gai…
-
Unscored —CVE-2004-1938 Public exploit
SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2004-1932 Public exploit
SQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x through 7.2 allows remote attackers to ex…
-
Unscored —
The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeate…
-
Unscored —CVE-2004-1927 Public exploit
Directory traversal vulnerability in the map feature (tiki-map.phtml) in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlie…
-
Unscored —
Cross-site scripting (XSS) vulnerability in do_search.php in PROPS 0.6.1 allows remote attackers to inject arbitrary HT…
-
Unscored —CVE-2004-1813 Public exploit
VocalTec VGW4/8 Gateway 8.0 allows remote attackers to bypass authentication via an HTTP request to home.asp with a tra…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2004-1951 Public exploit
xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite …
-
Unscored —
RSniff 1.0 allows remote attackers to cause a denial of service (connection exhaustion) via a large number of connectio…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote att…
-
Unscored —CVE-2004-1903 Public exploit
Buffer overflow in blaxxun 3D 7.0 allows remote attackers to execute arbitrary code via a long URL property inside an o…
-
Unscored —
Samsung SmartEther SS6215S switch, and possibly other Samsung switches, allows remote attackers and local users to gain…
-
Unscored —CVE-2004-1846 Public exploit
Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code vi…
-
Unscored —CVE-2004-1954 Public exploit
Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote attackers to inject arbitrary…
-
Unscored —
mod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication information, on the hard di…
-
Unscored —CVE-2004-1934 Public exploit
PHP remote file inclusion vulnerability in affich.php in Gemitel 3.50 allows remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2004-1912 Public exploit
The (1) modules.php, (2) block-Calendar.php, (3) block-Calendar1.php, (4) block-Calendar_center.php scripts in NukeCale…
-
Unscored —CVE-2004-1878 Public exploit
LINBOX LIN:BOX allows remote attackers to bypass authentication, obtain sensitive information, or gain access via a dir…
-
Unscored —
Directory traversal vulnerability in VocalTec VGW4/8 Gateway 8.0 allows remote attackers to read protected files via ..…
-
Unscored —
Ipswitch WS_FTP Server 4.0.2 allows remote attackers to cause a denial of service (disk consumption) and bypass file si…
-
Unscored —CVE-2004-1897 Public exploit
Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service (segmentation fa…
-
Unscored —
modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to gain sensitive information via an HT…
-
Unscored —
Cross-site scripting (XSS) vulnerability in phpBB 2.0.6d and earlier allows remote attackers to inject arbitrary web sc…
-
Unscored —
Buffer overflow in Check Point SmartDashboard in Check Point NG AI R54 and R55 allows remote authenticated users to cau…
-
Unscored —CVE-2004-1960 Public exploit
Cross-site scripting (XSS) vulnerability in blocker_query.php in Protector System 1.15b1 allows remote attackers to inj…
-
Unscored —CVE-2004-1842 Public exploit
Cross-site request forgery (CSRF) vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administr…
-
Unscored —CVE-2004-1926 Public exploit
Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to inject arbitrary code via the (1) Theme, (2)…
-
Unscored —CVE-2004-1919 Public exploit
The hash_strcmp function in hasch.c in Crackalaka 1.0.8 allows remote attackers to cause a denial of service (crash) vi…