Archive
10 May 2005
Vulnerabilities first published on this day (UTC), newest first.
360 results · Feed
-
Unscored —CVE-2004-1838 Public exploit
Directory traversal vulnerability in xweb 1.0 allows remote attackers to download arbitrary files via a .. (dot dot) in…
-
Unscored —CVE-2004-1966 Public exploit
Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to exec…
-
Unscored —CVE-2004-1790 Public exploit
Cross-site scripting (XSS) vulnerability in the web management interface in Edimax AR-6004 ADSL Routers allows remote a…
-
Unscored —
PostNuke 0.7.2.6 allows remote attackers to gain information via a direct HTTP request to files in the (1) includes/blo…
-
Unscored —
ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service (crash) by calling the SetSi…
-
Unscored —
The avatar upload capability in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to execute arbit…
-
Unscored —
SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search …
-
Unscored —CVE-2004-1823 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Jelsoft vBulletin 2.0 beta 3 through 3.0 can4 allows remote atta…
-
Unscored —CVE-2004-1910 Public exploit
rufsi.dll in Symantec Virus Detection allows remote attackers to cause a denial of service (crash) via a long string to…
-
Unscored —
Unknown vulnerability in Sysbotz SimpleData 4.0.1 and possibly earlier versions allows remote attackers to gain access …
-
Unscored —CVE-2004-1914 Public exploit
SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to execu…
-
Unscored —
nqt.php in Network Query Tool (NQT) 1.6 allows remote attackers to obtain sensitive information via a string in the por…
-
Unscored —CVE-2004-1940 Public exploit
sipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a STUN respo…
-
Unscored —
HP Web Jetadmin 7.5.2546 allows remote attackers to cause a denial of service (crash) via a malformed request, possibly…
-
Unscored —
The administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POS…
-
Unscored —
wMCam server 2.1.348 allows remote attackers to cause a denial of service (no new connections) via multiple malformed H…
-
Unscored —CVE-2004-1825 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote a…
-
Unscored —CVE-2004-1836 Public exploit
SQL injection vulnerability in index.php in Invision Power Top Site List 1.1 RC 2 and earlier allows remote attackers t…
-
Unscored —
Claim Anti-Virus (ClamAV) 0.68 and earlier allows remote attackers to cause a denial of service (crash) via certain RAR…
-
Unscored —
Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to e…
-
Unscored —CVE-2004-1827 Public exploit
Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to injec…
-
Unscored —
FuseTalk 4.0 allows remote attackers to ban other users via a direct request to banning.cfm.
-
Unscored —
Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authenticat…
-
Unscored —CVE-2004-1924 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote att…
-
Unscored —CVE-2004-1830 Public exploit
error.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive information via an invalid …
-
Unscored —CVE-2004-1988 Public exploit
PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers t…
-
Unscored —
X-Micro WLAN 11b Broadband Router 1.2.2, 1.2.2.3, 1.2.2.4, and 1.6.0.0 has a hardcoded "super" username and password, w…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Extreme Messageboard (XMB) 1.8 SP3 and 1.9 beta allow remote att…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows allows remote attackers to inject arbitrary web script…
-
Unscored —CVE-2004-1843 Public exploit
SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID…
-
Unscored —CVE-2004-1925 Public exploit
Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to exe…
-
Unscored —
Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attacke…
-
Unscored —CVE-2004-1801 Public exploit
Directory traversal vulnerability in PWebServer 0.3.3 allows remote attackers to read arbitrary files via a .. (dot dot…
-
Unscored —CVE-2004-1873 Public exploit
SQL injection vulnerability in category.asp in A-CART Pro and A-CART 2.0 allows remote attackers to gain privileges via…
-
Unscored —CVE-2004-1859 Public exploit
Directory traversal vulnerability in Trend Micro Interscan Web Viruswall in InterScan VirusWall 3.5x allows remote atta…
-
Unscored —CVE-2004-1928 Public exploit
The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possi…
-
Unscored —CVE-2004-1930 Public exploit
Cross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP-Nuke 6.x through 7.2, whe…
-
Unscored —
The ftp_syslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, poss…
-
Unscored —CVE-2004-1817 Public exploit
Cross-site scripting (XSS) vulnerability in modules.php in Php-Nuke 7.1.0 allows remote attackers to inject arbitrary w…
-
Unscored —
Cross-site scripting (XSS) vulnerability in nqt.php in Network Query Tool (NQT) 1.6 allows remote attackers to inject a…