Archive
10 May 2005
Vulnerabilities first published on this day (UTC), newest first.
360 results · Feed
-
Unscored —CVE-2004-1958 Public exploit
Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files…
-
Unscored —
Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3) cp_ipbans.php, (4) my…
-
Unscored —CVE-2004-1968 Public exploit
The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to read arbi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in board.php for ThWboard before beta 2.84 allows remote attackers to inject a…
-
Unscored —CVE-2004-1854 Public exploit
Buffer overflow in the logging function in Picophone 1.63 and earlier allows remote attackers to execute arbitrary code…
-
Unscored —
Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to r…
-
Unscored —CVE-2004-1953 Public exploit
phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which r…
-
Unscored —
4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to obtain sensitive information via a direct request …
-
Unscored —
Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attacker…
-
Unscored —CVE-2004-1844 Public exploit
Cross-site scripting (XSS) vulnerability in Member Management System 2.1 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2004-1866 Public exploit
nstxd in Nstx 1.1 beta3 and earlier allows remote attackers to cause a denial of service (crash) via a large packet, wh…
-
Unscored —CVE-2004-1870 Public exploit
Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' pas…
-
Unscored —
Fastream NETFile FTP/Web Server 6.5.1.980 allows remote attackers to cause a denial of service via a username that does…
-
Unscored —CVE-2004-1972 Public exploit
SQL injection vulnerability in modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to execu…
-
Unscored —CVE-2004-1975 Public exploit
Cross-site scripting (XSS) vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote attacker…
-
Unscored —
TEXutil in ConTEXt, when executed with the --silent option, allows local users to overwrite arbitrary files via a symli…
-
Unscored —CVE-2004-1913 Public exploit
Cross-site scripting (XSS) vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attac…
-
Unscored —CVE-2004-1781 Public exploit
Info Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating system via the CMD_CRE…
-
Unscored —CVE-2004-1944 Public exploit
Eudora 6.1 and 6.0.3 for Windows allows remote attackers to cause a denial of service (crash) via a deeply nested multi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in WebCT Campus Edition allows remote attackers to inject arbitrary HTML or we…
-
Unscored —
msxml3.dll in Internet Explorer 6.0.2600.0 allows remote attackers to cause a denial of service (crash) via a single & …
-
Unscored —
The WebLinks module in Php-Nuke 6.x through 7.3 allows remote attackers to obtain sensitive information via an invalid …
-
Unscored —CVE-2004-2060 Public exploit
ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain th…
-
Unscored —CVE-2004-2047 Public exploit
Directory traversal vulnerability in EasyWeb FileManager 1.0 RC-1 for PostNuke allows remote attackers to retrieve arbi…
-
Unscored —
Stack-based buffer overflow in the HTTP server in NetChat 7.3 and earlier allows remote attackers to execute arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote attackers to inject arbi…
-
Unscored —
SQL injection vulnerability in action.php in Nucleus CMS 3.01 allows remote attackers to execute arbitrary SQL statemen…
-
Unscored —CVE-2004-2000 Public exploit
SQL injection vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to execute arbi…
-
Unscored —
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allow local users to gain privileges by pressing CTRL-…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 6.x through 7.3 allow remote attackers to inject arbitr…
-
Unscored —CVE-2004-2022 Public exploit
ActivePerl 5.8.x and others, and Larry Wall's Perl 5.6.1 and others, when running on Windows systems, allows attackers …
-
Unscored —
Unknown vulnerability in SGI IRIX 6.5 through 6.5.22m allows remote attackers to cause a denial of service via a certai…
-
Unscored —CVE-2004-2003 Public exploit
Buffer overflow in the ssl_prcert function in the SSLway filter (sslway.c) for DeleGate 8.9.2 and earlier allows remote…
-
Unscored —
The Phoenix browser in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allows local users to read arbi…
-
Unscored —CVE-2004-2018 Public exploit
PHP remote file inclusion vulnerability in index.php in Php-Nuke 6.x through 7.3 allows remote attackers to execute arb…
-
Unscored —
radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be acce…
-
Unscored —
SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and by…
-
Unscored —
SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements.
-
Unscored —
Buffer overflow in Icecast 2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a long Ba…
-
Unscored —
ASPRunner 2.4 allows remote attackers to gain sensitive information via (1) hidden form fields or (2) error messages.