Archive
10 May 2005
Vulnerabilities first published on this day (UTC), newest first.
360 results · Feed
-
Unscored —CVE-2004-2067 Public exploit
SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attac…
-
Unscored —CVE-2004-2059 Public exploit
Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or…
-
Unscored —
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext i…
-
Unscored —CVE-2004-2012 Public exploit
The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBS…
-
Unscored —
Buffer overflow in the (1) WTHoster and (2) WebDriver modules in WildTangent Web Driver 4.0 allows remote attackers to …
-
Unscored —CVE-2004-2037 Public exploit
Buffer overflow in Mollensoft Lightweight FTP Server 3.6 allows remote authenticated users to cause a denial of service…
-
Unscored —CVE-2004-2014 Public exploit
Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being d…
-
Unscored —CVE-2004-2008 Public exploit
SQL injection vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to execute arbitrary SQL…
-
Unscored —
Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that u…
-
Unscored —
ifconfig "-arp" in SGI IRIX 6.5 through 6.5.22m does not properly disable ARP requests from being sent or received.
-
Unscored —CVE-2004-2026 Public exploit
Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execut…
-
Unscored —
Integer overflow in the SCTP_SOCKOPT_DEBUG_NAME SCTP socket option in socket.c in the Linux kernel 2.4.25 and earlier a…
-
Unscored —
DansGuardian 2.8 and earlier allows remote attackers to bypass the extension filtering rule via a hex encoded extension…
-
Unscored —CVE-2004-2021 Public exploit
Directory traversal vulnerability in file_manager.php in osCommerce 2.2 allows remote attackers to view arbitrary files…
-
Unscored —CVE-2004-2053 Public exploit
PHP remote file inclusion vulnerability in index.php in EasyIns Stadtportal 4 allows remote attackers to execute arbitr…
-
Unscored —CVE-2004-2040 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary web script…
-
Unscored —
The Live CD in SUSE LINUX 9.1 Personal edition is configured without a password for root, which allows remote attackers…
-
Unscored —CVE-2004-2017 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Turbo Traffic Trader C (TTT-C) 1.0 allow remote attackers to inj…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in phpShop 0.7.1 and earlier allows remote attackers to execute ar…
-
Unscored —
CRLF injection vulnerability in PhpBB 2.0.4 and 2.0.9 allows remote attackers to perform HTTP Response Splitting attack…
-
Unscored —
SQL injection vulnerability in login.php in Zen Cart 1.1.2d, 1.1.4 before patch 1, and possibly other versions allows r…
-
Unscored —
e107 0.615 allows remote attackers to obtain sensitive information via a direct request to (1) alt_news.php, (2) backen…
-
Unscored —CVE-2004-2030 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.jsp for Liferay before 2.2.0 release 10/1/2004 allow remot…
-
Unscored —
The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval funct…
-
Unscored —
PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLi…
-
Unscored —
NukeJokes 1.7 and 2 Beta allows remote attackers to obtain the full path of the server via (1) a direct call to mainfun…
-
Unscored —CVE-2004-2028 Public exploit
Cross-site scripting (XSS) vulnerability in stats.php in e107 allows remote attackers to inject arbitrary web script or…
-
Unscored —
Trend Micro OfficeScan 3.0 - 6.0 has default permissions of "Everyone Full Control" on the installation directory and r…
-
Unscored —CVE-2004-2005 Public exploit
Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-…
-
Unscored —CVE-2004-2007 Public exploit
Cross-site scripting (XSS) vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to inject a…
-
Unscored —CVE-2004-2045 Public exploit
The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to…
-
Unscored —CVE-2004-2063 Public exploit
Cross-site scripting (XSS) vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to inj…
-
Unscored —
Unknown vulnerability in APC PowerChute Business Edition 6.0 through 7.0.1 allows remote attackers to cause a denial of…
-
Unscored —CVE-2004-2029 Public exploit
The Util_DecodeHTTPAuth function in BNBT BitTorrent Tracker Beta 7.5 Release 2 and earlier allows remote attackers to c…
-
Unscored —CVE-2004-2064 Public exploit
Cross-site scripting (XSS) vulnerability in lostBook 1.1 and earlier allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2004-2035 Public exploit
MiniShare 1.3.2 allows remote attackers to cause a denial of service (crash) via a malformed HTTP GET or HEAD request w…
-
Unscored —
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier accept any password that begins with the actual passwo…
-
Unscored —CVE-2004-2062 Public exploit
SQL injection vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2004-2032 Public exploit
Netgear RP114 allows remote attackers to bypass the keyword based URL filtering by requesting a long URL, as demonstrat…
-
Unscored —CVE-2004-2033 Public exploit
Orenosv 0.5.9f allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.