Skip to content
OpenAdvisories

Archive

10 May 2005

Vulnerabilities first published on this day (UTC), newest first.

← April 2005 2005 / May /10 June 2005 →
  1. 1 
  2. 229
  3. 353
  4. 416
  5. 520
  6. 64
  7. 7 
  8. 8 
  9. 92
  10. 10360
  11. 1145
  12. 127
  13. 131
  14. 1445
  15. 15 
  16. 1639
  17. 1721
  18. 1827
  19. 1948
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 2446
  25. 2524
  26. 265
  27. 2743
  28. 282
  29. 29 
  30. 30 
  31. 3119
All Critical High Medium Low Exploited only Public exploit

360 results · Feed

  • Unscored —
    CVE-2004-2061 Public exploit

    RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arb…

  • Unscored —
    CVE-2004-2038 Public exploit

    Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) before LDU 700 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2004-2036 Public exploit

    SQL injection vulnerability in the art_print function in print.inc.php in unknown versions of jPortal before 2.3.1 allo…

  • Unscored —
    CVE-2004-2041

    PHP remote file inclusion vulnerability in secure_img_render.php in e107 0.615 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2004-2025

    SQL injection vulnerability in application_top.php for Zen Cart 1.1.3 before patch 2 may allow remote attackers to exec…

  • Unscored —
    CVE-2004-2042

    Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary SQL code and gain sensi…

  • Unscored —
    CVE-2004-2031

    Cross-site scripting (XSS) vulnerability in user.php in e107 allows remote attackers to inject arbitrary web script or …

  • Unscored —
    CVE-2001-1477

    The Domain gateway in BEA Tuxedo 7.1 does not perform authorization checks for imported services and qspaces on remote …

  • Unscored —
    CVE-2002-1660 Public exploit EPSS 11%

    calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters i…

  • Unscored —
    CVE-2002-1659

    user_profile.asp in PortalApp 2.2 allows local users to gain privileges by modifying the user_id variable.

  • Unscored —
    CVE-2005-0039

    Certain configurations of IPsec, when using Encapsulating Security Payload (ESP) in tunnel mode, integrity protection a…

  • Unscored —
    CVE-2003-1158 Public exploit

    Multiple buffer overflows in the FTP service in Plug and Play Web Server 1.0002c allow remote attackers to cause a deni…

  • Unscored —
    CVE-2003-1135 Public exploit

    Buffer overflow in Yahoo! Messenger 5.6 allows remote attackers to cause a denial of service (crash) via a file send re…

  • Unscored —
    CVE-2003-1159

    Plug and Play Web Server Proxy 1.0002c allows remote attackers to cause a denial of service (server crash) via an inval…

  • Unscored —
    CVE-2003-1160 Public exploit

    FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain administrative privileges …

  • Unscored —
    CVE-2003-1151 Public exploit

    Cross-site scripting (XSS) vulnerability in Fastream NETFile Server 6.0.3.588 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2003-1142 Public exploit

    Help in NIPrint LPD-LPR Print Server 4.10 and earlier executes Windows Explorer with SYSTEM privileges, which allows lo…

  • Unscored —
    CVE-2003-1180

    Directory traversal vulnerability in Advanced Poll 2.0.2 allows remote attackers to read arbitrary files or inject arbi…

  • Unscored —
    CVE-2003-1146 Public exploit

    Cross-site scripting (XSS) vulnerability in John Beatty Easy PHP Photo Album 1.0 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2003-1156

    Java Runtime Environment (JRE) and Software Development Kit (SDK) 1.4.2 through 1.4.2_02 allows local users to overwrit…

  • Unscored —
    CVE-2003-1168

    HTTP Commander 4.0 allows remote attackers to obtain sensitive information via an HTTP request that contains a . (dot) …

  • Unscored —
    CVE-2003-1183

    The WebCache component in Oracle Files 9.0.3.1.0, 9.0.3.2.0, and 9.0.3.3.0 of Oracle Collaboration Suite Release 1 cach…

  • Unscored —
    CVE-2003-1152

    WebTide 7.04 allows remote attackers to list arbitrary directories via an HTTP request for %3f.jsp (encoded "?").

  • Unscored —
    CVE-2003-1173 Public exploit

    Centrinity FirstClass 7.1 allows remote attackers to access sensitive information by appending search to the end of the…

  • Unscored —
    CVE-2003-1166 Public exploit

    Directory traversal vulnerability in (1) Openfile.aspx and (2) Html.aspx in HTTP Commander 4.0 allows remote attackers …

  • Unscored —
    CVE-2003-1188

    Unichat allows remote attackers to cause a denial of service (crash) by adding extra chat characters (avatars) and logg…

  • Unscored —
    CVE-2003-1148 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences…

  • Unscored —
    CVE-2003-1136 Public exploit

    Cross-site scripting (XSS) vulnerability in Chi Kien Uong Guestbook 1.51 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2003-1140 Public exploit

    Buffer overflow in Musicqueue 1.2.0 allows local users to execute arbitrary code via a long language variable in the co…

  • Unscored —
    CVE-2003-1161

    exit.c in Linux kernel 2.6-test9-CVS, as stored on kernel.bkbits.net, was modified to contain a backdoor, which could a…

  • Unscored —
    CVE-2003-1162 Public exploit

    index.php in Tritanium Bulletin Board 1.2.3 allows remote attackers to read and reply to arbitrary messages by modifyin…

  • Unscored —
    CVE-2003-1198

    connection.c in Cherokee web server before 0.4.6 allows remote attackers to cause a denial of service via an HTTP POST …

  • Unscored —
    CVE-2003-1177 Public exploit EPSS 13%

    Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2003-1189

    Unknown vulnerability in Nokia IPSO 3.7, configured as IP Clusters, allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2003-1139 Public exploit

    Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink…

  • Unscored —
    CVE-2003-1164 Public exploit

    Cross-site scripting (XSS) vulnerability in Mldonkey 2.5-4 allows remote attackers to inject arbitrary web script or HT…

  • Unscored —
    CVE-2003-1194

    Cross-site scripting (XSS) vulnerability in Booby .1 through 0.2.3 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2003-1196 Public exploit

    SQL injection vulnerability in viewtopic.asp in VieBoard 2.6 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2003-1187 Public exploit

    Cross-site scripting (XSS) vulnerability in include.php in PHPKIT 1.6.02 and 1.6.03 allows remote attackers to inject a…

  • Unscored —
    CVE-2003-1165 Public exploit

    Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service (crash) and poss…