Archive
11 May 2005
Vulnerabilities first published on this day (UTC), newest first.
45 results · Feed
-
Unscored —
Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to (1) move their home directory …
-
Unscored —
Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist, allows remote authentica…
-
Unscored —CVE-2005-1479 Public exploit
SQL injection vulnerability in jgs_portal.php in JGS-Portal 3.0.1 and earlier allows remote attackers to execute arbitr…
-
Unscored —
Format string vulnerability in dSMTP (dsmtp.exe) in DMail 3.1a allows remote attackers to execute arbitrary code via fo…
-
Unscored —
The Admin panel in PwsPHP 1.2.2 does not properly verify uploaded picture files, which allows remote attackers to uploa…
-
Unscored —CVE-2005-1492 Public exploit
Cross-site scripting (XSS) vulnerability in user.cgi in Gossamer Threads Links SQL 2.x and 3.0 allows remote attackers …
-
Unscored —
delcomment.php in myBloggie 2.1.1 allows remote attackers to delete arbitrary comments by modifying the comment_id para…
-
Unscored —
Unknown vulnerability in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to obtai…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PwsPHP 1.2.2 allow remote attackers to inject arbitrary web scri…
-
Unscored —
Golden FTP Server Pro 2.52 allows remote attackers to obtain sensitive information via a GET request for a file that do…
-
Unscored —CVE-2005-1506 Public exploit
SQL injection vulnerability in out.php in CJ Ultra (CJUltra) Plus 1.0.3 and 1.0.4 allows remote attackers to execute ar…
-
Unscored —
GameSpy SDK CD-Key Validation Toolkit, as used by many online games, allows remote attackers to bypass the CD key valid…
-
Unscored —CVE-2005-1480 Public exploit
Directory traversal vulnerability in RaidenFTPD before 2.4.2241 allows remote attackers to read arbitrary files via a "…
-
Unscored —
Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitra…
-
Unscored —CVE-2005-1493 Public exploit
Directory traversal vulnerability in SimpleCam 1.2 allows remote attackers to read arbitrary files via a ..\ (dot dot b…
-
Unscored —
commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to…
-
Unscored —
MidiCart PHP Shopping Cart allows remote attackers to obtain sensitive information via a direct request to (1) search_l…
-
Unscored —
The new account wizard in Mail.app 2.0 in Mac OS 10.4, when configuring an IMAP mail account and checking the credentia…
-
Unscored —
Oracle Database 9i and 10g disables Fine Grained Audit (FGA) after the SYS user executes a SELECT statement on an FGA o…
-
Unscored —
Multiple SQL injection vulnerabilities in Aaron Outpost ASP Inline Corporate Calendar allow remote attackers to execute…
-
Unscored —
SQL injection vulnerability in profil.php in PwsPHP 1.2.2 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —
Unknown vulnerability in Solaris 7 through 9, when using Federated Naming Services (FNS), autofs, and FNS X.500 configu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MidiCart PHP Shopping Cart allows remote attackers to inject arbitrary web …
-
Unscored —
index.php in myBloggie 2.1.1 allows remote attackers to obtain sensitive information via an invalid post_id parameter, …
-
Unscored —
ArticleLive 2005 allows remote attackers to gain privileges by modifying the (1) auth and (2) userId fields in a cookie.
-
Unscored —
Unknown vulnerability in Cisco Firewall Services Module (FWSM) 2.3.1 and earlier, when using URL, FTP, or HTTPS filteri…
-
Unscored —
Directory traversal vulnerability in Golden FTP server pro 2.52 allows remote attackers to read arbitrary files via a "…
-
Unscored —CVE-2005-1263 Public exploit
The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6…
-
Unscored —
PwsPHP 1.2.2 allows remote attackers to bypass authentication and post arbitrary comments via the Pseudo cookie.
-
Unscored —CVE-2005-1496 EPSS 38%
The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by ch…
-
Unscored —CVE-2005-1503 Public exploit
Multiple SQL injection vulnerabilities in MidiCart PHP Shopping Cart allow remote attackers to execute arbitrary SQL co…
-
Unscored —
Integer signedness error in the qmail_put and substdio_put functions in qmail, when running on 64 bit platforms with a …
-
Unscored —CVE-2005-1494 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admin.cgi in MegaBook 2.0 and 2.1 allow remote attackers to inje…
-
Unscored —CVE-2005-1486 Public exploit
Multiple cross-site scripting vulnerabilities in FishCart 3.1 allow remote attackers to inject arbitrary web script or …
-
Unscored —CVE-2005-1487 Public exploit
Multiple SQL injection vulnerabilities in FishCart 3.1 allow remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2005-1507 Public exploit
Buffer overflow in the Tomcat plugin in 4d WebSTAR 5.33 and 5.4 allows remote attackers to cause a denial of service an…
-
Unscored —CVE-2005-1500 Public exploit
Multiple SQL injection vulnerabilities in myBloggie 2.1.1 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —
Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing,…
-
Unscored —
PwsPHP 1.2.2 allows remote attackers to obtain sensitive information via a direct request to the admin directory, which…
-
Unscored —
DList (dlist.exe) in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the syst…