Archive
19 May 2005
Vulnerabilities first published on this day (UTC), newest first.
48 results · Feed
-
Unscored —
Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which allows remote attackers to…
-
Unscored —CVE-2004-2073 Public exploit
Linux-VServer 1.24 allows local users with root privileges on a virtual server to gain access to the filesystem outside…
-
Unscored —CVE-2004-2081 Public exploit
The samiftp.dll library in Sami FTP Server 1.1.3 allows local users to cause a denial of service (pmsystem.exe crash) b…
-
Unscored —CVE-2004-2076 Public exploit
Cross-site scripting (XSS) vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows remote attackers to injec…
-
Unscored —
Red-M Red-Alert 2.7.5 with software 3.1 build 24 converts multiple spaces in a Service Set Identifier (SSID) to a singl…
-
Unscored —
Microsoft Baseline Security Analyzer (MBSA) 1.2 does not correctly identify systems that have been patched but remain v…
-
Unscored —
Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers …
-
Unscored —CVE-2004-2082 Public exploit
The samiftp.dll library in Sami FTP Server 1.1.3 allows remote authenticated users to cause a denial of service (pmsyst…
-
Unscored —CVE-2004-2077 Public exploit
Nadeo Game Engine for Nadeo TrackMania and Nadeo Virtual Skipper 3 allows remote attackers to cause a denial of service…
-
Unscored —
Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding …
-
Unscored —
Sophos Anti-Virus 3.78 allows remote attackers to cause a denial of service (infinite loop) via a MIME header that is n…
-
Unscored —CVE-2004-2093 Public exploit
Buffer overflow in the open_socket_out function in socket.c for rsync 2.5.7 and earlier allows local users to cause a d…
-
Unscored —
Unknown vulnerability in SandSurfer before 1.7.0 allows remote attackers to gain access as a logged-in user.
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.php in JShop E-Commerce Server allows remote attackers to inject arb…
-
Unscored —CVE-2004-2071 Public exploit
Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentica…
-
Unscored —
Matrix FTP Server allows remote attackers to cause a denial of service (crash) by logging in using four spaces as the u…
-
Unscored —CVE-2004-2078 Public exploit
Red-M Red-Alert 2.7.5 with software 3.1 build 24 allows remote attackers to cause a denial of service (reboot and loss …
-
Unscored —
eTrust InoculateIT for Linux 6.0 uses insecure permissions for multiple files and directories, including the applicatio…
-
Unscored —CVE-2004-2072 Public exploit
Cross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows …
-
Unscored —
Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via…
-
Unscored —
Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Noti…
-
Unscored —
Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Brad Fears phpCodeCabinet 0.4 and earlier allow remote attackers…
-
Unscored —CVE-2002-1663 Public exploit
The Post_Method function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of s…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbit…
-
Unscored —CVE-2000-1224 Public exploit
Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .j…
-
Unscored —
ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands.
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in DotNetNuke before 3.0.12 allow remote attackers to inject arbitr…
-
Unscored —
SQL injection vulnerability in the radius_xlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remot…
-
Unscored —
Buffer overflow in the sql_escape_func function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote attack…
-
Unscored —
bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that cause…
-
Unscored —CVE-2005-1673 Public exploit
Multiple SQL injection vulnerabilities in Help Center Live allow remote attackers to execute arbitrary SQL commands via…
-
Unscored —
The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a sin…
-
Unscored —
Unknown vulnerability in Extreme BlackDiamond 10808 and 8800 switches running ExtremeWare XOS 11.1 before 11.1.3.3, 11.…
-
Medium 6.5CVE-2005-1674 Public exploit
Cross-Site Request Forgery (CSRF) vulnerability in Help Center Live allows remote attackers to perform actions as the a…
-
Unscored —CVE-2005-1672 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.12 BETA and earlier allow remote attackers…
-
Unscored —CVE-2003-1210 Public exploit
Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow remote attackers to e…
-
Unscored —
Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service (crash) via …
-
Unscored —
MaxWebPortal 1.30 allows remote attackers to perform unauthorized actions by modifying hidden form fields, such as the …