Archive
27 May 2005
Vulnerabilities first published on this day (UTC), newest first.
43 results · Feed
-
Unscored —
Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the ELF RPATH fields of ce…
-
Unscored —CVE-2004-2127 Public exploit
Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in…
-
Unscored —
Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execut…
-
Unscored —
Multiple scripts on SuSE Linux 9.0 allow local users to overwrite arbitrary files via a symlink attack on (1) /tmp/fvwm…
-
Unscored —
The sysinfo script in GeoHttpServer allows remote attackers to cause a denial of service (crash) via a long pwd paramet…
-
Unscored —CVE-2004-2129 Public exploit
SurfNOW 2.2 allows remote attackers to cause a denial of service (crash) via a series of long HTTP GET requests, possib…
-
Unscored —
Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protec…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the banner engine (TBE) 5.0 allows remote attackers to execute arbitrary sc…
-
Unscored —CVE-2004-2128 Public exploit
Cross-site scripting (XSS) vulnerability in BRS WebWeaver 1.07 allows remote attackers to execute arbitrary script as o…
-
Unscored —
Multiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2004-2119 Public exploit
Cross-site scripting (XSS) vulnerability in Tiny Server 1.1 allows remote attackers to inject arbitrary web script or H…
-
Unscored —
Cross-site scripting (XSS) vulnerability in intraforum_db.cgi in Intra Forum allows remote attackers to inject arbitrar…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attacke…
-
Unscored —CVE-2004-2094 Public exploit
Cross-site scripting (XSS) vulnerability in WebcamXP 1.06.945 allows remote attackers to inject arbitrary HTML or web s…
-
Unscored —
Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to list directories via a direct request to (1…
-
Unscored —CVE-2004-2132 Public exploit
Directory traversal vulnerability in PJreview_Neo.cgi in PJ CGI Neo review allows remote attackers to read arbitrary fi…
-
Unscored —
Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, includ…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Nextplace.com E-Commerce ASP Engine allow remote attackers to in…
-
Unscored —CVE-2004-2121 Public exploit
Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to re…
-
Unscored —CVE-2004-2102 Public exploit
Cross-site scripting (XSS) vulnerability in FREESCO 2.05, a modified version of thttpd, allows remote attackers to inje…
-
Unscored —
The webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to read arbitrary .htt f…
-
Unscored —CVE-2004-2113 Public exploit
Cross-site scripting (XSS) vulnerability in BremsServer 1.2.4 allows remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2004-2130 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote attackers to execute arb…
-
Unscored —CVE-2004-2134 Public exploit
Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt th…
-
Unscored —CVE-2004-2116 Public exploit
Directory traversal vulnerability in Tiny Server 1.1 allows remote attackers to read or download arbitrary files via a …
-
Unscored —CVE-2004-2096 Public exploit
Cross-site scripting (XSS) vulnerability in Mephistoles httpd 0.6.0 final allows remote attackers to execute arbitrary …
-
Unscored —
Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via a GET request with a long filename, po…
-
Unscored —
GeoHttpServer, when configured to authenticate users, allows remote attackers to bypass authentication and access unaut…
-
Unscored —CVE-2004-2099 Public exploit
Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (se…
-
Unscored —CVE-2004-2120 Public exploit
Reptile Web Server allows remote attackers to cause a denial of service (CPU consumption) via multiple incomplete GET r…
-
Unscored —
Honeyd before 0.8 replies to TCP packets with the SYN and RST flags set, which allows remote attackers to identify IP a…
-
Unscored —
The upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI files such as (1) blackice.in…
-
Unscored —
SQL injection vulnerability in register.php in Phorum before 3.4.6 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2004-2124 Public exploit
The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_PO…
-
Unscored —CVE-2004-2112 Public exploit
Directory traversal vulnerability in BremsServer 1.2.4 allows remote attackers to read arbitrary files via ".." (dot do…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in (1) imagezoom.asp or (2) recommend.asp in Q-Shop allow remote at…
-
Unscored —CVE-2004-2107 Public exploit
Finjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands on TCP port 3141, which…
-
Unscored —CVE-2004-2131 Public exploit
Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, wi…
-
Unscored —CVE-2004-2114 Public exploit
Stack-based and heap-based buffer overflows in ProxyNow! 2.75 and earlier allow remote attackers to execute arbitrary c…
-
Unscored —CVE-2004-2117 Public exploit
Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via malformed HTTP requests such as (1) a …