Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
345 results · Clear filters · Feed
-
Unscored —
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled…
-
Unscored —CVE-2005-1782 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary w…
-
Unscored —CVE-2005-1784 Public exploit
Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modi…
-
Unscored —CVE-2005-1777 Public exploit
SQL injection vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2005-1779 Public exploit
SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers …
-
Unscored —
setup.php in phpStat 1.5 allows remote attackers to bypass authentication and gain administrator privileges by setting …
-
Unscored —CVE-2004-2127 Public exploit
Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in…
-
Unscored —
Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execut…
-
Unscored —CVE-2004-2129 Public exploit
SurfNOW 2.2 allows remote attackers to cause a denial of service (crash) via a series of long HTTP GET requests, possib…
-
Unscored —CVE-2004-2128 Public exploit
Cross-site scripting (XSS) vulnerability in BRS WebWeaver 1.07 allows remote attackers to execute arbitrary script as o…
-
Unscored —CVE-2004-2119 Public exploit
Cross-site scripting (XSS) vulnerability in Tiny Server 1.1 allows remote attackers to inject arbitrary web script or H…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attacke…
-
Unscored —CVE-2004-2094 Public exploit
Cross-site scripting (XSS) vulnerability in WebcamXP 1.06.945 allows remote attackers to inject arbitrary HTML or web s…
-
Unscored —CVE-2004-2132 Public exploit
Directory traversal vulnerability in PJreview_Neo.cgi in PJ CGI Neo review allows remote attackers to read arbitrary fi…
-
Unscored —
Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, includ…
-
Unscored —CVE-2004-2121 Public exploit
Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to re…
-
Unscored —CVE-2004-2102 Public exploit
Cross-site scripting (XSS) vulnerability in FREESCO 2.05, a modified version of thttpd, allows remote attackers to inje…
-
Unscored —CVE-2004-2113 Public exploit
Cross-site scripting (XSS) vulnerability in BremsServer 1.2.4 allows remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2004-2130 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote attackers to execute arb…
-
Unscored —CVE-2004-2134 Public exploit
Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt th…
-
Unscored —CVE-2004-2116 Public exploit
Directory traversal vulnerability in Tiny Server 1.1 allows remote attackers to read or download arbitrary files via a …
-
Unscored —CVE-2004-2096 Public exploit
Cross-site scripting (XSS) vulnerability in Mephistoles httpd 0.6.0 final allows remote attackers to execute arbitrary …
-
Unscored —CVE-2004-2099 Public exploit
Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (se…
-
Unscored —CVE-2004-2120 Public exploit
Reptile Web Server allows remote attackers to cause a denial of service (CPU consumption) via multiple incomplete GET r…
-
Unscored —CVE-2004-2124 Public exploit
The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_PO…
-
Unscored —CVE-2004-2112 Public exploit
Directory traversal vulnerability in BremsServer 1.2.4 allows remote attackers to read arbitrary files via ".." (dot do…
-
Unscored —CVE-2004-2107 Public exploit
Finjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands on TCP port 3141, which…
-
Unscored —CVE-2004-2131 Public exploit
Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, wi…
-
Unscored —CVE-2004-2114 Public exploit
Stack-based and heap-based buffer overflows in ProxyNow! 2.75 and earlier allow remote attackers to execute arbitrary c…
-
Unscored —CVE-2004-2117 Public exploit
Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via malformed HTTP requests such as (1) a …
-
Unscored —CVE-2003-1216 Public exploit
SQL injection vulnerability in search.php for phpBB 2.0.6 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2005-1523 Public exploit
Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows rem…
-
Unscored —CVE-2005-1520 Public exploit
Buffer overflow in the header_get_field_name function in header.c for GNU Mailutils 0.5 and 0.6, and other versions bef…
-
Unscored —CVE-2005-1686 Public exploit
Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a …
-
Unscored —
Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENwo…
-
Unscored —CVE-2005-1679 Public exploit
Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary co…
-
Unscored —
Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), …
-
Unscored —CVE-2005-1681 Public exploit
PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote atta…
-
Unscored —CVE-2005-1715 Public exploit
Cross-site scripting (XSS) vulnerability in index.php for TOPo 2.2 (2.2.178) allows remote attackers to inject arbitrar…
-
Unscored —CVE-2005-1703 Public exploit
Warrior Kings: Battles 1.23 and earlier allows remote attackers to cause a denial of service (server crash) via a parti…