Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
345 results · Clear filters · Feed
-
Unscored —CVE-2005-1741 Public exploit
Gearbox Software Halo: Combat Evolved 1.6 allows remote attackers to cause a denial of service (infinite loop) via malf…
-
Unscored —CVE-2005-1709 Public exploit
Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license.
-
Unscored —CVE-2005-1708 Public exploit
templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain admini…
-
Unscored —CVE-2005-1707 Public exploit
The fn_show_postinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files v…
-
Unscored —CVE-2005-1701 Public exploit
SQL injection vulnerability in PortailPHP 1.3 allows remote attackers to execute arbitrary SQL commands via the id para…
-
Unscored —CVE-2005-1702 Public exploit
Format string vulnerability in Warrior Kings: Battles 1.23 and earlier and Warrior Kings 1.3 and earlier allows remote …
-
Unscored —CVE-2005-1718 Public exploit
Buffer overflow in LS Games War Times 1.03 and earlier allows remote attackers to cause a denial of service (server cra…
-
Unscored —CVE-2004-2073 Public exploit
Linux-VServer 1.24 allows local users with root privileges on a virtual server to gain access to the filesystem outside…
-
Unscored —CVE-2004-2081 Public exploit
The samiftp.dll library in Sami FTP Server 1.1.3 allows local users to cause a denial of service (pmsystem.exe crash) b…
-
Unscored —CVE-2004-2076 Public exploit
Cross-site scripting (XSS) vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows remote attackers to injec…
-
Unscored —
Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers …
-
Unscored —CVE-2004-2082 Public exploit
The samiftp.dll library in Sami FTP Server 1.1.3 allows remote authenticated users to cause a denial of service (pmsyst…
-
Unscored —CVE-2004-2077 Public exploit
Nadeo Game Engine for Nadeo TrackMania and Nadeo Virtual Skipper 3 allows remote attackers to cause a denial of service…
-
Unscored —CVE-2004-2093 Public exploit
Buffer overflow in the open_socket_out function in socket.c for rsync 2.5.7 and earlier allows local users to cause a d…
-
Unscored —CVE-2004-2071 Public exploit
Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentica…
-
Unscored —CVE-2004-2078 Public exploit
Red-M Red-Alert 2.7.5 with software 3.1 build 24 allows remote attackers to cause a denial of service (reboot and loss …
-
Unscored —CVE-2004-2072 Public exploit
Cross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows …
-
Unscored —
Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via…
-
Unscored —
Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string…
-
Unscored —CVE-2002-1663 Public exploit
The Post_Method function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of s…
-
Unscored —CVE-2000-1224 Public exploit
Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .j…
-
Unscored —CVE-2005-1673 Public exploit
Multiple SQL injection vulnerabilities in Help Center Live allow remote attackers to execute arbitrary SQL commands via…
-
Medium 6.5CVE-2005-1674 Public exploit
Cross-Site Request Forgery (CSRF) vulnerability in Help Center Live allows remote attackers to perform actions as the a…
-
Unscored —CVE-2005-1672 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2003-1210 Public exploit
Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow remote attackers to e…
-
Unscored —CVE-2003-1207 Public exploit
Crob FTP Server 3.5.1 allows remote authenticated users to cause a denial of service (crash) via a dir command with a l…
-
Unscored —CVE-2003-1203 Public exploit
Cross-site scripting (XSS) vulnerability in index.php for Mambo Site Server 4.0.10 allows remote attackers to execute s…
-
Unscored —CVE-2003-1213 Public exploit
The default installation of MaxWebPortal 1.30 stores the portal database under the web document root with insecure acce…
-
Unscored —CVE-2005-1645 Public exploit
Keyvan1 ImageGallery stores the image.mdb database under the web document root with insufficient access control, which …
-
Unscored —CVE-2005-1654 Public exploit
Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request …
-
Unscored —CVE-2005-1655 Public exploit
AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an inva…
-
Unscored —
The IPv6 support in Windows XP SP2, 2003 Server SP1, and Longhorn, with Windows Firewall turned off, allows remote atta…
-
Unscored —CVE-2005-1666 Public exploit
Multiple buffer overflows in Orenosv HTTP/FTP Server 0.8.1 allow remote authenticated users to cause a denial of servic…
-
Unscored —CVE-2005-1667 Public exploit
DataTrac Activity Console 1.1 allows remote attackers to cause a denial of service via a long HTTP GET request.
-
Unscored —CVE-2005-1589 Public exploit
The pkt_ioctl function in the pktcdvd block device ioctl handler (pktcdvd.c) in Linux kernel 2.6.12-rc4 and earlier cal…
-
Unscored —CVE-2005-1633 Public exploit
Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitra…
-
Unscored —CVE-2005-1642 Public exploit
SQL injection vulnerability in the verify_email function in Woltlab Burning Board 2.x and earlier allows remote attacke…
-
Unscored —CVE-2005-1307 Public exploit
The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working director…
-
Unscored —CVE-2005-1629 Public exploit
SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2005-1637 Public exploit
Multiple SQL injection vulnerabilities in NPDS 4.8 and 5.0 allow remote attackers to execute arbitrary SQL commands via…