Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
345 results · Clear filters · Feed
-
Unscored —
apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via…
-
Unscored —
SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2005-1614 Public exploit
Cross-site scripting (XSS) vulnerability in viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote a…
-
Unscored —CVE-2005-1590 Public exploit
The Altiris Client Service for Windows (ACLIENT.EXE) 6.0.88 allows local users to disable password protection and acces…
-
Unscored —CVE-2005-1604 Public exploit
PHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via filenames containing …
-
Unscored —CVE-2005-1593 Public exploit
Cross-site scripting (XSS) vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to inje…
-
Unscored —CVE-2005-1597 Public exploit
Cross-site scripting (XSS) vulnerability in (1) search.php and (2) topics.php for Invision Power Board (IPB) 2.0.3 and …
-
Unscored —CVE-2005-1615 Public exploit
viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the p…
-
Unscored —CVE-2005-1613 Public exploit
Cross-site scripting (XSS) vulnerability in member.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to…
-
Unscored —CVE-2005-1610 Public exploit
Cross-site scripting (XSS) vulnerability in security.php for Tru-Zone NukeET 3.0 and 3.1 allows remote attackers to inj…
-
Unscored —CVE-2005-1594 Public exploit
SQL injection vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2005-1606 Public exploit
H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-re…
-
Unscored —CVE-2005-1603 Public exploit
NiteEnterprises Remote File Manager 1.0 allows remote attackers to cause a denial of service (crash) via a crafted stri…
-
Unscored —CVE-2005-1612 Public exploit
SQL injection vulnerability in read.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to execute arbitr…
-
Unscored —
The bbencode_second_pass and make_clickable functions in bbcode.php for phpBB before 2.0.15, as used in viewtopic.php, …
-
Unscored —
Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leadi…
-
Unscored —CVE-2005-1618 Public exploit
The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service (disconn…
-
Unscored —CVE-2005-1620 Public exploit
Cross-site scripting (XSS) vulnerability in Skull-Splitter Guestbook 1.0, 2.0 and 2.2 allows remote attackers to inject…
-
Unscored —CVE-2005-1619 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in (1) start_page.css.php3 (aka start-page.css.php3) or (2) style.c…
-
Unscored —CVE-2005-1366 Public exploit
Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../c…
-
Unscored —CVE-2005-1611 Public exploit
Cross-site scripting (XSS) vulnerability in WebX in Web Crossing 5.x allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2005-1550 Public exploit
easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the…
-
Unscored —CVE-2005-1552 Public exploit
GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0, when set to create JPEG images, does not properly protec…
-
Unscored —CVE-2005-1587 Public exploit
Cross-site scripting (XSS) vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2005-1547 Public exploit
Heap-based buffer overflow in the demo version of Bakbone Netvault, and possibly other versions, allows remote attacker…
-
Unscored —CVE-2005-1548 Public exploit
SQL injection vulnerability in index.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arbitrary SQL c…
-
Unscored —
Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file w…
-
Unscored —CVE-2005-1561 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in post.asp in MaxWebPortal 1.3.5 and earlier allow remote attacker…
-
Unscored —CVE-2005-1532 Public exploit
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script obje…
-
Unscored —CVE-2005-1479 Public exploit
SQL injection vulnerability in jgs_portal.php in JGS-Portal 3.0.1 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2005-1492 Public exploit
Cross-site scripting (XSS) vulnerability in user.cgi in Gossamer Threads Links SQL 2.x and 3.0 allows remote attackers …
-
Unscored —CVE-2005-1506 Public exploit
SQL injection vulnerability in out.php in CJ Ultra (CJUltra) Plus 1.0.3 and 1.0.4 allows remote attackers to execute ar…
-
Unscored —CVE-2005-1480 Public exploit
Directory traversal vulnerability in RaidenFTPD before 2.4.2241 allows remote attackers to read arbitrary files via a "…
-
Unscored —
Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitra…
-
Unscored —CVE-2005-1493 Public exploit
Directory traversal vulnerability in SimpleCam 1.2 allows remote attackers to read arbitrary files via a ..\ (dot dot b…
-
Unscored —CVE-2005-1263 Public exploit
The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6…
-
Unscored —CVE-2005-1503 Public exploit
Multiple SQL injection vulnerabilities in MidiCart PHP Shopping Cart allow remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2005-1494 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admin.cgi in MegaBook 2.0 and 2.1 allow remote attackers to inje…
-
Unscored —CVE-2005-1486 Public exploit
Multiple cross-site scripting vulnerabilities in FishCart 3.1 allow remote attackers to inject arbitrary web script or …
-
Unscored —CVE-2005-1487 Public exploit
Multiple SQL injection vulnerabilities in FishCart 3.1 allow remote attackers to execute arbitrary SQL commands via the…