Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
345 results · Clear filters · Feed
-
Unscored —CVE-2005-1507 Public exploit
Buffer overflow in the Tomcat plugin in 4d WebSTAR 5.33 and 5.4 allows remote attackers to cause a denial of service an…
-
Unscored —CVE-2005-1500 Public exploit
Multiple SQL injection vulnerabilities in myBloggie 2.1.1 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2005-1498 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in myBloggie 2.1.1 allow remote attackers to inject arbitrary web s…
-
Unscored —
Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service (crash) via a …
-
Unscored —CVE-2004-1973 Public exploit
DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request that con…
-
Unscored —CVE-2004-1797 Public exploit
Cross-site scripting (XSS) vulnerability in search.php for FreznoShop 1.3.0 RC1 and earlier allows remote attackers to …
-
Unscored —
devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to u…
-
Unscored —CVE-2004-1835 Public exploit
Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitra…
-
Unscored —CVE-2004-1793 Public exploit
Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to exec…
-
Unscored —CVE-2004-1881 Public exploit
SQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x allows remote attackers to execu…
-
Unscored —CVE-2004-1996 Public exploit
Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.0 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2004-1855 Public exploit
Dark Age of Camelot before 1.68 live patch does not sign the RSA public key, which could allow remote malicious servers…
-
Unscored —CVE-2004-1907 Public exploit
The Web Filtering functionality in Kerio Personal Firewall (KPF) 4.0.13 allows remote attackers to cause a denial of se…
-
Unscored —CVE-2004-1826 Public exploit
SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to e…
-
Unscored —CVE-2004-1985 Public exploit
Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to …
-
Unscored —CVE-2004-1908 Public exploit
McFreeScan.CoMcFreeScan.1 ActiveX object in Mcafee FreeScan allows remote attackers to obtain sensitive information via…
-
Unscored —CVE-2004-1935 Public exploit
Cross-site scripting (XSS) vulnerability in SCT Campus Pipeline allows remote attackers to inject arbitrary web script …
-
Unscored —CVE-2004-1911 Public exploit
Cross-site scripting (XSS) vulnerability in AzDGDatingLite 2.1.1 allows remote attackers to inject arbitrary web script…
-
Unscored —CVE-2004-1929 Public exploit
SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attacker…
-
Unscored —CVE-2004-1978 Public exploit
Cross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary H…
-
Unscored —CVE-2004-1828 Public exploit
Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote att…
-
Unscored —CVE-2004-1888 Public exploit
display.cgi in Aborior Encore WebForum allows remote to execute arbitrary commands via shell metacharacters in the file…
-
Unscored —CVE-2004-1868 Public exploit
Stack-based buffer overflow in WinSig.exe in eSignal 7.5 and 7.6 allows remote attackers to execute arbitrary code via …
-
Unscored —CVE-2004-1945 Public exploit
Buffer overflow in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via a long MAIL FROM fiel…
-
Unscored —CVE-2004-1939 Public exploit
Cross-site scripting (XSS) vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2004-1887 Public exploit
Ada Image Server (ImgSvr) 0.4 allows remote attackers to view directories or download files via an HTTP request with a …
-
Unscored —CVE-2004-1989 Public exploit
PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to exec…
-
Unscored —CVE-2004-1962 Public exploit
SQL injection vulnerability in index.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection fil…
-
Unscored —CVE-2004-1783 Public exploit
Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary…
-
Unscored —CVE-2004-1906 Public exploit
Mcafee FreeScan allows remote attackers to cause a denial of service and possibly arbitrary code via a long string in t…
-
Unscored —CVE-2004-1875 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2004-1867 Public exploit
Cross-site scripting (XSS) vulnerability in guest.cgi in Fresh Guest Book allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2004-1820 Public exploit
PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web management interface in ZyWALL 10 4.07 allows remote attackers to i…
-
Unscored —CVE-2004-1883 Public exploit
Multiple buffer overflows in Ipswitch WS_FTP Server 4.0.2 (1) allow remote authenticated users to execute arbitrary cod…
-
Unscored —CVE-2004-1784 Public exploit
Buffer overflow in the web server of Webcam Watchdog 3.63 allows remote attackers to execute arbitrary code via a long …
-
Unscored —
Stack-based buffer overflow in DecodeBase16 function, as used in the (1) IRC module and (2) web server in eMule 0.42d, …
-
Unscored —CVE-2004-1821 Public exploit
SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to gain privileges or …
-
Unscored —CVE-2004-1943 Public exploit
PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to …
-
Unscored —CVE-2004-1882 Public exploit
Cross-site scripting (XSS) vulnerability in popuplargeimage.asp in CactuShop 5.x allows remote attackers to inject arbi…