Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
345 results · Clear filters · Feed
-
Unscored —CVE-2004-1861 Public exploit
Invision NetSupport School Pro uses a weak encryption algorithm to encrypt passwords, which allows local users to obtai…
-
Unscored —CVE-2004-1824 Public exploit
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2004-1788 Public exploit
ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control, which al…
-
Unscored —CVE-2004-1871 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to in…
-
Unscored —CVE-2004-1786 Public exploit
PortalApp places user credentials under the web root with insufficient access control, which allows remote attackers to…
-
Unscored —CVE-2004-1904 Public exploit
Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Inte…
-
Unscored —CVE-2004-1805 Public exploit
Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to cause a denial o…
-
Unscored —CVE-2004-1829 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in error.php in Gijza.net Error Manager 2.1 for PHP-Nuke 6.0 allow …
-
Unscored —CVE-2004-1923 Public exploit
Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct requ…
-
Unscored —CVE-2004-1995 Public exploit
Cross-Site Request Forgery (CSRF) vulnerability in FuseTalk 2.0 allows remote attackers to create arbitrary accounts vi…
-
Unscored —CVE-2004-1983 Public exploit
The arch_get_unmapped_area function in mmap.c in the PaX patches for Linux kernel 2.6, when Address Space Layout Random…
-
Unscored —CVE-2004-1947 Public exploit
The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain …
-
Unscored —
Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute…
-
Unscored —CVE-2004-1957 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.726 allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2004-1818 Public exploit
Cross-site scripting (XSS) vulnerability in nmimage.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote atta…
-
Unscored —CVE-2004-1915 Public exploit
Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execu…
-
Unscored —CVE-2004-1872 Public exploit
Cross-site scripting (XSS) vulnerability in WebCT Campus Edition 4.1.1.5 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2004-1845 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in News Manager Lite 2.5 allow remote attackers to inject arbitrary…
-
Unscored —CVE-2004-1955 Public exploit
SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute arbitrary SQL code vi…
-
Unscored —CVE-2004-1937 Public exploit
Multiple directory traversal vulnerabilities in Nuked-KlaN 1.4b and 1.5b allow remote attackers to read or include arbi…
-
Unscored —
athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters…
-
Unscored —CVE-2004-1796 Public exploit
PHP remote file inclusion vulnerability in HotNews 0.7.2 and earlier allows remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2004-1822 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject a…
-
Unscored —CVE-2004-1792 Public exploit
swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via…
-
Unscored —CVE-2004-1847 Public exploit
News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the…
-
Unscored —CVE-2004-1952 Public exploit
SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gai…
-
Unscored —CVE-2004-1938 Public exploit
SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2004-1932 Public exploit
SQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x through 7.2 allows remote attackers to ex…
-
Unscored —CVE-2004-1927 Public exploit
Directory traversal vulnerability in the map feature (tiki-map.phtml) in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlie…
-
Unscored —CVE-2004-1813 Public exploit
VocalTec VGW4/8 Gateway 8.0 allows remote attackers to bypass authentication via an HTTP request to home.asp with a tra…
-
Unscored —CVE-2004-1951 Public exploit
xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote att…
-
Unscored —CVE-2004-1903 Public exploit
Buffer overflow in blaxxun 3D 7.0 allows remote attackers to execute arbitrary code via a long URL property inside an o…
-
Unscored —CVE-2004-1846 Public exploit
Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code vi…
-
Unscored —CVE-2004-1954 Public exploit
Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2004-1934 Public exploit
PHP remote file inclusion vulnerability in affich.php in Gemitel 3.50 allows remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2004-1912 Public exploit
The (1) modules.php, (2) block-Calendar.php, (3) block-Calendar1.php, (4) block-Calendar_center.php scripts in NukeCale…
-
Unscored —CVE-2004-1878 Public exploit
LINBOX LIN:BOX allows remote attackers to bypass authentication, obtain sensitive information, or gain access via a dir…
-
Unscored —CVE-2004-1897 Public exploit
Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service (segmentation fa…
-
Unscored —CVE-2004-1960 Public exploit
Cross-site scripting (XSS) vulnerability in blocker_query.php in Protector System 1.15b1 allows remote attackers to inj…