Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
345 results · Clear filters · Feed
-
Unscored —CVE-2004-2000 Public exploit
SQL injection vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to execute arbi…
-
Unscored —CVE-2004-2022 Public exploit
ActivePerl 5.8.x and others, and Larry Wall's Perl 5.6.1 and others, when running on Windows systems, allows attackers …
-
Unscored —CVE-2004-2003 Public exploit
Buffer overflow in the ssl_prcert function in the SSLway filter (sslway.c) for DeleGate 8.9.2 and earlier allows remote…
-
Unscored —CVE-2004-2018 Public exploit
PHP remote file inclusion vulnerability in index.php in Php-Nuke 6.x through 7.3 allows remote attackers to execute arb…
-
Unscored —CVE-2004-2067 Public exploit
SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attac…
-
Unscored —CVE-2004-2059 Public exploit
Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2004-2012 Public exploit
The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBS…
-
Unscored —CVE-2004-2037 Public exploit
Buffer overflow in Mollensoft Lightweight FTP Server 3.6 allows remote authenticated users to cause a denial of service…
-
Unscored —CVE-2004-2014 Public exploit
Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being d…
-
Unscored —CVE-2004-2008 Public exploit
SQL injection vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to execute arbitrary SQL…
-
Unscored —
Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that u…
-
Unscored —CVE-2004-2026 Public exploit
Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execut…
-
Unscored —CVE-2004-2021 Public exploit
Directory traversal vulnerability in file_manager.php in osCommerce 2.2 allows remote attackers to view arbitrary files…
-
Unscored —CVE-2004-2053 Public exploit
PHP remote file inclusion vulnerability in index.php in EasyIns Stadtportal 4 allows remote attackers to execute arbitr…
-
Unscored —CVE-2004-2040 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary web script…
-
Unscored —CVE-2004-2017 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Turbo Traffic Trader C (TTT-C) 1.0 allow remote attackers to inj…
-
Unscored —CVE-2004-2030 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.jsp for Liferay before 2.2.0 release 10/1/2004 allow remot…
-
Unscored —
PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLi…
-
Unscored —CVE-2004-2028 Public exploit
Cross-site scripting (XSS) vulnerability in stats.php in e107 allows remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2004-2005 Public exploit
Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-…
-
Unscored —CVE-2004-2007 Public exploit
Cross-site scripting (XSS) vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to inject a…
-
Unscored —CVE-2004-2045 Public exploit
The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to…
-
Unscored —CVE-2004-2063 Public exploit
Cross-site scripting (XSS) vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to inj…
-
Unscored —CVE-2004-2029 Public exploit
The Util_DecodeHTTPAuth function in BNBT BitTorrent Tracker Beta 7.5 Release 2 and earlier allows remote attackers to c…
-
Unscored —CVE-2004-2064 Public exploit
Cross-site scripting (XSS) vulnerability in lostBook 1.1 and earlier allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2004-2035 Public exploit
MiniShare 1.3.2 allows remote attackers to cause a denial of service (crash) via a malformed HTTP GET or HEAD request w…
-
Unscored —CVE-2004-2062 Public exploit
SQL injection vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2004-2032 Public exploit
Netgear RP114 allows remote attackers to bypass the keyword based URL filtering by requesting a long URL, as demonstrat…
-
Unscored —CVE-2004-2033 Public exploit
Orenosv 0.5.9f allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
-
Unscored —CVE-2004-2061 Public exploit
RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arb…
-
Unscored —CVE-2004-2038 Public exploit
Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) before LDU 700 allows remote attackers to inject arbi…
-
Unscored —CVE-2004-2036 Public exploit
SQL injection vulnerability in the art_print function in print.inc.php in unknown versions of jPortal before 2.3.1 allo…
-
Unscored —
calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters i…
-
Unscored —CVE-2003-1158 Public exploit
Multiple buffer overflows in the FTP service in Plug and Play Web Server 1.0002c allow remote attackers to cause a deni…
-
Unscored —CVE-2003-1135 Public exploit
Buffer overflow in Yahoo! Messenger 5.6 allows remote attackers to cause a denial of service (crash) via a file send re…
-
Unscored —CVE-2003-1160 Public exploit
FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain administrative privileges …
-
Unscored —CVE-2003-1151 Public exploit
Cross-site scripting (XSS) vulnerability in Fastream NETFile Server 6.0.3.588 allows remote attackers to inject arbitra…
-
Unscored —CVE-2003-1142 Public exploit
Help in NIPrint LPD-LPR Print Server 4.10 and earlier executes Windows Explorer with SYSTEM privileges, which allows lo…
-
Unscored —CVE-2003-1146 Public exploit
Cross-site scripting (XSS) vulnerability in John Beatty Easy PHP Photo Album 1.0 allows remote attackers to inject arbi…
-
Unscored —CVE-2003-1173 Public exploit
Centrinity FirstClass 7.1 allows remote attackers to access sensitive information by appending search to the end of the…