Skip to content
OpenAdvisories

Archive

May 2005

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 229
  3. 353
  4. 416
  5. 520
  6. 64
  7. 7 
  8. 8 
  9. 92
  10. 10360
  11. 1145
  12. 127
  13. 131
  14. 1445
  15. 15 
  16. 1639
  17. 1721
  18. 1827
  19. 1948
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 2446
  25. 2524
  26. 265
  27. 2743
  28. 282
  29. 29 
  30. 30 
  31. 3119

345 results · Clear filters · Feed

  • Unscored —
    CVE-2003-1166 Public exploit

    Directory traversal vulnerability in (1) Openfile.aspx and (2) Html.aspx in HTTP Commander 4.0 allows remote attackers …

  • Unscored —
    CVE-2003-1148 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences…

  • Unscored —
    CVE-2003-1136 Public exploit

    Cross-site scripting (XSS) vulnerability in Chi Kien Uong Guestbook 1.51 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2003-1140 Public exploit

    Buffer overflow in Musicqueue 1.2.0 allows local users to execute arbitrary code via a long language variable in the co…

  • Unscored —
    CVE-2003-1162 Public exploit

    index.php in Tritanium Bulletin Board 1.2.3 allows remote attackers to read and reply to arbitrary messages by modifyin…

  • Unscored —
    CVE-2003-1177 Public exploit EPSS 13%

    Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2003-1139 Public exploit

    Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink…

  • Unscored —
    CVE-2003-1164 Public exploit

    Cross-site scripting (XSS) vulnerability in Mldonkey 2.5-4 allows remote attackers to inject arbitrary web script or HT…

  • Unscored —
    CVE-2003-1196 Public exploit

    SQL injection vulnerability in viewtopic.asp in VieBoard 2.6 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2003-1187 Public exploit

    Cross-site scripting (XSS) vulnerability in include.php in PHPKIT 1.6.02 and 1.6.03 allows remote attackers to inject a…

  • Unscored —
    CVE-2003-1165 Public exploit

    Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service (crash) and poss…

  • Unscored —
    CVE-2003-1191 Public exploit

    chatbox.php in e107 0.554 and 0.603 allows remote attackers to cause a denial of service (pages fail to load) via HTML …

  • Unscored —
    CVE-2003-1172 Public exploit EPSS 31%

    Directory traversal vulnerability in the view-source sample file in Apache Software Foundation Cocoon 2.1 and 2.2 allow…

  • Unscored —
    CVE-2003-1169 Public exploit

    DATEV Nutzungskontrolle 2.1 and 2.2 has insecure write permissions for critical registry keys, which allows local users…

  • Unscored —
    CVE-2003-1174 Public exploit

    Buffer overflow in NullSoft Shoutcast Server 1.9.2 allows local users to cause a denial of service via (1) icy-name fol…

  • Unscored —
    CVE-2003-1199 Public exploit

    Cross-site scripting (XSS) vulnerability in MyProxy 20030629 allows remote attackers to inject arbitrary web script or …

  • Unscored —
    CVE-2003-1175 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Sympoll 1.5 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2003-1182 Public exploit

    Cross-site scripting (XSS) vulnerability in MPM Guestbook 1.2 allows remote attackers to inject arbitrary web script or…

  • Unscored —
    CVE-2003-1181 Public exploit

    Advanced Poll 2.0.2 allows remote attackers to obtain sensitive information via an HTTP request to info.php, which invo…

  • Unscored —
    CVE-2003-1141 Public exploit EPSS 68%

    Buffer overflow in NIPrint 4.10 allows remote attackers to execute arbitrary code via a long string to TCP port 515.

  • Unscored —
    CVE-2003-1134 Public exploit

    Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service (JVM crash), possibly by calling the C…

  • Unscored —
    CVE-2003-1157 Public exploit

    Cross-site scripting (XSS) vulnerability in login.asp in Citrix MetaFrame XP Server 1.0 allows remote attackers to inje…

  • Unscored —
    CVE-2003-1149 Public exploit

    Cross-site scripting (XSS) vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to …

  • Unscored —
    CVE-2003-1200 Public exploit EPSS 65%

    Stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon 6.5.2 through 6.8.5 allows remote attackers to execute arb…

  • Unscored —
    CVE-2003-1138 Public exploit

    The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list director…

  • Unscored —
    CVE-2003-1179 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Advanced Poll 2.0.2 allow remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2003-1197 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php for Ledscripts.com LedForums Beta 1 allows remote attackers to in…

  • Unscored —
    CVE-2003-1145 Public exploit

    Cross-site scripting (XSS) vulnerability in friendmail.php in OpenAutoClassifieds 1.0 allows remote attackers to inject…

  • Unscored —
    CVE-2003-1192 Public exploit EPSS 69%

    Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET…

  • Unscored —
    CVE-2003-1137 Public exploit

    Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute arbitrary CGI scripts via a …

  • Unscored —
    CVE-2003-1143 Public exploit

    Croteam Serious Sam demo test 2 2.1a, Serious Sam: the First Encounter 1.05, and Serious Sam: the Second Encounter 1.05…

  • Unscored —
    CVE-2003-1176 Public exploit

    post_message_form.asp in Web Wiz Forums 6.34 through 7.5, when quote mode is used, allows remote attackers to read or w…

  • Unscored —
    CVE-2003-1167 Public exploit

    misc.cpp in KPopup 0.9.1 trusts the PATH variable when executing killall, which allows local users to elevate their pri…

  • Unscored —
    CVE-2005-1476 Public exploit EPSS 17%

    Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing t…

  • Unscored —
    CVE-2005-1477 Public exploit EPSS 15%

    The install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as update.mozilla.org or…

  • Unscored —
    CVE-2005-1470 Public exploit

    Multiple unknown vulnerabilities in the (1) TZSP, (2) MGCP, (3) ISUP, (4) SMB, or (5) Bittorrent dissectors in Ethereal…

  • Unscored —
    CVE-2005-1461 Public exploit

    Multiple buffer overflows in the (1) SIP, (2) CMIP, (3) CMP, (4) CMS, (5) CRMF, (6) ESS, (7) OCSP, (8) X.509, (9) ISIS,…

  • Unscored —
    CVE-2005-1333 Public exploit

    Directory traversal vulnerability in the Bluetooth file and object exchange (OBEX) services in Mac OS X 10.3.9 allows r…

  • Unscored —
    CVE-2005-1414 Public exploit

    ExoticSoft FilePocket 1.2 stores sensitive proxy information, including proxy passwords, in plaintext in the registry, …

  • Unscored —
    CVE-2005-1415 Public exploit EPSS 61%

    Buffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote authenticated users to execute arbitrary code via …