Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
345 results · Clear filters · Feed
-
Unscored —CVE-2005-1411 Public exploit
Cybration ICUII 7.0 stores passwords in plaintext in the world-readable icuii.ini file, which allows local users to gai…
-
Unscored —CVE-2005-1423 Public exploit
Directory traversal vulnerability in the mail program in 602LAN SUITE 2004.0.05.0413 allows remote attackers to cause a…
-
Unscored —CVE-2005-1417 Public exploit
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute …
-
Unscored —CVE-2005-1403 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to…
-
Unscored —CVE-2005-1401 Public exploit
Format string vulnerability in the client for Mtp-Target 1.2.2 and earlier allows remote attackers to execute arbitrary…
-
Unscored —CVE-2005-1413 Public exploit
Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain …
-
Unscored —CVE-2005-1424 Public exploit
StumbleInside GoText 1.01 stores sensitive username, mail address,and phone number information in plaintext in the GoTe…
-
Unscored —CVE-2005-1412 Public exploit
SQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote attackers to execute arbit…
-
Unscored —CVE-2005-1418 Public exploit
NetLeaf Limited NotJustBrowsing 1.0.3 stores the View Lock Password in plaintext in the notjustbrowsing.prf file, which…
-
Unscored —CVE-2005-1440 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arb…
-
Unscored —CVE-2005-1402 Public exploit
Integer signedness error in certain older versions of the NeL library, as used in Mtp-Target 1.2.2 and earlier, and pos…
-
Unscored —CVE-2005-1398 Public exploit
phpcart.php in PHPCart 3.2 allows remote attackers to change product price information by modifying the (1) price or (2…
-
Unscored —
The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attack…
-
Unscored —CVE-2005-1375 Public exploit
Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow r…
-
Unscored —CVE-2005-1380 Public exploit
Cross-site scripting (XSS) vulnerability in BEA Admin Console 8.1 allows remote attackers to execute arbitrary web scri…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary we…
-
Unscored —CVE-2005-1378 Public exploit
SQL injection vulnerability in posting_notes.php in the notes module for phpBB allows remote attackers to execute arbit…
-
Unscored —CVE-2005-1384 Public exploit
Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2005-1396 Public exploit
Race condition in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier allows local users to write to arbitrary files via a symli…
-
Unscored —CVE-2005-1382 Public exploit
The webcacheadmin module in Oracle Webcache 9i allows remote attackers to corrupt arbitrary files via a full pathname i…
-
Unscored —CVE-2005-1372 Public exploit
nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows lo…
-
Unscored —CVE-2005-1370 Public exploit
Unknown vulnerability in Radia Management Agent (RMA) in HP OpenView Radia Management Portal (RMP) 1.x and 2.x allows r…
-
Unscored —CVE-2005-1371 Public exploit
BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through t…
-
Unscored —CVE-2005-1374 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Do…
-
Unscored —CVE-2005-1394 Public exploit
Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format…