Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
856 results · Feed
-
Unscored —CVE-2005-1486 Public exploit
Multiple cross-site scripting vulnerabilities in FishCart 3.1 allow remote attackers to inject arbitrary web script or …
-
Unscored —CVE-2005-1487 Public exploit
Multiple SQL injection vulnerabilities in FishCart 3.1 allow remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2005-1507 Public exploit
Buffer overflow in the Tomcat plugin in 4d WebSTAR 5.33 and 5.4 allows remote attackers to cause a denial of service an…
-
Unscored —CVE-2005-1500 Public exploit
Multiple SQL injection vulnerabilities in myBloggie 2.1.1 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —
Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing,…
-
Unscored —
PwsPHP 1.2.2 allows remote attackers to obtain sensitive information via a direct request to the admin directory, which…
-
Unscored —
DList (dlist.exe) in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the syst…
-
Unscored —
Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed MSN mes…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in ArticleLive 2005 allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2005-1498 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in myBloggie 2.1.1 allow remote attackers to inject arbitrary web s…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allow remote…
-
Unscored —CVE-2005-1513 EPSS 11%
Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of v…
-
Unscored —
The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS…
-
Unscored —
Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service (crash) via a …
-
Unscored —
Format string vulnerability in test_func_func in LCDProc 0.4.1 and earlier allows remote attackers to execute arbitrary…
-
Unscored —CVE-2004-1973 Public exploit
DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request that con…
-
Unscored —CVE-2004-1797 Public exploit
Cross-site scripting (XSS) vulnerability in search.php for FreznoShop 1.3.0 RC1 and earlier allows remote attackers to …
-
Unscored —
SMC Barricade broadband router 7008ABR and 7004VBR enable remote administration by default, which allows remote attacke…
-
Unscored —
devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to u…
-
Unscored —CVE-2004-1835 Public exploit
Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitra…
-
Unscored —CVE-2004-1793 Public exploit
Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to exec…
-
Unscored —
The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from prop…
-
Unscored —
DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, whi…
-
Unscored —CVE-2004-1881 Public exploit
SQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x allows remote attackers to execu…
-
Unscored —
Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file via carriage return ch…
-
Unscored —CVE-2004-1996 Public exploit
Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.0 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2004-1855 Public exploit
Dark Age of Camelot before 1.68 live patch does not sign the RSA public key, which could allow remote malicious servers…
-
Unscored —
The Rage 1.01 and earlier allows remote attackers to cause a denial of service (infinite loop) via a TCP packet with th…
-
Unscored —CVE-2004-1907 Public exploit
The Web Filtering functionality in Kerio Personal Firewall (KPF) 4.0.13 allows remote attackers to cause a denial of se…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Mod_survey 3.0.x before 3.0.16-pre2 and 3.2.x before 3.2.0-pre4 allows remo…
-
Unscored —CVE-2004-1826 Public exploit
SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to e…
-
Unscored —
Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP…
-
Unscored —CVE-2004-1985 Public exploit
Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to …
-
Unscored —CVE-2004-1908 Public exploit
McFreeScan.CoMcFreeScan.1 ActiveX object in Mcafee FreeScan allows remote attackers to obtain sensitive information via…
-
Unscored —
Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allow…
-
Unscored —
ZoneAlarm Pro 4.5.538.001 and possibly other versions allows remote attackers to bypass e-mail protection via attachmen…
-
Unscored —
Etherlords I 1.07 and earlier and Etherlords II 1.03 and earlier allows remote attackers to cause a denial of service (…
-
Unscored —CVE-2004-1935 Public exploit
Cross-site scripting (XSS) vulnerability in SCT Campus Pipeline allows remote attackers to inject arbitrary web script …
-
Unscored —CVE-2004-1911 Public exploit
Cross-site scripting (XSS) vulnerability in AzDGDatingLite 2.1.1 allows remote attackers to inject arbitrary web script…
-
Unscored —CVE-2004-1929 Public exploit
SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attacker…