Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
856 results · Feed
-
Unscored —CVE-2004-1978 Public exploit
Cross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary H…
-
Unscored —CVE-2004-1828 Public exploit
Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote att…
-
Unscored —
Directory traversal vulnerability in Aldo's Web Server (aweb) 1.5 allows remote attackers to view arbitrary files via a…
-
Unscored —CVE-2004-1888 Public exploit
display.cgi in Aborior Encore WebForum allows remote to execute arbitrary commands via shell metacharacters in the file…
-
Unscored —CVE-2004-1868 Public exploit
Stack-based buffer overflow in WinSig.exe in eSignal 7.5 and 7.6 allows remote attackers to execute arbitrary code via …
-
Unscored —CVE-2004-1945 Public exploit
Buffer overflow in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via a long MAIL FROM fiel…
-
Unscored —CVE-2004-1939 Public exploit
Cross-site scripting (XSS) vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2004-1887 Public exploit
Ada Image Server (ImgSvr) 0.4 allows remote attackers to view directories or download files via an HTTP request with a …
-
Unscored —CVE-2004-1989 Public exploit
PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to exec…
-
Unscored —
Buffer overflow in Terminator 3: War of the Machines 1.0 allows remote attackers to cause a denial of service via a lon…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in (1) deliver.asp and (2) billing.asp in A-CART Pro and A-CART 2.0…
-
Unscored —
Format string vulnerability in the PRINT_ERROR function in common.c for Cherokee Web Server 0.4.16 and earlier allows l…
-
Unscored —
Buffer overflow in the GUI admin service in Mac OS X Server 10.3 allows remote attackers to cause a denial of service (…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0 allow remote attackers to inject arbitrary web scri…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to…
-
Unscored —
Unknown vulnerability in Sun Java System Application Server 7.0 Update 2 and earlier, when a SOAP web service expects a…
-
Unscored —
X-Micro WLAN 11b Broadband Router 1.6.0.1 has a hardcoded "1502" username and password, which could allow remote attack…
-
Unscored —CVE-2004-1962 Public exploit
SQL injection vulnerability in index.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection fil…
-
Unscored —CVE-2004-1783 Public exploit
Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary…
-
Unscored —
The SSL HTTP Server in HP Web-enabled Management Software 5.0 through 5.92, with anonymous access enabled, allows remot…
-
Unscored —CVE-2004-1906 Public exploit
Mcafee FreeScan allows remote attackers to cause a denial of service and possibly arbitrary code via a long string in t…
-
Unscored —CVE-2004-1875 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to inject arbitrary web …
-
Unscored —
MS Analysis module 2.0 for PHP-Nuke allows remote attackers to obtain sensitive information via a direct request to (1)…
-
Unscored —
YaST Online Update (YOU) in SuSE 8.2 and 9.0 allows local users to overwrite arbitrary files via a symlink attack on yo…
-
Unscored —
Dameware Mini Remote Control 4.1.0.0 uses insufficiently random data to create the encryption key, which makes it easie…
-
Unscored —
RealOne player 6.0.11.868 allows remote attackers to execute arbitrary script in the "My Computer" zone via a Synchroni…
-
Unscored —
paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (2) category.…
-
Unscored —CVE-2004-1867 Public exploit
Cross-site scripting (XSS) vulnerability in guest.cgi in Fresh Guest Book allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2004-1820 Public exploit
PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web management interface in ZyWALL 10 4.07 allows remote attackers to i…
-
Unscored —
The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password, which also …
-
Unscored —CVE-2004-1883 Public exploit
Multiple buffer overflows in Ipswitch WS_FTP Server 4.0.2 (1) allow remote authenticated users to execute arbitrary cod…
-
Unscored —CVE-2004-1784 Public exploit
Buffer overflow in the web server of Webcam Watchdog 3.63 allows remote attackers to execute arbitrary code via a long …
-
Unscored —
Stack-based buffer overflow in DecodeBase16 function, as used in the (1) IRC module and (2) web server in eMule 0.42d, …
-
Unscored —CVE-2004-1821 Public exploit
SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to gain privileges or …
-
Unscored —
Buffer overflow in Chrome 1.2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet…
-
Unscored —
Info Touch Surfnet kiosk allows local users to access the underlying filesystem via a 'file://' URI.
-
Unscored —
phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote a…
-
Unscored —
Chat Anywhere 2.72 and earlier allows remote attackers to hide their IP address by using %00 before the nickname, which…
-
Unscored —CVE-2004-1943 Public exploit
PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to …