Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
856 results · Feed
-
Unscored —CVE-2004-1818 Public exploit
Cross-site scripting (XSS) vulnerability in nmimage.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote atta…
-
Unscored —CVE-2004-1915 Public exploit
Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execu…
-
Unscored —
Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service (h…
-
Unscored —
The Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to gain sensitive information via an invalid s…
-
Unscored —
Dreamweaver MX, when "Using Driver On Testing Server" or "Using DSN on Testing Server" is selected, uploads the mmhttpd…
-
Unscored —
SQL injection vulnerability in PostNuke 7.2.6 and earlier allows remote attackers to execute arbitrary SQL via (1) the …
-
Unscored —CVE-2004-1872 Public exploit
Cross-site scripting (XSS) vulnerability in WebCT Campus Edition 4.1.1.5 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2004-1845 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in News Manager Lite 2.5 allow remote attackers to inject arbitrary…
-
Unscored —CVE-2004-1955 Public exploit
SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute arbitrary SQL code vi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the VCard4J Toolkit allows remote attackers to inject arbitrary web script …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to i…
-
Unscored —
Memory leak in the back-bdb backend for OpenLDAP 2.1.12 and earlier allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2004-1937 Public exploit
Multiple directory traversal vulnerabilities in Nuked-KlaN 1.4b and 1.5b allow remote attackers to read or include arbi…
-
Unscored —
The patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete, which allows remote attackers …
-
Unscored —
athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters…
-
Unscored —CVE-2004-1796 Public exploit
PHP remote file inclusion vulnerability in HotNews 0.7.2 and earlier allows remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2004-1822 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject a…
-
Unscored —
Directory traversal vulnerability in glossary.php in PROPS 0.6.1 allows remote attackers to view arbitrary files via a …
-
Unscored —
SQL injection vulnerability in Extreme Messageboard (XMB) 1.9 beta allows remote attackers to execute arbitrary SQL com…
-
Unscored —
Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which re…
-
Unscored —CVE-2004-1792 Public exploit
swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via…
-
Unscored —CVE-2004-1847 Public exploit
News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the…
-
Unscored —
blocker_query.php in Protector System 1.15b1 for PHP-Nuke allows remote attackers to gain sensitive information via a s…
-
Unscored —CVE-2004-1952 Public exploit
SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gai…
-
Unscored —CVE-2004-1938 Public exploit
SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2004-1932 Public exploit
SQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x through 7.2 allows remote attackers to ex…
-
Unscored —
The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeate…
-
Unscored —CVE-2004-1927 Public exploit
Directory traversal vulnerability in the map feature (tiki-map.phtml) in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlie…
-
Unscored —
Cross-site scripting (XSS) vulnerability in do_search.php in PROPS 0.6.1 allows remote attackers to inject arbitrary HT…
-
Unscored —CVE-2004-1813 Public exploit
VocalTec VGW4/8 Gateway 8.0 allows remote attackers to bypass authentication via an HTTP request to home.asp with a tra…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2004-1951 Public exploit
xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite …
-
Unscored —
RSniff 1.0 allows remote attackers to cause a denial of service (connection exhaustion) via a large number of connectio…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote att…
-
Unscored —CVE-2004-1903 Public exploit
Buffer overflow in blaxxun 3D 7.0 allows remote attackers to execute arbitrary code via a long URL property inside an o…
-
Unscored —
Samsung SmartEther SS6215S switch, and possibly other Samsung switches, allows remote attackers and local users to gain…
-
Unscored —CVE-2004-1846 Public exploit
Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code vi…
-
Unscored —CVE-2004-1954 Public exploit
Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote attackers to inject arbitrary…
-
Unscored —
mod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication information, on the hard di…
-
Unscored —CVE-2004-1934 Public exploit
PHP remote file inclusion vulnerability in affich.php in Gemitel 3.50 allows remote attackers to execute arbitrary PHP …