Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
856 results · Feed
-
Unscored —CVE-2004-1912 Public exploit
The (1) modules.php, (2) block-Calendar.php, (3) block-Calendar1.php, (4) block-Calendar_center.php scripts in NukeCale…
-
Unscored —CVE-2004-1878 Public exploit
LINBOX LIN:BOX allows remote attackers to bypass authentication, obtain sensitive information, or gain access via a dir…
-
Unscored —
Directory traversal vulnerability in VocalTec VGW4/8 Gateway 8.0 allows remote attackers to read protected files via ..…
-
Unscored —
Ipswitch WS_FTP Server 4.0.2 allows remote attackers to cause a denial of service (disk consumption) and bypass file si…
-
Unscored —CVE-2004-1897 Public exploit
Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service (segmentation fa…
-
Unscored —
modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to gain sensitive information via an HT…
-
Unscored —
Cross-site scripting (XSS) vulnerability in phpBB 2.0.6d and earlier allows remote attackers to inject arbitrary web sc…
-
Unscored —
Buffer overflow in Check Point SmartDashboard in Check Point NG AI R54 and R55 allows remote authenticated users to cau…
-
Unscored —CVE-2004-1960 Public exploit
Cross-site scripting (XSS) vulnerability in blocker_query.php in Protector System 1.15b1 allows remote attackers to inj…
-
Unscored —CVE-2004-1842 Public exploit
Cross-site request forgery (CSRF) vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administr…
-
Unscored —CVE-2004-1926 Public exploit
Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to inject arbitrary code via the (1) Theme, (2)…
-
Unscored —CVE-2004-1919 Public exploit
The hash_strcmp function in hasch.c in Crackalaka 1.0.8 allows remote attackers to cause a denial of service (crash) vi…
-
Unscored —CVE-2004-1838 Public exploit
Directory traversal vulnerability in xweb 1.0 allows remote attackers to download arbitrary files via a .. (dot dot) in…
-
Unscored —CVE-2004-1966 Public exploit
Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to exec…
-
Unscored —CVE-2004-1790 Public exploit
Cross-site scripting (XSS) vulnerability in the web management interface in Edimax AR-6004 ADSL Routers allows remote a…
-
Unscored —
PostNuke 0.7.2.6 allows remote attackers to gain information via a direct HTTP request to files in the (1) includes/blo…
-
Unscored —
ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service (crash) by calling the SetSi…
-
Unscored —
The avatar upload capability in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to execute arbit…
-
Unscored —
SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search …
-
Unscored —CVE-2004-1823 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Jelsoft vBulletin 2.0 beta 3 through 3.0 can4 allows remote atta…
-
Unscored —CVE-2004-1910 Public exploit
rufsi.dll in Symantec Virus Detection allows remote attackers to cause a denial of service (crash) via a long string to…
-
Unscored —
Unknown vulnerability in Sysbotz SimpleData 4.0.1 and possibly earlier versions allows remote attackers to gain access …
-
Unscored —CVE-2004-1914 Public exploit
SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to execu…
-
Unscored —
nqt.php in Network Query Tool (NQT) 1.6 allows remote attackers to obtain sensitive information via a string in the por…
-
Unscored —CVE-2004-1940 Public exploit
sipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a STUN respo…
-
Unscored —
HP Web Jetadmin 7.5.2546 allows remote attackers to cause a denial of service (crash) via a malformed request, possibly…
-
Unscored —
The administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POS…
-
Unscored —
wMCam server 2.1.348 allows remote attackers to cause a denial of service (no new connections) via multiple malformed H…
-
Unscored —CVE-2004-1825 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote a…
-
Unscored —CVE-2004-1836 Public exploit
SQL injection vulnerability in index.php in Invision Power Top Site List 1.1 RC 2 and earlier allows remote attackers t…
-
Unscored —
Claim Anti-Virus (ClamAV) 0.68 and earlier allows remote attackers to cause a denial of service (crash) via certain RAR…
-
Unscored —
Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to e…
-
Unscored —CVE-2004-1827 Public exploit
Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to injec…
-
Unscored —
FuseTalk 4.0 allows remote attackers to ban other users via a direct request to banning.cfm.
-
Unscored —
Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authenticat…
-
Unscored —CVE-2004-1924 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote att…
-
Unscored —CVE-2004-1830 Public exploit
error.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive information via an invalid …
-
Unscored —CVE-2004-1988 Public exploit
PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers t…
-
Unscored —
X-Micro WLAN 11b Broadband Router 1.2.2, 1.2.2.3, 1.2.2.4, and 1.6.0.0 has a hardcoded "super" username and password, w…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Extreme Messageboard (XMB) 1.8 SP3 and 1.9 beta allow remote att…