Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
856 results · Feed
-
Unscored —
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allow local users to gain privileges by pressing CTRL-…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 6.x through 7.3 allow remote attackers to inject arbitr…
-
Unscored —CVE-2004-2022 Public exploit
ActivePerl 5.8.x and others, and Larry Wall's Perl 5.6.1 and others, when running on Windows systems, allows attackers …
-
Unscored —
Unknown vulnerability in SGI IRIX 6.5 through 6.5.22m allows remote attackers to cause a denial of service via a certai…
-
Unscored —CVE-2004-2003 Public exploit
Buffer overflow in the ssl_prcert function in the SSLway filter (sslway.c) for DeleGate 8.9.2 and earlier allows remote…
-
Unscored —
The Phoenix browser in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allows local users to read arbi…
-
Unscored —CVE-2004-2018 Public exploit
PHP remote file inclusion vulnerability in index.php in Php-Nuke 6.x through 7.3 allows remote attackers to execute arb…
-
Unscored —
radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be acce…
-
Unscored —
SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and by…
-
Unscored —
SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements.
-
Unscored —
Buffer overflow in Icecast 2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a long Ba…
-
Unscored —
ASPRunner 2.4 allows remote attackers to gain sensitive information via (1) hidden form fields or (2) error messages.
-
Unscored —CVE-2004-2067 Public exploit
SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attac…
-
Unscored —CVE-2004-2059 Public exploit
Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or…
-
Unscored —
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext i…
-
Unscored —CVE-2004-2012 Public exploit
The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBS…
-
Unscored —
Buffer overflow in the (1) WTHoster and (2) WebDriver modules in WildTangent Web Driver 4.0 allows remote attackers to …
-
Unscored —CVE-2004-2037 Public exploit
Buffer overflow in Mollensoft Lightweight FTP Server 3.6 allows remote authenticated users to cause a denial of service…
-
Unscored —CVE-2004-2014 Public exploit
Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being d…
-
Unscored —CVE-2004-2008 Public exploit
SQL injection vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to execute arbitrary SQL…
-
Unscored —
Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that u…
-
Unscored —
ifconfig "-arp" in SGI IRIX 6.5 through 6.5.22m does not properly disable ARP requests from being sent or received.
-
Unscored —CVE-2004-2026 Public exploit
Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execut…
-
Unscored —
Integer overflow in the SCTP_SOCKOPT_DEBUG_NAME SCTP socket option in socket.c in the Linux kernel 2.4.25 and earlier a…
-
Unscored —
DansGuardian 2.8 and earlier allows remote attackers to bypass the extension filtering rule via a hex encoded extension…
-
Unscored —CVE-2004-2021 Public exploit
Directory traversal vulnerability in file_manager.php in osCommerce 2.2 allows remote attackers to view arbitrary files…
-
Unscored —CVE-2004-2053 Public exploit
PHP remote file inclusion vulnerability in index.php in EasyIns Stadtportal 4 allows remote attackers to execute arbitr…
-
Unscored —CVE-2004-2040 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary web script…
-
Unscored —
The Live CD in SUSE LINUX 9.1 Personal edition is configured without a password for root, which allows remote attackers…
-
Unscored —CVE-2004-2017 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Turbo Traffic Trader C (TTT-C) 1.0 allow remote attackers to inj…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in phpShop 0.7.1 and earlier allows remote attackers to execute ar…
-
Unscored —
CRLF injection vulnerability in PhpBB 2.0.4 and 2.0.9 allows remote attackers to perform HTTP Response Splitting attack…
-
Unscored —
SQL injection vulnerability in login.php in Zen Cart 1.1.2d, 1.1.4 before patch 1, and possibly other versions allows r…
-
Unscored —
e107 0.615 allows remote attackers to obtain sensitive information via a direct request to (1) alt_news.php, (2) backen…
-
Unscored —CVE-2004-2030 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.jsp for Liferay before 2.2.0 release 10/1/2004 allow remot…
-
Unscored —
The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval funct…
-
Unscored —
PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLi…
-
Unscored —
NukeJokes 1.7 and 2 Beta allows remote attackers to obtain the full path of the server via (1) a direct call to mainfun…
-
Unscored —CVE-2004-2028 Public exploit
Cross-site scripting (XSS) vulnerability in stats.php in e107 allows remote attackers to inject arbitrary web script or…
-
Unscored —
Trend Micro OfficeScan 3.0 - 6.0 has default permissions of "Everyone Full Control" on the installation directory and r…