Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
856 results · Feed
-
Unscored —CVE-2004-2005 Public exploit
Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-…
-
Unscored —CVE-2004-2007 Public exploit
Cross-site scripting (XSS) vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to inject a…
-
Unscored —CVE-2004-2045 Public exploit
The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to…
-
Unscored —CVE-2004-2063 Public exploit
Cross-site scripting (XSS) vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to inj…
-
Unscored —
Unknown vulnerability in APC PowerChute Business Edition 6.0 through 7.0.1 allows remote attackers to cause a denial of…
-
Unscored —CVE-2004-2029 Public exploit
The Util_DecodeHTTPAuth function in BNBT BitTorrent Tracker Beta 7.5 Release 2 and earlier allows remote attackers to c…
-
Unscored —CVE-2004-2064 Public exploit
Cross-site scripting (XSS) vulnerability in lostBook 1.1 and earlier allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2004-2035 Public exploit
MiniShare 1.3.2 allows remote attackers to cause a denial of service (crash) via a malformed HTTP GET or HEAD request w…
-
Unscored —
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier accept any password that begins with the actual passwo…
-
Unscored —CVE-2004-2062 Public exploit
SQL injection vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2004-2032 Public exploit
Netgear RP114 allows remote attackers to bypass the keyword based URL filtering by requesting a long URL, as demonstrat…
-
Unscored —CVE-2004-2033 Public exploit
Orenosv 0.5.9f allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
-
Unscored —CVE-2004-2061 Public exploit
RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arb…
-
Unscored —CVE-2004-2038 Public exploit
Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) before LDU 700 allows remote attackers to inject arbi…
-
Unscored —CVE-2004-2036 Public exploit
SQL injection vulnerability in the art_print function in print.inc.php in unknown versions of jPortal before 2.3.1 allo…
-
Unscored —
PHP remote file inclusion vulnerability in secure_img_render.php in e107 0.615 allows remote attackers to execute arbit…
-
Unscored —
SQL injection vulnerability in application_top.php for Zen Cart 1.1.3 before patch 2 may allow remote attackers to exec…
-
Unscored —
Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary SQL code and gain sensi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in user.php in e107 allows remote attackers to inject arbitrary web script or …
-
Unscored —
The Domain gateway in BEA Tuxedo 7.1 does not perform authorization checks for imported services and qspaces on remote …
-
Unscored —
calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters i…
-
Unscored —
user_profile.asp in PortalApp 2.2 allows local users to gain privileges by modifying the user_id variable.
-
Unscored —
Certain configurations of IPsec, when using Encapsulating Security Payload (ESP) in tunnel mode, integrity protection a…
-
Unscored —CVE-2003-1158 Public exploit
Multiple buffer overflows in the FTP service in Plug and Play Web Server 1.0002c allow remote attackers to cause a deni…
-
Unscored —CVE-2003-1135 Public exploit
Buffer overflow in Yahoo! Messenger 5.6 allows remote attackers to cause a denial of service (crash) via a file send re…
-
Unscored —
Plug and Play Web Server Proxy 1.0002c allows remote attackers to cause a denial of service (server crash) via an inval…
-
Unscored —CVE-2003-1160 Public exploit
FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain administrative privileges …
-
Unscored —CVE-2003-1151 Public exploit
Cross-site scripting (XSS) vulnerability in Fastream NETFile Server 6.0.3.588 allows remote attackers to inject arbitra…
-
Unscored —CVE-2003-1142 Public exploit
Help in NIPrint LPD-LPR Print Server 4.10 and earlier executes Windows Explorer with SYSTEM privileges, which allows lo…
-
Unscored —
Directory traversal vulnerability in Advanced Poll 2.0.2 allows remote attackers to read arbitrary files or inject arbi…
-
Unscored —CVE-2003-1146 Public exploit
Cross-site scripting (XSS) vulnerability in John Beatty Easy PHP Photo Album 1.0 allows remote attackers to inject arbi…
-
Unscored —
Java Runtime Environment (JRE) and Software Development Kit (SDK) 1.4.2 through 1.4.2_02 allows local users to overwrit…
-
Unscored —
HTTP Commander 4.0 allows remote attackers to obtain sensitive information via an HTTP request that contains a . (dot) …
-
Unscored —
The WebCache component in Oracle Files 9.0.3.1.0, 9.0.3.2.0, and 9.0.3.3.0 of Oracle Collaboration Suite Release 1 cach…
-
Unscored —
WebTide 7.04 allows remote attackers to list arbitrary directories via an HTTP request for %3f.jsp (encoded "?").
-
Unscored —CVE-2003-1173 Public exploit
Centrinity FirstClass 7.1 allows remote attackers to access sensitive information by appending search to the end of the…
-
Unscored —CVE-2003-1166 Public exploit
Directory traversal vulnerability in (1) Openfile.aspx and (2) Html.aspx in HTTP Commander 4.0 allows remote attackers …
-
Unscored —
Unichat allows remote attackers to cause a denial of service (crash) by adding extra chat characters (avatars) and logg…
-
Unscored —CVE-2003-1148 Public exploit
Multiple PHP remote file inclusion vulnerabilities in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences…
-
Unscored —CVE-2003-1136 Public exploit
Cross-site scripting (XSS) vulnerability in Chi Kien Uong Guestbook 1.51 allows remote attackers to inject arbitrary we…