Skip to content
OpenAdvisories

Archive

May 2005

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 229
  3. 353
  4. 416
  5. 520
  6. 64
  7. 7 
  8. 8 
  9. 92
  10. 10360
  11. 1145
  12. 127
  13. 131
  14. 1445
  15. 15 
  16. 1639
  17. 1721
  18. 1827
  19. 1948
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 2446
  25. 2524
  26. 265
  27. 2743
  28. 282
  29. 29 
  30. 30 
  31. 3119

856 results · Feed

  • Unscored —
    CVE-2003-1140 Public exploit

    Buffer overflow in Musicqueue 1.2.0 allows local users to execute arbitrary code via a long language variable in the co…

  • Unscored —

    exit.c in Linux kernel 2.6-test9-CVS, as stored on kernel.bkbits.net, was modified to contain a backdoor, which could a…

  • Unscored —
    CVE-2003-1162 Public exploit

    index.php in Tritanium Bulletin Board 1.2.3 allows remote attackers to read and reply to arbitrary messages by modifyin…

  • Unscored —

    connection.c in Cherokee web server before 0.4.6 allows remote attackers to cause a denial of service via an HTTP POST …

  • Unscored —
    CVE-2003-1177 Public exploit EPSS 13%

    Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of…

  • Unscored —

    Unknown vulnerability in Nokia IPSO 3.7, configured as IP Clusters, allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2003-1139 Public exploit

    Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink…

  • Unscored —
    CVE-2003-1164 Public exploit

    Cross-site scripting (XSS) vulnerability in Mldonkey 2.5-4 allows remote attackers to inject arbitrary web script or HT…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Booby .1 through 0.2.3 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2003-1196 Public exploit

    SQL injection vulnerability in viewtopic.asp in VieBoard 2.6 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2003-1187 Public exploit

    Cross-site scripting (XSS) vulnerability in include.php in PHPKIT 1.6.02 and 1.6.03 allows remote attackers to inject a…

  • Unscored —
    CVE-2003-1165 Public exploit

    Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service (crash) and poss…

  • Unscored —
    CVE-2003-1191 Public exploit

    chatbox.php in e107 0.554 and 0.603 allows remote attackers to cause a denial of service (pages fail to load) via HTML …

  • Unscored —

    Format string vulnerability in main.cpp in kpopup 0.9.1 and 0.9.5pre2 allows local users to cause a denial of service (…

  • Unscored —
    CVE-2003-1172 Public exploit EPSS 31%

    Directory traversal vulnerability in the view-source sample file in Apache Software Foundation Cocoon 2.1 and 2.2 allow…

  • Unscored —
    CVE-2003-1169 Public exploit

    DATEV Nutzungskontrolle 2.1 and 2.2 has insecure write permissions for critical registry keys, which allows local users…

  • Unscored —
    CVE-2003-1174 Public exploit

    Buffer overflow in NullSoft Shoutcast Server 1.9.2 allows local users to cause a denial of service via (1) icy-name fol…

  • Unscored —

    Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execut…

  • Unscored —

    X-CD-Roast 0.98 alpha10 through alpha14 allows local users to overwrite arbitrary files via a symlink attack on an unkn…

  • Unscored —

    The checklogin function in omail.pl for omail webmail 0.98.4 and earlier allows remote attackers to execute arbitrary c…

  • Unscored —

    byteHoard 0.7 and 0.71 allows remote attackers to list arbitrary files and directories via a direct request to files.in…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in PHPRecipeBook 1.24 through 2.17 allows remote attackers to inject arbitrary…

  • Unscored —

    MAILsweeper for SMTP 4.3 allows remote attackers to bypass virus protection via a mail message with a malformed zip att…

  • Unscored —

    SQL injection vulnerability in getmember.asp in VieBoard 2.6 Beta 1 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2003-1199 Public exploit

    Cross-site scripting (XSS) vulnerability in MyProxy 20030629 allows remote attackers to inject arbitrary web script or …

  • Unscored —
    CVE-2003-1175 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Sympoll 1.5 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2003-1182 Public exploit

    Cross-site scripting (XSS) vulnerability in MPM Guestbook 1.2 allows remote attackers to inject arbitrary web script or…

  • Unscored —

    Buffer overflow in TelCondex SimpleWebServer 2.12.30210 Build3285 allows remote attackers to execute arbitrary code via…

  • Unscored —
    CVE-2003-1181 Public exploit

    Advanced Poll 2.0.2 allows remote attackers to obtain sensitive information via an HTTP request to info.php, which invo…

  • Unscored —
    CVE-2003-1141 Public exploit EPSS 68%

    Buffer overflow in NIPrint 4.10 allows remote attackers to execute arbitrary code via a long string to TCP port 515.

  • Unscored —
    CVE-2003-1134 Public exploit

    Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service (JVM crash), possibly by calling the C…

  • Unscored —
    CVE-2003-1157 Public exploit

    Cross-site scripting (XSS) vulnerability in login.asp in Citrix MetaFrame XP Server 1.0 allows remote attackers to inje…

  • Unscored —

    Heap-based buffer overflow in the sec_filter_out function in mod_security 1.7RC1 through 1.7.1 in Apache 2 allows remot…

  • Unscored —

    Eval injection vulnerability in comments.php in Advanced Poll 2.0.2 allows remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2003-1149 Public exploit

    Cross-site scripting (XSS) vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to …

  • Unscored —

    Buffer overflow in the portmapper service (PMAP.NLM) in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through …

  • Unscored —
    CVE-2003-1200 Public exploit EPSS 65%

    Stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon 6.5.2 through 6.8.5 allows remote attackers to execute arb…

  • Unscored —
    CVE-2003-1138 Public exploit

    The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list director…

  • Unscored —
    CVE-2003-1179 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Advanced Poll 2.0.2 allow remote attackers to execute arbitrary P…

  • Unscored —

    ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse …