Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
856 results · Feed
-
Unscored —CVE-2004-2102 Public exploit
Cross-site scripting (XSS) vulnerability in FREESCO 2.05, a modified version of thttpd, allows remote attackers to inje…
-
Unscored —
The webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to read arbitrary .htt f…
-
Unscored —CVE-2004-2113 Public exploit
Cross-site scripting (XSS) vulnerability in BremsServer 1.2.4 allows remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2004-2130 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote attackers to execute arb…
-
Unscored —CVE-2004-2134 Public exploit
Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt th…
-
Unscored —CVE-2004-2116 Public exploit
Directory traversal vulnerability in Tiny Server 1.1 allows remote attackers to read or download arbitrary files via a …
-
Unscored —CVE-2004-2096 Public exploit
Cross-site scripting (XSS) vulnerability in Mephistoles httpd 0.6.0 final allows remote attackers to execute arbitrary …
-
Unscored —
Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via a GET request with a long filename, po…
-
Unscored —
GeoHttpServer, when configured to authenticate users, allows remote attackers to bypass authentication and access unaut…
-
Unscored —CVE-2004-2099 Public exploit
Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (se…
-
Unscored —CVE-2004-2120 Public exploit
Reptile Web Server allows remote attackers to cause a denial of service (CPU consumption) via multiple incomplete GET r…
-
Unscored —
Honeyd before 0.8 replies to TCP packets with the SYN and RST flags set, which allows remote attackers to identify IP a…
-
Unscored —
The upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI files such as (1) blackice.in…
-
Unscored —
SQL injection vulnerability in register.php in Phorum before 3.4.6 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2004-2124 Public exploit
The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_PO…
-
Unscored —CVE-2004-2112 Public exploit
Directory traversal vulnerability in BremsServer 1.2.4 allows remote attackers to read arbitrary files via ".." (dot do…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in (1) imagezoom.asp or (2) recommend.asp in Q-Shop allow remote at…
-
Unscored —CVE-2004-2107 Public exploit
Finjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands on TCP port 3141, which…
-
Unscored —CVE-2004-2131 Public exploit
Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, wi…
-
Unscored —CVE-2004-2114 Public exploit
Stack-based and heap-based buffer overflows in ProxyNow! 2.75 and earlier allow remote attackers to execute arbitrary c…
-
Unscored —CVE-2004-2117 Public exploit
Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via malformed HTTP requests such as (1) a …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to…
-
Unscored —CVE-2003-1216 Public exploit
SQL injection vulnerability in search.php for phpBB 2.0.6 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —
SQL injection vulnerability in groupcp.php for phpBB 2.0.6 and earlier allows group moderators to perform unauthorized …
-
Unscored —
Apple Keynote 2.0 and 2.0.1 allows remote attackers to read arbitrary files via the keynote: URI handler in a crafted K…
-
Unscored —
Integer overflow in the fetch_io function of the imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before …
-
Unscored —CVE-2005-1523 Public exploit
Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows rem…
-
Unscored —
The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to…
-
Unscored —CVE-2005-1520 Public exploit
Buffer overflow in the header_get_field_name function in header.c for GNU Mailutils 0.5 and 0.6, and other versions bef…
-
Unscored —CVE-2005-1686 Public exploit
Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a …
-
Unscored —
Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENwo…
-
Unscored —
JavaMail API, as used by Solstice Internet Mail Server POP3 2.0, does not properly validate the message number in the M…
-
Unscored —CVE-2005-1252 EPSS 12%
Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail…
-
Unscored —
Cross-site scripting (XSS) vulnerability in default.asp for episodex guestbook allows remote attackers to inject arbitr…
-
Unscored —
Stack-based buffer overflow in the IMAP server for Ipswitch IMail 8.12 and 8.13, and other versions before IMail Server…
-
Unscored —
qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows…
-
Unscored —CVE-2005-1679 Public exploit
Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary co…
-
Unscored —
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 instal…
-
Unscored —
Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack …
-
Unscored —
SQL injection vulnerability in login.asp in ezdwc NewsletterEz 3.0 allows remote attackers to execute arbitrary SQL com…