Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
856 results · Feed
-
Unscored —CVE-2005-1401 Public exploit
Format string vulnerability in the client for Mtp-Target 1.2.2 and earlier allows remote attackers to execute arbitrary…
-
Unscored —
Skype for Windows 1.2.0.0 to 1.2.0.46 allows local users to bypass the identity check for an authorized application, th…
-
Unscored —
Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allow…
-
Unscored —CVE-2005-1413 Public exploit
Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the BBCode plugin for Serendipity before 0.8 allows remote attackers to inj…
-
Unscored —
Format string vulnerability in Lotus Domino 6.0.x before 6.0.5 and 6.5.x before 6.5.4 allows remote attackers to cause …
-
Unscored —
Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to conduct administrator operations and cause a den…
-
Unscored —
Directory traversal vulnerability in 04WebServer 1.81 allows remote attackers to read files outside of the web root but…
-
Unscored —
MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser parameter to post.php or (2) …
-
Unscored —CVE-2005-1424 Public exploit
StumbleInside GoText 1.01 stores sensitive username, mail address,and phone number information in plaintext in the GoTe…
-
Unscored —
Open WebMail (OWM) before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metac…
-
Unscored —
Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to determine the full pathname of the server via a …
-
Unscored —
PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unpr…
-
Unscored —CVE-2005-1412 Public exploit
SQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote attackers to execute arbit…
-
Unscored —
Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to obtain sen…
-
Unscored —
Buffer overflow in the Lotus Notes client for Domino 6.5 before 6.5.4 and 6.0 before 6.0.5 allows local users to cause …
-
Unscored —
Multiple unknown vulnjerabilities HP OpenView Event Correlation Services (OV ECS) 3.32 and 3.33 allow attackers to caus…
-
Unscored —
PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to execute arbitrary PHP code v…
-
Unscored —
edit_image.asp in Uapplication Uphotogallery allows remote attackers to upload arbitrary files.
-
Unscored —
Multiple directory traversal vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to (1)…
-
Unscored —
Unknown vulnerability in serendipity_config_local.inc.php for Serendipity before 0.8 has unknown impact.
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in index.php for Invision Power Board (IPB) 2.0.3 and 2.1 Alpha 2 a…
-
Unscored —
The media manager in Serendipity before 0.8 allows remote attackers to upload and execute arbitrary (1) .php or (2) .sh…
-
Unscored —CVE-2005-1418 Public exploit
NetLeaf Limited NotJustBrowsing 1.0.3 stores the View Lock Password in plaintext in the notjustbrowsing.prf file, which…
-
Unscored —
Unknown vulnerability in "the function used to validate path-names for uploading media" in Serendipity before 0.8 has u…
-
Unscored —CVE-2005-1440 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arb…
-
Unscored —CVE-2005-1402 Public exploit
Integer signedness error in certain older versions of the NeL library, as used in Mtp-Target 1.2.2 and earlier, and pos…
-
Unscored —
Cross-site scripting (XSS) vulnerability in SURVIVOR before 0.9.6 allows remote attackers to inject arbitrary web scrip…
-
Unscored —
The (1) it87 and (2) via686a drivers in I2C for Linux 2.6.x before 2.6.11.8, and 2.6.12 before 2.6.12-rc2, create the s…
-
Unscored —
The SQL install script in phpMyAdmin 2.6.2 is created with world-readable permissions, which allows local users to obta…
-
Unscored —CVE-2005-1398 Public exploit
phpcart.php in PHPCart 3.2 allows remote attackers to change product price information by modifying the (1) price or (2…
-
Unscored —
The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attack…
-
Unscored —CVE-2005-1375 Public exploit
Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow r…
-
Unscored —CVE-2005-1380 Public exploit
Cross-site scripting (XSS) vulnerability in BEA Admin Console 8.1 allows remote attackers to execute arbitrary web scri…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary we…
-
Unscored —
Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers …
-
Unscored —CVE-2005-1378 Public exploit
SQL injection vulnerability in posting_notes.php in the notes module for phpBB allows remote attackers to execute arbit…
-
Unscored —CVE-2005-1384 Public exploit
Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2005-1396 Public exploit
Race condition in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier allows local users to write to arbitrary files via a symli…
-
Unscored —
Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in clear…