Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
856 results · Feed
-
Unscored —
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does n…
-
Unscored —CVE-2005-1683 EPSS 15%
Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, …
-
Unscored —
episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp.
-
Medium 5.3
Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) …
-
Unscored —
Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), …
-
Unscored —
The IMAP daemon (IMAPD32.EXE) in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2005-1681 Public exploit
PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote atta…
-
Unscored —CVE-2005-1256 EPSS 59%
Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS), and o…
-
Unscored —
popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with gr…
-
Unscored —
D-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows remote attackers to b…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 buil…
-
Unscored —
SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote attackers to execute arbitra…
-
Unscored —
Unknown vulnerability in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace befo…
-
Unscored —CVE-2005-1715 Public exploit
Cross-site scripting (XSS) vulnerability in index.php for TOPo 2.2 (2.2.178) allows remote attackers to inject arbitrar…
-
Unscored —
The RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allows remote attackers to obtain sensitive information via a dir…
-
Unscored —
PostNuke 0.750 and 0.760RC3 allows remote attackers to obtain sensitive information via a direct request to (1) theme.p…
-
Unscored —
BEA WebLogic Server and WebLogic Express 8.1 SP2 and SP3 allows users with the Monitor security role to "shrink or rese…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Blue Coat Reporter before 7.1.2 allow remote attackers to inject…
-
Unscored —
BEA WebLogic Server and WebLogic Express 8.1 through Service Pack 3 and 7.0 through Service Pack 5 does not properly ha…
-
Unscored —
Cookie Cart allows remote attackers to read the Order Notification list via the testmycgi and path parameters to testmy…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PROMS before 0.11 allow remote attackers to inject arbitrary web…
-
Unscored —
Unknown vulnerability in Serendipity 0.8, when used with multiple authors, allows unprivileged authors to upload arbitr…
-
Unscored —
Buffer overflow in BEA WebLogic Server and WebLogic Express 6.1 Service Pack 4 allows remote attackers to cause a denia…
-
Unscored —
Cross-site scripting (XSS) vulnerability in NetWin SurgeMail 3.0c2 allows remote attackers to inject arbitrary web scri…
-
Unscored —
PROMS 0.11 does not properly handle "certain combinations of rights," which gives more rights to users than intended.
-
Unscored —
fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the cont…
-
Unscored —
Unknown vulnerability in MailScanner 4.41.3 and earlier, related to "incomplete reporting of viruses in zip files," all…
-
Unscored —
Multiple SQL injection vulnerabilities in Xanthia.php in the Xanthia module in PostNuke 0.750 allow remote attackers to…
-
Unscored —CVE-2005-1703 Public exploit
Warrior Kings: Battles 1.23 and earlier allows remote attackers to cause a denial of service (server crash) via a parti…
-
Unscored —
Multiple unknown vulnerabilities in PROMS 0.11 allow "non-authorized users" to (1) view or modify the project member li…
-
Unscored —
Format string vulnerability in gxine 0.4.1 through 0.4.4, and other versions down to 0.3, allows remote attackers to ex…
-
Unscored —CVE-2005-1741 Public exploit
Gearbox Software Halo: Combat Evolved 1.6 allows remote attackers to cause a denial of service (infinite loop) via malf…
-
Unscored —CVE-2005-1709 Public exploit
Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license.
-
Unscored —
The XWD Decoder in ImageMagick before 6.2.2.3, and GraphicsMagick before 1.1.6-r1, allows remote attackers to cause a d…
-
Unscored —
SQL injection vulnerability in pnadmin.php in the Xanthia module in PostNuke 0.760-RC3 allows remote administrators to …
-
Unscored —
BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redep…
-
Unscored —CVE-2005-1708 Public exploit
templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain admini…
-
Unscored —
Multiple SQL injection vulnerabilities in PROMS before 0.11 allow remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users…
-
Unscored —CVE-2005-1707 Public exploit
The fn_show_postinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files v…