Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
856 results · Feed
-
Unscored —
The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5,…
-
Unscored —
Gibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a defunct ClamAV method to sca…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.750 and 0.760RC3 allow remote attackers to inject arb…
-
Unscored —
The cluster cookie parsing code in BEA WebLogic Server 7.0 through Service Pack 5 attempts to contact any host or port …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Serendipity 0.8 allow remote attackers to inject arbitrary web s…
-
Unscored —
Unknown vulnerability in ALWIL avast! antivirus 4 (4.6.6230) and earlier, when running on Windows NT 4.0, does not prop…
-
Unscored —
Directory traversal vulnerability in pnadminapi.php in the Xanthia module in PostNuke 0.760-RC3 allows remote administr…
-
Unscored —CVE-2005-1701 Public exploit
SQL injection vulnerability in PortailPHP 1.3 allows remote attackers to execute arbitrary SQL commands via the id para…
-
Unscored —
Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 thr…
-
Unscored —
Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other…
-
Unscored —
Cookie Cart stores the password file under the web document root with insufficient access control, which allows remote …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 8.1 through Service Pack 4, and …
-
Unscored —CVE-2005-1702 Public exploit
Format string vulnerability in Warrior Kings: Battles 1.23 and earlier and Warrior Kings 1.3 and earlier allows remote …
-
Unscored —
ZyXEL Prestige 650R-31 router running ZyNOS FW v3.40(KO.1) allows remote attackers to cause a denial of service (CPU co…
-
Unscored —
Format string vulnerability in the logPrintBadfile function in delbadfiles.c Iron Bars SHell (ibsh) before 0.3d allows …
-
Unscored —CVE-2005-1718 Public exploit
Buffer overflow in LS Games War Times 1.03 and earlier allows remote attackers to cause a denial of service (server cra…
-
Unscored —
TOPo 2.2 (2.2.178) stores data files in the data directory under the web document root with insufficient access control…
-
Unscored —
The UserLogin control in BEA WebLogic Portal 8.1 through Service Pack 3 prints the password to standard output when an …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allow remo…
-
Unscored —
Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which allows remote attackers to…
-
Unscored —CVE-2004-2073 Public exploit
Linux-VServer 1.24 allows local users with root privileges on a virtual server to gain access to the filesystem outside…
-
Unscored —CVE-2004-2081 Public exploit
The samiftp.dll library in Sami FTP Server 1.1.3 allows local users to cause a denial of service (pmsystem.exe crash) b…
-
Unscored —CVE-2004-2076 Public exploit
Cross-site scripting (XSS) vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows remote attackers to injec…
-
Unscored —
Red-M Red-Alert 2.7.5 with software 3.1 build 24 converts multiple spaces in a Service Set Identifier (SSID) to a singl…
-
Unscored —
Microsoft Baseline Security Analyzer (MBSA) 1.2 does not correctly identify systems that have been patched but remain v…
-
Unscored —
Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers …
-
Unscored —CVE-2004-2082 Public exploit
The samiftp.dll library in Sami FTP Server 1.1.3 allows remote authenticated users to cause a denial of service (pmsyst…
-
Unscored —CVE-2004-2077 Public exploit
Nadeo Game Engine for Nadeo TrackMania and Nadeo Virtual Skipper 3 allows remote attackers to cause a denial of service…
-
Unscored —
Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding …
-
Unscored —
Sophos Anti-Virus 3.78 allows remote attackers to cause a denial of service (infinite loop) via a MIME header that is n…
-
Unscored —CVE-2004-2093 Public exploit
Buffer overflow in the open_socket_out function in socket.c for rsync 2.5.7 and earlier allows local users to cause a d…
-
Unscored —
Unknown vulnerability in SandSurfer before 1.7.0 allows remote attackers to gain access as a logged-in user.
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.php in JShop E-Commerce Server allows remote attackers to inject arb…
-
Unscored —CVE-2004-2071 Public exploit
Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentica…
-
Unscored —
Matrix FTP Server allows remote attackers to cause a denial of service (crash) by logging in using four spaces as the u…
-
Unscored —CVE-2004-2078 Public exploit
Red-M Red-Alert 2.7.5 with software 3.1 build 24 allows remote attackers to cause a denial of service (reboot and loss …
-
Unscored —
eTrust InoculateIT for Linux 6.0 uses insecure permissions for multiple files and directories, including the applicatio…
-
Unscored —CVE-2004-2072 Public exploit
Cross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows …
-
Unscored —
Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via…
-
Unscored —
Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Noti…