Skip to content
OpenAdvisories

Archive

May 2005

Vulnerabilities first published in this month (UTC), newest first.

← April 2005 2005 / May June 2005 →
  1. 1 
  2. 229
  3. 353
  4. 416
  5. 520
  6. 64
  7. 7 
  8. 8 
  9. 92
  10. 10360
  11. 1145
  12. 127
  13. 131
  14. 1445
  15. 15 
  16. 1639
  17. 1721
  18. 1827
  19. 1948
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 2446
  25. 2524
  26. 265
  27. 2743
  28. 282
  29. 29 
  30. 30 
  31. 3119
All Critical High Medium Low Exploited only Public exploit

856 results · Feed

  • Unscored —
    CVE-2004-2074 Public exploit EPSS 36%

    Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string…

  • Unscored —
    CVE-2004-2085

    Multiple cross-site scripting (XSS) vulnerabilities in Brad Fears phpCodeCabinet 0.4 and earlier allow remote attackers…

  • Unscored —
    CVE-2002-1663 Public exploit

    The Post_Method function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of s…

  • Unscored —
    CVE-2002-1662

    Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbit…

  • Unscored —
    CVE-2000-1224 Public exploit

    Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .j…

  • Unscored —
    CVE-2005-0392

    ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands.

  • Unscored —
    CVE-2005-0040

    Multiple cross-site scripting (XSS) vulnerabilities in DotNetNuke before 3.0.12 allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2005-1454

    SQL injection vulnerability in the radius_xlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remot…

    freeradius Debian
  • Unscored —
    CVE-2005-1455

    Buffer overflow in the sql_escape_func function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote attack…

    freeradius Debian
  • Unscored —
    CVE-2005-1260

    bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that cause…

    bzip2 Debian
  • Unscored —
    CVE-2005-1673 Public exploit

    Multiple SQL injection vulnerabilities in Help Center Live allow remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2005-1671

    The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a sin…

  • Unscored —
    CVE-2005-1670

    Unknown vulnerability in Extreme BlackDiamond 10808 and 8800 switches running ExtremeWare XOS 11.1 before 11.1.3.3, 11.…

  • Medium 6.5
    CVE-2005-1674 Public exploit

    Cross-Site Request Forgery (CSRF) vulnerability in Help Center Live allows remote attackers to perform actions as the a…

  • Unscored —
    CVE-2005-1672 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2003-1204

    Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.12 BETA and earlier allow remote attackers…

  • Unscored —
    CVE-2003-1210 Public exploit

    Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow remote attackers to e…

  • Unscored —
    CVE-2003-1206

    Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service (crash) via …

  • Unscored —
    CVE-2003-1212

    MaxWebPortal 1.30 allows remote attackers to perform unauthorized actions by modifying hidden form fields, such as the …

  • Unscored —
    CVE-2003-1211

    Cross-site scripting (XSS) vulnerability in search.asp for MaxWebPortal 1.30 and possibly earlier versions allows remot…

  • Unscored —
    CVE-2003-1207 Public exploit

    Crob FTP Server 3.5.1 allows remote authenticated users to cause a denial of service (crash) via a dir command with a l…

  • Unscored —
    CVE-2003-1208 EPSS 13%

    Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the …

  • Unscored —
    CVE-2003-1214

    Unknown vulnerability in the server login for VisualShapers ezContents 2.02 and earlier allows remote attackers to bypa…

  • Unscored —
    CVE-2003-1203 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php for Mambo Site Server 4.0.10 allows remote attackers to execute s…

  • Unscored —
    CVE-2003-1209

    The Post_Method function in Monkey HTTP Daemon before 0.6.2 allows remote attackers to cause a denial of service (crash…

  • Unscored —
    CVE-2003-1205

    Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service (crash) by renaming a file to the…

  • Unscored —
    CVE-2003-1213 Public exploit

    The default installation of MaxWebPortal 1.30 stores the portal database under the web document root with insecure acce…

  • Unscored —
    CVE-2005-0757

    The xattr file system code, as backported in Red Hat Enterprise Linux 3 on 64-bit systems, does not properly handle cer…

  • Unscored —
    CVE-2005-0134

    The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could a…

  • Unscored —
    CVE-2005-1664 EPSS 19%

    The __VIEWSTATE functionality in Microsoft ASP.NET 1.x allows remote attackers to conduct replay attacks to (1) apply a…

  • Unscored —
    CVE-2005-1663

    Jeuce Personal Web Server 2.13 allows remote attackers to cause a denial of service (server crash) via a GET request be…

  • Unscored —
    CVE-2005-1662

    Directory traversal vulnerability in Jeuce Personal Web Server 2.13 allows remote attackers to read arbitrary files via…

  • Unscored —
    CVE-2005-1645 Public exploit

    Keyvan1 ImageGallery stores the image.mdb database under the web document root with insufficient access control, which …

  • Unscored —
    CVE-2005-1647

    Gurgens (GASoft) Guest Book 2.1 stores the db/Genid.dat database file under the web document root with insufficient acc…

  • Unscored —
    CVE-2005-1657

    Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorize…

  • Unscored —
    CVE-2005-1659

    Cross-site scripting (XSS) vulnerability in filemanager.cpp in MyServer 0.8 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2005-1654 Public exploit

    Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request …

  • Unscored —
    CVE-2005-1652

    message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to bypass authentication by modifying …

  • Unscored —
    CVE-2005-1668

    YusASP Web Asset Manager 1.0 allows remote attackers to gain privileges via a direct request to assetmanager.asp.

  • Unscored —
    CVE-2005-1658

    Directory traversal vulnerability in filemanager.cpp in MyServer 0.8 allows remote attackers to list the parent directo…