Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
856 results · Feed
-
Unscored —
Unknown vulnerability in the setsockopt system call in Mac OS X 10.3.9 and earlier allows local users to cause a denial…
-
Unscored —
Stack-based buffer overflow in the semop system call in Mac OS X 10.3.9 and earlier allows local users to gain privileg…
-
Unscored —
Heap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9 allows local users to cause…
-
Unscored —
Unknown vulnerability in the nfs_mount call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via cr…
-
Unscored —
Integer overflow in the searchfs system call in Mac OS X 10.3.9 and earlier allows local users to execute arbitrary cod…
-
Unscored —
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script inje…
-
Unscored —CVE-2005-1532 Public exploit
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script obje…
-
Unscored —
Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to (1) move their home directory …
-
Unscored —
Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist, allows remote authentica…
-
Unscored —CVE-2005-1479 Public exploit
SQL injection vulnerability in jgs_portal.php in JGS-Portal 3.0.1 and earlier allows remote attackers to execute arbitr…
-
Unscored —
Format string vulnerability in dSMTP (dsmtp.exe) in DMail 3.1a allows remote attackers to execute arbitrary code via fo…
-
Unscored —
The Admin panel in PwsPHP 1.2.2 does not properly verify uploaded picture files, which allows remote attackers to uploa…
-
Unscored —CVE-2005-1492 Public exploit
Cross-site scripting (XSS) vulnerability in user.cgi in Gossamer Threads Links SQL 2.x and 3.0 allows remote attackers …
-
Unscored —
delcomment.php in myBloggie 2.1.1 allows remote attackers to delete arbitrary comments by modifying the comment_id para…
-
Unscored —
Unknown vulnerability in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to obtai…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PwsPHP 1.2.2 allow remote attackers to inject arbitrary web scri…
-
Unscored —
Golden FTP Server Pro 2.52 allows remote attackers to obtain sensitive information via a GET request for a file that do…
-
Unscored —CVE-2005-1506 Public exploit
SQL injection vulnerability in out.php in CJ Ultra (CJUltra) Plus 1.0.3 and 1.0.4 allows remote attackers to execute ar…
-
Unscored —
GameSpy SDK CD-Key Validation Toolkit, as used by many online games, allows remote attackers to bypass the CD key valid…
-
Unscored —CVE-2005-1480 Public exploit
Directory traversal vulnerability in RaidenFTPD before 2.4.2241 allows remote attackers to read arbitrary files via a "…
-
Unscored —
Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitra…
-
Unscored —CVE-2005-1493 Public exploit
Directory traversal vulnerability in SimpleCam 1.2 allows remote attackers to read arbitrary files via a ..\ (dot dot b…
-
Unscored —
commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to…
-
Unscored —
MidiCart PHP Shopping Cart allows remote attackers to obtain sensitive information via a direct request to (1) search_l…
-
Unscored —
The new account wizard in Mail.app 2.0 in Mac OS 10.4, when configuring an IMAP mail account and checking the credentia…
-
Unscored —
Oracle Database 9i and 10g disables Fine Grained Audit (FGA) after the SYS user executes a SELECT statement on an FGA o…
-
Unscored —
Multiple SQL injection vulnerabilities in Aaron Outpost ASP Inline Corporate Calendar allow remote attackers to execute…
-
Unscored —
SQL injection vulnerability in profil.php in PwsPHP 1.2.2 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —
Unknown vulnerability in Solaris 7 through 9, when using Federated Naming Services (FNS), autofs, and FNS X.500 configu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MidiCart PHP Shopping Cart allows remote attackers to inject arbitrary web …
-
Unscored —
index.php in myBloggie 2.1.1 allows remote attackers to obtain sensitive information via an invalid post_id parameter, …
-
Unscored —
ArticleLive 2005 allows remote attackers to gain privileges by modifying the (1) auth and (2) userId fields in a cookie.
-
Unscored —
Unknown vulnerability in Cisco Firewall Services Module (FWSM) 2.3.1 and earlier, when using URL, FTP, or HTTPS filteri…
-
Unscored —
Directory traversal vulnerability in Golden FTP server pro 2.52 allows remote attackers to read arbitrary files via a "…
-
Unscored —CVE-2005-1263 Public exploit
The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6…
-
Unscored —
PwsPHP 1.2.2 allows remote attackers to bypass authentication and post arbitrary comments via the Pseudo cookie.
-
Unscored —CVE-2005-1496 EPSS 38%
The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by ch…
-
Unscored —CVE-2005-1503 Public exploit
Multiple SQL injection vulnerabilities in MidiCart PHP Shopping Cart allow remote attackers to execute arbitrary SQL co…
-
Unscored —
Integer signedness error in the qmail_put and substdio_put functions in qmail, when running on 64 bit platforms with a …
-
Unscored —CVE-2005-1494 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admin.cgi in MegaBook 2.0 and 2.1 allow remote attackers to inje…