Archive
2 June 2005
Vulnerabilities first published on this day (UTC), newest first.
17 results · Feed
-
Unscored —
Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitra…
-
Unscored —
NEXTWEB (i)Site allows remote attackers to cause a denial of service (error 500) via a crafted HTTP request, possibly i…
-
Unscored —CVE-2005-1829 EPSS 13%
Microsoft Internet Explorer 6 SP2 allows remote attackers to cause a denial of service (infinite loop and application c…
-
Unscored —
Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to …
-
High 8.4
Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using …
-
Unscored —
D-Link DSL-504T allows remote attackers to bypass authentication and gain privileges, such as upgrade firmware, restart…
-
Unscored —CVE-2005-1833 Public exploit
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 allow remote attackers to execute arbitrary S…
-
Unscored —
NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote atta…
-
Unscored —
The DbgMsg.sys driver in Compuware SoftICE DriverStudio 3.1 and 3.2 allows remote attackers to cause a denial of servic…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 and earlier allow remote attacke…
-
Unscored —
SQL injection vulnerability in login.asp in NEXTWEB (i)Site allows remote attackers to execute arbitrary SQL commands a…
-
Unscored —
Directory traversal vulnerability in class.layout_phpcms.php in phpCMS 1.2.x before 1.2.1pl2 allows remote attackers to…
-
Unscored —
Buffer overflow in HP Radia Notify Daemon 3.1.0.0 (formerly by Novadigm), and other versions including 2.x, 3.x, and 4.…
-
Unscored —
The sql_escape_string function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "\…
-
Unscored —
Fortinet firewall running FortiOS 2.x contains a hardcoded username with the password set to the serial number, which a…
-
Unscored —
D-Link DSL-504T stores usernames and passwords in cleartext in the router configuration file, which allows remote attac…
-
Unscored —CVE-2005-1825 EPSS 62%
Multiple stack-based buffer overflows in the nvd_exec function in HP Radia Notify Daemon 3.1.2.0 (formerly by Novadigm)…