20 June 2005

26 results · Feed

• Unscored —
  CVE-2005-1993

  Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file,…

  sudo Debian
  Jun 20, 2005
• Unscored —
  CVE-2005-1999

  Multiple cross-site scripting (XSS) vulnerabilities in pafiledb.php in paFileDB 3.1 allow remote attackers to inject ar…

  Jun 20, 2005
• Unscored —
  CVE-2005-1992

  The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents "security …

  Jun 20, 2005
• Unscored —
  CVE-2005-1996

  PHP remote file inclusion vulnerability in start.php in Bitrix Site Manager 4.0.x allows remote attackers to execute ar…

  Jun 20, 2005
• Unscored —
  CVE-2005-1994

  Finjan SurfinGate 7.0SP2 and SP3 allows remote attackers to download blocked files via hex-encoded characters in a file…

  Jun 20, 2005
• Unscored —
  CVE-2005-1267 Public exploit EPSS 14%

  The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 functio…

  tcpdump Debian
  Jun 20, 2005
• Unscored —
  CVE-2005-1729

  Novell eDirectory 8.7.3 allows remote attackers to cause a denial of service (application crash) via a URL containing a…

  Jun 20, 2005
• Unscored —
  CVE-2005-1995

  Bitrix Site Manager 4.0.x allows remote attackers to obtain sensitive information via direct request to (1) subscr_form…

  Jun 20, 2005
• Unscored —
  CVE-2005-1998 Public exploit

  Directory traversal vulnerability in admin.php in McGallery 1.1 allows remote attackers to read arbitrary files via a .…

  Jun 20, 2005
• Unscored —
  CVE-2005-1997

  show.php in McGallery 1.1 allows remote attackers to connect to arbitrary databases, or gain sensitive information by t…

  Jun 20, 2005
• Unscored —
  CVE-2005-1769

  Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.4 allow remote attackers to injec…

  Jun 20, 2005
• Unscored —
  CVE-2005-2012 Public exploit

  Multiple SQL injection vulnerabilities in login in paFAQ 1.0 Beta 4 allow remote attackers to execute arbitrary SQL com…

  Jun 20, 2005
• Unscored —
  CVE-2005-2005

  Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier stores the users.dat file under the web document root with insufficient…

  Jun 20, 2005
• Unscored —
  CVE-2005-2009 Public exploit

  Multiple SQL injection vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to execute arbitrary SQL commands v…

  Jun 20, 2005
• Unscored —
  CVE-2005-2003

  Ultimate PHP Board (UPB) 1.9.6 GOLD allows remote attackers to obtain sensitive information via an invalid (zero) id pa…

  Jun 20, 2005
• Unscored —
  CVE-2005-2014

  The "upload a language pack" feature in paFAQ 1.0 Beta 4 allows remote authenticated administrators to execute arbitrar…

  Jun 20, 2005
• Unscored —
  CVE-2005-2006 Public exploit

  JBOSS 3.2.2 through 3.2.7 and 4.0.2 allows remote attackers to obtain sensitive information via a GET request (1) with …

  Jun 20, 2005
• Unscored —
  CVE-2005-2011 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in paFAQ 1.0 Beta 4 allow remote attackers to inject arbitrary web …

  Jun 20, 2005
• Unscored —
  CVE-2005-2002 Public exploit

  SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers to execute arbitrary SQ…

  Jun 20, 2005
• Unscored —
  CVE-2005-2013

  paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive information via a direct request to admin/backup.php, whic…

  Jun 20, 2005
• Unscored —
  CVE-2005-2010 Public exploit

  Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbit…

  Jun 20, 2005
• Unscored —
  CVE-2005-2000 Public exploit

  Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary SQL comm…

  Jun 20, 2005
• Unscored —
  CVE-2005-2007

  Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary…

  trac Debian
  Jun 20, 2005
• Unscored —
  CVE-2005-2001

  Directory traversal vulnerability in pafiledb.php in paFileDB 3.1 and earlier allows remote attackers to include arbitr…

  Jun 20, 2005
• Unscored —
  CVE-2005-2004

  Multiple cross-site scripting vulnerabilities in Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier allow remote attackers…

  Jun 20, 2005
• Unscored —
  CVE-2005-2008

  Yaws Webserver 1.55 and earlier allows remote attackers to obtain the source code for yaws scripts via a request to a y…

  yaws Debian
  Jun 20, 2005