Archive
June 2005
Vulnerabilities first published in this month (UTC), newest first.
176 results · Clear filters · Feed
-
Unscored —CVE-2005-2064 Public exploit
Multiple cross-site scripting vulnerabilities in ASP Nuke 0.80 allow remote attackers to inject arbitrary web script or…
-
Unscored —
SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Profess…
-
Unscored —
PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execut…
-
Unscored —
PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote at…
-
Unscored —CVE-2005-2049 Public exploit
Multiple SQL injection vulnerabilities in DUware DUclassmate 1.2 allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2005-2048 Public exploit
Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to ex…
-
Unscored —CVE-2005-2044 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbit…
-
Unscored —CVE-2005-2046 Public exploit
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2001-1487 Public exploit
popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute command…
-
Unscored —CVE-2001-1502 Public exploit
webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell met…
-
Unscored —
The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2001-1490 Public exploit
Mozilla 0.9.6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page wit…
-
Unscored —
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) vi…
-
Unscored —CVE-2001-1491 Public exploit
Opera 5.11 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a…
-
Unscored —
Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service (crash) via a Cascadin…
-
Unscored —CVE-2002-1757 Public exploit
PHProjekt 2.0 through 3.1 relies on the $PHP_SELF variable for authentication, which allows remote attackers to bypass …
-
Unscored —
The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2002-1727 Public exploit
Cross-site scripting vulnerability (XSS) in (1) as_web.exe and (2) as_web4.exe in askSam Web Publisher 1 and 4 allows r…
-
Unscored —CVE-2002-1683 Public exploit
Cross-site scripting (XSS) vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2002-1740 Public exploit
Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users …
-
Unscored —CVE-2002-1673 Public exploit
The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the inte…
-
Unscored —CVE-2002-1720 Public exploit
SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain p…
-
Unscored —CVE-2002-1741 Public exploit
Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier …
-
Unscored —CVE-2002-1715 Public exploit
SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by u…
-
Unscored —CVE-2002-1708 Public exploit
Cross-site scripting vulnerability (XSS) in BasiliX Webmail 1.10 allows remote attackers to execute arbitrary script as…
-
Unscored —CVE-2002-1702 Public exploit
Cross-site scripting vulnerability (XSS) in DeltaScripts PHP Classifieds 6.0.5 allows remote attackers to execute arbit…
-
Unscored —CVE-2002-1767 Public exploit
Buffer overflow in tnslsnr of Oracle 8i Database Server 8.1.5 for Linux allows local users to execute arbitrary code as…
-
Unscored —CVE-2002-1731 Public exploit
The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that a…
-
Unscored —
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object …
-
Unscored —CVE-2002-1685 Public exploit
Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote…
-
Unscored —CVE-2002-1703 Public exploit
Cross-site scripting vulnerability (XSS) in auction.cgi for Mewsoft NetAuction 3.0 allows remote attackers to execute a…
-
Unscored —CVE-2002-1704 Public exploit
Zeroboard 4.1, when the "allow_url_fopen" and "register_globals" variables are enabled, allows remote attackers to exec…
-
Unscored —
Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote atta…
-
Unscored —
Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of …
-
Unscored —CVE-2002-1766 Public exploit
Buffer overflow in Composer in Netscape 4.77 allows local users to overwrite process memory and execute arbitrary code …
-
Unscored —
Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and …
-
Unscored —CVE-2002-1773 Public exploit
Buffer overflow in ICQ 2.6x for MacOS X 10.0 through 10.1.2 allows remote attackers to cause a denial of service and po…
-
Unscored —CVE-2005-2021 Public exploit
Cross-site scripting (XSS) vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2005-2041 Public exploit
Buffer overflow in addschup in HAURI ViRobot 2.0, and possibly other products, allows remote attackers to execute arbit…
-
Unscored —CVE-2005-2028 Public exploit
SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrar…