Archive
June 2005
Vulnerabilities first published in this month (UTC), newest first.
176 results · Clear filters · Feed
-
Unscored —CVE-2005-2035 Public exploit
SQL injection vulnerability in login.asp for Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to execute arbitr…
-
Unscored —CVE-2005-2033 Public exploit
Directory traversal vulnerability in folderview.asp for Blue-Collar Productions i-Gallery 3.3 allows remote attackers t…
-
Unscored —CVE-2005-2030 Public exploit
Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to…
-
Unscored —
The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 functio…
-
Unscored —CVE-2005-1998 Public exploit
Directory traversal vulnerability in admin.php in McGallery 1.1 allows remote attackers to read arbitrary files via a .…
-
Unscored —CVE-2005-2012 Public exploit
Multiple SQL injection vulnerabilities in login in paFAQ 1.0 Beta 4 allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2005-2009 Public exploit
Multiple SQL injection vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2005-2006 Public exploit
JBOSS 3.2.2 through 3.2.7 and 4.0.2 allows remote attackers to obtain sensitive information via a GET request (1) with …
-
Unscored —CVE-2005-2011 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in paFAQ 1.0 Beta 4 allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2005-2002 Public exploit
SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2005-2010 Public exploit
Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbit…
-
Unscored —CVE-2005-2000 Public exploit
Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary SQL comm…
-
Unscored —
Buffer overflow in the IMAP command continuation function in Novell NetMail 3.52 before 3.52C may allow remote attacker…
-
Unscored —
The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence o…
-
Unscored —CVE-2005-1955 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in singapore 0.9.11 allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2005-1725 Public exploit
launchd 106 in Apple Mac OS X 10.4.x up to 10.4.1 allows local users to overwrite arbitrary files via a symlink attack …
-
Unscored —CVE-2005-1959 Public exploit
jammail.pl in jamchen JamMail 1.8 allows remote attackers to execute arbitrary commands via shell metacharacters in the…
-
Unscored —CVE-2005-1967 Public exploit
Multiple SQL injection vulnerabilities in ProductCart Ecommerce before 2.7 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2005-1948 Public exploit
Multiple SQL injection vulnerabilities in Invision Gallery before 1.3.1 allow remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2005-1943 Public exploit
Multiple SQL injection vulnerabilities in Loki download manager 2.0 allow remote attackers to execute arbitrary SQL com…
-
Unscored —
Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows re…
-
Unscored —CVE-2005-1951 Public exploit
Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow remote attackers to sp…
-
Unscored —CVE-2005-1950 Public exploit
hints.pl in Webhints 1.03 allows remote attackers to execute arbitrary commands via shell metacharacters in the argumen…
-
Unscored —CVE-2005-1899 Public exploit
Rakkarsoft RakNet network library 2.33 and earlier, when released before 30 May 2005, and as used in multiple products …
-
Unscored —CVE-2005-1905 Public exploit
The klif.sys driver in Kaspersky Labs Anti-Virus 5.0.227, 5.0.228, and 5.0.335 on Windows 2000 allows local users to ga…
-
Unscored —CVE-2005-1895 Public exploit
Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.3 allows remote attackers to inject arbitrary web script or HT…
-
Unscored —CVE-2005-1894 Public exploit
Direct code injection vulnerability in FlatNuke 2.5.3 allows remote attackers to execute arbitrary PHP code by placing …
-
Unscored —CVE-2005-1893 Public exploit
FlatNuke 2.5.3 allows remote attackers to obtain sensitive information via invalid parameters to certain scripts, which…
-
Unscored —CVE-2005-1903 Public exploit
Buffer overflow in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to execute arbitra…
-
Unscored —CVE-2005-1873 Public exploit
Multiple buffer overflows in Crob FTP 3.6.1, and possibly earlier versions, allow remote attackers to execute arbitrary…
-
Unscored —CVE-2005-1882 Public exploit
PHP remote file inclusion vulnerability in last_gallery.php in YaPiG 0.93u and 0.94u allows remote attackers to execute…
-
Unscored —CVE-2005-1886 Public exploit
Cross-site scripting (XSS) vulnerability in view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to inject …
-
Unscored —CVE-2005-1881 Public exploit
upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, whic…
-
Unscored —CVE-2005-1884 Public exploit
Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u …
-
Unscored —CVE-2005-1870 Public exploit
PHP remote file inclusion vulnerability in childwindow.inc.php in Popper 1.41-r2 and earlier allows remote attackers to…
-
Unscored —CVE-2005-1858 Public exploit
FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a …
-
Unscored —
D-Link DSL-504T allows remote attackers to bypass authentication and gain privileges, such as upgrade firmware, restart…
-
Unscored —CVE-2005-1833 Public exploit
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2004-2135 Public exploit
cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV …
-
Unscored —CVE-2005-1800 Public exploit
Cross-site scripting (XSS) vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitra…