Archive
June 2005
Vulnerabilities first published in this month (UTC), newest first.
651 results · Feed
-
Unscored —CVE-2005-2030 Public exploit
Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to…
-
Unscored —
modifyUser.asp in Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to obtain the administrator password and ema…
-
Unscored —
Fortibus CMS 4.0.0 allows remote attackers to modify information of other users, including Admin, via the "My info" pag…
-
Unscored —
Multiple SQL injection vulnerabilities in socialMPN allow remote attackers to execute arbitrary SQL commands via (1) th…
-
Unscored —
Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file,…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in pafiledb.php in paFileDB 3.1 allow remote attackers to inject ar…
-
Unscored —
The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents "security …
-
Unscored —
PHP remote file inclusion vulnerability in start.php in Bitrix Site Manager 4.0.x allows remote attackers to execute ar…
-
Unscored —
Finjan SurfinGate 7.0SP2 and SP3 allows remote attackers to download blocked files via hex-encoded characters in a file…
-
Unscored —
The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 functio…
-
Unscored —
Novell eDirectory 8.7.3 allows remote attackers to cause a denial of service (application crash) via a URL containing a…
-
Unscored —
Bitrix Site Manager 4.0.x allows remote attackers to obtain sensitive information via direct request to (1) subscr_form…
-
Unscored —CVE-2005-1998 Public exploit
Directory traversal vulnerability in admin.php in McGallery 1.1 allows remote attackers to read arbitrary files via a .…
-
Unscored —
show.php in McGallery 1.1 allows remote attackers to connect to arbitrary databases, or gain sensitive information by t…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.4 allow remote attackers to injec…
-
Unscored —CVE-2005-2012 Public exploit
Multiple SQL injection vulnerabilities in login in paFAQ 1.0 Beta 4 allow remote attackers to execute arbitrary SQL com…
-
Unscored —
Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier stores the users.dat file under the web document root with insufficient…
-
Unscored —CVE-2005-2009 Public exploit
Multiple SQL injection vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Ultimate PHP Board (UPB) 1.9.6 GOLD allows remote attackers to obtain sensitive information via an invalid (zero) id pa…
-
Unscored —
The "upload a language pack" feature in paFAQ 1.0 Beta 4 allows remote authenticated administrators to execute arbitrar…
-
Unscored —CVE-2005-2006 Public exploit
JBOSS 3.2.2 through 3.2.7 and 4.0.2 allows remote attackers to obtain sensitive information via a GET request (1) with …
-
Unscored —CVE-2005-2011 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in paFAQ 1.0 Beta 4 allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2005-2002 Public exploit
SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —
paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive information via a direct request to admin/backup.php, whic…
-
Unscored —CVE-2005-2010 Public exploit
Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbit…
-
Unscored —CVE-2005-2000 Public exploit
Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary SQL comm…
-
Unscored —
Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary…
-
Unscored —
Directory traversal vulnerability in pafiledb.php in paFileDB 3.1 and earlier allows remote attackers to include arbitr…
-
Unscored —
Multiple cross-site scripting vulnerabilities in Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier allow remote attackers…
-
Unscored —
Yaws Webserver 1.55 and earlier allows remote attackers to obtain the source code for yaws scripts via a request to a y…
-
Unscored —
The XMLHttpRequest object in Opera 8.0 Final Build 1095 allows remote attackers to bypass access restrictions and perfo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Opera 8.0 Final Build 1095 allows remote attackers to inject arbitrary web …
-
Unscored —
Buffer overflow in the Modweb agent for Novell NetMail 3.52 before 3.52C, when renaming folders, may allow attackers to…
-
Unscored —CVE-2005-1206 EPSS 59%
Buffer overflow in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server …
-
Unscored —CVE-2005-1211 EPSS 29%
Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote attackers to execute …
-
Unscored —
Buffer overflow in the IMAP command continuation function in Novell NetMail 3.52 before 3.52C may allow remote attacker…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the ModWeb agent for Novell NetMail 3.52 before 3.52C allows remote attacke…
-
Unscored —
Buffer overflow in the Web Client service in Microsoft Windows XP and Windows Server 2003 allows remote authenticated u…
-
Unscored —CVE-2005-1208 EPSS 47%
Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attac…
-
Unscored —
The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence o…