Archive
June 2005
Vulnerabilities first published in this month (UTC), newest first.
651 results · Feed
-
High 8.4
Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using …
-
Unscored —
D-Link DSL-504T allows remote attackers to bypass authentication and gain privileges, such as upgrade firmware, restart…
-
Unscored —CVE-2005-1833 Public exploit
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 allow remote attackers to execute arbitrary S…
-
Unscored —
NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote atta…
-
Unscored —
The DbgMsg.sys driver in Compuware SoftICE DriverStudio 3.1 and 3.2 allows remote attackers to cause a denial of servic…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 and earlier allow remote attacke…
-
Unscored —
SQL injection vulnerability in login.asp in NEXTWEB (i)Site allows remote attackers to execute arbitrary SQL commands a…
-
Unscored —
Directory traversal vulnerability in class.layout_phpcms.php in phpCMS 1.2.x before 1.2.1pl2 allows remote attackers to…
-
Unscored —
Buffer overflow in HP Radia Notify Daemon 3.1.0.0 (formerly by Novadigm), and other versions including 2.x, 3.x, and 4.…
-
Unscored —
The sql_escape_string function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "\…
-
Unscored —
Fortinet firewall running FortiOS 2.x contains a hardcoded username with the password set to the serial number, which a…
-
Unscored —
D-Link DSL-504T stores usernames and passwords in cleartext in the router configuration file, which allows remote attac…
-
Unscored —CVE-2005-1825 EPSS 62%
Multiple stack-based buffer overflows in the nvd_exec function in HP Radia Notify Daemon 3.1.2.0 (formerly by Novadigm)…
-
Unscored —
dm-crypt on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV co…
-
Unscored —CVE-2004-2135 Public exploit
cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV …
-
Unscored —
Stack-based buffer overflow in PicoWebServer 1.0 allows remote attackers to cause a denial of service (application cras…
-
Unscored —
Nortel VPN Router (aka Contivity) allows remote attackers to cause a denial of service (crash) via an IPsec IKE packet …
-
Unscored —CVE-2005-1800 Public exploit
Cross-site scripting (XSS) vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitra…
-
Unscored —
Firefly Studios Stronghold 2 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a packet …
-
Unscored —CVE-2005-1822 Public exploit
Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL comman…
-
Unscored —
Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of …
-
Unscored —CVE-2005-1821 Public exploit
PHP remote file inclusion vulnerability in pdl_header.inc.php in PowerDownload 3.0.2 and 3.0.3 allows remote attackers …
-
Unscored —CVE-2005-1820 Public exploit
zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quo…
-
Unscored —
Multiple SQL injection vulnerabilities in NewLife Blogger before 3.3.1 allow remote attackers to execute arbitrary SQL …
-
Unscored —
Format string vulnerability in PeerCast 0.1211 and earlier allows remote attackers to execute arbitrary code via format…
-
Unscored —
Cross-site scripting (XSS) vulnerability in NikoSoft WebMail before 0.11.0 allows remote attackers to inject arbitrary …
-
Unscored —
SQL injection vulnerability in SignIn.asp in India Software Solution shopping cart allows remote attackers to execute a…
-
Unscored —
User32.DLL in Microsoft Windows 98SE, and possibly other operating systems, allows local and remote attackers to cause …
-
Unscored —
Sony Ericsson P900 Beamer allows remote attackers to cause a denial of service (panic) via an obexftp session with a lo…
-
Unscored —CVE-2005-1823 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrar…
-
Unscored —
Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read …
-
Unscored —
The filecopy function in misc.c in Clam AntiVirus (ClamAV) before 0.85, on Mac OS, allows remote attackers to execute a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in usercp.php for MyBulletinBoard (MyBB) allows remote attackers to inject arb…
-
Unscored —
Directory traversal vulnerability in ServersCheck Monitoring Software 5.9.0 to 5.10.0 allows remote attackers to read a…
-
Unscored —
Invision Power Board (IPB) 1.0 through 2.0.4 allows non-root admins to add themselves or other users to the root admin …
-
Unscored —
Memory leak in Windows Management Instrumentation (WMI) service allows attackers to cause a denial of service (memory c…
-
Unscored —
SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute ar…
-
Unscored —
The design of Advanced Encryption Standard (AES), aka Rijndael, allows remote attackers to recover AES keys via timing …
-
Unscored —CVE-2005-1805 Public exploit
SQL injection vulnerability in login.asp in an unknown product by Online Solutions for Educators (OS4E) allows remote a…
-
Unscored —CVE-2005-1801 Public exploit
The vCard viewer in Nokia 9500 allows attackers to cause a denial of service (crash) via a vCard with a long Name field…