10 July 2005

75 results · Feed

• Unscored —
  CVE-2004-2187

  Unknown vulnerability in ImagePage for MediaWiki 1.3.5, related to "filename validation," has unknown impact and attack…

  mediawiki Debian
  Jul 10, 2005
• Unscored —
  CVE-2004-2173

  SQL injection vulnerability in advSearch_h.asp in EarlyImpact ProductCart allows remote attackers to execute arbitrary …

  Jul 10, 2005
• Unscored —
  CVE-2004-2209

  SQL injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to execute arbitrary S…

  Jul 10, 2005
• Unscored —
  CVE-2004-2186

  SQL injection vulnerability in MediaWiki 1.3.5 allows remote attackers to execute arbitrary SQL commands via SpecialMai…

  mediawiki Debian
  Jul 10, 2005
• Unscored —
  CVE-2004-2167 Public exploit EPSS 14%

  Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary…

  latex2rtf Debian
  Jul 10, 2005
• Unscored —
  CVE-2004-2179 EPSS 12%

  asycpict.dll, as used in Microsoft products such as Front Page 97 and 98, allows remote attackers to cause a denial of …

  Jul 10, 2005
• Unscored —
  CVE-2004-2192

  SQL injection vulnerability in tttadmin/settings.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to execute…

  Jul 10, 2005
• Unscored —
  CVE-2004-2157

  Cross-site scripting (XSS) vulnerability in Comment.php in Serendipity 0.7 beta1, and possibly other versions before 0.…

  Jul 10, 2005
• Unscored —
  CVE-2004-2174

  Cross-site scripting (XSS) vulnerability in Custva.asp in EarlyImpact ProductCart allows remote attackers to inject arb…

  Jul 10, 2005
• Unscored —
  CVE-2004-2160

  Format string vulnerability in xml_elem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a …

  xmlstarlet Debian
  Jul 10, 2005
• Unscored —
  CVE-2004-2180

  Multiple cross-site scripting (XSS) vulnerabilities in WowBB Forum 1.61 allow remote attackers to inject arbitrary web …

  Jul 10, 2005
• Unscored —
  CVE-2004-2184 Public exploit

  Directory traversal vulnerability in Digicraft Yak! server 2.0 through 2.1.2 allows remote attackers to read or write a…

  Jul 10, 2005
• Unscored —
  CVE-2004-2171 Public exploit

  Cross-site scripting (XSS) vulnerability in Cherokee before 0.4.8 allows remote attackers to inject arbitrary web scrip…

  Jul 10, 2005
• Unscored —
  CVE-2004-2191

  Cross-site scripting (XSS) vulnerability in ttt-webmaster.php in Turbo Traffic Trader PHP 1.0 allows remote attackers t…

  Jul 10, 2005
• Unscored —
  CVE-2004-2195

  PHP remote file inclusion vulnerability in index.php in Zanfi CMS lite 1.1 allows remote attackers to execute arbitrary…

  Jul 10, 2005
• Unscored —
  CVE-2004-2203

  Ansel 1.2 through 2.0 uses insecure default permissions, which allows remote attackers to gain access to web readable d…

  Jul 10, 2005
• Unscored —
  CVE-2004-2166

  The print-from-email feature in the Canon ImageRUNNER (iR) 5000i and C3200 digital printer, when not using IP address r…

  Jul 10, 2005
• Unscored —
  CVE-2004-2207

  Cross-site scripting (XSS) vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to inject…

  Jul 10, 2005
• Unscored —
  CVE-2004-2188

  Cross-site scripting (XSS) vulnerability in DMXReady Site Chassis Manager allows remote attackers to inject arbitrary w…

  Jul 10, 2005
• Unscored —
  CVE-2004-2155

  Online-bookmarks before 0.4.6 allows remote attackers to bypass its authentication mechanism via a direct request to (1…

  Jul 10, 2005
• Unscored —
  CVE-2004-2190

  Directory traversal vulnerability in Unzoo 4.4-2 has unknown impact and attack vectors.

  Jul 10, 2005
• Unscored —
  CVE-2004-2158 Public exploit

  SQL injection vulnerability in Serendipity 0.7-beta1 allows remote attackers to execute arbitrary SQL commands via the …

  Jul 10, 2005
• Unscored —
  CVE-2004-2163

  login_radius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret in a response packet fr…

  Jul 10, 2005
• Unscored —
  CVE-2004-2165

  Lords of the Realm III 1.01 and earlier, when in the lobby stage, allows remote attackers to cause a denial of service …

  Jul 10, 2005
• Unscored —
  CVE-2004-2210

  Multiple cross-site scripting (XSS) vulnerabilities in Express-Web Content Management System (CMS) allow remote attacke…

  Jul 10, 2005
• Unscored —
  CVE-2004-2183

  Unknown vulnerability in WeHelpBUS 0.1 allows remote attackers to execute arbitrary shell commands via the query string.

  Jul 10, 2005
• Unscored —
  CVE-2004-2194

  MailEnable Professional Edition before 1.53 and Enterprise Edition before 1.02 allows remote attackers to cause a denia…

  Jul 10, 2005
• Unscored —
  CVE-2004-2205

  Unknown vulnerability in Veritas Cluster Server 1.0.1 through 4.0 allows local users to gain root access via unspecifie…

  Jul 10, 2005
• Unscored —
  CVE-2004-2197

  kdocker.cpp in kdocker 0.1 through 0.8 does not properly check the ownership of files, which could allow local users to…

  Jul 10, 2005
• Unscored —
  CVE-2004-2193

  Cross-site scripting (XSS) vulnerability in trade.php for CJOverkill 4.0.3 allows remote attackers to inject arbitrary …

  Jul 10, 2005
• Unscored —
  CVE-2004-2164

  shoprestoreorder.asp in VP-ASP 5.0 does not close the database connection when a user restores a previous order, which …

  Jul 10, 2005
• Unscored —
  CVE-2004-2172 Public exploit

  EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the…

  Jul 10, 2005
• Unscored —
  CVE-2004-2182

  Session fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user sessions by pre-setting th…

  Jul 10, 2005
• Unscored —
  CVE-2004-2202 Public exploit

  Multiple SQL injection vulnerabilities in DUware DUclassified 4.0 through 4.2 allows remote attackers to bypass authent…

  Jul 10, 2005
• Unscored —
  CVE-2004-2178

  SQL injection vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to execute arbitrary SQL commands via un…

  Jul 10, 2005
• Unscored —
  CVE-2004-2201 Public exploit

  SQL injection vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to execute arbitrary SQL commands…

  Jul 10, 2005
• Unscored —
  CVE-2004-2168

  BaSoMail 1.24 allows remote attackers to cause a denial of service (CPU consumption) via multiple connections to TCP po…

  Jul 10, 2005
• Unscored —
  CVE-2004-2196

  Zanfi CMS lite 1.1 allows remote attackers to obtain the full path of the web server via direct requests without requir…

  Jul 10, 2005
• Unscored —
  CVE-2004-2198 Public exploit

  account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users b…

  Jul 10, 2005
• Unscored —
  CVE-2004-2189

  SQL injection vulnerability in DMXReady Site Chassis Manager allows remote attackers to execute arbitrary SQL commands …

  Jul 10, 2005