Archive
July 2005
Vulnerabilities first published in this month (UTC), newest first.
116 results · Clear filters · Feed
-
Unscored —CVE-2005-2397 Public exploit
Cross-site scripting (XSS) vulnerability in guestbook.php in phpBook 1.46 allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2005-2386 Public exploit
Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ 1.20 allows remote attackers to inject arbitrary we…
-
Unscored —
Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long direct…
-
Unscored —CVE-2005-2383 Public exploit
SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2005-2276 Public exploit
Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers…
-
Unscored —CVE-2005-2330 Public exploit
Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers to read arbitrary file…
-
Unscored —CVE-2005-2327 Public exploit
Cross-site scripting (XSS) vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2004-2263 Public exploit
SQL injection vulnerability in the valid function in fr_left.php in PlaySMS 0.7 and earlier allows remote attackers to …
-
Unscored —
i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p …
-
Unscored —CVE-2004-2280 Public exploit
Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial …
-
Unscored —
ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to…
-
Unscored —CVE-2004-2277 Public exploit
Buffer overflow in aGSM Half-Life client allows remote Half-Life servers to cause a denial of service (crash) and possi…
-
Unscored —
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET re…
-
Unscored —
netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Co…
-
Unscored —
The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption o…
-
Unscored —CVE-2005-2326 Public exploit
Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2005-2318 Public exploit
Cross-site scripting (XSS) vulnerability in showerr.asp in DVBBS 7.1 SP2 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2005-2323 Public exploit
Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow…
-
Unscored —CVE-2005-2324 Public exploit
Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2005-2305 Public exploit
DG Remote Control Server 1.6.2 allows remote attackers to cause a denial of service (crash or CPU consumption) and poss…
-
Unscored —
Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to …
-
Unscored —
Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute ar…
-
Unscored —CVE-2004-2253 Public exploit
Directory traversal vulnerability in user.cgi in SurgeLDAP 1.0g and earlier allows remote attackers to read arbitrary f…
-
Unscored —CVE-2004-2254 Public exploit
SurgeLDAP 1.0g (Build 12), and possibly other versions before 1.0h, allows remote attackers to bypass authentication fo…
-
Unscored —CVE-2004-2245 Public exploit
Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web scrip…
-
Unscored —CVE-2004-2242 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Phorum, possibly 5.0.7 beta and earlier, allows remote attack…
-
Unscored —CVE-2004-2218 Public exploit
SQL injection vulnerability in pmwh.php in PHPMyWebHosting 0.3.4 and earlier allows remote attackers to modify SQL stat…
-
Unscored —CVE-2004-2246 Public exploit
Cross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary HTML or w…
-
Unscored —
Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a lon…
-
Unscored —
Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated user…
-
Unscored —CVE-2005-2295 Public exploit
NetPanzer 0.8 and earlier allows remote attackers to cause a denial of service (infinite loop) via a packet with a zero…
-
Unscored —
SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to cause a denial of service (application crash) via a large …
-
Unscored —
Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via s…
-
Unscored —CVE-2001-1528 Public exploit
AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are pr…
-
Unscored —CVE-2001-1561 Public exploit
Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) …
-
Unscored —CVE-2001-1518 Public exploit
RunAs (runas.exe) in Windows 2000 only creates one session instance at a time, which allows local users to cause a deni…
-
Unscored —CVE-2001-1559 Public exploit
The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel m…
-
Unscored —CVE-2001-1525 Public exploit
Directory traversal vulnerability in the comments action in easyNews 1.5 and earlier allows remote attackers to modify …
-
Unscored —CVE-2001-1549 Public exploit
Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non…
-
Unscored —CVE-2001-1519 Public exploit
RunAs (runas.exe) in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then c…