Skip to content
OpenAdvisories

Archive

July 2005

Vulnerabilities first published in this month (UTC), newest first.

  1. 124
  2. 2 
  3. 3 
  4. 4 
  5. 516
  6. 624
  7. 71
  8. 82
  9. 92
  10. 1075
  11. 1122
  12. 1235
  13. 1328
  14. 14176
  15. 151
  16. 161
  17. 1768
  18. 18 
  19. 1958
  20. 208
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 2622
  27. 2722
  28. 283
  29. 29 
  30. 30 
  31. 31 

116 results · Clear filters · Feed

  • Unscored —
    CVE-2005-2397 Public exploit

    Cross-site scripting (XSS) vulnerability in guestbook.php in phpBook 1.46 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2005-2386 Public exploit

    Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ 1.20 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2005-2373 Public exploit EPSS 46%

    Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long direct…

  • Unscored —
    CVE-2005-2383 Public exploit

    SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2005-2276 Public exploit

    Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers…

  • Unscored —
    CVE-2005-2330 Public exploit

    Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers to read arbitrary file…

  • Unscored —
    CVE-2005-2327 Public exploit

    Cross-site scripting (XSS) vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2004-2263 Public exploit

    SQL injection vulnerability in the valid function in fr_left.php in PlaySMS 0.7 and earlier allows remote attackers to …

  • Unscored —
    CVE-2004-2275 Public exploit EPSS 13%

    i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p …

  • Unscored —
    CVE-2004-2280 Public exploit

    Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial …

  • Unscored —
    CVE-2004-2262 Public exploit EPSS 15%

    ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to…

  • Unscored —
    CVE-2004-2277 Public exploit

    Buffer overflow in aGSM Half-Life client allows remote Half-Life servers to cause a denial of service (crash) and possi…

  • Unscored —
    CVE-2004-2271 Public exploit EPSS 72%

    Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET re…

  • Unscored —
    CVE-2005-2307 Public exploit EPSS 26%

    netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Co…

  • Unscored —
    CVE-2005-2308 Public exploit EPSS 17%

    The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption o…

  • Unscored —
    CVE-2005-2326 Public exploit

    Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-2318 Public exploit

    Cross-site scripting (XSS) vulnerability in showerr.asp in DVBBS 7.1 SP2 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2005-2323 Public exploit

    Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow…

  • Unscored —
    CVE-2005-2324 Public exploit

    Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-2305 Public exploit

    DG Remote Control Server 1.6.2 allows remote attackers to cause a denial of service (crash or CPU consumption) and poss…

  • Unscored —
    CVE-2005-2297 Public exploit EPSS 74%

    Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to …

  • Unscored —
    CVE-2005-2310 Public exploit EPSS 13%

    Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute ar…

  • Unscored —
    CVE-2004-2253 Public exploit

    Directory traversal vulnerability in user.cgi in SurgeLDAP 1.0g and earlier allows remote attackers to read arbitrary f…

  • Unscored —
    CVE-2004-2254 Public exploit

    SurgeLDAP 1.0g (Build 12), and possibly other versions before 1.0h, allows remote attackers to bypass authentication fo…

  • Unscored —
    CVE-2004-2245 Public exploit

    Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web scrip…

  • Unscored —
    CVE-2004-2242 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in Phorum, possibly 5.0.7 beta and earlier, allows remote attack…

  • Unscored —
    CVE-2004-2218 Public exploit

    SQL injection vulnerability in pmwh.php in PHPMyWebHosting 0.3.4 and earlier allows remote attackers to modify SQL stat…

  • Unscored —
    CVE-2004-2246 Public exploit

    Cross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary HTML or w…

  • Unscored —
    CVE-2004-2221 Public exploit EPSS 35%

    Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a lon…

  • Unscored —
    CVE-2005-2278 Public exploit EPSS 85%

    Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated user…

  • Unscored —
    CVE-2005-2295 Public exploit

    NetPanzer 0.8 and earlier allows remote attackers to cause a denial of service (infinite loop) via a packet with a zero…

  • Unscored —
    CVE-2005-2287 Public exploit EPSS 57%

    SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to cause a denial of service (application crash) via a large …

  • Unscored —
    CVE-2005-2277 Public exploit EPSS 13%

    Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via s…

  • Unscored —
    CVE-2001-1528 Public exploit

    AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are pr…

  • Unscored —
    CVE-2001-1561 Public exploit

    Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) …

  • Unscored —
    CVE-2001-1518 Public exploit

    RunAs (runas.exe) in Windows 2000 only creates one session instance at a time, which allows local users to cause a deni…

  • Unscored —
    CVE-2001-1559 Public exploit

    The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel m…

  • Unscored —
    CVE-2001-1525 Public exploit

    Directory traversal vulnerability in the comments action in easyNews 1.5 and earlier allows remote attackers to modify …

  • Unscored —
    CVE-2001-1549 Public exploit

    Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non…

  • Unscored —
    CVE-2001-1519 Public exploit

    RunAs (runas.exe) in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then c…