Archive
July 2005
Vulnerabilities first published in this month (UTC), newest first.
116 results · Clear filters · Feed
-
Unscored —CVE-2005-2239 Public exploit
oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null (\0) ch…
-
Unscored —CVE-2005-2236 Public exploit
Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users…
-
Unscored —CVE-2005-2242 Public exploit
Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows…
-
Unscored —CVE-2005-2210 Public exploit
Stack-based buffer overflow in Internet Download Manager 4.05 allows remote attackers to execute arbitrary code via a l…
-
Unscored —CVE-2005-2208 Public exploit
PrivaShare 1.1b allows remote attackers to cause a denial of service (crash) via a malformed message.
-
Unscored —
PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers…
-
Unscored —
Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary…
-
Unscored —CVE-2004-2184 Public exploit
Directory traversal vulnerability in Digicraft Yak! server 2.0 through 2.1.2 allows remote attackers to read or write a…
-
Unscored —CVE-2004-2171 Public exploit
Cross-site scripting (XSS) vulnerability in Cherokee before 0.4.8 allows remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2004-2158 Public exploit
SQL injection vulnerability in Serendipity 0.7-beta1 allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2004-2172 Public exploit
EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the…
-
Unscored —CVE-2004-2202 Public exploit
Multiple SQL injection vulnerabilities in DUware DUclassified 4.0 through 4.2 allows remote attackers to bypass authent…
-
Unscored —CVE-2004-2201 Public exploit
SQL injection vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2004-2198 Public exploit
account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users b…
-
Unscored —CVE-2004-2161 Public exploit
SQL injection vulnerability in file_overview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2004-2175 Public exploit
Multiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2004-2162 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to inject arbitrary web script …
-
Unscored —CVE-2004-2181 Public exploit
Multiple SQL injection vulnerabilities in WowBB Forum 1.61 allow remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2004-2176 Public exploit
The Internet Connection Firewall (ICF) in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which…
-
Unscored —CVE-2004-2170 Public exploit
Directory traversal vulnerability in sample_showcode.html in Caravan 2.00/03d and earlier allows remote attackers to re…
-
Unscored —CVE-2005-2192 Public exploit
SimplePHPBlog 0.4.0 stores password hashes in config/password.txt with insufficient access control, which allows remote…
-
Unscored —CVE-2005-2175 Public exploit
The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save…
-
Unscored —CVE-2005-2176 Public exploit
Novell NetMail automatically processes HTML in an attachment without prompting the user to save or open it, which makes…
-
Unscored —CVE-2005-2154 Public exploit
PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remot…
-
Unscored —CVE-2005-2155 Public exploit
PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitra…
-
Unscored —CVE-2005-2163 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in AutoIndex PHP Script 1.5.2 allows remote attackers to inject a…
-
Unscored —CVE-2005-2157 Public exploit
PHP remote file inclusion vulnerability in survey.inc.php for nabopoll 1.2 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2005-2162 Public exploit
PHP remote file inclusion vulnerability in form.inc.php3 in MyGuestbook 0.6.1 allows remote attackers to execute arbitr…
-
Unscored —CVE-2005-2140 Public exploit
Directory traversal vulnerability in default.asp for FSboard 2.0 allows remote attackers to read arbitrary files via ".…
-
Unscored —CVE-2005-2141 Public exploit
TCP Chat 1.0 allows remote attackers to cause a denial of service (crash) via a long string to the chat service, possib…
-
Unscored —CVE-2004-2151 Public exploit
Chatman 1.1.1 RC1 and earlier allows remote attackers to cause a denial of service (memory consumption or application c…
-
Unscored —
Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For P…
-
Unscored —CVE-2005-2113 Public exploit
SQL injection vulnerability in the loginUser function in the XMLRPC server in XOOPS 2.0.11 and earlier allows remote at…
-
Unscored —CVE-2005-2108 Public exploit
SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2005-2106 Public exploit
Unknown vulnerability in Drupal 4.5.0 through 4.5.3, 4.6.0, and 4.6.1 allows remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2005-2112 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.0.11 and earlier allow remote attackers to inject arbitr…