Archive
July 2005
Vulnerabilities first published in this month (UTC), newest first.
588 results · Feed
-
Unscored —CVE-2005-2256 Public exploit
Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PhpAuction 2.5 allow remote attackers to inject arbitrary web sc…
-
Unscored —
Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to ex…
-
Unscored —
Opera 7.x and 8 before 8.01 does not clearly associate a Javascript dialog box with the web page that generated it, whi…
-
Unscored —
Microsoft Internet Explorer 6.0 does not clearly associate a Javascript dialog box with the web page that generated it,…
-
Unscored —
Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other methods in a parent fram…
-
Unscored —
Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which …
-
Unscored —
The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly …
-
Unscored —
Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts…
-
Unscored —
SQL injection vulnerability in PhpAuction 2.5 allow remote attackers to modify SQL queries via the category parameter t…
-
Unscored —
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of ser…
-
Unscored —
The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by …
-
Unscored —
Multiple unknown vulnerabilities in Jinzora 2.0.1 have unknown impact and attack vectors, possibly involving a PHP file…
-
Unscored —
PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPA…
-
Unscored —
PHP remote file inclusion vulnerability in photolist.inc.php in Squito Gallery 1.33 allows remote attackers to execute …
-
Unscored —
Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbit…
-
Unscored —
Directory traversal vulnerability in PhpAuction 2.5 allows remote attackers to read arbitrary files, include local PHP …
-
Unscored —
Directory traversal vulnerability in DownloadProtect before 1.0.3 allows remote attackers to read files above the downl…
-
Unscored —CVE-2005-2095 Public exploit
options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $_POST variable, whic…
-
Unscored —
Firefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary code by using standalo…
-
Unscored —
iCab 2.9.8 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote …
-
Unscored —
PHP remote file inclusion vulnerability in secure.php in PHPSecurePages (phpSP) 0.28beta and earlier allows remote atta…
-
Unscored —
Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that…
-
Unscored —
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM nod…
-
Unscored —
The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a…
-
Unscored —CVE-2005-2262 Public exploit
Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user int…
-
Unscored —
The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including (1) USANet Shopping M…
-
Unscored —CVE-2005-0564 EPSS 26%
Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might a…
-
Unscored —
Unknown vulnerability in arshell in the Array Service (arrayd) for SGI ProPack 3 with SP 5 and 6, and SGI ProPack 4, al…
-
Unscored —
Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2005-2224 EPSS 18%
aspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service (CPU consumption f…
-
Unscored —
Dansie Shopping Cart stores the vars.dat file under the web root with insufficient access control, which might allow re…
-
Unscored —CVE-2005-2226 EPSS 13%
Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a "watched" conversation th…
-
Unscored —
Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and …
-
Unscored —
Softiacom wMailserver 1.0 stores passwords in plaintext in the Darsite\MAILSRV\Admin key, which allows local users to g…
-
Unscored —
Unknown vulnerability in the HTTPMail service in MailEnable Professional before 1.6 has unknown impact and attack vecto…
-
Unscored —CVE-2005-2246 Public exploit
Multiple PHP remote file inclusion vulnerabilities in iPhotoAlbum 1.1 allow remote attackers to execute arbitrary code …
-
Unscored —
ftpd in IBM AIX 5.1, 5.2 and 5.3 allows remote authenticated users to cause a denial of service (port exhaustion and me…
-
Unscored —CVE-2005-2219 Public exploit
Hosting Controller 6.1 Hotfix 2.1 allows remote authenticated users to perform unauthorized actions, such as modifying …
-
Unscored —
Unknown vulnerability in F5 BIG-IP 9.0.2 through 9.1 allows attackers to "subvert the authentication of SSL transaction…