Archive
3 August 2005
Vulnerabilities first published on this day (UTC), newest first.
41 results · Feed
-
Unscored —
gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local users to gain privileg…
-
Unscored —
browse.php in Website Baker Project allows remote attackers to obtain sensitive data via (1) a directory that does not …
-
Unscored —CVE-2005-2414 Public exploit
Race condition in the xpcom library, as used by web browsers such as Firefox, Mozilla, Netscape, and Galeon, allows rem…
-
Unscored —CVE-2005-2441 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and…
-
Unscored —
PhpList allows remote attackers to obtain sensitive information via a direct request to (1) about.php, (2) connect.php,…
-
Unscored —
Stack-based buffer overflow in Ares FileShare 1.1 allows remote attackers or local users to execute arbitrary code via …
-
Unscored —
Firefox, when opening Microsoft Word documents, does not properly set the permissions on shared sections, which allows …
-
Unscored —
Website Baker Project does not properly verify the file extensions of uploaded files, which allows remote attackers to …
-
Unscored —CVE-2005-2426 Public exploit
FTPshell Server 3.38 allows remote authenticated users to cause a denial of service (application crash) by multiple con…
-
Unscored —
Multiple SQL injection vulnerabilities in Contrexx before 1.0.5 allow remote attackers to execute arbitrary SQL command…
-
Unscored —
SQL injection vulnerability in viewPrd.asp in Product Cart 2.6 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Kshout 2.x and 3.x stores settings.dat under the web document root with insufficient access control, which allows remot…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script…
-
Unscored —
Cross-site scripting (XSS) vulnerability in UseBB 0.5.1 and earlier allows remote attackers to inject arbitrary Javascr…
-
Unscored —
Race condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files via symlink attack on…
-
Unscored —
Cross-site scripting (XSS) vulnerability in browse.php in Website Baker Project allows remote attackers to inject arbit…
-
Unscored —CVE-2005-2432 Public exploit
SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pa…
-
Unscored —
PHP remote file inclusion vulnerability in apa_phpinclude.inc.php in Atomic Photo Album (APA) allows remote attackers t…
-
Unscored —
Trillian Pro 3.1 build 121, when checking Yahoo e-mail, stores the password in plaintext in a world readable file and d…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Contrexx before 1.0.5 allow remote attackers to inject arbitrary…
-
Unscored —CVE-2005-2412 Public exploit
PHP remote file inclusion vulnerability in block.php in PHP FirstPost allows remote attackers to execute arbitrary PHP …
-
Unscored —
RPC portmapper (rpcbind) in SCO UnixWare 7.1.1 m5, 7.1.3 mp5, and 7.1.4 mp2 allows remote attackers or local users to c…
-
Unscored —CVE-2005-2420 Public exploit
flsearch.pl in FtpLocate 2.02 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP…
-
Unscored —
B-FOCuS Router 312+ allows remote attackers to bypass authentication and gain unauthorized access via a direct request …
-
Unscored —
Cisco IOS 12.0 through 12.4 and IOS XR before 3.2, with IPv6 enabled, allows remote attackers on a local network segmen…
-
Unscored —
SQL injection vulnerability in login.asp in Thomson Web Skill Vantage Manager allows remote attackers to execute arbitr…
-
Unscored —
libtiff up to 3.7.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image header wi…
-
Unscored —
The management interface for Siemens SANTIS 50 running firmware 4.2.8.0, and possibly other products including Ericsson…
-
Unscored —
The (1) lost password and (2) account pending features in GForge 4.5 do not properly set a limit on the number of e-mai…
-
Unscored —
Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service (inval…
-
Unscored —
Linksys WRT54G router uses the same private key and certificate for every router, which allows remote attackers to snif…
-
Unscored —
SQL injection vulnerability in UseBB 0.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to e…
-
Unscored —
Multiple SQL injection vulnerabilities in index.php and other pages in Beehive Forum allow remote attackers to execute …
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Beehive Forum allows remote attackers to inject arbitrary web …
-
Unscored —
Buffer overflow in Novell GroupWise 6.5 Client allows remote attackers to execute arbitrary code via a GWVW02xx.INI lan…
-
Unscored —
Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ allows remote attackers to inject arbitrary web scr…
-
Unscored —
Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus …
-
Unscored —
Cross-Application Scripting (XAS) vulnerability in SPI Dynamics WebInspect 5.0.196 allows remote attackers to inject Ja…
-
Unscored —
Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hi…
-
Unscored —
Beehive Forum allows remote attackers to obtain sensitive information via (1) an invalid final_uri or sort_by parameter…