Skip to content
OpenAdvisories

Archive

16 August 2005

Vulnerabilities first published on this day (UTC), newest first.

37 results · Clear filters · Feed

  • Unscored —
    CVE-2004-2311 Public exploit

    Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to create folders or dete…

  • Unscored —
    CVE-2004-2310 Public exploit

    Cross-site scripting (XSS) vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arb…

  • Unscored —
    CVE-2004-2367 Public exploit

    The Control Panel applet in WFTPD and WFTPD Pro 3.21 R1 and R2 allows remote authenticated users to cause a denial of s…

  • Unscored —
    CVE-2004-2303 Public exploit

    MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissio…

  • Unscored —
    CVE-2004-2368 Public exploit

    PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2004-2350 Public exploit

    SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2004-2344 Public exploit

    Unknown vulnerability in the ASN.1/H.323/H.225 stack of VocalTec VGW120 and VGW480 allows remote attackers to cause a d…

  • Unscored —
    CVE-2004-2347 Public exploit

    blog.cgi in Leif M. Wright Web Blog 1.1 and 1.1.5 allows remote attackers to execute arbitrary commands via shell metac…

  • Unscored —
    CVE-2004-2309 Public exploit

    Directory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside the FTP root via multip…

  • Unscored —
    CVE-2004-2375 Public exploit

    Buffer overflow in the POP3 server in 1st Class Mail Server 4.0 allows remote attackers to cause a denial of service (c…

  • Unscored —
    CVE-2004-2366 Public exploit

    Buffer overflow in GlobalSCAPE Secure FTP Server 2.0 B03.11.2004.2 allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2004-2374 Public exploit

    BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.ph…

  • Unscored —
    CVE-2004-2359 Public exploit

    Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started…

  • Unscored —
    CVE-2004-2360 Public exploit

    Targem Battle Mages 1.0 allows remote attackers to cause a denial of service (infinite loop) via a UDP packet with inco…

  • Unscored —
    CVE-2004-2364 Public exploit EPSS 11%

    Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2004-2385 Public exploit

    EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory) via an HTTP request for…

  • Unscored —
    CVE-2004-2312 Public exploit

    Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long …

  • Unscored —
    CVE-2004-2383 Public exploit EPSS 20%

    Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and ca…

  • Unscored —
    CVE-2004-2373 Public exploit

    The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may all…

  • Unscored —
    CVE-2004-2363 Public exploit

    Validate-Before-Canonicalize vulnerability in the checkURI function in functions.inc.php in PHPX 3.0 through 3.2.6 allo…

  • Unscored —
    CVE-2004-2334 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in EMU Webmail 5.2.7 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2004-2371 Public exploit

    Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1…

  • Unscored —
    CVE-2004-2308 Public exploit

    Cross-site scripting (XSS) vulnerability in cPanel 9.1.0 and possibly earlier allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2004-2355 Public exploit

    Cross-site scripting (XSS) vulnerability in Crafty Syntax Live Help (CSLH) before 2.7.4 allows remote attackers to inje…

  • Unscored —
    CVE-2004-2326 Public exploit

    SQL injection vulnerability in IP3 Networks NetAccess Appliance before firmware 3.1.18b13 allows remote attackers to by…

  • Unscored —
    CVE-2005-2560 Public exploit

    Cross-site scripting (XSS) vulnerability in index.cfm in CFBB 1.1.0 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2005-2580 Public exploit

    Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch allow remote attackers to…

  • Critical 9.8
    CVE-2005-2103 Public exploit EPSS 16%

    Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (ap…

  • Unscored —
    CVE-2005-2581 Public exploit

    Grandstream BudgeTone 101 and 102 running firmware 1.0.6.7 and possibly earlier versions, allows remote attackers to ca…

  • Unscored —
    CVE-2005-2577 Public exploit

    Wyse Winterm 1125SE running firmware 4.2.09f or 4.4.061f allows remote attackers to cause a denial of service (device c…

  • Unscored —
    CVE-2005-2357 Public exploit

    Directory traversal vulnerability in EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to read arbitrary files v…

  • Unscored —
    CVE-2005-2569 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly earlier versions, allow remote at…

  • Unscored —
    CVE-2005-2564 Public exploit

    Direct static code injection vulnerability in editcss.php in Gravity Board X (GBX) 1.1 allows remote attackers to execu…

  • Unscored —
    CVE-2005-2562 Public exploit

    SQL injection vulnerability in Gravity Board X (GBX) 1.1 allows remote attackers to execute arbitrary SQL commands and …

  • Unscored —
    CVE-2005-2587 Public exploit

    SQL injection vulnerability in emailvalidate.php in PHPTB Topic Boards 2.0 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2003-1227 Public exploit

    PHP remote file include vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configura…

  • Unscored —
    CVE-2003-1228 Public exploit EPSS 14%

    Buffer overflow in the prepare_reply function in request.c for Mathopd 1.2 through 1.5b13, and possibly earlier version…