Archive
16 August 2005
Vulnerabilities first published on this day (UTC), newest first.
132 results · Feed
-
Unscored —
PHPX 3.2.6 and earlier allows remote attackers to obtain the physical path of PHPX via a null or invalid value in the l…
-
Unscored —
Memory leak in Microsoft Windows XP and Windows Server 2003 allows local users to cause a denial of service (memory exh…
-
Unscored —
Cross-site scripting (XSS) vulnerability in EditModule.aspx for DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.…
-
Unscored —
Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers to obtain sensitive informati…
-
Unscored —CVE-2004-2326 Public exploit
SQL injection vulnerability in IP3 Networks NetAccess Appliance before firmware 3.1.18b13 allows remote attackers to by…
-
Unscored —
IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log …
-
Unscored —
PHP remote file inclusion vulnerability in publish_xp_docs.php for Gallery 1.3.2 allows remote attackers to inject arbi…
-
Unscored —
The web administration interface in Mentor ADSL-FR4II router running firmware 2.00.0111 does not set a default password…
-
Unscored —
FunkBoard 0.66CF, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct r…
-
Unscored —CVE-2005-2560 Public exploit
Cross-site scripting (XSS) vulnerability in index.cfm in CFBB 1.1.0 allows remote attackers to inject arbitrary web scr…
-
Unscored —
Eval injection vulnerability in the template engine for SysCP 1.2.10 and earlier allows remote attackers to execute arb…
-
Unscored —
The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-b…
-
Unscored —
EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to list arbitrary directories via an HTTP request for a direct…
-
Unscored —
Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) allow remote attackers to execute arbitrary SQL …
-
Unscored —
xmb.php in XMB Forum 1.9.1 extracts and defines all provided variables, which allows remote attackers to modify arbitra…
-
Unscored —CVE-2005-2580 Public exploit
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch allow remote attackers to…
-
Critical 9.8
Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (ap…
-
Unscored —
FunkBoard 0.66CF, and possibly earlier versions, does not properly restrict access to the (1) admin/mysql_install.php a…
-
Unscored —
Linux kernel 2.6.x does not properly restrict socket policy access to users with the CAP_NET_ADMIN capability, which co…
-
Unscored —
Kaspersky Anti-Virus for Unix/Linux File Servers 5.0-5 uses world-writable permissions for the (1) log and (2) license …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Gravity Board X (GBX) 1.1 allow remote attackers to inject arbit…
-
Unscored —CVE-2005-2470 EPSS 13%
Buffer overflow in a "core application plug-in" for Adobe Reader 5.1 through 7.0.2 and Acrobat 5.0 through 7.0.2 allows…
-
Unscored —
Gravity Board X (GBX) 1.1 allows remote attackers to obtain sensitive information via (1) a 1 in the perm parameter to …
-
Unscored —
Mentor ADSL-FR4II router running firmware 2.00.0111 allows remote attackers to cause a denial of service (active TCP co…
-
Unscored —
Mentor ADSL-FR4II router running firmware 2.00.0111 has an undocumented web server running on TCP port 5678, which allo…
-
Unscored —CVE-2005-2581 Public exploit
Grandstream BudgeTone 101 and 102 running firmware 1.0.6.7 and possibly earlier versions, allows remote attackers to ca…
-
Unscored —CVE-2005-2577 Public exploit
Wyse Winterm 1125SE running firmware 4.2.09f or 4.4.061f allows remote attackers to cause a denial of service (device c…
-
Unscored —
Nortel Contivity VPN Client V05_01.030, when configuring a certificate to be used as authentication, does not properly …
-
Unscored —
Multiple SQL injection vulnerabilities in MYFAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the Th…
-
Unscored —
Mentor ADSL-FR4II router running firmware 2.00.0111 stores the web administration password in cleartext in the backup c…
-
Unscored —CVE-2005-2357 Public exploit
Directory traversal vulnerability in EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to read arbitrary files v…
-
Unscored —
Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0…
-
Unscored —CVE-2005-2569 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly earlier versions, allow remote at…
-
Unscored —CVE-2005-2564 Public exploit
Direct static code injection vulnerability in editcss.php in Gravity Board X (GBX) 1.1 allows remote attackers to execu…
-
Unscored —
SQL injection vulnerability in u2u.inc.php in XMB Forum 1.9.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
PHP remote file inclusion vulnerability in SysCP 1.2.10 and earlier allows remote attackers to execute arbitrary PHP co…
-
Unscored —
MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysql.func table to cau…
-
Unscored —
The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) via a …
-
Unscored —CVE-2005-2562 Public exploit
SQL injection vulnerability in Gravity Board X (GBX) 1.1 allows remote attackers to execute arbitrary SQL commands and …
-
Unscored —
doping.php in ePing plugin 1.02 and earlier for e107 portal allows remote attackers to execute arbitrary code or overwr…