29 August 2005

25 results · Feed

• Unscored —
  CVE-2005-1855

  Backup Manager (backup-manager) before 0.5.8 creates backup files with world-readable default permissions, which allows…

  backup-manager Debian
  Aug 29, 2005
• Unscored —
  CVE-2005-1856

  The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logg…

  backup-manager Debian
  Aug 29, 2005
• Unscored —
  CVE-2005-2731

  Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated webmin u…

  Aug 29, 2005
• Unscored —
  CVE-2005-2723

  SQL injection vulnerability in auth.php in PaFileDB 3.1, when authmethod is set to cookies, allows remote attackers to …

  Aug 29, 2005
• Unscored —
  CVE-2005-2724

  Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or H…

  courier Debian
  Aug 29, 2005
• Unscored —
  CVE-2005-2719 Public exploit

  Ventrilo 2.1.2 through 2.3.0 allows remote attackers to cause a denial of service (application crash) via a status pack…

  Aug 29, 2005
• Unscored —
  CVE-2005-2017

  Symantec AntiVirus 9 Corporate Edition allows local users to gain privileges via the "Scan for viruses" option, which l…

  Aug 29, 2005
• Unscored —
  CVE-2005-2727

  Home Ftp Server 1.0.7 stores sensitive user information and server information in the same directory as the user's home…

  Aug 29, 2005
• Unscored —
  CVE-2005-2735

  Cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier allows remote attackers to inject arbitrary we…

  Aug 29, 2005
• Unscored —
  CVE-2005-2718

  Buffer overflow in ad_pcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via crafte…

  Aug 29, 2005
• Unscored —
  CVE-2005-2721 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) admin.php in Foojan PHP Weblog allow remote…

  Aug 29, 2005
• Unscored —
  CVE-2005-2716

  The event_pin_code_request function in the btsrv daemon (btsrv.c) in Nokia Affix 2.1.2 and 3.2.0 allows remote attacker…

  Aug 29, 2005
• Unscored —
  CVE-2005-2729 Public exploit

  The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows r…

  Aug 29, 2005
• Unscored —
  CVE-2005-2732

  AWStats 6.4, and possibly earlier versions, allows remote attackers to obtain sensitive information via a file that doe…

  Aug 29, 2005
• Unscored —
  CVE-2005-2736

  Cross-site scripting (XSS) vulnerability in YaPig 0.95 and earlier allows remote attackers to inject arbitrary web scri…

  Aug 29, 2005
• Unscored —
  CVE-2005-2717

  PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP co…

  Aug 29, 2005
• Unscored —
  CVE-2005-2733 Public exploit EPSS 52%

  upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which co…

  Aug 29, 2005
• Unscored —
  CVE-2005-2720

  Stack-based buffer overflow in the ACE archive decompression library (vrAZace.dll) in HAURI Anti-Virus products includi…

  Aug 29, 2005
• Unscored —
  CVE-2005-2737

  Cross-site scripting (XSS) vulnerability in PhotoPost PHP Pro 5.1 allows remote attackers to inject arbitrary web scrip…

  Aug 29, 2005
• Unscored —
  CVE-2005-2734

  Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary w…

  Aug 29, 2005
• Unscored —
  CVE-2005-2728 EPSS 11%

  The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumpt…

  apache2 Debian
  Aug 29, 2005
• Unscored —
  CVE-2005-2726

  Directory traversal vulnerability in Home Ftp Server 1.0.7 allows remote authenticated users to read arbitrary files vi…

  Aug 29, 2005
• Unscored —
  CVE-2005-2730

  The HTTP proxy in Astaro Security Linux 6.0 allows remote attackers to obtain sensitive information via an invalid requ…

  Aug 29, 2005
• Unscored —
  CVE-2005-2722

  Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct request to /daylinks/index.p…

  Aug 29, 2005
• Unscored —
  CVE-2005-2725 Public exploit

  The inputtrap utility in QNX RTOS 6.1.0, 6.3, and possibly earlier versions does not properly check permissions when th…

  Aug 29, 2005