Archive
August 2005
Vulnerabilities first published in this month (UTC), newest first.
136 results · Clear filters · Feed
-
Unscored —CVE-2005-2719 Public exploit
Ventrilo 2.1.2 through 2.3.0 allows remote attackers to cause a denial of service (application crash) via a status pack…
-
Unscored —CVE-2005-2721 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) admin.php in Foojan PHP Weblog allow remote…
-
Unscored —CVE-2005-2729 Public exploit
The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows r…
-
Unscored —
upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which co…
-
Unscored —CVE-2005-2725 Public exploit
The inputtrap utility in QNX RTOS 6.1.0, 6.3, and possibly earlier versions does not properly check permissions when th…
-
Unscored —CVE-2005-2697 Public exploit
SQL injection vulnerability in search.php for MyBulletinBoard (MyBB) 1.00 Release Candidate 1 through 4 allows remote a…
-
Unscored —CVE-2005-2694 Public exploit
Buffer overflow in WinAce 2.6.0.5, and possibly earlier versions, allows remote attackers to execute arbitrary code via…
-
Unscored —CVE-2005-1843 Public exploit
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with …
-
Unscored —CVE-2005-1842 Public exploit
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with …
-
Unscored —CVE-2005-2689 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.760-RC4b allows remote attackers to inject arbitrary …
-
Unscored —CVE-2005-2690 Public exploit
SQL injection vulnerability in the Downloads module in PostNuke 0.760-RC4b allows PostNuke administrators to execute ar…
-
Unscored —CVE-2005-2675 Public exploit
Note: the vendor has disputed this issue. Multiple SQL injection vulnerabilities in Land Down Under (LDU) 800 allow rem…
-
Unscored —
Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attacke…
-
Unscored —CVE-2005-2673 Public exploit
SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers…
-
Unscored —CVE-2005-2683 Public exploit
Multiple SQL injection vulnerabilities in PHPKit 1.6.1 allow remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2005-2674 Public exploit
Note: the vendor has disputed this issue. Multiple cross-site scripting (XSS) vulnerabilities in Land Down Under (LDU) …
-
Unscored —
Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and …
-
Unscored —CVE-2004-2480 Public exploit
Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via…
-
Unscored —CVE-2005-2651 Public exploit
gorum/prod.php in Zorum 3.5 allows remote attackers to execute arbitrary code via shell metacharacters in the argv para…
-
Unscored —CVE-2005-2648 Public exploit
Directory traversal vulnerability in index.php in W-Agora 4.2.0 and earlier allows remote attackers to read arbitrary f…
-
Unscored —CVE-2005-2649 Public exploit
Cross-site scripting (XSS) vulnerability in ATutor 1.5.1 allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —CVE-2005-2644 Public exploit
Buffer overflow in JaguarEditControl.dll in Isemarket JaguarControl allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2004-2447 Public exploit
Cross-site scripting (XSS) vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2004-2445 Public exploit
Directory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view arbitrary files via a .…
-
Unscored —CVE-2004-2464 Public exploit
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or l…
-
Unscored —CVE-2004-2456 Public exploit
SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2004-2449 Public exploit
Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier allows remote attackers to cause a denial…
-
Unscored —CVE-2004-2475 Public exploit
Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web sc…
-
Unscored —
chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long usernam…
-
Unscored —CVE-2004-2451 Public exploit
Roger Wilco 1.4.1.6 and earlier, or Roger Wilco Base Station 0.30a or earlier, allows remote attackers to send audio to…
-
Unscored —CVE-2004-2443 Public exploit
Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie s…
-
Unscored —
Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows …
-
Unscored —CVE-2004-2444 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Jaws 0.3 allows remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2005-2638 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to inject ar…
-
Unscored —CVE-2005-2637 Public exploit
Multiple SQL injection vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2005-2639 Public exploit
Buffer overflow in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service…
-
Unscored —CVE-2005-2633 Public exploit
Multiple PHP file inclusion vulnerabilities in (1) admin_o.php, (2) board_o.php, (3) dev_o.php, (4) file_o.php or (5) t…
-
Unscored —CVE-2005-2640 Public exploit
Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE wit…
-
Unscored —CVE-2005-2508 Public exploit
dsidentity in Directory Services in Mac OS X 10.4.2 allows local users to add or remove user accounts.
-
Unscored —
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) a…