Archive
August 2005
Vulnerabilities first published in this month (UTC), newest first.
136 results · Clear filters · Feed
-
Unscored —CVE-2005-2523 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers …
-
Unscored —CVE-2004-2418 Public exploit
Buffer overflow in SlimFTPd 3.15 and earlier allows local users to execute arbitrary code via a long command, such as (…
-
Unscored —
Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser crash) via a link wit…
-
Unscored —CVE-2004-2413 Public exploit
SQL injection vulnerability in VP-ASP Shopping Cart 4.0 through 5.0 allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP G…
-
Unscored —
Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary c…
-
Unscored —CVE-2004-2411 Public exploit
The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse input…
-
Unscored —CVE-2005-2588 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in DVBBS 7.1 SP2 and earlier allow remote attackers to inject arbit…
-
Unscored —
VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup fo…
-
Unscored —CVE-2005-2594 Public exploit
Apple Safari 1.3 (132) on Mac OS X 1.3.9 allows remote attackers to cause a denial of service (crash) via certain Javas…
-
Unscored —CVE-2005-2603 Public exploit
Cross-site scripting (XSS) vulnerability in index.php for My Image Gallery (Mig ) 1.4.1 allows remote attackers to inje…
-
Unscored —
Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP c…
-
Unscored —
Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers to execute arbitrary code via the path…
-
Unscored —CVE-2004-2311 Public exploit
Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to create folders or dete…
-
Unscored —CVE-2004-2310 Public exploit
Cross-site scripting (XSS) vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arb…
-
Unscored —CVE-2004-2367 Public exploit
The Control Panel applet in WFTPD and WFTPD Pro 3.21 R1 and R2 allows remote authenticated users to cause a denial of s…
-
Unscored —CVE-2004-2303 Public exploit
MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissio…
-
Unscored —CVE-2004-2368 Public exploit
PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2004-2350 Public exploit
SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2004-2344 Public exploit
Unknown vulnerability in the ASN.1/H.323/H.225 stack of VocalTec VGW120 and VGW480 allows remote attackers to cause a d…
-
Unscored —CVE-2004-2347 Public exploit
blog.cgi in Leif M. Wright Web Blog 1.1 and 1.1.5 allows remote attackers to execute arbitrary commands via shell metac…
-
Unscored —CVE-2004-2309 Public exploit
Directory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside the FTP root via multip…
-
Unscored —CVE-2004-2375 Public exploit
Buffer overflow in the POP3 server in 1st Class Mail Server 4.0 allows remote attackers to cause a denial of service (c…
-
Unscored —CVE-2004-2366 Public exploit
Buffer overflow in GlobalSCAPE Secure FTP Server 2.0 B03.11.2004.2 allows remote attackers to cause a denial of service…
-
Unscored —CVE-2004-2374 Public exploit
BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.ph…
-
Unscored —CVE-2004-2359 Public exploit
Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started…
-
Unscored —CVE-2004-2360 Public exploit
Targem Battle Mages 1.0 allows remote attackers to cause a denial of service (infinite loop) via a UDP packet with inco…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2004-2385 Public exploit
EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory) via an HTTP request for…
-
Unscored —CVE-2004-2312 Public exploit
Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long …
-
Unscored —
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and ca…
-
Unscored —CVE-2004-2373 Public exploit
The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may all…
-
Unscored —CVE-2004-2363 Public exploit
Validate-Before-Canonicalize vulnerability in the checkURI function in functions.inc.php in PHPX 3.0 through 3.2.6 allo…
-
Unscored —CVE-2004-2334 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in EMU Webmail 5.2.7 allow remote attackers to inject arbitrary web…
-
Unscored —CVE-2004-2371 Public exploit
Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1…
-
Unscored —CVE-2004-2308 Public exploit
Cross-site scripting (XSS) vulnerability in cPanel 9.1.0 and possibly earlier allows remote attackers to inject arbitra…
-
Unscored —CVE-2004-2355 Public exploit
Cross-site scripting (XSS) vulnerability in Crafty Syntax Live Help (CSLH) before 2.7.4 allows remote attackers to inje…
-
Unscored —CVE-2004-2326 Public exploit
SQL injection vulnerability in IP3 Networks NetAccess Appliance before firmware 3.1.18b13 allows remote attackers to by…
-
Unscored —CVE-2005-2560 Public exploit
Cross-site scripting (XSS) vulnerability in index.cfm in CFBB 1.1.0 allows remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2005-2580 Public exploit
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch allow remote attackers to…