Skip to content
OpenAdvisories

Archive

August 2005

Vulnerabilities first published in this month (UTC), newest first.

136 results · Clear filters · Feed

  • Unscored —
    CVE-2004-2289 Public exploit EPSS 24%

    Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file …

  • Unscored —
    CVE-2004-2293 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.0 to 7.3 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2004-2287 Public exploit

    Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arb…

  • Unscored —
    CVE-2004-2297 Public exploit

    The Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to cause a denial of service (CPU and memory consumpt…

  • Unscored —
    CVE-2004-2288 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote attackers to spoof parts of a …

  • Unscored —
    CVE-2005-2455 Public exploit

    Greasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request to a file:// URL in t…

  • Unscored —
    CVE-2005-2453 Public exploit

    Cross-site scripting (XSS) vulnerability in NetworkActiv Web Server 1.0, 2.0.0.6, 3.0.1.1, and 3.5.13, and possibly oth…

  • Unscored —
    CVE-2003-1219 Public exploit

    Cross-site scripting (XSS) vulnerability in the tep_href_link function in html_output.php for osCommerce before 2.2-MS3…

  • Unscored —
    CVE-2005-2414 Public exploit

    Race condition in the xpcom library, as used by web browsers such as Firefox, Mozilla, Netscape, and Galeon, allows rem…

  • Unscored —
    CVE-2005-2441 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and…

  • Unscored —
    CVE-2005-2426 Public exploit

    FTPshell Server 3.38 allows remote authenticated users to cause a denial of service (application crash) by multiple con…

  • Unscored —
    CVE-2005-2432 Public exploit

    SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pa…

  • Unscored —
    CVE-2005-2412 Public exploit

    PHP remote file inclusion vulnerability in block.php in PHP FirstPost allows remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2005-2420 Public exploit

    flsearch.pl in FtpLocate 2.02 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP…

  • Unscored —
    CVE-2005-2428 Public exploit Scanner template EPSS 73%

    Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hi…

  • Unscored —
    CVE-2005-2409 Public exploit

    Format string vulnerability in util.c in nbsmtp 0.99 and earlier, while running in debug mode, allows remote attackers …