Archive
August 2005
Vulnerabilities first published in this month (UTC), newest first.
577 results · Feed
-
Unscored —
Eval injection vulnerability in the template engine for SysCP 1.2.10 and earlier allows remote attackers to execute arb…
-
Unscored —
The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-b…
-
Unscored —
EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to list arbitrary directories via an HTTP request for a direct…
-
Unscored —
Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) allow remote attackers to execute arbitrary SQL …
-
Unscored —
xmb.php in XMB Forum 1.9.1 extracts and defines all provided variables, which allows remote attackers to modify arbitra…
-
Unscored —CVE-2005-2580 Public exploit
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch allow remote attackers to…
-
Critical 9.8
Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (ap…
-
Unscored —
FunkBoard 0.66CF, and possibly earlier versions, does not properly restrict access to the (1) admin/mysql_install.php a…
-
Unscored —
Linux kernel 2.6.x does not properly restrict socket policy access to users with the CAP_NET_ADMIN capability, which co…
-
Unscored —
Kaspersky Anti-Virus for Unix/Linux File Servers 5.0-5 uses world-writable permissions for the (1) log and (2) license …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Gravity Board X (GBX) 1.1 allow remote attackers to inject arbit…
-
Unscored —CVE-2005-2470 EPSS 13%
Buffer overflow in a "core application plug-in" for Adobe Reader 5.1 through 7.0.2 and Acrobat 5.0 through 7.0.2 allows…
-
Unscored —
Gravity Board X (GBX) 1.1 allows remote attackers to obtain sensitive information via (1) a 1 in the perm parameter to …
-
Unscored —
Mentor ADSL-FR4II router running firmware 2.00.0111 allows remote attackers to cause a denial of service (active TCP co…
-
Unscored —
Mentor ADSL-FR4II router running firmware 2.00.0111 has an undocumented web server running on TCP port 5678, which allo…
-
Unscored —CVE-2005-2581 Public exploit
Grandstream BudgeTone 101 and 102 running firmware 1.0.6.7 and possibly earlier versions, allows remote attackers to ca…
-
Unscored —CVE-2005-2577 Public exploit
Wyse Winterm 1125SE running firmware 4.2.09f or 4.4.061f allows remote attackers to cause a denial of service (device c…
-
Unscored —
Nortel Contivity VPN Client V05_01.030, when configuring a certificate to be used as authentication, does not properly …
-
Unscored —
Multiple SQL injection vulnerabilities in MYFAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the Th…
-
Unscored —
Mentor ADSL-FR4II router running firmware 2.00.0111 stores the web administration password in cleartext in the backup c…
-
Unscored —CVE-2005-2357 Public exploit
Directory traversal vulnerability in EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to read arbitrary files v…
-
Unscored —
Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0…
-
Unscored —CVE-2005-2569 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly earlier versions, allow remote at…
-
Unscored —CVE-2005-2564 Public exploit
Direct static code injection vulnerability in editcss.php in Gravity Board X (GBX) 1.1 allows remote attackers to execu…
-
Unscored —
SQL injection vulnerability in u2u.inc.php in XMB Forum 1.9.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
PHP remote file inclusion vulnerability in SysCP 1.2.10 and earlier allows remote attackers to execute arbitrary PHP co…
-
Unscored —
MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysql.func table to cau…
-
Unscored —
The AIM/ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) via a …
-
Unscored —CVE-2005-2562 Public exploit
SQL injection vulnerability in Gravity Board X (GBX) 1.1 allows remote attackers to execute arbitrary SQL commands and …
-
Unscored —
doping.php in ePing plugin 1.02 and earlier for e107 portal allows remote attackers to execute arbitrary code or overwr…
-
Unscored —
xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of ser…
-
Unscored —CVE-2005-2587 Public exploit
SQL injection vulnerability in emailvalidate.php in PHPTB Topic Boards 2.0 allows remote attackers to execute arbitrary…
-
Unscored —
CaLogic 1.22, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct reque…
-
Unscored —
BEA Weblogic Express and Server 8.0 through 8.1 SP 1, when using a foreign Java Message Service (JMS) provider, echoes …
-
Unscored —
The Node Manager for BEA WebLogic Express and Server 6.1 through 8.1 SP 1 allows remote attackers to cause a denial of …
-
Unscored —
BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores certain secrets concerning password encryption insecurely in con…
-
Unscored —
BEA WebLogic Express and Server 7.0 through 8.1 SP 1, under certain circumstances when a request to use T3 over SSL (t3…
-
Unscored —
The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk,…
-
Unscored —CVE-2003-1227 Public exploit
PHP remote file include vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configura…
-
Unscored —
Buffer overflow in the prepare_reply function in request.c for Mathopd 1.2 through 1.5b13, and possibly earlier version…