Archive
August 2005
Vulnerabilities first published in this month (UTC), newest first.
577 results · Feed
-
Unscored —CVE-2004-2295 Public exploit
SQL injection vulnerability in the Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2004-2294 Public exploit
Canonicalize-before-filter error in the send_review function in the Reviews module for PHP-Nuke 6.0 to 7.3 allows remot…
-
Unscored —
The preview_review function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, allows remot…
-
Unscored —
Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file …
-
Unscored —CVE-2004-2293 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.0 to 7.3 allow remote attackers to inject arbitrary w…
-
Unscored —CVE-2004-2287 Public exploit
Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arb…
-
Unscored —CVE-2004-2297 Public exploit
The Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to cause a denial of service (CPU and memory consumpt…
-
Unscored —CVE-2004-2288 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote attackers to spoof parts of a …
-
Unscored —CVE-2005-2455 Public exploit
Greasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request to a file:// URL in t…
-
Unscored —CVE-2005-2453 Public exploit
Cross-site scripting (XSS) vulnerability in NetworkActiv Web Server 1.0, 2.0.0.6, 3.0.1.1, and 3.5.13, and possibly oth…
-
Unscored —
Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to cau…
-
Unscored —CVE-2003-1219 Public exploit
Cross-site scripting (XSS) vulnerability in the tep_href_link function in html_output.php for osCommerce before 2.2-MS3…
-
Unscored —
gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local users to gain privileg…
-
Unscored —
browse.php in Website Baker Project allows remote attackers to obtain sensitive data via (1) a directory that does not …
-
Unscored —CVE-2005-2414 Public exploit
Race condition in the xpcom library, as used by web browsers such as Firefox, Mozilla, Netscape, and Galeon, allows rem…
-
Unscored —CVE-2005-2441 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and…
-
Unscored —
PhpList allows remote attackers to obtain sensitive information via a direct request to (1) about.php, (2) connect.php,…
-
Unscored —
Stack-based buffer overflow in Ares FileShare 1.1 allows remote attackers or local users to execute arbitrary code via …
-
Unscored —
Firefox, when opening Microsoft Word documents, does not properly set the permissions on shared sections, which allows …
-
Unscored —
Website Baker Project does not properly verify the file extensions of uploaded files, which allows remote attackers to …
-
Unscored —CVE-2005-2426 Public exploit
FTPshell Server 3.38 allows remote authenticated users to cause a denial of service (application crash) by multiple con…
-
Unscored —
Multiple SQL injection vulnerabilities in Contrexx before 1.0.5 allow remote attackers to execute arbitrary SQL command…
-
Unscored —
SQL injection vulnerability in viewPrd.asp in Product Cart 2.6 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Kshout 2.x and 3.x stores settings.dat under the web document root with insufficient access control, which allows remot…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script…
-
Unscored —
Cross-site scripting (XSS) vulnerability in UseBB 0.5.1 and earlier allows remote attackers to inject arbitrary Javascr…
-
Unscored —
Race condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files via symlink attack on…
-
Unscored —
Cross-site scripting (XSS) vulnerability in browse.php in Website Baker Project allows remote attackers to inject arbit…
-
Unscored —CVE-2005-2432 Public exploit
SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pa…
-
Unscored —
PHP remote file inclusion vulnerability in apa_phpinclude.inc.php in Atomic Photo Album (APA) allows remote attackers t…
-
Unscored —
Trillian Pro 3.1 build 121, when checking Yahoo e-mail, stores the password in plaintext in a world readable file and d…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Contrexx before 1.0.5 allow remote attackers to inject arbitrary…
-
Unscored —CVE-2005-2412 Public exploit
PHP remote file inclusion vulnerability in block.php in PHP FirstPost allows remote attackers to execute arbitrary PHP …
-
Unscored —
RPC portmapper (rpcbind) in SCO UnixWare 7.1.1 m5, 7.1.3 mp5, and 7.1.4 mp2 allows remote attackers or local users to c…
-
Unscored —CVE-2005-2420 Public exploit
flsearch.pl in FtpLocate 2.02 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP…
-
Unscored —
B-FOCuS Router 312+ allows remote attackers to bypass authentication and gain unauthorized access via a direct request …
-
Unscored —
Cisco IOS 12.0 through 12.4 and IOS XR before 3.2, with IPv6 enabled, allows remote attackers on a local network segmen…
-
Unscored —
SQL injection vulnerability in login.asp in Thomson Web Skill Vantage Manager allows remote attackers to execute arbitr…
-
Unscored —
libtiff up to 3.7.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image header wi…
-
Unscored —
The management interface for Siemens SANTIS 50 running firmware 4.2.8.0, and possibly other products including Ericsson…