Archive
August 2005
Vulnerabilities first published in this month (UTC), newest first.
577 results · Feed
-
Unscored —
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and ca…
-
Unscored —
ColdFusion MX 6.1 and 6.1 J2EE allows local users to bypass sandbox security restrictions and obtain sensitive informat…
-
Unscored —
Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite loop) via …
-
Unscored —CVE-2004-2373 Public exploit
The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may all…
-
Unscored —CVE-2004-2307 EPSS 15%
Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service (browser crash)…
-
Unscored —
Cross-site scripting (XSS) vulnerability in GBook for PHP-Nuke 1.0 allows remote attackers to inject arbitrary web scri…
-
Unscored —
BEA WebLogic Server and Express 8.1 SP1 and earlier allows local users in the Operator role to obtain administrator pas…
-
Unscored —CVE-2004-2363 Public exploit
Validate-Before-Canonicalize vulnerability in the checkURI function in functions.inc.php in PHPX 3.0 through 3.2.6 allo…
-
Medium —
Jetty HTTP Server Denial of Service vulnerability
HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.
-
Unscored —CVE-2004-2334 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in EMU Webmail 5.2.7 allow remote attackers to inject arbitrary web…
-
Unscored —
Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect direc…
-
Unscored —
The PerfectNav plugin for Microsoft Internet Explorer allows remote attackers to cause a denial of service (browser cra…
-
Unscored —
SQL injection vulnerability in the (1) announce and (2) notes modules of phpWebSite before 0.9.3-2 allows remote attack…
-
Unscored —CVE-2004-2371 Public exploit
Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1…
-
Unscored —
DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to obtain sensitive information, i…
-
Unscored —
Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.c…
-
Unscored —CVE-2004-2308 Public exploit
Cross-site scripting (XSS) vulnerability in cPanel 9.1.0 and possibly earlier allows remote attackers to inject arbitra…
-
Unscored —
The administrative interface (surgeftpmgr.cgi) for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause …
-
Unscored —
SQL injection vulnerability in 4nGuestbook 0.92 for PHP-Nuke 6.5 through 6.9 allows remote attackers to modify SQL stat…
-
Unscored —
NullSoft Winamp 5.02 allows remote attackers to cause a denial of service (crash) by creating a file with a long filena…
-
Unscored —
Stack-based buffer overflow in Trillian 0.71 through 0.74f and Trillian Pro 1.0 through 2.01 allows remote attackers to…
-
Unscored —
ColdFusion MX 6.1 and 6.1 J2EE allows remote attackers to cause a denial of service via an HTTP request containing a la…
-
Unscored —
Directory traversal vulnerability in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to …
-
Unscored —
Digital Reality game engine, as used in Haegemonia 1.0 through 1.0.7 and Desert Rats vs. Afrika Korps 1.0, allows remot…
-
Unscored —
SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in CPAN WWW::Form before 1.13 allow remote attackers to inject arbi…
-
Unscored —CVE-2004-2355 Public exploit
Cross-site scripting (XSS) vulnerability in Crafty Syntax Live Help (CSLH) before 2.7.4 allows remote attackers to inje…
-
Unscored —
Unknown multiple vulnerabilities in Oracle9i Database Server 9.0.1.4, 9.0.1.5, 9.2.0.3, and 9.2.0.4 allow local users w…
-
Unscored —
Early termination vulnerability in Fizmez Web Server 1.0 allows remote attackers to cause a denial of service (crash) b…
-
Unscored —
Bodington 2.1.0 RC1 and earlier does not secure the file upload area, which allows remote attackers to read uploaded fi…
-
Unscored —
PHPX 3.2.6 and earlier allows remote attackers to obtain the physical path of PHPX via a null or invalid value in the l…
-
Unscored —
Memory leak in Microsoft Windows XP and Windows Server 2003 allows local users to cause a denial of service (memory exh…
-
Unscored —
Cross-site scripting (XSS) vulnerability in EditModule.aspx for DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.…
-
Unscored —
Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers to obtain sensitive informati…
-
Unscored —CVE-2004-2326 Public exploit
SQL injection vulnerability in IP3 Networks NetAccess Appliance before firmware 3.1.18b13 allows remote attackers to by…
-
Unscored —
IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log …
-
Unscored —
PHP remote file inclusion vulnerability in publish_xp_docs.php for Gallery 1.3.2 allows remote attackers to inject arbi…
-
Unscored —
The web administration interface in Mentor ADSL-FR4II router running firmware 2.00.0111 does not set a default password…
-
Unscored —
FunkBoard 0.66CF, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct r…
-
Unscored —CVE-2005-2560 Public exploit
Cross-site scripting (XSS) vulnerability in index.cfm in CFBB 1.1.0 allows remote attackers to inject arbitrary web scr…