21 September 2005

32 results · Feed

• Unscored —
  CVE-2005-0138

  rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect fro…

  Sep 21, 2005
• Unscored —
  CVE-2005-0139

  Unknown vulnerability in rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not sufficiently restrict access rights…

  Sep 21, 2005
• Unscored —
  CVE-2005-3013

  Buffer overflow in liby2util in Yet another Setup Tool (YaST) for SuSE Linux 9.3 allows local users to execute arbitrar…

  Sep 21, 2005
• Unscored —
  CVE-2005-3030

  Directory traversal vulnerability in the archive decompression library in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBl…

  Sep 21, 2005
• Unscored —
  CVE-2005-3016

  Multiple unspecified vulnerabilities in the WYSIWYG editor in PHP-Nuke before 7.9 Final have unknown impact and attack …

  Sep 21, 2005
• Unscored —
  CVE-2005-3014

  Cross-site scripting (XSS) vulnerability in Ensim webplliance allows remote attackers to inject arbitrary web script or…

  Sep 21, 2005
• Unscored —
  CVE-2005-3004 Public exploit

  SQL injection vulnerability in Interakt MX Shop 3.2.0 allows remote attackers to execute arbitrary SQL commands via the…

  Sep 21, 2005
• Unscored —
  CVE-2005-3019 Public exploit

  Multiple SQL injection vulnerabilities in vBulletin before 3.0.9 allow remote attackers to execute arbitrary SQL comman…

  Sep 21, 2005
• Unscored —
  CVE-2005-3026 Public exploit

  Directory traversal vulnerability in index.php in Alstrasoft Epay Pro 2.0 and earlier allows remote attackers to read a…

  Sep 21, 2005
• Unscored —
  CVE-2005-3018 Public exploit

  Apple Safari allows remote attackers to cause a denial of service (application crash) via a crafted data:// URL.

  Sep 21, 2005
• Unscored —
  CVE-2005-3009

  Cross-site scripting (XSS) vulnerability in CuteNews allows remote attackers to inject arbitrary web script or HTML via…

  Sep 21, 2005
• Unscored —
  CVE-2005-3024

  Multiple SQL injection vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to execute arbitrary SQL c…

  Sep 21, 2005
• Unscored —
  CVE-2005-3005 Public exploit

  Helpdesk Software Hesk allows remote attackers to bypass authentication for (1) admin.php and (2) admin_main.php by mod…

  Sep 21, 2005
• Unscored —
  CVE-2005-3003

  SQL injection vulnerability in index.php in NooTopList 1.0.0 release 17 allows remote attackers to execute arbitrary SQ…

  Sep 21, 2005
• Unscored —
  CVE-2005-3015

  Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 6.5.2 allows remote attackers to inject arbitrary web scri…

  Sep 21, 2005
• Unscored —
  CVE-2005-3012

  The MasterDataCD::createImage function in masterdatacd.cpp for SimpleCDR-X 1.3.3 creates the .temp temporary directory …

  Sep 21, 2005
• Unscored —
  CVE-2005-3017

  PHP file inclusion vulnerability in index.php in Content2Web 1.0.1 allows remote attackers to include arbitrary files v…

  Sep 21, 2005
• Unscored —
  CVE-2005-3020 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrar…

  Sep 21, 2005
• Unscored —
  CVE-2005-3007

  Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." (dot), …

  Sep 21, 2005
• Unscored —
  CVE-2005-3008

  Tofu 0.2 allows remote attackers to execute arbitrary Python code via crafted pickled objects, which Tofu unpickles and…

  Sep 21, 2005
• Unscored —
  CVE-2005-3010 Public exploit

  Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and e…

  Sep 21, 2005
• Unscored —
  CVE-2005-3006

  The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, whi…

  Sep 21, 2005
• Unscored —
  CVE-2005-3023

  Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to inject arb…

  Sep 21, 2005
• Unscored —
  CVE-2005-3025

  Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to inject arb…

  Sep 21, 2005
• Unscored —
  CVE-2005-3027

  Sybari Antigen 8.0 SR2 does not properly filter SMTP messages, which allows remote attackers to bypass custom filter ru…

  Sep 21, 2005
• Unscored —
  CVE-2005-3011

  The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a…

  texinfo Debian
  Sep 21, 2005
• Unscored —
  CVE-2005-3022

  Multiple SQL injection vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to execute arbitrary SQL c…

  Sep 21, 2005
• Unscored —
  CVE-2005-3021

  image.php in vBulletin 3.0.9 and earlier allows remote attackers with access to the administrator panel to upload arbit…

  Sep 21, 2005
• Unscored —
  CVE-2005-3029

  Stack-based buffer overflow in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0.383, and V3Net for Win…

  Sep 21, 2005
• Unscored —
  CVE-2005-2764

  Multiple buffer overflows in OpenTTD before 0.4.0.1 allow attackers to cause a denial of service (crash) and possibly e…

  Sep 21, 2005
• Unscored —
  CVE-2005-2662

  masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not …

  Sep 21, 2005
• Unscored —
  CVE-2005-2663

  masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file.

  Sep 21, 2005