27 September 2005

28 results · Feed

• Unscored —
  CVE-2005-3075

  SQL injection vulnerability in Zengaia before 0.2 allows remote attackers to execute arbitrary SQL commands via unknown…

  Sep 27, 2005
• Unscored —
  CVE-2005-3062

  PHP remote file inclusion vulnerability in index.php in AlstraSoft E-Friends 4.0 allows remote attackers to execute arb…

  Sep 27, 2005
• Unscored —
  CVE-2005-3084

  Buffer overflow in the TIFF library in the Photo Viewer for Sony PSP 2.0 firmware allows remote attackers to cause a de…

  Sep 27, 2005
• Unscored —
  CVE-2005-3067

  Cross-site scripting (XSS) vulnerability in perldiver.cgi in PerlDiver 2.x allows remote attackers to inject arbitrary …

  Sep 27, 2005
• Unscored —
  CVE-2005-3086

  Directory traversal vulnerability in admin/about.php in contentServ 3.1 allows remote attackers to read or include arbi…

  Sep 27, 2005
• Unscored —
  CVE-2005-3066

  Cross-site scripting (XSS) vulnerability in perldiver.pl in PerlDiver 1.x allows remote attackers to inject arbitrary w…

  Sep 27, 2005
• Unscored —
  CVE-2005-3079

  PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection.

  Sep 27, 2005
• Unscored —
  CVE-2005-3087

  The SecureW2 3.0 TLS implementation uses weak random number generators (rand and srand from system time) during generat…

  Sep 27, 2005
• Unscored —
  CVE-2005-3070

  HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users …

  hylafax Debian
  Sep 27, 2005
• Unscored —
  CVE-2005-3068

  Unspecified vulnerability in Eric Integrated Development Environment (eric3) before 3.7.2 has unknown impact and attack…

  eric Debian
  Sep 27, 2005
• Unscored —
  CVE-2005-3076

  Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error messages via invalid …

  Sep 27, 2005
• Unscored —
  CVE-2005-3069

  xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the x…

  hylafax Debian
  Sep 27, 2005
• Unscored —
  CVE-2005-3078

  Cross-site scripting (XSS) vulnerability in PunBB before 1.2.8 allows remote attackers to inject arbitrary web script o…

  Sep 27, 2005
• Unscored —
  CVE-2005-3085

  Multiple cross-site scripting (XSS) vulnerabilities in rss.php in Riverdark Studios RSS Syndicator module 2.1.7 allow r…

  Sep 27, 2005
• Unscored —
  CVE-2005-3083 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 0.10 allows remote attackers to inject arbitra…

  Sep 27, 2005
• Unscored —
  CVE-2005-3077 Public exploit EPSS 14%

  Microsoft Internet Explorer 5.2.3 for Mac OS allows remote attackers to cause a denial of service (crash) via a web pag…

  Sep 27, 2005
• Unscored —
  CVE-2005-3080

  contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary files via the language field with…

  Sep 27, 2005
• Unscored —
  CVE-2005-3071

  Unspecified vulnerability in Unix File System (UFS) on Solaris 8 and 9, when logging is enabled, allows local users to …

  Sep 27, 2005
• Unscored —
  CVE-2005-3072

  SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to exec…

  Sep 27, 2005
• Unscored —
  CVE-2005-3063 Public exploit

  SQL injection vulnerability in MailGust 1.9 allows remote attackers to execute arbitrary SQL commands via the email fie…

  Sep 27, 2005
• Unscored —
  CVE-2005-3061

  Multiple stack-based buffer overflows in PowerArchiver 8.10 through 9.5 Beta 4 and Beta 5 allow remote attackers to exe…

  Sep 27, 2005
• Unscored —
  CVE-2005-3082

  SQL injection vulnerability in admin.php in SEO-Board 1.0.2 allows remote attackers to execute arbitrary SQL commands v…

  Sep 27, 2005
• Unscored —
  CVE-2005-3064 Public exploit

  MultiTheftAuto 0.5 patch 1 and earlier does not properly verify client privileges when running command 40, which allows…

  Sep 27, 2005
• Unscored —
  CVE-2005-3074

  SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute ar…

  Sep 27, 2005
• Unscored —
  CVE-2005-3065

  MultiTheftAuto 0.5 patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via a c…

  Sep 27, 2005
• Unscored —
  CVE-2005-3081 Public exploit EPSS 77%

  wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE comm…

  Sep 27, 2005
• Unscored —
  CVE-2005-3073

  Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has be…

  Sep 27, 2005
• Unscored —
  CVE-2005-2710 Public exploit EPSS 13%

  Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via…

  Sep 27, 2005