Archive
September 2005
Vulnerabilities first published in this month (UTC), newest first.
72 results · Clear filters · Feed
-
Unscored —CVE-2005-3098 Public exploit
poppassd in Qualcomm qpopper 4.0.8 allows local users to modify arbitrary files and gain privileges via the -t (trace f…
-
Unscored —CVE-2005-2557 Public exploit
Cross-site scripting (XSS) vulnerability in view_all_set.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers…
-
Unscored —CVE-2005-3083 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 0.10 allows remote attackers to inject arbitra…
-
Unscored —
Microsoft Internet Explorer 5.2.3 for Mac OS allows remote attackers to cause a denial of service (crash) via a web pag…
-
Unscored —CVE-2005-3063 Public exploit
SQL injection vulnerability in MailGust 1.9 allows remote attackers to execute arbitrary SQL commands via the email fie…
-
Unscored —CVE-2005-3064 Public exploit
MultiTheftAuto 0.5 patch 1 and earlier does not properly verify client privileges when running command 40, which allows…
-
Unscored —
wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE comm…
-
Unscored —
Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via…
-
Unscored —CVE-2003-1232 Public exploit
Emacs 21.2.1 does not prompt or warn the user before executing Lisp code in the local variables section of a text file,…
-
Unscored —CVE-2005-3052 Public exploit
SQL injection vulnerability in module/down.inc.php in jportal 2.3.1 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2005-3048 Public exploit
Directory traversal vulnerability in index.php in PhpMyFaq 1.5.1 allows remote attackers to read arbitrary files or inc…
-
Unscored —CVE-2005-3045 Public exploit
SQL injection vulnerability in search.php in My Little Forum 1.5 and 1.6 beta allows remote attackers to execute arbitr…
-
Unscored —CVE-2005-3043 Public exploit
SQL injection vulnerability in AddItem.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2005-3004 Public exploit
SQL injection vulnerability in Interakt MX Shop 3.2.0 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2005-3019 Public exploit
Multiple SQL injection vulnerabilities in vBulletin before 3.0.9 allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2005-3026 Public exploit
Directory traversal vulnerability in index.php in Alstrasoft Epay Pro 2.0 and earlier allows remote attackers to read a…
-
Unscored —CVE-2005-3018 Public exploit
Apple Safari allows remote attackers to cause a denial of service (application crash) via a crafted data:// URL.
-
Unscored —CVE-2005-3005 Public exploit
Helpdesk Software Hesk allows remote attackers to bypass authentication for (1) admin.php and (2) admin_main.php by mod…
-
Unscored —CVE-2005-3020 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrar…
-
Unscored —CVE-2005-3010 Public exploit
Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and e…
-
Unscored —CVE-2005-3002 Public exploit
Multi-Computer Control System (MCCS) 1.0 allows remote attackers to cause a denial of service via a malformed UDP packe…
-
Unscored —
Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that …
-
Unscored —CVE-2005-2979 Public exploit
SQL injection vulnerability in index.php in phpoutsourcing Noah's classifieds allows remote attackers to execute arbitr…
-
Unscored —CVE-2005-2989 Public exploit
Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2005-2985 Public exploit
SQL injection vulnerability in search_result.php in AEwebworks aeDating Script 4.0 and earlier allows remote attackers …
-
Unscored —CVE-2005-2980 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in phpoutsourcing Noah's classifieds 1.3 allows remote attackers …
-
Unscored —CVE-2005-2953 Public exploit
Cross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2005-2952 Public exploit
Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arb…
-
Unscored —CVE-2005-2956 Public exploit
ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient a…
-
Unscored —
The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary c…
-
Unscored —CVE-2005-2951 Public exploit
Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows re…
-
Unscored —CVE-2005-2954 Public exploit
SQL injection vulnerability in password_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbi…
-
Unscored —
Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remot…
-
Unscored —CVE-2005-2898 Public exploit
NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Us…
-
Unscored —CVE-2005-2904 Public exploit
Zebedee 2.4.1, when "allowed redirection port" is not set, allows remote attackers to cause a denial of service (applic…
-
Unscored —CVE-2005-2885 Public exploit
The Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete blacklist to check for da…
-
Unscored —CVE-2005-2892 Public exploit
Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attacke…
-
Unscored —CVE-2005-2896 Public exploit
SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_u…
-
Unscored —
Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to …
-
Unscored —
Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3…