Archive
September 2005
Vulnerabilities first published in this month (UTC), newest first.
312 results · Feed
-
Unscored —
The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a…
-
Unscored —
Multiple SQL injection vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to execute arbitrary SQL c…
-
Unscored —
image.php in vBulletin 3.0.9 and earlier allows remote attackers with access to the administrator panel to upload arbit…
-
Unscored —
Stack-based buffer overflow in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0.383, and V3Net for Win…
-
Unscored —
Multiple buffer overflows in OpenTTD before 0.4.0.1 allow attackers to cause a denial of service (crash) and possibly e…
-
Unscored —
masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not …
-
Unscored —
masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file.
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in viewers/txt.php in PHP Advanced Transfer Manager 1.30 allow remo…
-
Unscored —CVE-2005-3002 Public exploit
Multi-Computer Control System (MCCS) 1.0 allows remote attackers to cause a denial of service via a malformed UDP packe…
-
Unscored —
Unspecified vulnerability in the "tl" driver in Solaris 10 allows local users to cause a denial of service (panic) via …
-
Unscored —
Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that …
-
Unscored —
bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on (1) the temporary…
-
Unscored —
Unspecified vulnerability in the FTP Daemon (ftpd) for HP Tru64 UNIX 4.0F PK8 and other versions up to HP Tru64 UNIX 5.…
-
Unscored —
Buffer overflow in libclamav/upx.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to execute arbitrary …
-
Unscored —
Multiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS Storage Exec Storage …
-
Unscored —
libclamav/fsg.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to cause a denial of service (infinite l…
-
Unscored —
Unspecified vulnerability in the web client for IBM Rational ClearQuest 2002.05.00 and 2002.05.20, and 2003.06.00 throu…
-
Unscored —
PHP Advanced Transfer Manager 1.30 has a default password for the administrator user, which allows remote attackers to …
-
Unscored —
PHP Advanced Transfer Manager 1.30 allows remote attackers to obtain sensitive PHP configuration information via a dire…
-
Unscored —
ncompress 4.2.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files usi…
-
Unscored —
Multiple directory traversal vulnerabilities in PHP Advanced Transfer Manager 1.30 allow remote attackers to read arbit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in CompaqHTTPServer 2.1 allows remote attackers to inject arbitrary web script…
-
Unscored —
HP LaserJet 2430, and possibly other printers that use Jetdirect controls, stores information about recently printed do…
-
Unscored —CVE-2005-2979 Public exploit
SQL injection vulnerability in index.php in phpoutsourcing Noah's classifieds allows remote attackers to execute arbitr…
-
Unscored —
Avocent CCM console server running firmware 2.1 CCM4850 allows remote authenticated attackers to bypass port restrictio…
-
Unscored —
AuthInfo.java in LineContol Java Client (jlc) before 0.8.1 stores sensitive information such as user passwords in log f…
-
Unscored —
SQL injection vulnerability in Oracle Reports that use Lexical References allows remote attackers to execute arbitrary …
-
Unscored —
SQL injection vulnerability in login.php in Digital Scribe 1.4 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2005-2989 Public exploit
Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2005-2985 Public exploit
SQL injection vulnerability in search_result.php in AEwebworks aeDating Script 4.0 and earlier allows remote attackers …
-
Unscored —
The v3flt2k.sys driver in AhnLab V3Pro 2004 Build 6.0.0.383, V3 VirusBlock 2005 Build 6.0.0.383, V3Net for Windows Serv…
-
Unscored —CVE-2005-2980 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in phpoutsourcing Noah's classifieds 1.3 allows remote attackers …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Orion 1.3.8 and 1.4.5 allows remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2005-2953 Public exploit
Cross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2005-2952 Public exploit
Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arb…
-
Unscored —
Unknown vulnerability in common-lisp-controller 4.18 and earlier allows local users to gain privileges by compiling arb…
-
Unscored —
arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitiv…
-
Unscored —CVE-2005-2956 Public exploit
ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient a…
-
Unscored —
KillProcess 2.20 and earlier allows local users to bypass kill list restrictions by launching multiple processes at the…
-
Unscored —
Buffer overflow in KillProcess 2.20 and earlier allows user-assisted attackers to execute arbitrary code via an exe fil…