Archive
September 2005
Vulnerabilities first published in this month (UTC), newest first.
312 results · Feed
-
Unscored —
The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary c…
-
Unscored —
The perform_file_save function in GNOME Workstation Command Center (gwcc) 0.9.6 and earlier allows local users to creat…
-
Unscored —
pam_per_user before 0.4 does not verify if the user name changes between authentication attempts and uses the same subr…
-
Unscored —
config.inc.php in ATutor 1.5.1, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file…
-
Unscored —CVE-2005-2951 Public exploit
Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows re…
-
Unscored —CVE-2005-2954 Public exploit
SQL injection vulnerability in password_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbi…
-
Unscored —
The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographic…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary we…
-
Unscored —
Stack-based buffer overflow in AVIRA Desktop for Windows 1.00.00.68 with AVPACK32.DLL 6.31.0.3, when archive scanning i…
-
Unscored —
The open_cmd_tube function in mount.c for gtkdiskfree 1.9.3 and earlier allows local users to overwrite arbitrary files…
-
Unscored —
Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafte…
-
Unscored —
Unquoted Windows search path vulnerability in Microsoft AntiSpyware might allow local users to execute code via a malic…
-
Unscored —
Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remot…
-
Unscored —
Buffer overflow in utility.cpp in Turquoise SuperStat (turqstat) 2.2.4 and earlier might allow remote NNTP servers to e…
-
Unscored —
The Linux kernel 2.6 before 2.6.12.1 allows local users to cause a denial of service (kernel panic) via a non group-lea…
-
Unscored —
Cross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and earlier allows remote attackers…
-
Unscored —
Linksys WRT54G router allows remote attackers to cause a denial of service (CPU consumption and server hang) via an HTT…
-
Unscored —
WEB//NEWS 1.4 allows remote attackers to obtain sensitive information via a direct request to files in the actions dire…
-
Unscored —CVE-2005-2898 Public exploit
NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Us…
-
Unscored —
WebArchiveX.dll 5.5.0.76 installed before September 6th, 2005 is marked safe for scripting by default, which allows rem…
-
Unscored —
ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other version…
-
Unscored —
Multiple Cross-site scripting (XSS) vulnerabilities in CjWeb2Mail 3.0 allow remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2005-2904 Public exploit
Zebedee 2.4.1, when "allowed redirection port" is not set, allows remote attackers to cause a denial of service (applic…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow…
-
Unscored —
Stack-based buffer overflow in the sendmsg function call in the Linux kernel 2.6 before 2.6.13.1 allows local users to …
-
Unscored —
SQL injection vulnerability in class-1 Forum Software 0.24.4 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute ar…
-
Unscored —
MAXdev MD-Pro 1.0.73, and possibly earlier versions, allows remote attackers to obtain sensitive information via a dire…
-
Unscored —CVE-2005-2885 Public exploit
The Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete blacklist to check for da…
-
Unscored —CVE-2005-2892 Public exploit
Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attacke…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in details.php in CjTagBoard 3.0 allow remote attackers to inject a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the user registration in PBLang 4.65, and possibly earlier versions, allows…
-
Unscored —
SecureOL VE2 1.05.1008 does not properly restrict public access to physical memory, which allows local users to bypass …
-
Unscored —
Heap-based buffer overflow in NOD32 2.5 with nod32.002 1.033 build 1127, with active scanning enabled, allows remote at…
-
Unscored —
Cross-site scripting (XSS) vulnerability in top.php in CjLinkOut 1.0 allows remote attackers to inject arbitrary web sc…
-
Unscored —
phpCommunityCalendar 4.0.3 allows remote attackers to bypass authentication and gain unauthorized access via a direct r…
-
Unscored —
Advansysperu Software USB Lock Auto-Protect (AP) 1.5 uses a weak encryption scheme to encrypt passwords, which allows l…
-
Unscored —
Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attac…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.73, and possibly earlier versions, allow remot…
-
Unscored —
Check Point NGX R60 does not properly verify packets against the predefined service group "CIFS" rule, which allows rem…