Archive
September 2005
Vulnerabilities first published in this month (UTC), newest first.
312 results · Feed
-
Unscored —
Ariba Spend Management System sends the username and password to the server in plaintext in a POST request, which allow…
-
Unscored —
The Fetch.FetchContact.1 ActiveX control (Fetch.dll) for Rediff Bol 7.0 allows remote attackers to read the Windows Add…
-
Unscored —
Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in N-Stealth Commercial Edition before 5.8.0.38 and Free Edition before 5.8.1.…
-
Unscored —
store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain abor…
-
Unscored —CVE-2005-2813 Public exploit
Directory traversal vulnerability in FlatNuke 2.5.6 and possibly earlier allows remote attackers to read arbitrary file…
-
Unscored —
Cross-site scripting (XSS) vulnerability in DownFile 1.3 allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —
Multiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote attackers to execute ar…
-
Unscored —CVE-2005-2812 Public exploit
man2web allows remote attackers to execute arbitrary commands via -P arguments.
-
Unscored —
Multiple stack-based buffer overflows in urban before 1.5.3 allow local users to gain privileges via a long HOME enviro…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Greymatter allows remote attackers to inject arbitrary web script or HTML v…
-
Unscored —
Multiple unknown vulnerabilities in MAXdev MD-Pro 1.0.72 and earlier have unknown impact and unspecified attack vectors…
-
Unscored —
Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or H…
-
Unscored —
DownFile 1.3 allows remote attackers to gain administrator privileges via a direct request to (1) update.php, (2) del.p…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 5.0.17a and earlier allow remote attackers to inject arbi…
-
Unscored —
frox 0.7.16 and 0.7.17 does not properly parse certain Deny ACLs, which might allow attackers to bypass intended restri…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.72 allow remote attackers to inject arbitrary …
-
Unscored —
silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier allows local users to overwrite arbit…
-
Unscored —
Simple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers…
-
Unscored —
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of…
-
Unscored —
Untrusted search path vulnerability in Net-SNMP 5.2.1.2 and earlier, on Gentoo Linux, installs certain Perl modules wit…
-
Unscored —
SQL injection vulnerability in login.php in myBloggie 2.1.3-beta and earlier allows remote attackers to execute arbitra…
-
Unscored —CVE-2005-2807 Public exploit
frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, which allow…
-
Unscored —
print.php in FlatNuke 2.5.6 allows remote attackers to obtain sensitive information (path disclosure on error) or cause…
-
Unscored —CVE-2005-2814 Public exploit
Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HT…
-
Unscored —
kcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack on lock files.
-
Unscored —
Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to…
-
Unscored —
Multiple format string vulnerabilities in OpenTTD before 0.4.0.1 allow remote attackers to cause a denial of service (c…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Hiki 0.8.1 to 0.8.2 allows remote attackers to inject arbitrary web script …
-
Unscored —
sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to cli…
-
Unscored —CVE-2005-2700 EPSS 31%
ssl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configur…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject arbitrary web script …
-
Unscored —
client.cpp in BNBT EasyTracker 7.7r3.2004.10.27 and earlier allows remote attackers to cause a denial of service (appli…
-
Unscored —
OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding ("-D" option) when a liste…
-
Unscored —CVE-2005-2800 Public exploit
Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allow…
-
Unscored —
xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the name_index fields when…
-
Unscored —
forum_post.php in e107 0.6 allows remote attackers to post to non-existent forums by modifying the forum number.
-
Unscored —
Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code vi…
-
Unscored —
The log4sh_readProperties function in log4sh 1.2.5 and earlier allows local users to overwrite arbitrary files via a sy…
-
Unscored —
PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execu…