Archive
25 October 2005
Vulnerabilities first published on this day (UTC), newest first.
80 results · Feed
-
Unscored —CVE-2004-2518 Public exploit
Gattaca Server 2003 1.1.10.0 allows remote attackers to obtain sensitive information via (1) a trailing null byte ("%00…
-
Unscored —CVE-2004-2512 Public exploit
CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP re…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web (GmaxWWW) Desktop 5, 6, and Desktop for Jichitai 6,…
-
Unscored —
Unknown vulnerability in Network Appliance NetCache 5.2 and Data ONTAP 6.0 allows remote attackers to cause a denial of…
-
Unscored —CVE-2004-2505 Public exploit
Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to caus…
-
Unscored —CVE-2004-2508 Public exploit
Cross-site scripting (XSS) vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote a…
-
Unscored —
clogin.php in Benchmark Designs' WHM AutoPilot 2.4.5 and earlier allows remote attackers to obtain plaintext username a…
-
Unscored —
X.509 Certificate Signature Verification in Gnu transport layer security library (GnuTLS) 1.0.16 allows remote attacker…
-
Unscored —
Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users …
-
Unscored —CVE-2004-2517 Public exploit
myServer 0.7.1 allows remote attackers to cause a denial of service (crash) via a long HTTP POST request in a View=Logo…
-
Unscored —
Unknown vulnerability in IlohaMail before 0.8.14-rc1 has unknown impact and attack vectors.
-
Unscored —
Direct static code injection vulnerability in the PCG simple application generation in phpCodeGenie before 3.0.2 allows…
-
Unscored —CVE-2004-2510 Public exploit
Cross-site scripting (XSS) vulnerability in showflat.php in Infopop UBB.Threads before 6.5 allows remote attackers to i…
-
Unscored —CVE-2004-2522 Public exploit
Cross-site scripting (XSS) vulnerability in web.tmpl in Gattaca Server 2003 1.1.10.0 allows remote attackers to inject …
-
Unscored —
Directory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6, and Desktop for Jichi…
-
Unscored —
Unparsed web content delivery vulnerability in WIKINDX before 0.9.9g allows remote attackers to obtain sensitive inform…
-
Unscored —
Unspecified vulnerability in PHP Live! before 2.8.2, due to a "major security problem," allows remote attackers to incl…
-
Unscored —CVE-2004-2511 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject ar…
-
Unscored —CVE-2004-2516 Public exploit
Directory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary directories via an HTTP GET…
-
Unscored —
Unspecified vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and…
-
Unscored —
The local and remote desktop login screens in Microsoft Windows XP before SP2 and 2003 allow remote attackers to cause …
-
Unscored —CVE-2004-2513 Public exploit
Buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code vi…
-
Unscored —CVE-2004-2523 Public exploit
Format string vulnerability in the msg command (cat_message function in msg.c) in OpenFTPD 0.30.2 and earlier allows re…
-
Unscored —CVE-2004-2496 Public exploit
The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service (service availa…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PHP Gift Registry 1.3.5 and earlier allows remote attackers to inject arbit…
-
Unscored —
Format string vulnerability in VMware Workstation 4.5.2 build-8848, if running with elevated privileges, might allow lo…
-
Unscored —CVE-2004-2507 Public exploit
Absolute path traversal vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote atta…
-
Unscored —CVE-2004-2534 Public exploit
Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does not close the connection…
-
Unscored —CVE-2004-2530 Public exploit
Visual truncation vulnerability in Gadu-Gadu allows remote attackers to spoof the file extension on transmitted files v…
-
Unscored —CVE-2004-2514 Public exploit
Cross-site scripting (XSS) vulnerability in modules/private_messages/index.php in PowerPortal 1.x allows remote attacke…
-
Unscored —
Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote a…
-
Unscored —
Serv-U FTP Server 4.1 (possibly 4.0) allows remote attackers to cause a denial of service (application crash) via a SIT…
-
Unscored —
Cross-site scripting (XSS) vulnerability in compat.php in Serendipity before 0.7.1 allows remote attackers to inject ar…
-
Unscored —
The person-to-person secure messaging feature in Sticker before 3.1.0 beta 2 allows remote attackers to post messages t…
-
Unscored —
Unspecified vulnerability in SurgeMail before 2.2c10 has unknown impact and attack vectors, related to a "Webmail secur…
-
Unscored —CVE-2004-2491 Public exploit
A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been …
-
Unscored —
The (1) Webmail, (2) admin, and (3) SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial …
-
Unscored —
Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or lis…
-
Unscored —
The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with…
-
Unscored —CVE-2004-2519 Public exploit
Gattaca Server 2003 1.1.10.0 allows remote attackers to cause a denial of service (CPU consumption) via directory speci…