Archive
25 October 2005
Vulnerabilities first published on this day (UTC), newest first.
31 results · Clear filters · Feed
-
Unscored —CVE-2004-2518 Public exploit
Gattaca Server 2003 1.1.10.0 allows remote attackers to obtain sensitive information via (1) a trailing null byte ("%00…
-
Unscored —CVE-2004-2512 Public exploit
CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP re…
-
Unscored —CVE-2004-2505 Public exploit
Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to caus…
-
Unscored —CVE-2004-2508 Public exploit
Cross-site scripting (XSS) vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote a…
-
Unscored —
Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users …
-
Unscored —CVE-2004-2517 Public exploit
myServer 0.7.1 allows remote attackers to cause a denial of service (crash) via a long HTTP POST request in a View=Logo…
-
Unscored —CVE-2004-2510 Public exploit
Cross-site scripting (XSS) vulnerability in showflat.php in Infopop UBB.Threads before 6.5 allows remote attackers to i…
-
Unscored —CVE-2004-2522 Public exploit
Cross-site scripting (XSS) vulnerability in web.tmpl in Gattaca Server 2003 1.1.10.0 allows remote attackers to inject …
-
Unscored —CVE-2004-2511 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject ar…
-
Unscored —CVE-2004-2516 Public exploit
Directory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary directories via an HTTP GET…
-
Unscored —CVE-2004-2513 Public exploit
Buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code vi…
-
Unscored —CVE-2004-2523 Public exploit
Format string vulnerability in the msg command (cat_message function in msg.c) in OpenFTPD 0.30.2 and earlier allows re…
-
Unscored —CVE-2004-2496 Public exploit
The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service (service availa…
-
Unscored —CVE-2004-2507 Public exploit
Absolute path traversal vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote atta…
-
Unscored —CVE-2004-2534 Public exploit
Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does not close the connection…
-
Unscored —CVE-2004-2530 Public exploit
Visual truncation vulnerability in Gadu-Gadu allows remote attackers to spoof the file extension on transmitted files v…
-
Unscored —CVE-2004-2514 Public exploit
Cross-site scripting (XSS) vulnerability in modules/private_messages/index.php in PowerPortal 1.x allows remote attacke…
-
Unscored —
Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote a…
-
Unscored —CVE-2004-2491 Public exploit
A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been …
-
Unscored —CVE-2004-2519 Public exploit
Gattaca Server 2003 1.1.10.0 allows remote attackers to cause a denial of service (CPU consumption) via directory speci…
-
Unscored —CVE-2004-2526 Public exploit
Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers …
-
Unscored —CVE-2004-2502 Public exploit
im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the…
-
Unscored —CVE-2004-2487 Public exploit
Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or lis…
-
Unscored —CVE-2004-2528 Public exploit
Cross-site scripting (XSS) vulnerability in sresult.exe in Webcam Watchdog 4.0.1a allows remote attackers to inject arb…
-
Unscored —CVE-2004-2509 Public exploit
Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Thread…
-
Unscored —CVE-2004-2494 Public exploit
Cross-site scripting (XSS) vulnerability in _error in Ability Mail Server 1.18 allows remote attackers to inject arbitr…
-
Unscored —CVE-2004-2520 Public exploit
POP3 protocol in Gattaca Server 2003 1.1.10.0 allows remote authenticated users to cause a denial of service (applicati…
-
Unscored —CVE-2005-3304 Public exploit
Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitra…
-
Unscored —CVE-2005-3308 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Zomplog 3.4 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2005-3307 Public exploit
Directory traversal vulnerability in index.php for FlatNuke 2.5.6 allows remote attackers to read arbitrary files via "…
-
Unscored —CVE-2005-3305 Public exploit
Multiple SQL injection vulnerabilities in Nuked Klan 1.7 allow remote attackers to execute arbitrary SQL commands via t…