Archive
27 October 2005
Vulnerabilities first published on this day (UTC), newest first.
38 results · Feed
-
Unscored —
The recvn and sendn functions in nylon 0.2 do not check when the recv function call returns 0, which allows remote atta…
-
Unscored —
The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 final and 4.4 before 4…
-
Unscored —
The SigComp UDVM in Ethereal 0.10.12 allows remote attackers to cause a denial of service (infinite loop) via unknown v…
-
Unscored —
Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors.
-
Unscored —
viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
-
Unscored —
SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Mantis before 0.19.3 allow remote attackers to inject arbitrary …
-
Unscored —CVE-2005-3334 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Flyspray 0.9.7 through 0.9.8 (devel) allows remote attackers t…
-
Unscored —CVE-2005-3325 Public exploit
Multiple SQL injection vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.…
-
Unscored —CVE-2005-3320 Public exploit
Cross-site scripting (XSS) vulnerability in SiteTurn Domain Manager Pro allows remote attackers to inject arbitrary web…
-
Unscored —
PHP remote file inclusion vulnerability in common.php in PunBB 1.1.2 through 1.1.5 allows remote attackers to execute a…
-
Unscored —CVE-2005-3329 Public exploit
Cross-site scripting (XSS) vulnerability in RSA Authentication Agent for Web 5.3 and earlier allows remote attackers to…
-
Unscored —
Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of service (crash) via H…
-
Unscored —
The BER dissector in Ethereal 0.10.3 to 0.10.12 allows remote attackers to cause a denial of service (infinite loop) vi…
-
Unscored —
docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via inc…
-
Unscored —
Buffer overflow in the _chm_decompress_block function in CHM lib (chmlib) before 0.37, as used in products such as Kchm…
-
Unscored —
The installation of ON Symantec Discovery 4.5.x and Symantec Discovery 6.0 creates the (1) DiscoveryWeb and (2) Discove…
-
Unscored —
Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addres…
-
Unscored —
Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via (1)…
-
Unscored —
Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allo…
-
Unscored —
PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 allows remote attac…
-
Unscored —
Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (null dereference) via unknown vector…
-
Unscored —
The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4…
-
Unscored —
Unspecified vulnerability in the WSP dissector in Ethereal 0.10.1 to 0.10.12 allows remote attackers to cause a denial …
-
Unscored —
Unspecified vulnerability in the ONC RPC dissector in Ethereal 0.10.3 to 0.10.12, when the "Dissect unknown RPC program…
-
Unscored —
Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (crash) via unknown vectors in (1) th…
-
Unscored —
chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by creating a hardlink to a fi…
-
Unscored —CVE-2005-3332 Public exploit
PHP remote file include vulnerability in admin/define.inc.php in Belchior Foundry vCard 2.9 allows remote attackers to …
-
Unscored —
Integer overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1…
-
Unscored —CVE-2005-3324 Public exploit
SQL injection vulnerability in chat.php in MWChat 6.8 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —
Network Appliance Data ONTAP 7.0 and earlier allows iSCSI Initiators to bypass iSCSI authentication via a modified clie…
-
Unscored —
Unspecified vulnerability in the X11 dissector in Ethereal 0.10.12 and earlier allows remote attackers to cause a denia…
-
Unscored —
Multiple vulnerabilities in Ethereal 0.10.12 and earlier allow remote attackers to cause a denial of service (memory co…
-
Unscored —
SQL injection vulnerability in eBASEweb 3.0 allows remote attackers to execute arbitrary SQL commands via unknown attac…
-
Unscored —
Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via un…
-
Unscored —CVE-2005-3326 Public exploit
SQL injection vulnerability in usercp.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL co…
-
Unscored —
fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readabl…
-
Unscored —CVE-2005-2973 Public exploit
The udp_v6_get_port function in udp.c in Linux 2.6 before 2.6.14-rc5, when running IPv6, allows local users to cause a …