Archive
October 2005
Vulnerabilities first published in this month (UTC), newest first.
91 results · Clear filters · Feed
-
Unscored —CVE-2005-3315 Public exploit
Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers …
-
Unscored —CVE-2005-3368 Public exploit
Cross-site scripting (XSS) vulnerability in the Search_Enhanced module in PHP-Nuke 7.9 allows remote attackers to injec…
-
Unscored —CVE-2005-3363 Public exploit
SQL injection vulnerability in Saphp Lesson, possibly saphp Lesson1.1 and saphpLesson2.0, allows remote attackers to ex…
-
Unscored —CVE-2005-3369 Public exploit
Multiple SQL injection vulnerabilities in the Info-DB module (info_db.php) in Woltlab Burning Board 2.7 and earlier all…
-
Unscored —CVE-2005-3334 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Flyspray 0.9.7 through 0.9.8 (devel) allows remote attackers t…
-
Unscored —CVE-2005-3325 Public exploit
Multiple SQL injection vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.…
-
Unscored —CVE-2005-3320 Public exploit
Cross-site scripting (XSS) vulnerability in SiteTurn Domain Manager Pro allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2005-3329 Public exploit
Cross-site scripting (XSS) vulnerability in RSA Authentication Agent for Web 5.3 and earlier allows remote attackers to…
-
Unscored —
The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4…
-
Unscored —CVE-2005-3332 Public exploit
PHP remote file include vulnerability in admin/define.inc.php in Belchior Foundry vCard 2.9 allows remote attackers to …
-
Unscored —CVE-2005-3324 Public exploit
SQL injection vulnerability in chat.php in MWChat 6.8 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —
Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via un…
-
Unscored —CVE-2005-3326 Public exploit
SQL injection vulnerability in usercp.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2005-2973 Public exploit
The udp_v6_get_port function in udp.c in Linux 2.6 before 2.6.14-rc5, when running IPv6, allows local users to cause a …
-
Unscored —CVE-2004-2518 Public exploit
Gattaca Server 2003 1.1.10.0 allows remote attackers to obtain sensitive information via (1) a trailing null byte ("%00…
-
Unscored —CVE-2004-2512 Public exploit
CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP re…
-
Unscored —CVE-2004-2505 Public exploit
Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to caus…
-
Unscored —CVE-2004-2508 Public exploit
Cross-site scripting (XSS) vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote a…
-
Unscored —
Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users …
-
Unscored —CVE-2004-2517 Public exploit
myServer 0.7.1 allows remote attackers to cause a denial of service (crash) via a long HTTP POST request in a View=Logo…
-
Unscored —CVE-2004-2510 Public exploit
Cross-site scripting (XSS) vulnerability in showflat.php in Infopop UBB.Threads before 6.5 allows remote attackers to i…
-
Unscored —CVE-2004-2522 Public exploit
Cross-site scripting (XSS) vulnerability in web.tmpl in Gattaca Server 2003 1.1.10.0 allows remote attackers to inject …
-
Unscored —CVE-2004-2511 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject ar…
-
Unscored —CVE-2004-2516 Public exploit
Directory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary directories via an HTTP GET…
-
Unscored —CVE-2004-2513 Public exploit
Buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code vi…
-
Unscored —CVE-2004-2523 Public exploit
Format string vulnerability in the msg command (cat_message function in msg.c) in OpenFTPD 0.30.2 and earlier allows re…
-
Unscored —CVE-2004-2496 Public exploit
The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service (service availa…
-
Unscored —CVE-2004-2507 Public exploit
Absolute path traversal vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote atta…
-
Unscored —CVE-2004-2534 Public exploit
Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does not close the connection…
-
Unscored —CVE-2004-2530 Public exploit
Visual truncation vulnerability in Gadu-Gadu allows remote attackers to spoof the file extension on transmitted files v…
-
Unscored —CVE-2004-2514 Public exploit
Cross-site scripting (XSS) vulnerability in modules/private_messages/index.php in PowerPortal 1.x allows remote attacke…
-
Unscored —
Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote a…
-
Unscored —CVE-2004-2491 Public exploit
A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been …
-
Unscored —CVE-2004-2519 Public exploit
Gattaca Server 2003 1.1.10.0 allows remote attackers to cause a denial of service (CPU consumption) via directory speci…
-
Unscored —CVE-2004-2526 Public exploit
Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers …
-
Unscored —CVE-2004-2502 Public exploit
im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the…
-
Unscored —CVE-2004-2487 Public exploit
Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or lis…
-
Unscored —CVE-2004-2528 Public exploit
Cross-site scripting (XSS) vulnerability in sresult.exe in Webcam Watchdog 4.0.1a allows remote attackers to inject arb…
-
Unscored —CVE-2004-2509 Public exploit
Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Thread…
-
Unscored —CVE-2004-2494 Public exploit
Cross-site scripting (XSS) vulnerability in _error in Ability Mail Server 1.18 allows remote attackers to inject arbitr…