Archive
October 2005
Vulnerabilities first published in this month (UTC), newest first.
91 results · Clear filters · Feed
-
Unscored —CVE-2004-2520 Public exploit
POP3 protocol in Gattaca Server 2003 1.1.10.0 allows remote authenticated users to cause a denial of service (applicati…
-
Unscored —CVE-2005-3304 Public exploit
Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitra…
-
Unscored —CVE-2005-3308 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Zomplog 3.4 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2005-3307 Public exploit
Directory traversal vulnerability in index.php for FlatNuke 2.5.6 allows remote attackers to read arbitrary files via "…
-
Unscored —CVE-2005-3305 Public exploit
Multiple SQL injection vulnerabilities in Nuked Klan 1.7 allow remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2005-3301 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl3 allow remote attackers to inject arb…
-
High 7.3CVE-2005-3302 Public exploit
Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a h…
-
Unscored —CVE-2005-3293 Public exploit
Xerver 4.17 allows remote attackers to (1) obtain source code of scripts via a request with a trailing "." (dot) or (2)…
-
Unscored —CVE-2005-3290 Public exploit
SQL injection vulnerability in Accelerated Mortgage Manager allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2005-3285 Public exploit
Cross-site scripting (XSS) vulnerability in comersus_backoffice_searchItemForm.asp in Comersus BackOffice Plus allows r…
-
Unscored —CVE-2005-3294 Public exploit
Typsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote attackers to cause a denial of service (cr…
-
Unscored —
PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to i…
-
Unscored —
The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell meta…
-
Unscored —CVE-2005-3262 Public exploit
Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via fo…
-
Unscored —CVE-2005-3259 Public exploit
Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbi…
-
Unscored —CVE-2005-3257 Public exploit
The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local…
-
Unscored —
Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to exe…
-
Unscored —
Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbi…
-
Unscored —CVE-2005-3208 Public exploit
Multiple SQL injection vulnerabilities in (1) aeNovo, (2) aeNovoShop and (3) aeNovoWYSI allow remote attackers to execu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script o…
-
Unscored —CVE-2005-3236 Public exploit
Multiple SQL injection vulnerabilities in Cyphor 0.19 allow remote attackers to execute arbitrary SQL and obtain admini…
-
Unscored —CVE-2005-3237 Public exploit
Cross-site scripting (XSS) vulnerability in Cyphor 0.19 allows remote attackers to inject arbitrary web script or HTML …
-
Unscored —CVE-2005-3200 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Utopia News Pro (UNP) 1.1.3 and 1.1.4 allow remote attackers to …
-
Unscored —
The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS list…
-
Unscored —CVE-2005-3201 Public exploit
SQL injection vulnerability in news.php for Utopia News Pro (UNP) 1.1.3, when magic_quotes_gpc is disabled and register…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 allow remote attackers…
-
Unscored —
iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2005-2967 Public exploit
Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 all…
-
Unscored —
Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows …
-
Unscored —
Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows …
-
Unscored —
Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a lo…
-
Unscored —
Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1…
-
Unscored —
Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Busi…
-
Unscored —
Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC servi…
-
Unscored —
COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote atta…
-
Unscored —
Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC servi…
-
Unscored —CVE-2005-2925 Public exploit
runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacha…
-
Unscored —
The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) alloc…
-
Unscored —CVE-2005-3157 Public exploit
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2005-3159 Public exploit
SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via…