Archive
October 2005
Vulnerabilities first published in this month (UTC), newest first.
342 results · Feed
-
Unscored —
Unknown vulnerability in IlohaMail before 0.8.14-rc1 has unknown impact and attack vectors.
-
Unscored —
Direct static code injection vulnerability in the PCG simple application generation in phpCodeGenie before 3.0.2 allows…
-
Unscored —CVE-2004-2510 Public exploit
Cross-site scripting (XSS) vulnerability in showflat.php in Infopop UBB.Threads before 6.5 allows remote attackers to i…
-
Unscored —CVE-2004-2522 Public exploit
Cross-site scripting (XSS) vulnerability in web.tmpl in Gattaca Server 2003 1.1.10.0 allows remote attackers to inject …
-
Unscored —
Directory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6, and Desktop for Jichi…
-
Unscored —
Unparsed web content delivery vulnerability in WIKINDX before 0.9.9g allows remote attackers to obtain sensitive inform…
-
Unscored —
Unspecified vulnerability in PHP Live! before 2.8.2, due to a "major security problem," allows remote attackers to incl…
-
Unscored —CVE-2004-2511 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject ar…
-
Unscored —CVE-2004-2516 Public exploit
Directory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary directories via an HTTP GET…
-
Unscored —
Unspecified vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and…
-
Unscored —
The local and remote desktop login screens in Microsoft Windows XP before SP2 and 2003 allow remote attackers to cause …
-
Unscored —CVE-2004-2513 Public exploit
Buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code vi…
-
Unscored —CVE-2004-2523 Public exploit
Format string vulnerability in the msg command (cat_message function in msg.c) in OpenFTPD 0.30.2 and earlier allows re…
-
Unscored —CVE-2004-2496 Public exploit
The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service (service availa…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PHP Gift Registry 1.3.5 and earlier allows remote attackers to inject arbit…
-
Unscored —
Format string vulnerability in VMware Workstation 4.5.2 build-8848, if running with elevated privileges, might allow lo…
-
Unscored —CVE-2004-2507 Public exploit
Absolute path traversal vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote atta…
-
Unscored —CVE-2004-2534 Public exploit
Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does not close the connection…
-
Unscored —CVE-2004-2530 Public exploit
Visual truncation vulnerability in Gadu-Gadu allows remote attackers to spoof the file extension on transmitted files v…
-
Unscored —CVE-2004-2514 Public exploit
Cross-site scripting (XSS) vulnerability in modules/private_messages/index.php in PowerPortal 1.x allows remote attacke…
-
Unscored —
Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote a…
-
Unscored —
Serv-U FTP Server 4.1 (possibly 4.0) allows remote attackers to cause a denial of service (application crash) via a SIT…
-
Unscored —
Cross-site scripting (XSS) vulnerability in compat.php in Serendipity before 0.7.1 allows remote attackers to inject ar…
-
Unscored —
The person-to-person secure messaging feature in Sticker before 3.1.0 beta 2 allows remote attackers to post messages t…
-
Unscored —
Unspecified vulnerability in SurgeMail before 2.2c10 has unknown impact and attack vectors, related to a "Webmail secur…
-
Unscored —CVE-2004-2491 Public exploit
A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been …
-
Unscored —
The (1) Webmail, (2) admin, and (3) SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial …
-
Unscored —
Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or lis…
-
Unscored —
The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with…
-
Unscored —CVE-2004-2519 Public exploit
Gattaca Server 2003 1.1.10.0 allows remote attackers to cause a denial of service (CPU consumption) via directory speci…
-
Unscored —
Unspecified vulnerability in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier allows remot…
-
Unscored —CVE-2004-2526 Public exploit
Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers …
-
Unscored —CVE-2004-2502 Public exploit
im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the…
-
Unscored —CVE-2004-2487 Public exploit
Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or lis…
-
Unscored —
INweb Mail Server 2.40 allows remote attackers to cause a denial of service (crash) via a large number of connect/disco…
-
Unscored —CVE-2004-2528 Public exploit
Cross-site scripting (XSS) vulnerability in sresult.exe in Webcam Watchdog 4.0.1a allows remote attackers to inject arb…
-
Unscored —
The exit_thread function (process.c) in Linux kernel 2.6 through 2.6.5 does not invalidate the per-TSS io_bitmap pointe…
-
Unscored —CVE-2004-2509 Public exploit
Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Thread…
-
Unscored —
Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to execute arbitrary code…
-
Unscored —CVE-2004-2494 Public exploit
Cross-site scripting (XSS) vulnerability in _error in Ability Mail Server 1.18 allows remote attackers to inject arbitr…