Archive
October 2005
Vulnerabilities first published in this month (UTC), newest first.
342 results · Feed
-
Unscored —
Mail server in Gattaca Server 2003 1.1.10.0 allows remote attackers to perform a denial of service (application crash) …
-
Unscored —
Gadu-Gadu allows remote attackers to bypass the "image send" option by sending a very small image file, which could be …
-
Unscored —
The DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which might allow remote at…
-
Unscored —
Format string vulnerability in IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to execute arbitrar…
-
Unscored —CVE-2004-2520 Public exploit
POP3 protocol in Gattaca Server 2003 1.1.10.0 allows remote authenticated users to cause a denial of service (applicati…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Ente…
-
Unscored —CVE-2005-3304 Public exploit
Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitra…
-
Unscored —CVE-2005-3308 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Zomplog 3.4 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2005-3307 Public exploit
Directory traversal vulnerability in index.php for FlatNuke 2.5.6 allows remote attackers to read arbitrary files via "…
-
Unscored —
BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary file…
-
Unscored —CVE-2005-3305 Public exploit
Multiple SQL injection vulnerabilities in Nuked Klan 1.7 allow remote attackers to execute arbitrary SQL commands via t…
-
Unscored —
Interpretation conflict in phpBB 2.0.17, with remote avatars and avatar uploading enabled, allows remote authenticated …
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php for FlatNuke 2.5.6 allows remote attackers to inject arbitrary we…
-
Unscored —
Multiple SQL injection vulnerabilities in Zomplog 3.4 allow remote attackers to execute arbitrary SQL commands via (1) …
-
Unscored —
Incomplete blacklist vulnerability in sudo 1.6.8 and earlier allows local users to gain privileges via the (1) SHELLOPT…
-
Unscored —
Stack-based buffer overflow in (1) backupsh and (2) authsh in SCO Openserver 5.0.7 allows local users to execute arbitr…
-
Unscored —
The malloc function in the libSystem library in Apple Mac OS X 10.3.9 and 10.4.2 allows local users to overwrite arbitr…
-
Unscored —
The search_binary_handler function in exec.c in Linux 2.4 kernel on 64-bit x86 architectures does not check a return co…
-
Unscored —
Safari after 2.0 in Apple Mac OS X 10.3.9 allows remote attackers to bypass domain restrictions via crafted web archive…
-
Unscored —
Buffer overflow in QuickDraw Manager for Apple OS X 10.3.9 and 10.4.2, as used by applications such as Safari, Mail, an…
-
Unscored —CVE-2005-2970 EPSS 14%
Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a den…
-
Unscored —
Mail.app in Mail for Apple Mac OS X 10.3.9, when using Kerberos 5 for SMTP authentication, can include uninitialized me…
-
Unscored —
Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as used by applications such as WebCore and Safari, allows remote…
-
Unscored —
The Java extensions for QuickTime 6.52 and earlier in Apple Mac OS X 10.3.9 allow untrusted applets to call arbitrary f…
-
Unscored —
Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users t…
-
Unscored —
Multiple format string vulnerabilities in the GNOME Data Access library for GNOME2 (libgda2) 1.2.1 and earlier allow at…
-
Unscored —
Authorization Services in securityd for Apple Mac OS X 10.3.9 allows local users to gain privileges by granting themsel…
-
Unscored —
The rw_vm function in usercopy.c in the 4GB split patch for the Linux kernel in Red Hat Enterprise Linux 4 does not per…
-
Unscored —
Mail.app in Mail for Apple Mac OS X 10.3.9 and 10.4.2 includes message contents when using auto-reply rules, which coul…
-
Unscored —
SecurityAgent in Apple Mac OS X 10.4.2, under certain circumstances, can cause the "Switch User..." button to appear ev…
-
Unscored —CVE-2005-3301 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl3 allow remote attackers to inject arb…
-
High 7.3CVE-2005-3302 Public exploit
Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a h…
-
Unscored —
Directory traversal vulnerability in NukeFixes 3.1 for PHP-Nuke 7.8 allows remote attackers to include arbitrary files …
-
Unscored —
The FTP server in HP-UX 10.20, B.11.00, and B.11.11, allows remote attackers to list arbitrary directories as root by r…
-
Unscored —
Incomplete blacklist vulnerability in Mailsite Express allows remote attackers to upload and possibly execute files via…
-
Unscored —
Paros 3.2.5 uses a default password for the "sa" account in the underlying HSQLDB database and does not restrict access…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Xeobook 0.93 allow remote attackers to inject arbitrary web scri…
-
Unscored —
Stack-based buffer overflow in the vgasco_printf function in Jan Kybic BitMap Viewer (BMV) 1.2, when compiled with the …
-
Unscored —
Cross-site scripting (XSS) vulnerability in TikiWiki before 1.9.1.1 allows remote attackers to inject arbitrary web scr…
-
Unscored —
The register_globals emulation layer in grab_globals.php for phpMyAdmin before 2.6.4-pl3 does not perform safety checks…