1 November 2005

44 results · Feed

• Unscored —
  CVE-2005-3423 Public exploit

  Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via…

  Nov 1, 2005
• Unscored —
  CVE-2005-3424

  Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.5 allows remote attackers to inject arbitrary web script…

  Nov 1, 2005
• Unscored —
  CVE-2005-3425

  Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.6 allows remote attackers to inject arbitrary web script…

  Nov 1, 2005
• Unscored —
  CVE-2005-3420

  usercp_register.php in phpBB 2.0.17 allows remote attackers to modify regular expressions and execute PHP code via the …

  Nov 1, 2005
• Unscored —
  CVE-2005-3417

  phpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote attackers to modify global…

  Nov 1, 2005
• Unscored —
  CVE-2005-3419

  SQL injection vulnerability in usercp_register.php in phpBB 2.0.17 allows remote attackers to execute arbitrary SQL com…

  Nov 1, 2005
• Unscored —
  CVE-2005-3422 Public exploit

  Cross-site scripting (XSS) vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web…

  Nov 1, 2005
• Unscored —
  CVE-2005-3415

  phpBB 2.0.17 and earlier allows remote attackers to bypass protection mechanisms that deregister global variables by se…

  Nov 1, 2005
• Unscored —
  CVE-2005-3421

  estcmd in Hyper Estraier 1.0.1 on Windows systems allows remote attackers to read unauthorized files via a crafted sear…

  Nov 1, 2005
• Unscored —
  CVE-2005-3418

  Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.17 and earlier allow remote attackers to inject arbitr…

  Nov 1, 2005
• Unscored —
  CVE-2005-3416

  phpBB 2.0.17 and earlier, when register_globals is enabled and the session_start function has not been called to handle…

  Nov 1, 2005
• Unscored —
  CVE-2005-3411 Public exploit

  Cross-site scripting (XSS) vulnerability in post.asp in Snitz Forums 2000 3.4.05 allows remote attackers to inject arbi…

  Nov 1, 2005
• Unscored —
  CVE-2005-3413

  Cross-site scripting (XSS) vulnerability in desktop.php in eyeOS 0.8.4 allows remote attackers to inject arbitrary web …

  Nov 1, 2005
• Unscored —
  CVE-2005-3412 Public exploit

  Cross-site scripting (XSS) vulnerability in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script …

  Nov 1, 2005
• Unscored —
  CVE-2005-3414

  eyeOS 0.8.4 stores usrinfo.xml under the web document root with insufficient access control, which allows remote attack…

  Nov 1, 2005
• Unscored —
  CVE-2005-3392

  Unspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to …

  Nov 1, 2005
• Unscored —
  CVE-2005-3399

  Multiple interpretation error in CAT-QuickHeal 8.0 allows remote attackers to bypass virus scanning via a file such as …

  Nov 1, 2005
• Unscored —
  CVE-2005-3397 Public exploit

  Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script …

  Nov 1, 2005
• Unscored —
  CVE-2005-3403

  Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to inject …

  Nov 1, 2005
• Unscored —
  CVE-2005-3400

  Multiple interpretation error in Fortinet 2.48.0.0 allows remote attackers to bypass virus scanning via a file such as …

  Nov 1, 2005
• Unscored —
  CVE-2005-3313

  The IRC protocol dissector in Ethereal 0.10.13 allows remote attackers to cause a denial of service (infinite loop).

  Nov 1, 2005
• Unscored —
  CVE-2005-3406

  Cross-site scripting (XSS) vulnerability in phpESP 1.7.5 and earlier allows remote attackers to inject arbitrary web sc…

  Nov 1, 2005
• Unscored —
  CVE-2005-3393

  Format string vulnerability in the foreign_option function in options.c for OpenVPN 2.0.x allows remote clients to exec…

  openvpn Debian
  Nov 1, 2005
• Unscored —
  CVE-2005-3405 Public exploit

  ATutor 1.4.1 through 1.5.1-pl1 allows remote attackers to execute arbitrary PHP functions via a direct request to forum…

  Nov 1, 2005
• Unscored —
  CVE-2005-3402

  The SMTP client in Mozilla Thunderbird 1.0.5 BETA, 1.0.7, and possibly other versions, does not notify users when it ca…

  Nov 1, 2005
• Unscored —
  CVE-2005-3407

  SQL injection vulnerability in phpESP 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via u…

  Nov 1, 2005
• Unscored —
  CVE-2005-3408 Public exploit

  SQL injection vulnerability in news.php in gCards version 1.43 allows remote attackers to execute arbitrary SQL command…

  Nov 1, 2005
• Unscored —
  CVE-2005-3396

  Buffer overflow in the chcons (chcon) command in IBM AIX 5.2 and 5.3, when DEBUG MALLOC is enabled, might allow attacke…

  Nov 1, 2005
• Unscored —
  CVE-2005-3391

  Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and open_basedir restrictions v…

  Nov 1, 2005
• Unscored —
  CVE-2005-3398 Public exploit EPSS 13%

  The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables th…

  Nov 1, 2005
• Unscored —
  CVE-2005-3395 Public exploit

  SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute arbitrary SQL commands via the…

  Nov 1, 2005
• Unscored —
  CVE-2005-3394 Public exploit

  Multiple SQL injection vulnerabilities in forum.php in oaboard forum 1.0 allow remote attackers to execute arbitrary SQ…

  Nov 1, 2005
• Unscored —
  CVE-2005-3401

  Multiple interpretation error in TheHacker 5.8.4.128 allows remote attackers to bypass virus scanning via a file such a…

  Nov 1, 2005
• Unscored —
  CVE-2005-3404 Public exploit EPSS 10%

  Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitra…

  Nov 1, 2005
• Unscored —
  CVE-2005-2751

  memberd in Mac OS X 10.4 up to 10.4.2, in certain situations, does not quickly synchronize access control checks with c…

  Nov 1, 2005
• Unscored —
  CVE-2005-2739

  Keychain Access in Mac OS X 10.4.2 and earlier keeps a password visible even if a keychain times out while the password…

  Nov 1, 2005
• Unscored —
  CVE-2005-2752

  An unspecified kernel interface in Mac OS X 10.4.2 and earlier does not properly clear memory before reusing it, which …

  Nov 1, 2005
• Unscored —
  CVE-2005-2750

  Software Update in Mac OS X 10.4.2, when the user marks all updates to be ignored, exits without asking the user to res…

  Nov 1, 2005
• Unscored —
  CVE-2005-2749

  Unspecified vulnerability in the Finder Get Info window for Mac OS X 10.4 up to 10.4.2 causes Finder to misrepresent fi…

  Nov 1, 2005
• Unscored —
  CVE-2005-3389

  The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote a…

  Nov 1, 2005