Skip to content
OpenAdvisories

Archive

16 November 2005

Vulnerabilities first published on this day (UTC), newest first.

64 results · Clear filters · Feed

  • Unscored —
    CVE-2005-3556 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PHPlist 2.10.1 and earlier allow remote attackers to inject arbi…

  • Unscored —
    CVE-2005-3579 Public exploit

    ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to access arbitrary local files via the q…

  • Unscored —
    CVE-2005-3571 Public exploit

    PHP file inclusion vulnerability in protection.php in CodeGrrl (a) PHPCalendar 1.0, (b) PHPClique 1.0, (c) PHPCurrently…

  • Unscored —
    CVE-2005-3566 Public exploit

    Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute a…

  • Unscored —
    CVE-2005-3575 Public exploit

    SQL injection vulnerability in show.php in Cyphor 0.19 and earlier allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2005-3591 Public exploit EPSS 10%

    Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) a…

  • Unscored —
    CVE-2005-3558 Public exploit

    PHP file inclusion vulnerability in index.php in OSTE 1.0 allows remote attackers to execute arbitrary code via the (1)…

  • Unscored —
    CVE-2003-1247 Public exploit

    Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL …

  • Unscored —
    CVE-2003-1242 Public exploit

    Sage 1.0 b3 allows remote attackers to obtain the root web server path via a URL request for a non-existent module, whi…

  • Unscored —
    CVE-2003-1236 Public exploit EPSS 15%

    Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allows remote attackers to e…

  • Unscored —
    CVE-2003-1266 Public exploit

    The (1) FTP, (2) POP3, (3) SMTP, and (4) NNTP servers in EServer 2.92 through 2.97, and possibly 2.98, allow remote att…

  • Unscored —
    CVE-2003-1239 Public exploit

    Directory traversal vulnerability in sendphoto.php in WihPhoto 0.86 allows remote attackers to read arbitrary files via…

  • Unscored —
    CVE-2003-1244 Public exploit

    SQL injection vulnerability in page_header.php in phpBB 2.0, 2.0.1 and 2.0.2 allows remote attackers to brute force use…

  • Unscored —
    CVE-2003-1252 Public exploit

    register.php in S8Forum 3.0 allows remote attackers to execute arbitrary PHP commands by creating a user whose name end…

  • Unscored —
    CVE-2003-1251 Public exploit

    The (1) menu.inc.php, (2) datasets.php and (3) mass_operations.inc.php (mistakenly referred to as mass_opeations.inc.ph…

  • Unscored —
    CVE-2003-1245 Public exploit

    index2.php in Mambo 4.0.12 allows remote attackers to gain administrator access via a URL request where session_id is s…

  • Unscored —
    CVE-2003-1275 Public exploit EPSS 17%

    Pocket Internet Explorer (PIE) 3.0 allows remote attackers to cause a denial of service (crash) via a Javascript functi…

  • Unscored —
    CVE-2003-1260 Public exploit

    Buffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long response to a LIST command.

  • Unscored —
    CVE-2003-1240 Public exploit

    PHP remote file inclusion vulnerability in CuteNews 0.88 allows remote attackers to execute arbitrary PHP code via a UR…

  • Unscored —
    CVE-2003-1271 Public exploit

    Cross-site scripting vulnerability (XSS) in AN HTTP 1.41e allows remote attackers to execute arbitrary web script or HT…

  • Unscored —
    CVE-2003-1256 Public exploit

    aff_liste_langue.php in E-theni allows remote attackers to execute arbitrary PHP code by modifying the rep_include para…

  • Unscored —
    CVE-2003-1263 Public exploit

    ICAL.EXE in iCal 3.7 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, possibl…

  • Unscored —
    CVE-2003-1243 Public exploit

    Cross-site scripting vulnerability (XSS) in Sage 1.0 b3 allows remote attackers to insert arbitrary HTML or web script …

  • Unscored —
    CVE-2003-1278 Public exploit

    Cross-site scripting vulnerability (XSS) in OpenTopic 2.3.1 allows remote attackers to execute arbitrary script as othe…