Archive
16 November 2005
Vulnerabilities first published on this day (UTC), newest first.
191 results · Feed
-
Unscored —
Telindus 1100 ASDL router running firmware 6.0.x uses weak encryption for UDP session traffic, which allows remote atta…
-
Unscored —
Directory traversal vulnerability in Perl-HTTPd before 1.0.2 allows remote attackers to view arbitrary files via a .. (…
-
Unscored —
restrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20 minutes, which allows local …
-
Unscored —
editform.php in w-Agora 4.1.5 allows local users to execute arbitrary PHP code via .. (dot dot) sequences in the file p…
-
Unscored —
Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow…
-
Unscored —CVE-2002-2134 Public exploit
haut.php in PEEL 1.0b allows remote attackers to execute arbitrary PHP code by modifying the dirroot parameter to refer…
-
Unscored —
Integrity Protection Driver (IPD) 1.2 and earlier blocks access to \Device\PhysicalMemory by its name, which could allo…
-
Unscored —CVE-2002-2129 Public exploit
Cross-site scripting vulnerability (XSS) in editform.php for w-Agora 4.1.5 allows remote attackers to execute arbitrary…
-
Unscored —
publish_xp_docs.php in Gallery 1.3.2 allows remote attackers to execute arbitrary PHP code by modifying the GALLERY_BAS…
-
Unscored —
Internet Explorer 6.0 does not warn users when an expired certificate authority (CA) certificate is submitted to the us…
-
Unscored —CVE-2005-3545 Public exploit
SQL injection vulnerability in index.php of the report module in ibProArcade 2.5.2 and earlier allows remote attackers …
-
Unscored —
game_score.php in e107 allows remote attackers to insert high scores via HTTP POST methods utilizing the $player_name, …
-
Unscored —
INSO service in IBM DB2 Content Manager before 8.2 Fix Pack 10 on AIX allows attackers to cause a denial of service (ap…
-
Unscored —CVE-2005-3576 Public exploit
ts.exe in Walla TeleSite 3.0 and earlier allows remote attackers to access privileged information by entering the artic…
-
Unscored —
content.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation path of the application v…
-
Unscored —CVE-2005-3547 Public exploit
Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2005-3550 Public exploit
Directory traversal vulnerability in admin.php in toendaCMS before 0.6.2 allows remote attackers to access arbitrary fi…
-
Unscored —
Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm…
-
Unscored —CVE-2005-3584 Public exploit
Cross-site scripting (XSS) vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to inject arbitrary…
-
Unscored —
SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2005-3544 Public exploit
Cross-site scripting (XSS) vulnerability in u2u.php in XMB 1.9.3 allows remote attackers to inject arbitrary web script…
-
Unscored —CVE-2005-3595 EPSS 16%
By default Microsoft Windows XP Home Edition installs with a blank password for the Administrator account, which allows…
-
Unscored —
GDAL before 1.3.0-r1 allows local users in the portage group to increase privileges via a shared object in the Portage …
-
Unscored —
Multiple SQL injection vulnerabilities in include.php in PHPKIT 1.6.1 R2 and earlier allow remote attackers to execute …
-
Unscored —
Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, wh…
-
Unscored —
db2fmp process in IBM DB2 Content Manager before 8.2 Fix Pack 10 allows local users to cause a denial of service (CPU c…
-
Unscored —CVE-2005-3344 Scanner template
The default installation of Horde 3.0.4 contains an administrative account with a blank password, which allows remote a…
-
Unscored —
Directory traversal vulnerability in admin/defaults.php in PHPlist 2.10.1 and earlier allows remote attackers to access…
-
Unscored —
Unspecified cross-site scripting (XSS) vulnerability in Horde before 2.2.9 allows remote attackers to inject arbitrary …
-
Unscored —
slapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to…
-
Unscored —
QDBM before 1.8.33-r2 allows local users in the portage group to increase privileges via a shared object in the Portage…
-
Unscored —
Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PHPKIT 1.6.1 R2 and earlier allow remote attackers to inject arb…
-
Unscored —CVE-2005-3555 Public exploit
Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administ…
-
Unscored —CVE-2005-3546 Public exploit
suid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before 2.15.484 and (2) Anti-Virus Linux Gateway before …
-
Unscored —CVE-2005-3578 Public exploit
SQL injection vulnerability in ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to inject …
-
Unscored —
SQL injection vulnerability in search.php in Phorum 5.0.0alpha through 5.0.20, when register_globals is enabled, allows…
-
Unscored —
toendaCMS before 0.6.2 stores user account and session data in the web root directory, which allows remote attackers to…
-
Unscored —
Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal c…
-
Unscored —
SQL injection vulnerability in index.php in Peel 2.6 through 2.7 allows remote attackers to execute arbitrary SQL comma…