Skip to content
OpenAdvisories

Archive

28 November 2005

Vulnerabilities first published on this day (UTC), newest first.

18 results · Feed

  • Unscored —

    Unspecified vulnerability in meindlSOFT Cute PHP Library (aka cphplib) 0.46 has unknown impact and attack vectors, rela…

  • Unscored —

    phpGroupWare before 0.9.16.002 transmits the (1) header admin and (2) setup passwords in plaintext via cookies, which a…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in frmCompose.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows re…

  • Unscored —

    Novell iChain 2.3 includes the build number in the VIA line of the proxy server's HTTP headers, which allows remote att…

  • Unscored —

    SMTP service in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service (CP…

  • Unscored —
    CVE-2004-2573 Public exploit

    PHP remote file inclusion vulnerability in tables_update.inc.php in phpGroupWare 0.9.14.005 and earlier allows remote a…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Novell iChain 2.3 allows remote attackers to obtain login credentials via u…

  • Unscored —

    Novell iChain 2.3 allows attackers to cause a denial of service via a URL with a "specific string."

  • Unscored —

    login.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service via a…

  • Unscored —

    The acl_check function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not behave as expected, whic…

  • Unscored —

    Intentional information leak in phpinfo.php in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allows remote …

  • Unscored —
    CVE-2004-2574 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to…

  • Unscored —

    phpGroupWare 0.9.14.005 and earlier allow remote attackers to obtain sensitive information via a direct request to (1) …

  • Unscored —

    class.vfs_dav.inc.php in phpGroupWare 0.9.16.000 does not create .htaccess files to enable authorization checks for acc…

  • Unscored —

    Gaim before 0.82 allows remote servers to cause a denial of service (application crash) via a long HTTP Content-Length …

  • Unscored —

    frmAddfolder.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote authenticated users to create a folde…

  • Unscored —

    ACLCHECK module in Novell iChain 2.3 allows attackers to bypass access control rules of an unspecified component via an…

  • Unscored —

    Directory traversal vulnerability in frmGetAttachment.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows rem…