Archive
November 2005
Vulnerabilities first published in this month (UTC), newest first.
218 results · Clear filters · Feed
-
Unscored —CVE-2004-2563 Public exploit
Serena TeamTrack 6.1.1 allows remote attackers to obtain sensitive information such as user names, versions, and databa…
-
Unscored —CVE-2004-2561 Public exploit
Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute…
-
Unscored —CVE-2004-2566 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in LiveWorld products, possibly including (1) LiveForum, (2) LiveQ&…
-
Unscored —CVE-2003-1286 Public exploit
HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attac…
-
Unscored —
Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute…
-
Unscored —
Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (…
-
Unscored —CVE-2004-2555 Public exploit
Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography (arithmetic and XOR operations) …
-
Unscored —CVE-2004-2548 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote at…
-
Unscored —CVE-2004-2547 Public exploit
NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP reques…
-
Unscored —CVE-2004-2551 Public exploit
Multiple SQL injection vulnerabilities in Layton HelpBox 3.0.1 allow remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2005-3728 Public exploit
Idetix Software Systems Revize CMS stores conf/revize.xml under the web document root with insufficient access control,…
-
Unscored —CVE-2005-3727 Public exploit
SQL injection vulnerability in debug/query_results.jsp in Idetix Software Systems Revize CMS allows remote attackers to…
-
Unscored —CVE-2005-3730 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allo…
-
Unscored —CVE-2005-3695 Public exploit
Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attack…
-
Unscored —CVE-2005-3696 Public exploit
SQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary SQL commands via the ca…
-
Unscored —CVE-2005-2709 Public exploit
The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (ke…
-
Unscored —CVE-2005-3346 Public exploit
Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbi…
-
Unscored —
centericq 4.20.0-r3 with "Enable peer-to-peer communications" set allows remote attackers to cause a denial of service …
-
Unscored —
Multiple buffer overflows in freeFTPd 1.0.8, without logging enabled, allow remote authenticated attackers to cause a d…
-
Unscored —CVE-2005-3685 Public exploit
Cross-site scripting (XSS) vulnerability in shopadmin.asp in VP-ASP Shopping Cart 5.50 allows remote attackers to injec…
-
Unscored —CVE-2005-3686 Public exploit
SQL injection vulnerability in search.inc.php in Unclassified NewsBoard before 1.5.3 Patch 4 allows remote attackers to…
-
Unscored —
Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of…
-
Unscored —CVE-2005-3682 Public exploit
Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2005-3679 Public exploit
SQL injection vulnerability in admin/index.php in ActiveCampaign 1-2-All Broadcast Email allows remote attackers to exe…
-
Unscored —CVE-2005-3681 Public exploit
SQL injection vulnerability in viewcat.php in XOOPS WF-Downloads module 2.05 allows remote attackers to execute arbitra…
-
Unscored —CVE-2005-3676 Public exploit
SQL injection vulnerability in download.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows rem…
-
Unscored —
Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary cod…
-
Unscored —
Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterpr…
-
Unscored —CVE-2005-3189 Public exploit
Directory traversal vulnerability in Qualcomm WorldMail IMAP Server allows remote attackers to read arbitrary email mes…
-
Unscored —
PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 …
-
Unscored —CVE-2005-3649 Public exploit
jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.
-
Unscored —CVE-2002-2170 Public exploit
Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP…
-
Unscored —CVE-2002-2193 Public exploit
Cross-site scripting (XSS) vulnerability in mojo.cgi for Mojo Mail 2.7 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2002-2154 Public exploit
Directory traversal vulnerability in Monkey HTTP Daemon 0.1.4 allows remote attackers to read arbitrary files via .. (d…
-
Unscored —CVE-2002-2165 Public exploit
The IMHO Webmail module 0.97.3 and earlier for Roxen leaks the REFERER from the browser's previous login session in an …
-
Unscored —CVE-2002-2149 Public exploit
Buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers allows remote attackers to cause a denial of …
-
Unscored —CVE-2002-2192 Public exploit
Cross-site scripting (XSS) vulnerability in Perception LiteServe 2.0.1 allows remote attackers to execute arbitrary web…
-
Unscored —CVE-2002-2169 Public exploit
Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote attacker…
-
Unscored —CVE-2002-2143 Public exploit
The admin.html file in MySimple News 1.0 stores its administrative password in plaintext, which allows remote attackers…