Archive
November 2005
Vulnerabilities first published in this month (UTC), newest first.
218 results · Clear filters · Feed
-
Unscored —CVE-2002-2178 Public exploit
Cross-site scripting (XSS) vulnerability in article.php module for phpWebSite 0.8.3 allows remote attackers to execute …
-
Unscored —CVE-2002-2174 Public exploit
The Telnet proxy of 602Pro LAN SUITE 2002 does not restrict the number of outstanding connections to the local host, wh…
-
Unscored —CVE-2002-2145 Public exploit
Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders …
-
Unscored —CVE-2002-2171 Public exploit
Cross-site scripting (XSS) vulnerability in acWEB 1.8 and 1.14 allows remote attackers to insert arbitrary HTML and web…
-
Unscored —
Buffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (cr…
-
Unscored —CVE-2002-2176 Public exploit
SQL injection vulnerability in Gender MOD 1.1.3 allows remote attackers to gain administrative access via the user_leve…
-
Unscored —CVE-2002-2200 Public exploit
Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP …
-
Unscored —CVE-2002-2190 Public exploit
ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote atta…
-
Unscored —CVE-2002-2191 Public exploit
Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to ob…
-
Unscored —CVE-2002-2162 Public exploit
Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the T…
-
Unscored —CVE-2002-2195 Public exploit
Buffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers who can spoof www.winam…
-
Unscored —CVE-2005-3639 Public exploit
PHP file inclusion vulnerability in the osTicket module in Help Center Live before 2.0.3 allows remote attackers to acc…
-
Unscored —CVE-2005-3640 Public exploit
Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers t…
-
Unscored —CVE-2005-3636 Public exploit
Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arb…
-
Unscored —CVE-2005-3638 Public exploit
Cross-site scripting (XSS) vulnerabilities in Ekinboard 1.0.3 allow remote attackers to inject arbitrary web script or …
-
Unscored —
frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log us…
-
Unscored —CVE-2005-3635 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote …
-
Unscored —CVE-2002-2134 Public exploit
haut.php in PEEL 1.0b allows remote attackers to execute arbitrary PHP code by modifying the dirroot parameter to refer…
-
Unscored —CVE-2002-2129 Public exploit
Cross-site scripting vulnerability (XSS) in editform.php for w-Agora 4.1.5 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2005-3545 Public exploit
SQL injection vulnerability in index.php of the report module in ibProArcade 2.5.2 and earlier allows remote attackers …
-
Unscored —CVE-2005-3576 Public exploit
ts.exe in Walla TeleSite 3.0 and earlier allows remote attackers to access privileged information by entering the artic…
-
Unscored —CVE-2005-3547 Public exploit
Cross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2005-3550 Public exploit
Directory traversal vulnerability in admin.php in toendaCMS before 0.6.2 allows remote attackers to access arbitrary fi…
-
Unscored —
Zone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti-Virus 6.0, (4) ZoneAlarm…
-
Unscored —CVE-2005-3584 Public exploit
Cross-site scripting (XSS) vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2005-3544 Public exploit
Cross-site scripting (XSS) vulnerability in u2u.php in XMB 1.9.3 allows remote attackers to inject arbitrary web script…
-
Unscored —
Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access …
-
Unscored —CVE-2005-3555 Public exploit
Multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote attackers with administ…
-
Unscored —CVE-2005-3546 Public exploit
suid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before 2.15.484 and (2) Anti-Virus Linux Gateway before …
-
Unscored —CVE-2005-3578 Public exploit
SQL injection vulnerability in ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to inject …
-
Unscored —
Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal c…
-
Unscored —CVE-2005-3577 Public exploit
Cross-site scripting vulnerability (XSS) in ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attacke…
-
Unscored —CVE-2005-3556 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHPlist 2.10.1 and earlier allow remote attackers to inject arbi…
-
Unscored —CVE-2005-3579 Public exploit
ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to access arbitrary local files via the q…
-
Unscored —CVE-2005-3571 Public exploit
PHP file inclusion vulnerability in protection.php in CodeGrrl (a) PHPCalendar 1.0, (b) PHPClique 1.0, (c) PHPCurrently…
-
Unscored —CVE-2005-3566 Public exploit
Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute a…
-
Unscored —CVE-2005-3575 Public exploit
SQL injection vulnerability in show.php in Cyphor 0.19 and earlier allows remote attackers to execute arbitrary SQL com…
-
Unscored —
Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) a…
-
Unscored —CVE-2005-3558 Public exploit
PHP file inclusion vulnerability in index.php in OSTE 1.0 allows remote attackers to execute arbitrary code via the (1)…
-
Unscored —CVE-2003-1247 Public exploit
Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL …