Archive
November 2005
Vulnerabilities first published in this month (UTC), newest first.
218 results · Clear filters · Feed
-
Unscored —CVE-2003-1242 Public exploit
Sage 1.0 b3 allows remote attackers to obtain the root web server path via a URL request for a non-existent module, whi…
-
Unscored —
Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allows remote attackers to e…
-
Unscored —CVE-2003-1266 Public exploit
The (1) FTP, (2) POP3, (3) SMTP, and (4) NNTP servers in EServer 2.92 through 2.97, and possibly 2.98, allow remote att…
-
Unscored —CVE-2003-1239 Public exploit
Directory traversal vulnerability in sendphoto.php in WihPhoto 0.86 allows remote attackers to read arbitrary files via…
-
Unscored —CVE-2003-1244 Public exploit
SQL injection vulnerability in page_header.php in phpBB 2.0, 2.0.1 and 2.0.2 allows remote attackers to brute force use…
-
Unscored —CVE-2003-1252 Public exploit
register.php in S8Forum 3.0 allows remote attackers to execute arbitrary PHP commands by creating a user whose name end…
-
Unscored —CVE-2003-1251 Public exploit
The (1) menu.inc.php, (2) datasets.php and (3) mass_operations.inc.php (mistakenly referred to as mass_opeations.inc.ph…
-
Unscored —CVE-2003-1245 Public exploit
index2.php in Mambo 4.0.12 allows remote attackers to gain administrator access via a URL request where session_id is s…
-
Unscored —
Pocket Internet Explorer (PIE) 3.0 allows remote attackers to cause a denial of service (crash) via a Javascript functi…
-
Unscored —CVE-2003-1260 Public exploit
Buffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long response to a LIST command.
-
Unscored —CVE-2003-1240 Public exploit
PHP remote file inclusion vulnerability in CuteNews 0.88 allows remote attackers to execute arbitrary PHP code via a UR…
-
Unscored —CVE-2003-1271 Public exploit
Cross-site scripting vulnerability (XSS) in AN HTTP 1.41e allows remote attackers to execute arbitrary web script or HT…
-
Unscored —CVE-2003-1256 Public exploit
aff_liste_langue.php in E-theni allows remote attackers to execute arbitrary PHP code by modifying the rep_include para…
-
Unscored —CVE-2003-1263 Public exploit
ICAL.EXE in iCal 3.7 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, possibl…
-
Unscored —CVE-2003-1243 Public exploit
Cross-site scripting vulnerability (XSS) in Sage 1.0 b3 allows remote attackers to insert arbitrary HTML or web script …
-
Unscored —CVE-2003-1278 Public exploit
Cross-site scripting vulnerability (XSS) in OpenTopic 2.3.1 allows remote attackers to execute arbitrary script as othe…
-
Unscored —CVE-2005-3523 Public exploit
Format string vulnerability in friendsd2 in GpsDrive allows remote attackers to execute arbitrary code via the dir (dir…
-
Unscored —
Buffer overflow in the SSL-ready version of linux-ftpd (linux-ftpd-ssl) 0.17 allows remote attackers to execute arbitra…
-
Unscored —
Directory traversal vulnerability in CuteNews 1.4.1 allows remote attackers to include arbitrary files, execute code, a…
-
Unscored —CVE-2005-3520 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2005-3516 Public exploit
Cross-site scripting (XSS) vulnerability in recommend.php in Chipmunk Directory script allows remote attackers to injec…
-
Unscored —CVE-2005-3519 Public exploit
Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and…
-
Unscored —CVE-2005-3508 Public exploit
SQL injection vulnerability in showGallery.php in Gallery (Galerie) 2.4 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2005-3518 Public exploit
SQL injection vulnerability in search.php in PunBB 1.2.7 and 1.2.8 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2005-3515 Public exploit
Cross-site scripting (XSS) vulnerability in recommend.php in Chipmunk Topsites script allows remote attackers to inject…
-
Unscored —CVE-2005-3522 Public exploit
Cross-site scripting (XSS) vulnerability in index.jsp in ManageEngine Netflow Analyzer 4.0.2 allows remote attackers to…
-
Unscored —CVE-2005-3514 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Forum script allow remote attackers to inject arbitrary…
-
Unscored —CVE-2005-3509 Public exploit
Multiple SQL injection vulnerabilities in JPortal allow remote attackers to execute arbitrary SQL commands via (1) bann…
-
Unscored —CVE-2005-3512 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in VUBB alpha rc1 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2005-3503 Public exploit
chfn in pwdutils 3.0.4 and earlier on SuSE Linux, and possibly other operating systems, does not properly check argumen…
-
Unscored —CVE-2005-3491 Public exploit
Multiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow remote attackers to exec…
-
Unscored —CVE-2005-3492 Public exploit
FlatFrag 0.3 and earlier allows remote attackers to cause a denial of service (crash) by sending an NT_CONN_OK command …
-
Unscored —CVE-2005-3489 Public exploit
Buffer overflow in Asus Video Security 3.5.0.0 and earlier, when using authorization, allows remote attackers to execut…
-
Unscored —
IBM WebSphere Application Server 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before fixpack V6.0.2.5, when sess…
-
Unscored —CVE-2005-3493 Public exploit
Battle Carry .005 and earlier allows remote attackers to cause a denial of service (inaccessible port) via a large pack…
-
Unscored —CVE-2005-3483 Public exploit
Buffer overflow in GO-Global for Windows 3.1.0.3270 and earlier allows remote attackers to execute arbitrary code via a…
-
Unscored —CVE-2005-3487 Public exploit
Multiple buffer overflows in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via var…
-
Unscored —CVE-2005-3485 Public exploit
Buffer overflow in Glider Collect'n kill 1.0.0.0 allows remote attackers to execute arbitrary code via a gl_playerEnter…
-
Unscored —
Multiple format string vulnerabilities in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary…
-
Unscored —
Scorched 3D 39.1 (bf) and earlier allows remote attackers to cause a denial of service (long loop and server hang) via …