Archive
November 2005
Vulnerabilities first published in this month (UTC), newest first.
702 results · Feed
-
Unscored —
PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) before 1.2.7 allows remote attackers to execu…
-
Unscored —
Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state…
-
Unscored —
The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shippe…
-
Unscored —
Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows rem…
-
Unscored —
aStats 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on (1) the aStats-Graphic-Signature-G…
-
Unscored —
Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (exhaus…
-
Unscored —
Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows r…
-
Unscored —
Unspecified vulnerability in meindlSOFT Cute PHP Library (aka cphplib) 0.46 has unknown impact and attack vectors, rela…
-
Unscored —
phpGroupWare before 0.9.16.002 transmits the (1) header admin and (2) setup passwords in plaintext via cookies, which a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in frmCompose.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows re…
-
Unscored —
Novell iChain 2.3 includes the build number in the VIA line of the proxy server's HTTP headers, which allows remote att…
-
Unscored —
SMTP service in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service (CP…
-
Unscored —CVE-2004-2573 Public exploit
PHP remote file inclusion vulnerability in tables_update.inc.php in phpGroupWare 0.9.14.005 and earlier allows remote a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Novell iChain 2.3 allows remote attackers to obtain login credentials via u…
-
Unscored —
Novell iChain 2.3 allows attackers to cause a denial of service via a URL with a "specific string."
-
Unscored —
login.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service via a…
-
Unscored —
The acl_check function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not behave as expected, whic…
-
Unscored —
Intentional information leak in phpinfo.php in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allows remote …
-
Unscored —CVE-2004-2574 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to…
-
Unscored —
phpGroupWare 0.9.14.005 and earlier allow remote attackers to obtain sensitive information via a direct request to (1) …
-
Unscored —
class.vfs_dav.inc.php in phpGroupWare 0.9.16.000 does not create .htaccess files to enable authorization checks for acc…
-
Unscored —
Gaim before 0.82 allows remote servers to cause a denial of service (application crash) via a long HTTP Content-Length …
-
Unscored —
frmAddfolder.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote authenticated users to create a folde…
-
Unscored —
ACLCHECK module in Novell iChain 2.3 allows attackers to bypass access control rules of an unspecified component via an…
-
Unscored —
Directory traversal vulnerability in frmGetAttachment.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows rem…
-
Unscored —
Memory leak in the ip6_input_finish function in ip6_input.c in Linux kernel 2.6.12 and earlier might allow attackers to…
-
Unscored —CVE-2005-3857 Public exploit
The time_out_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of serv…
-
Unscored —
The Popular URL capability (popularurls.cpp) in Krusader 1.60.0 and 1.70.0-beta1 saves passwords in cleartext in the kr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.asp in Online Knowledge Base System (OKBSYS) Lite Edition 1.0 allows…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in EasyPageCMS allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2005-3853 Public exploit
SQL injection vulnerability in snews.php in sNews 1.3 and earlier allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
SQL injection vulnerability in search.asp in Online Work Order Suite (OWOS) Lite Edition for ASP 3.0 allows remote atta…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.asp in Online Attendance System (OASYS) Lite 1.0 allows remote attac…
-
Unscored —CVE-2005-3855 Public exploit
SQL injection vulnerability in process.php in 1-2-3 music store allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2005-3849 Public exploit
Cross-site scripting (XSS) vulnerability in the Search module in PmWiki up to 2.0.12 allows remote attackers to inject …
-
Unscored —
The handle_stop_signal function in signal.c in Linux kernel 2.6.11 up to other versions before 2.6.13 and 2.6.12.6 allo…
-
Unscored —
Memory leak in the icmp_push_reply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a …
-
Unscored —
SQL injection vulnerability in index.php in pdjk-support suite 1.1a and earlier allows remote attackers to execute arbi…
-
Unscored —CVE-2005-3838 Public exploit
Multiple SQL injection vulnerabilities in search.php in IsolSoft Support Center 2.2 and earlier allow remote attackers …
-
Unscored —
Cross-site scripting (XSS) vulnerability in kPlaylist 1.6 (build 400), and possibly other versions, allows remote attac…