Archive
November 2005
Vulnerabilities first published in this month (UTC), newest first.
702 results · Feed
-
Unscored —CVE-2003-1286 Public exploit
HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attac…
-
Unscored —
Sambar Server before 6.0 beta 6 allows remote attackers to obtain sensitive information via direct requests to the defa…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server before 6.0 beta 6 allow remote attackers to inject…
-
Unscored —
Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code via a request with an M…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in e-Quick Cart allow remote attackers to inject arbitrary web scri…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier allows remote attacker…
-
Unscored —
Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the…
-
Unscored —
Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute…
-
Unscored —
The Internet Key Exchange version 1 (IKEv1) implementation in Juniper JUNOS and JUNOSe software for M, T, and J-series …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Unicode version of msearch (unicode-msearch) 1.51(U1)-beta1, 1.51(U1), …
-
Unscored —
Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlier allow attackers to execute arbitrary code via a crafte…
-
Unscored —
The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when r…
-
Unscored —
NetGear WG602 (aka WG602v1) Wireless Access Point 1.7.14 has a hardcoded account of username "superman" and password "2…
-
Unscored —
Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (…
-
Unscored —CVE-2004-2555 Public exploit
Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography (arithmetic and XOR operations) …
-
Unscored —CVE-2004-2548 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote at…
-
Unscored —CVE-2004-2547 Public exploit
NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP reques…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in unspecified Perl scripts in SandSurfer before 1.7.1 allow remote…
-
Unscored —
Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary cod…
-
Unscored —CVE-2004-2551 Public exploit
Multiple SQL injection vulnerabilities in Layton HelpBox 3.0.1 allow remote attackers to execute arbitrary SQL commands…
-
Unscored —
The Ignition Project ignitionServer 0.1.2 through 0.1.2-R2 allows remote authenticated users with local IRC operator pr…
-
Unscored —
Multiple memory leaks in Samba before 3.0.6 allow attackers to cause a denial of service (memory consumption).
-
Unscored —
Buffer overflow in XBoard 4.2.7 and earlier might allow local users to execute arbitrary code via a long -icshost comma…
-
Unscored —
NetGear WG602 (aka WG602v1) Wireless Access Point firmware 1.04.0 and 1.5.67 has a hardcoded account of username "super…
-
Unscored —
Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access…
-
Unscored —
Idetix Software Systems Revize CMS allows remote attackers to obtain sensitive information via direct requests to files…
-
Unscored —
The default index page in the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 lists sensitive information such as s…
-
Unscored —
The default configuration of the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not require authentication fo…
-
Unscored —
Unspecified vulnerability in the administration interface in Uresk Links 2.0 Lite allows remote attackers to bypass aut…
-
Unscored —
Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 allows remote attackers to obtain sensitive information and possibly ca…
-
Unscored —CVE-2005-3728 Public exploit
Idetix Software Systems Revize CMS stores conf/revize.xml under the web document root with insufficient access control,…
-
Unscored —CVE-2005-3727 Public exploit
SQL injection vulnerability in debug/query_results.jsp in Idetix Software Systems Revize CMS allows remote attackers to…
-
Unscored —
Hitachi IP5000 VOIP WIFI Phone 1.5.6 has a hard-coded administrator password of "0000", which allows attackers with phy…
-
Unscored —
Senao SI-680H Wireless VoIP Phone Firmware 0.03.0839 leaves the VxWorks debugger UDP port 17185 available without authe…
-
Unscored —CVE-2005-3730 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allo…
-
Unscored —
SQL injection vulnerability in Interspire ArticleLive NX 0.3 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 does not allow users to disable access …
-
Unscored —
Unspecified vulnerability in yaSSL before 1.0.6 has unknown impact and attack vectors, related to "certificate chain pr…
-
Unscored —
Opera Web Browser 8.50 and 8.0 through 8.0.2 allows remote attackers to spoof the URL in the status bar via the title i…
-
Unscored —
PHP Easy Download allows remote attackers to bypass authentication via edit.php.