Archive
November 2005
Vulnerabilities first published in this month (UTC), newest first.
702 results · Feed
-
Unscored —
The SNMP v1/v2c daemon in Hitachi IP5000 VOIP WIFI Phone 1.5.6 allows remote attackers to gain read or write access to …
-
Unscored —
The SNMP daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has hard-coded publi…
-
Unscored —
The telnet daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has a default user…
-
Unscored —
Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 uses hardcoded IP addresses for its DNS servers, which could allow remo…
-
Unscored —
Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not allow the user to disable access to (1) SNMP or (2) TCP port 3390, which …
-
Unscored —CVE-2005-3695 Public exploit
Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attack…
-
Unscored —
tiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to obtain the installation path via …
-
Unscored —CVE-2005-3696 Public exploit
SQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary SQL commands via the ca…
-
Unscored —
Cross-site scripting (XSS) vulnerability in tiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote at…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Antville 1.1 allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —CVE-2005-2709 Public exploit
The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (ke…
-
Unscored —
Multiple SQL injection vulnerabilities in Dynix (formerly known as epixtech) WebPAC allow remote attackers to execute a…
-
Unscored —
Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via …
-
Unscored —
Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service (SMTP proxy fa…
-
Unscored —
Secure Computing Corporation Sidewinder G2 6.1.0.01 might allow remote attackers to cause a denial of service (proxy fa…
-
Unscored —
Admin Console in Secure Computing Corporation Sidewinder G2 6.1.0.01 exports private keys when exporting firewall certi…
-
Unscored —CVE-2005-3346 Public exploit
Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbi…
-
Unscored —
Stack-based buffer overflow in the ldif_get_line function in ldif.c of Sylpheed before 2.1.6 allows user-assisted attac…
-
Unscored —
SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients ("To" addr…
-
Unscored —
centericq 4.20.0-r3 with "Enable peer-to-peer communications" set allows remote attackers to cause a denial of service …
-
Unscored —
Cross-site scripting (XSS) vulnerability in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attack…
-
Unscored —
post.php in XMB 1.9.2 allows remote attackers to obtain the installation path via an invalid fid parameter in a newthre…
-
Unscored —
Multiple buffer overflows in freeFTPd 1.0.8, without logging enabled, allow remote authenticated attackers to cause a d…
-
Unscored —
The AxWebRemoveCtrl ActiveX control for uninstalling the SunnComm MediaMax DRM allows remote attackers to download and …
-
Unscored —
Directory traversal vulnerability in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Ente…
-
Unscored —
Cross-site scripting (XSS) vulnerability in members.php in XMB 1.9.3 and earlier allows remote attackers to inject arbi…
-
Unscored —CVE-2005-3685 Public exploit
Cross-site scripting (XSS) vulnerability in shopadmin.asp in VP-ASP Shopping Cart 5.50 allows remote attackers to injec…
-
Unscored —CVE-2005-3686 Public exploit
SQL injection vulnerability in search.inc.php in Unclassified NewsBoard before 1.5.3 Patch 4 allows remote attackers to…
-
Unscored —
Stack-based buffer overflow in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and earlier and Enterprise…
-
Unscored —
cancel_account.php in WHM AutoPilot 2.5.30 and earlier allows remote attackers to cancel requests for arbitrary account…
-
Unscored —
Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of…
-
Unscored —
The Transmission Control Protocol (TCP) allows remote attackers to cause a denial of service (bandwidth consumption) by…
-
Unscored —CVE-2005-3682 Public exploit
Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2005-3679 Public exploit
SQL injection vulnerability in admin/index.php in ActiveCampaign 1-2-All Broadcast Email allows remote attackers to exe…
-
Unscored —CVE-2005-3681 Public exploit
SQL injection vulnerability in viewcat.php in XOOPS WF-Downloads module 2.05 allows remote attackers to execute arbitra…
-
Unscored —
Buffer overflow in RealNetworks RealPlayer 10 and 10.5 allows remote attackers to execute arbitrary code via a crafted …
-
Unscored —
The exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service…
-
Unscored —CVE-2005-3676 Public exploit
SQL injection vulnerability in download.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
Directory traversal vulnerability in editor_registry.php in XOOPS 2.2.3 allows remote attackers to read or include arbi…
-
Unscored —
Google Talk before 1.0.0.76, with email notification enabled, allows remote attackers to cause a denial of service (con…