Archive
4 December 2005
Vulnerabilities first published on this day (UTC), newest first.
55 results · Feed
-
Unscored —CVE-2005-3992 Public exploit
Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2005-3991 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2004-2640 Public exploit
Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers to read arbitrary file…
-
Unscored —
Directory traversal vulnerability in Microsoft cabarc allows remote attackers to overwrite files via "../" sequences in…
-
Unscored —CVE-2004-2646 Public exploit
The addUser function in UserManager.java in Free Web Chat 2.0 allows remote attackers to cause a denial of service (unc…
-
Unscored —
An ActiveX control for McAfee Security Installer Control System 4.0.0.81 allows remote attackers to access the Windows …
-
Unscored —
The MIME transformation system (transformations/text_plain__external.inc.php) in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allow…
-
Unscored —
Multiple vulnerabilities in the H.323 protocol implementation for First Virtual Communications Click to Meet Express (w…
-
Unscored —
Unspecified vulnerability in Sun Fire 3800/4800/4810/6800, Sun Fire V1280, and Netra 1280 allows remote attackers to ca…
-
Unscored —
Unspecified vulnerability in Sesamie 1.0 allows remote anonymous attackers to gain access to repositories of other user…
-
Unscored —
Unspecified vulnerability in ASN.1 Compiler (asn1c) before 0.9.7 has unknown impact and attack vectors when processing …
-
Unscored —
Cross-site scripting (XSS) vulnerability in "TextSearch" in WackoWiki 3.5 allows remote attackers to inject arbitrary w…
-
Unscored —
Yeemp 0.9.9 and earlier does not properly encrypt inbound files, which allows remote attackers to spoof the identity of…
-
Unscored —
Nortel Contivity VPN Client 2.1.7, 3.00, 3.01, 4.91, and 5.01, when opening a VPN tunnel, does not check the gateway ce…
-
Unscored —CVE-2004-2649 Public exploit
Eudora 6.1.0.6 allows remote attackers to obfuscate URLs displayed in the status bar by inserting a large number of cha…
-
Unscored —CVE-2004-2636 Public exploit
TinyWeb 1.9 allows remote attackers to read source code of scripts via "/./" in the URL.
-
Unscored —
The (1) bos.rte.serv_aid or (2) bos.rte.console filesets in IBM AIX 5.1 and 5.2 allow local users to overwrite arbitrar…
-
Unscored —
Java 2 Micro Edition (J2ME) does not properly validate bytecode, which allows remote attackers to escape the Kilobyte V…
-
Unscored —
The Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files in the "admin/" directo…
-
Unscored —CVE-2004-2647 Public exploit
Free Web Chat 2.0 allows remote attackers to cause a denial of service (CPU consumption) via multiple connections from …
-
Unscored —
Unspecified vulnerability in Journalness 3.0.7 and earlier allows remote attackers to create or modify posts via unknow…
-
Unscored —CVE-2004-2628 Public exploit
Multiple directory traversal vulnerabilities in thttpd 2.07 beta 0.4, when running on Windows, allow remote attackers t…
-
Unscored —
Unknown vulnerability in Rippy the Aggregator before 0.10, when register_globals is enabled, has unknown attack vectors…
-
Unscored —CVE-2004-2631 Public exploit
Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote a…
-
Unscored —
FreezeX 1.00.100.0666 allows local users with administrator privileges to cause a denial of service (FreezeX applicatio…
-
Unscored —
The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound co…
-
Unscored —
ripMIME 1.3.2.3 and earlier allows remote attackers to bypass e-mail protection via a base64 MIME encoded attachment co…
-
Unscored —CVE-2004-2625 Public exploit
Cross-site scripting (XSS) vulnerability in Outblaze Email allows remote attackers to inject arbitrary web script or HT…
-
Unscored —CVE-2004-2626 Public exploit
GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized S…
-
Unscored —
The MIMEH_read_headers function in ripMIME 1.3.1.0 does not properly handle trailing "\r" and "\n" characters in header…
-
Unscored —
AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server…
-
Unscored —
Unspecified vulnerability in ASN.1 Compiler (asn1c) before 0.9.7 has unknown impact and attack vectors when processing …
-
Unscored —
phpMyAdmin 2.5.1 up to 2.5.7 allows remote attackers to modify configuration settings and gain unauthorized access to M…
-
Unscored —CVE-2005-3988 Public exploit
SQL injection vulnerability in article.php in Pineapple Technologies Lore 1.5.4 allows remote attackers to execute arbi…
-
Unscored —
The Internet Key Exchange version 1 (IKEv1) implementation in Astaro Security Linux before 6.102 allows remote attacker…
-
Unscored —CVE-2005-3986 Public exploit
Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitra…
-
Unscored —
Multiple SQL injection vulnerabilities in Tradesoft CMS allow remote attackers to execute arbitrary SQL commands via un…
-
Unscored —
Memory leak in Avaya TN2602AP IP Media Resource 320 circuit pack before vintage 9 firmware allows remote attackers to c…
-
Unscored —
Unspecified vulnerability in procfs in the Linux-VServer stable branch for the 2.4 kernel before 1.23 and Linux-VServer…
-
Unscored —
The Change Permissions function in the Sophster suite before 0.9.6 28 May 2004 (aka 0.9.6-r5), possibly including Sophs…