Skip to content
OpenAdvisories

Archive

4 December 2005

Vulnerabilities first published on this day (UTC), newest first.

19 results · Clear filters · Feed

  • Unscored —
    CVE-2005-3992 Public exploit

    Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2005-3991 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2004-2640 Public exploit

    Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers to read arbitrary file…

  • Unscored —
    CVE-2004-2646 Public exploit

    The addUser function in UserManager.java in Free Web Chat 2.0 allows remote attackers to cause a denial of service (unc…

  • Unscored —
    CVE-2004-2649 Public exploit

    Eudora 6.1.0.6 allows remote attackers to obfuscate URLs displayed in the status bar by inserting a large number of cha…

  • Unscored —
    CVE-2004-2636 Public exploit

    TinyWeb 1.9 allows remote attackers to read source code of scripts via "/./" in the URL.

  • Unscored —
    CVE-2004-2647 Public exploit

    Free Web Chat 2.0 allows remote attackers to cause a denial of service (CPU consumption) via multiple connections from …

  • Unscored —
    CVE-2004-2628 Public exploit

    Multiple directory traversal vulnerabilities in thttpd 2.07 beta 0.4, when running on Windows, allow remote attackers t…

  • Unscored —
    CVE-2004-2631 Public exploit

    Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote a…

  • Unscored —
    CVE-2004-2625 Public exploit

    Cross-site scripting (XSS) vulnerability in Outblaze Email allows remote attackers to inject arbitrary web script or HT…

  • Unscored —
    CVE-2004-2626 Public exploit

    GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized S…

  • Unscored —
    CVE-2005-3988 Public exploit

    SQL injection vulnerability in article.php in Pineapple Technologies Lore 1.5.4 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2005-3986 Public exploit

    Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2004-2617 Public exploit

    Directory traversal vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers to read files outside of the…

  • Unscored —
    CVE-2004-2618 Public exploit

    Cross-site scripting (XSS) vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2004-2614 Public exploit

    Buffer overflow in MyWeb 3.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrar…

  • Unscored —
    CVE-2005-3982 Public exploit

    CRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP head…

  • Unscored —
    CVE-2005-3981 Public exploit

    NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a …

  • Unscored —
    CVE-2005-3980 Public exploit

    SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attacker…