11 December 2005

27 results · Feed

• Unscored —
  CVE-2005-4176 Public exploit

  AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, whi…

  Dec 11, 2005
• Unscored —
  CVE-2005-4175

  Insyde BIOS V190 does not clear the keyboard buffer after reading the BIOS password during system startup, which allows…

  Dec 11, 2005
• Unscored —
  CVE-2005-4169 Public exploit

  Multiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute arbitrary SQL commands via the…

  Dec 11, 2005
• Unscored —
  CVE-2005-4165

  Multiple SQL injection vulnerabilities in ASP-DEV ASP Resources Forum allow remote attackers to execute arbitrary SQL c…

  Dec 11, 2005
• Unscored —
  CVE-2005-4167 Public exploit

  Cross-site scripting (XSS) vulnerability in eFiction 1.0 and 1.1 allows remote attackers to inject arbitrary web script…

  Dec 11, 2005
• Unscored —
  CVE-2005-4171 Public exploit

  The "Upload new image" command in the "Manage Images" eFiction 1.1, when members are allowed to upload images, allows r…

  Dec 11, 2005
• Unscored —
  CVE-2005-4174

  eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operation…

  Dec 11, 2005
• Unscored —
  CVE-2005-4166 Public exploit

  Cross-site scripting (XSS) vulnerability in password.asp in DUWare DUportal Pro 3.4.3 allows remote attackers to inject…

  Dec 11, 2005
• Unscored —
  CVE-2005-4172

  eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information via a direct request to storyblock.p…

  Dec 11, 2005
• Unscored —
  CVE-2005-4170 Public exploit

  SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands via the uid param…

  Dec 11, 2005
• Unscored —
  CVE-2005-4168 Public exploit

  Multiple SQL injection vulnerabilities in eFiction 1.0, 1.1, and 2.0 allow remote attackers to execute arbitrary SQL co…

  Dec 11, 2005
• Unscored —
  CVE-2005-4173

  eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing phpinfo.php, which exec…

  Dec 11, 2005
• Unscored —
  CVE-2005-4162

  Cross-site scripting (XSS) vulnerability in cal_make.pl in ACME PerlCal 2.99.20 allows remote attackers to inject arbit…

  Dec 11, 2005
• Unscored —
  CVE-2005-4161 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in MilliScripts 1.4 redirect script allow remote attackers to injec…

  Dec 11, 2005
• Unscored —
  CVE-2005-4163

  Directory traversal vulnerability in captcha.php in Captcha PHP 0.9 allows remote attackers to read arbitrary files via…

  Dec 11, 2005
• Unscored —
  CVE-2005-4159

  NOTE: this issue has been disputed by the vendor and third parties. SQL injection vulnerability in Memberlist.php in Si…

  Dec 11, 2005
• Unscored —
  CVE-2005-4160 Public exploit

  Directory traversal vulnerability in getdox.php in Torrential 1.2 allows remote attackers to read arbitrary files via "…

  Dec 11, 2005
• Unscored —
  CVE-2005-4164

  SQL injection vulnerability in view.php in PHP-addressbook 1.2 allows remote attackers to execute arbitrary SQL command…

  Dec 11, 2005
• Unscored —
  CVE-2005-4157

  Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to authenticate to the servic…

  Dec 11, 2005
• Unscored —
  CVE-2005-4155 Public exploit

  registration.PHP in ATutor 1.5.1 pl2 allows remote attackers to execute arbitrary SQL commands via an e-mail address th…

  Dec 11, 2005
• Unscored —
  CVE-2005-4156

  Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (1.0.9), with magic_quotes_gpc disabled, allows remote attac…

  Dec 11, 2005
• Unscored —
  CVE-2005-4158 Public exploit

  Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT …

  sudo Debian
  Dec 11, 2005
• Unscored —
  CVE-2005-4154

  Unspecified vulnerability in PEAR installer 1.4.2 and earlier allows user-assisted attackers to execute arbitrary code …

  Dec 11, 2005
• Unscored —
  CVE-2005-4153

  Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message that causes the server t…

  Dec 11, 2005
• Unscored —
  CVE-2005-4152

  Soti Pocket Controller-Professional 5.0 allows remote attackers to turn off, reboot, or hard reset a PDA via a series o…

  Dec 11, 2005
• Unscored —
  CVE-2005-3533 Public exploit

  Buffer overflow in OSH before 1.7-15 allows local users to execute arbitrary code via a long current working directory …

  Dec 11, 2005
• Unscored —
  CVE-2005-3532

  authpam.c in courier-authdaemon for Courier Mail Server 0.37.3 through 0.52.1, when using pam_tally, does not call the …

  courier Debian
  Dec 11, 2005