28 December 2005

35 results · Feed

• Unscored —
  CVE-2005-3345

  rssh 2.0.0 through 2.2.3 allows local users to bypass access restrictions and gain root privileges by using the rssh_ch…

  Dec 28, 2005
• Unscored —
  CVE-2005-4560 Public exploit EPSS 86%

  The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbi…

  Dec 28, 2005
• Unscored —
  CVE-2005-4546

  search.php in eggblog 2.0 allows remote attackers to obtain the full path via an invalid q parameter, as used by the Ke…

  Dec 28, 2005
• Unscored —
  CVE-2005-4545

  Cross-site scripting (XSS) vulnerability in search.asp in NetDirect ShopEngine allows remote attackers to inject arbitr…

  Dec 28, 2005
• Unscored —
  CVE-2005-4553 Public exploit

  Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long APPE command. NO…

  Dec 28, 2005
• Unscored —
  CVE-2005-4557 Public exploit

  dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 …

  Dec 28, 2005
• Unscored —
  CVE-2005-4552

  The (1) slsmgr and (2) slsadmin programs in Sun Solaris PC NetLink 2.0 create temporary files insecurely, which allows …

  Dec 28, 2005
• Unscored —
  CVE-2005-4558 Public exploit

  IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not pr…

  Dec 28, 2005
• Unscored —
  CVE-2005-4549

  Cross-site scripting (XSS) vulnerability in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote…

  Dec 28, 2005
• Unscored —
  CVE-2005-4550 Public exploit

  The PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to obtain th…

  Dec 28, 2005
• Unscored —
  CVE-2005-4554 Public exploit

  Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute a…

  Dec 28, 2005
• Unscored —
  CVE-2005-4548

  SQL injection vulnerability in the "user area" in RWS Statistics Counter before 2.4.1 allows remote attackers to execut…

  Dec 28, 2005
• Unscored —
  CVE-2005-4551

  Cross-site scripting (XSS) vulnerability in sign.php in codegrrl SimpBook 1.0, when html_enable is on, allows remote at…

  Dec 28, 2005
• Unscored —
  CVE-2005-4559 Public exploit

  mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0…

  Dec 28, 2005
• Unscored —
  CVE-2005-4555 Public exploit

  Cross-site scripting (XSS) vulnerability in add.php in DEV web management system 1.5 and earlier allows remote attacker…

  Dec 28, 2005
• Unscored —
  CVE-2005-4556 Public exploit EPSS 11%

  PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail …

  Dec 28, 2005
• Unscored —
  CVE-2005-4547

  Cross-site scripting (XSS) vulnerability in home/search.php in eggblog 2.0 allows remote attackers to execute arbitrary…

  Dec 28, 2005
• Unscored —
  CVE-2005-4534

  The shadow database feature (syncshadowdb) in Bugzilla 2.9 through 2.16.10 allows local users to overwrite arbitrary fi…

  Dec 28, 2005
• Unscored —
  CVE-2005-4530

  Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Enterprise 3.0 (formerly DoPays) allow remote at…

  Dec 28, 2005
• Unscored —
  CVE-2005-4521

  CRLF injection vulnerability in Mantis 1.0.0rc3 and earlier allows remote attackers to modify HTTP headers and conduct …

  Dec 28, 2005
• Unscored —
  CVE-2005-4532

  scponlyc in scponly 4.1 and earlier, when the operating system supports LD_PRELOAD mechanisms, allows local users to ex…

  Dec 28, 2005
• Unscored —
  CVE-2005-4519

  Multiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1.0.0rc3 and earlier al…

  Dec 28, 2005
• Unscored —
  CVE-2005-4517 Public exploit

  SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL co…

  Dec 28, 2005
• Unscored —
  CVE-2005-4522

  Multiple cross-site scripting (XSS) vulnerabilities in the view_filters_page.php filters script in Mantis 1.0.0rc3 and …

  Dec 28, 2005
• Unscored —
  CVE-2005-4525

  SmcGui.exe in Sygate Protection Agent 5.0 build 6144 allows local users to obtain management control over the agent by …

  Dec 28, 2005
• Unscored —
  CVE-2005-4524

  Mantis 1.0.0rc3 does not properly handle "Make note private" when a bug is being resolved, which has unknown impact and…

  Dec 28, 2005
• Unscored —
  CVE-2005-4523

  Mantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attackers to obtain sensit…

  Dec 28, 2005
• Unscored —
  CVE-2005-4527 Public exploit

  Multiple SQL injection vulnerabilities in Direct News 4.9 allow remote attackers to execute arbitrary SQL commands via …

  Dec 28, 2005
• Unscored —
  CVE-2005-4520

  Unspecified "port injection" vulnerabilities in filters in Mantis 1.0.0rc3 and earlier have unknown impact and attack v…

  Dec 28, 2005
• Unscored —
  CVE-2005-4533

  Argument injection vulnerability in scponlyc in scponly 4.1 and earlier, when both scp and rsync compatibility are enab…

  Dec 28, 2005
• Unscored —
  CVE-2005-4529

  The Chatspot 2.0.0a7 module for phpBB might allow remote attackers to impersonate other users via unknown vectors.

  Dec 28, 2005
• Unscored —
  CVE-2005-4516 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to i…

  Dec 28, 2005
• Unscored —
  CVE-2005-4518

  Mantis before 0.19.4 allows remote attackers to bypass the file upload size restriction by modifying the max_file_size …

  Dec 28, 2005
• Unscored —
  CVE-2005-4528

  SQL injection vulnerability in the Chatspot 2.0.0a7 module for phpBB allows remote attackers to execute arbitrary SQL c…

  Dec 28, 2005
• Unscored —
  CVE-2005-4526

  Clearswift MIMEsweeper For Web (a.k.a. WEBsweeper) 4.0 through 5.1 allows remote attackers to bypass filtering via a UR…

  Dec 28, 2005