December 2005

681 results · Feed

• Unscored —
  CVE-2005-4551

  Cross-site scripting (XSS) vulnerability in sign.php in codegrrl SimpBook 1.0, when html_enable is on, allows remote at…

  Dec 28, 2005
• Unscored —
  CVE-2005-4559 Public exploit

  mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0…

  Dec 28, 2005
• Unscored —
  CVE-2005-4555 Public exploit

  Cross-site scripting (XSS) vulnerability in add.php in DEV web management system 1.5 and earlier allows remote attacker…

  Dec 28, 2005
• Unscored —
  CVE-2005-4556 Public exploit EPSS 11%

  PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail …

  Dec 28, 2005
• Unscored —
  CVE-2005-4547

  Cross-site scripting (XSS) vulnerability in home/search.php in eggblog 2.0 allows remote attackers to execute arbitrary…

  Dec 28, 2005
• Unscored —
  CVE-2005-4534

  The shadow database feature (syncshadowdb) in Bugzilla 2.9 through 2.16.10 allows local users to overwrite arbitrary fi…

  Dec 28, 2005
• Unscored —
  CVE-2005-4530

  Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Enterprise 3.0 (formerly DoPays) allow remote at…

  Dec 28, 2005
• Unscored —
  CVE-2005-4521

  CRLF injection vulnerability in Mantis 1.0.0rc3 and earlier allows remote attackers to modify HTTP headers and conduct …

  Dec 28, 2005
• Unscored —
  CVE-2005-4532

  scponlyc in scponly 4.1 and earlier, when the operating system supports LD_PRELOAD mechanisms, allows local users to ex…

  Dec 28, 2005
• Unscored —
  CVE-2005-4519

  Multiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1.0.0rc3 and earlier al…

  Dec 28, 2005
• Unscored —
  CVE-2005-4517 Public exploit

  SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL co…

  Dec 28, 2005
• Unscored —
  CVE-2005-4522

  Multiple cross-site scripting (XSS) vulnerabilities in the view_filters_page.php filters script in Mantis 1.0.0rc3 and …

  Dec 28, 2005
• Unscored —
  CVE-2005-4525

  SmcGui.exe in Sygate Protection Agent 5.0 build 6144 allows local users to obtain management control over the agent by …

  Dec 28, 2005
• Unscored —
  CVE-2005-4524

  Mantis 1.0.0rc3 does not properly handle "Make note private" when a bug is being resolved, which has unknown impact and…

  Dec 28, 2005
• Unscored —
  CVE-2005-4523

  Mantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attackers to obtain sensit…

  Dec 28, 2005
• Unscored —
  CVE-2005-4527 Public exploit

  Multiple SQL injection vulnerabilities in Direct News 4.9 allow remote attackers to execute arbitrary SQL commands via …

  Dec 28, 2005
• Unscored —
  CVE-2005-4520

  Unspecified "port injection" vulnerabilities in filters in Mantis 1.0.0rc3 and earlier have unknown impact and attack v…

  Dec 28, 2005
• Unscored —
  CVE-2005-4533

  Argument injection vulnerability in scponlyc in scponly 4.1 and earlier, when both scp and rsync compatibility are enab…

  Dec 28, 2005
• Unscored —
  CVE-2005-4529

  The Chatspot 2.0.0a7 module for phpBB might allow remote attackers to impersonate other users via unknown vectors.

  Dec 28, 2005
• Unscored —
  CVE-2005-4516 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to i…

  Dec 28, 2005
• Unscored —
  CVE-2005-4518

  Mantis before 0.19.4 allows remote attackers to bypass the file upload size restriction by modifying the max_file_size …

  Dec 28, 2005
• Unscored —
  CVE-2005-4528

  SQL injection vulnerability in the Chatspot 2.0.0a7 module for phpBB allows remote attackers to execute arbitrary SQL c…

  Dec 28, 2005
• Unscored —
  CVE-2005-4526

  Clearswift MIMEsweeper For Web (a.k.a. WEBsweeper) 4.0 through 5.1 allows remote attackers to bypass filtering via a UR…

  Dec 28, 2005
• Unscored —
  CVE-2005-3343

  tkdiff before 4.1.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

  Dec 27, 2005
• Unscored —
  CVE-2005-3341

  DHIS tools DNS package (dhis-tools-dns) before 5.0 allows local users to overwrite arbitrary files via a symlink attack…

  dhis-tools-dns Debian
  Dec 27, 2005
• Unscored —
  CVE-2005-3535

  Buffer overflow in KETM 0.0.6 allows local users to execute arbitrary code via unknown vectors.

  ketm Debian
  Dec 27, 2005
• Unscored —
  CVE-2005-4510 Public exploit

  Directory traversal vulnerability in server.np in NetPublish Server 7 allows remote attackers to read arbitrary files v…

  Dec 23, 2005
• Unscored —
  CVE-2005-4514

  The encapsulation script mechanism in Webwasher CSM Appliance Suite 5.x uses case-sensitive detection of malicious toke…

  Dec 23, 2005
• Unscored —
  CVE-2005-4515

  SQL injection vulnerability in WebDB 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via unsp…

  Dec 23, 2005
• Unscored —
  CVE-2005-4509

  SQL injection vulnerability in index.asp in pTools allows remote attackers to execute arbitrary SQL commands via the do…

  Dec 23, 2005
• Unscored —
  CVE-2005-4511

  Format string vulnerability in TN3270 Resource Gateway 1.1.0 allows local users to cause a denial of service and possib…

  Dec 23, 2005
• Unscored —
  CVE-2005-4513

  Cross-site scripting (XSS) vulnerability in WANDSOFT e-SEARCH allows remote attackers to inject arbitrary web script or…

  Dec 23, 2005
• Unscored —
  CVE-2005-4512

  Cross-site scripting (XSS) vulnerability in WAXTRAPP 3.0.1 and earlier allows remote attackers to inject arbitrary web …

  Dec 23, 2005
• Unscored —
  CVE-2005-4506

  Nexus Concepts Dev Hound 2.24 and earlier stores username and password information in cleartext in the devhound.tdbd fi…

  Dec 23, 2005
• Unscored —
  CVE-2005-4505 Public exploit

  Unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5) might a…

  Dec 23, 2005
• Unscored —
  CVE-2005-4508

  Nexus Concepts Dev Hound 2.24 and earlier allows remote attackers to obtain the installation path via a URL containing …

  Dec 23, 2005
• Unscored —
  CVE-2005-4507

  Multiple cross-site scripting (XSS) vulnerabilities in Nexus Concepts Dev Hound 2.24 and earlier allow remote attackers…

  Dec 23, 2005
• Unscored —
  CVE-2005-4504 Public exploit EPSS 12%

  The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safa…

  Dec 22, 2005
• Unscored —
  CVE-2005-3537

  A "missing request validation" error in phpBB 2 before 2.0.18 allows remote attackers to edit private messages of other…

  Dec 22, 2005
• Unscored —
  CVE-2005-3536

  SQL injection vulnerability in phpBB 2 before 2.0.18 allows remote attackers to execute arbitrary SQL commands via the …

  Dec 22, 2005