270901
|
- |
|
gnu
|
mailutils
|
Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the comm…
|
NVD-CWE-Other
|
CVE-2005-1523
|
2008-09-6 05:49 |
2005-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270902
|
- |
|
battleaxe_software
|
bttlxeforum
|
forum.asp in bttlxeForum 2.0 allows remote attackers to obtain full path information via a certain hex-encoded argument to the page parameter, possibly due to a SQL injection vulnerability.
|
NVD-CWE-Other
|
CVE-2005-1570
|
2008-09-6 05:49 |
2005-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270903
|
- |
|
wenig_and_spitzer-williams
|
showoff_digital_media_software
|
Multiple directory traversal vulnerabilities in ShowOff! 1.5.4 allow remote attackers to read arbitrary files via ".." sequences in arguments to the (1) ShowAlbum, (2) ShowVideo, or (3) ShowGraphic s…
|
NVD-CWE-Other
|
CVE-2005-1571
|
2008-09-6 05:49 |
2005-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270904
|
- |
|
wenig_and_spitzer-williams
|
showoff_digital_media_software
|
ShowOff! 1.5.4 allows remote attackers to cause a denial of service (server crash) via a malformed request to port 8083.
|
NVD-CWE-Other
|
CVE-2005-1572
|
2008-09-6 05:49 |
2005-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270905
|
- |
|
mozilla
|
firefox
|
The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to hide the real file types of downloaded files via the Content-Type HTTP header and a filename containi…
|
NVD-CWE-Other
|
CVE-2005-1575
|
2008-09-6 05:49 |
2005-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270906
|
- |
|
mozilla
|
firefox
|
The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when "Save to Disk" is selec…
|
NVD-CWE-Other
|
CVE-2005-1576
|
2008-09-6 05:49 |
2005-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270907
|
- |
|
apg_technology
|
classmaster
|
APG Technology ClassMaster does not properly restrict access to sensitive folders, which allows remote attackers to access folders via a network share.
|
NVD-CWE-Other
|
CVE-2005-1577
|
2008-09-6 05:49 |
2005-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270908
|
- |
|
guidance_software
|
encase
|
EnCase Forensic Edition 4.18a does not support Device Configuration Overlays (DCO), which allows attackers to hide information without detection.
|
NVD-CWE-Other
|
CVE-2005-1578
|
2008-09-6 05:49 |
2005-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270909
|
- |
|
boastmachine
|
boastmachine
|
users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which allows remote attackers to execute arbitrary code.
|
NVD-CWE-Other
|
CVE-2005-1580
|
2008-09-6 05:49 |
2005-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270910
|
- |
|
eric_fichot
|
bug_report
|
Cross-site scripting (XSS) vulnerability in Bug Report 1.0 allows remote attackers to inject arbitrary web script or HTML via various fields to bug_report.php, which are not filtered or quoted when p…
|
NVD-CWE-Other
|
CVE-2005-1581
|
2008-09-6 05:49 |
2005-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|