|
273551
|
7.8 |
HIGH
|
linux
|
linux_kernel
|
Linux kernel before after 2.6.12 and before 2.6.13.1 might allow attackers to cause a denial of service (Oops) via certain IPSec packets that cause alignment problems in standard multi-block cipher p…
|
NVD-CWE-Other
|
CVE-2005-3753
|
2008-09-6 05:55 |
2005-11-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273552
|
4.3 |
MEDIUM
|
exponent
|
exponent
|
Cross-site scripting (XSS) vulnerability in Exponent CMS 0.96.3 and later versions allows remote attackers to inject arbitrary web script or HTML via (1) Javascript in forms produced by the form gene…
|
NVD-CWE-Other
|
CVE-2005-3761
|
2008-09-6 05:55 |
2005-11-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273553
|
5.0 |
MEDIUM
|
exponent
|
exponent
|
Exponent CMS 0.96.3 and later versions includes the full installation path in the base parameter to thumb.php, which allows remote attackers to obtain sensitive information. NOTE: this might be resu…
|
NVD-CWE-Other
|
CVE-2005-3763
|
2008-09-6 05:55 |
2005-11-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273554
|
10.0 |
HIGH
|
exponent
|
exponent
|
The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check the MIME type of uploaded files, with unknown impact from the preview icon, possibly invol…
|
NVD-CWE-Other
|
CVE-2005-3764
|
2008-09-6 05:55 |
2005-11-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273555
|
7.5 |
HIGH
|
exponent
|
exponent
|
Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, which allows remote attackers to execute arbitrary code.
|
NVD-CWE-Other
|
CVE-2005-3765
|
2008-09-6 05:55 |
2005-11-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273556
|
5.0 |
MEDIUM
|
exponent
|
exponent
|
Exponent CMS 0.96.3 and later versions stores sensitive user pages under the web document root with insufficient access control even though certain permissions are specified, which allows attackers t…
|
NVD-CWE-Other
|
CVE-2005-3766
|
2008-09-6 05:55 |
2005-11-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273557
|
7.5 |
HIGH
|
php_download_manager
|
php_download_manager
|
SQL injection vulnerability in files.php in PHP Download Manager 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter.
|
NVD-CWE-Other
|
CVE-2005-3769
|
2008-09-6 05:55 |
2005-11-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273558
|
5.0 |
MEDIUM
|
-
|
-
|
Unspecified vulnerability in MyBulletinBoard (MyBB) before 1.0 PR2 Rev 686 allows attackers to cause a denial of service via unknown vectors.
|
NVD-CWE-Other
|
CVE-2005-3778
|
2008-09-6 05:55 |
2005-11-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273559
|
2.1 |
LOW
|
apple
|
mac_os_x
mac_os_x_server
|
Mac OS X 10.4.3 up to 10.4.6, when loginwindow uses the "Name and password" setting, and the "Show the Restart, Sleep, and Shut Down buttons" option is disabled, allows users with physical access to …
|
NVD-CWE-Other
|
CVE-2005-3782
|
2008-09-6 05:55 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273560
|
4.3 |
MEDIUM
|
easypagecms
|
easypagecms
|
Cross-site scripting (XSS) vulnerability in index.php in EasyPageCMS allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
|
NVD-CWE-Other
|
CVE-2005-3854
|
2008-09-6 05:55 |
2005-11-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273561
|
4.0 |
MEDIUM
|
krusader
|
krusader
|
The Popular URL capability (popularurls.cpp) in Krusader 1.60.0 and 1.70.0-beta1 saves passwords in cleartext in the krusaderrc file when the user enters URLs containing passwords in the panel URL fi…
|
NVD-CWE-Other
|
CVE-2005-3856
|
2008-09-6 05:55 |
2005-11-28 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273562
|
7.8 |
HIGH
|
macromedia
|
flash_communication_server
|
Macromedia Flash Communication Server MX 1.0 and 1.5 does not sufficiently validate certain RTMP data, which allows attackers to cause a denial of service (instability or crash), as demonstrated usin…
|
NVD-CWE-Other
|
CVE-2005-3901
|
2008-09-6 05:55 |
2005-11-30 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273563
|
4.3 |
MEDIUM
|
-
|
-
|
Cross-site scripting (XSS) vulnerability in PBLang 4.65 allows remote attackers to inject arbitrary web script or HTML via multiple fields in (1) UCP.php and (2) SendPm.php.
|
NVD-CWE-Other
|
CVE-2005-3919
|
2008-09-6 05:55 |
2005-11-30 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273564
|
10.0 |
HIGH
|
dotclear
|
dotclear
|
Unspecified vulnerability in the Trackback functionality in DotClear 1.2.1 has unknown impact and attack vectors.
|
NVD-CWE-Other
|
CVE-2005-3957
|
2008-09-6 05:55 |
2005-12-1 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273565
|
7.5 |
HIGH
|
tradesoft
|
tradesoft_cms
|
Multiple SQL injection vulnerabilities in Tradesoft CMS allow remote attackers to execute arbitrary SQL commands via unspecified attack vectors.
|
NVD-CWE-Other
|
CVE-2005-3987
|
2008-09-6 05:55 |
2005-12-5 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273566
|
7.5 |
HIGH
|
wineggdropshell
|
wineggdropshell
|
Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote attackers to execute arbitrary code via (1) a long GET request to the HTTP server, or a long (2) USER or (3) P…
|
NVD-CWE-Other
|
CVE-2005-3992
|
2008-09-6 05:55 |
2005-12-5 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273567
|
4.0 |
MEDIUM
|
esi_products
|
webeoc
|
WebEOC before 6.0.2 uses the same secret key for all installations, which allows attackers with the key to decrypt data from any WebEOC installation.
|
NVD-CWE-Other
|
CVE-2005-4002
|
2008-09-6 05:55 |
2005-12-5 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273568
|
7.5 |
HIGH
|
-
|
-
|
Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows remote attackers to gain privileges via a direct request to install.php, then navi…
|
NVD-CWE-Other
|
CVE-2005-4025
|
2008-09-6 05:55 |
2005-12-5 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273569
|
4.3 |
MEDIUM
|
amember
|
amember
|
Multiple cross-site scripting (XSS) vulnerabilities in aMember allow remote attackers to inject arbitrary web script or HTML via the (1) lamember_login parameter to sendpass.php and (2) login paramet…
|
NVD-CWE-Other
|
CVE-2005-4028
|
2008-09-6 05:55 |
2005-12-5 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273570
|
5.0 |
MEDIUM
|
esi_products
|
webeoc
|
WebEOC before 6.0.2 allows remote attackers to obtain valid usernames via the HTML source of the WebEOC login webpage, which could be useful in other attacks such as locking out valid users via brute…
|
NVD-CWE-Other
|
CVE-2005-4029
|
2008-09-6 05:55 |
2005-12-5 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273571
|
5.0 |
MEDIUM
|
phpmyadmin
|
phpmyadmin
|
PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $__redirect parameter, possibly involving the subform…
|
NVD-CWE-Other
|
CVE-2005-3299
|
2008-09-6 05:54 |
2005-10-24 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273572
|
2.6 |
LOW
|
siteturn
|
domain_manager_pro
|
Cross-site scripting (XSS) vulnerability in SiteTurn Domain Manager Pro allows remote attackers to inject arbitrary web script or HTML via the err parameter in the panel script.
|
NVD-CWE-Other
|
CVE-2005-3320
|
2008-09-6 05:54 |
2005-10-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273573
|
7.5 |
HIGH
|
mybulletinboard
|
mybulletinboard
|
SQL injection vulnerability in usercp.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the awayday parameter.
|
NVD-CWE-Other
|
CVE-2005-3326
|
2008-09-6 05:54 |
2005-10-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273574
|
7.5 |
HIGH
|
belchior_foundry
|
vcard
|
PHP remote file include vulnerability in admin/define.inc.php in Belchior Foundry vCard 2.9 allows remote attackers to execute arbitrary PHP code via the match parameter.
|
NVD-CWE-Other
|
CVE-2005-3332
|
2008-09-6 05:54 |
2005-10-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273575
|
4.3 |
MEDIUM
|
mantis
|
mantis
|
Multiple cross-site scripting (XSS) vulnerabilities in Mantis before 0.19.3 allow remote attackers to inject arbitrary web script or HTML via (1) unknown vectors involving Javascript and (2) mantis/v…
|
NVD-CWE-Other
|
CVE-2005-3337
|
2008-09-6 05:54 |
2005-10-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273576
|
5.0 |
MEDIUM
|
mantis
|
mantis
|
Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users.
|
NVD-CWE-Other
|
CVE-2005-3338
|
2008-09-6 05:54 |
2005-10-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273577
|
7.2 |
HIGH
|
mantis
|
mantis
|
Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors.
|
NVD-CWE-Other
|
CVE-2005-3339
|
2008-09-6 05:54 |
2005-10-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273578
|
4.3 |
MEDIUM
|
comersus_open_technologies
|
comersus_backoffice_lite
comersus_backoffice_plus
|
Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to comersus_backoffice_supportError.asp. NOTE: …
|
NVD-CWE-Other
|
CVE-2005-3397
|
2008-09-6 05:54 |
2005-11-1 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273579
|
7.5 |
HIGH
|
subdreamer
|
subdreamer
|
Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the loginusername parameter or (2) cookies to (a) subdreamer.php, (b) ipb2.…
|
NVD-CWE-Other
|
CVE-2005-3423
|
2008-09-6 05:54 |
2005-11-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273580
|
4.3 |
MEDIUM
|
gnu
|
gnump3d
|
Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2005-3424.
|
NVD-CWE-Other
|
CVE-2005-3425
|
2008-09-6 05:54 |
2005-11-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273581
|
5.0 |
MEDIUM
|
cisco
|
content_services_switch_11500
|
Cisco CSS 11500 Content Services Switch (CSS) with SSL termination services allows remote attackers to cause a denial of service (memory corruption and device reload) via a malformed client certifica…
|
NVD-CWE-Other
|
CVE-2005-3426
|
2008-09-6 05:54 |
2005-11-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273582
|
4.6 |
MEDIUM
|
sony
|
first4internet_xcp_content_management
|
The aries.sys driver in Sony First4Internet XCP DRM software hides any file, registry key, or process with a name that starts with "$sys$", which allows attackers to hide activities on a system that …
|
NVD-CWE-Other
|
CVE-2005-3474
|
2008-09-6 05:54 |
2005-11-3 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273583
|
4.3 |
MEDIUM
|
invision_power_services
|
invision_gallery
|
Multiple interpretation error in the image upload handling code in Invision Gallery 2.0.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML or script in an image whose ty…
|
NVD-CWE-Other
|
CVE-2005-3477
|
2008-09-6 05:54 |
2005-11-3 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273584
|
4.3 |
MEDIUM
|
ringtail
|
casebook
|
Cross-site scripting (XSS) vulnerability in login.asp in Ringtail CaseBook 6.1.0 allows remote attackers to inject arbitrary web script or HTML via the users parameter.
|
NVD-CWE-Other
|
CVE-2005-3479
|
2008-09-6 05:54 |
2005-11-3 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273585
|
5.0 |
MEDIUM
|
ringtail
|
casebook
|
login.asp in Ringtail CaseBook 6.1.0 displays different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.
|
NVD-CWE-Other
|
CVE-2005-3480
|
2008-09-6 05:54 |
2005-11-3 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273586
|
4.3 |
MEDIUM
|
ar-blog
|
ar-blog
|
Cross-site scripting (XSS) vulnerability in Ar-blog 5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a blog comment.
|
NVD-CWE-Other
|
CVE-2005-3494
|
2008-09-6 05:54 |
2005-11-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273587
|
7.5 |
HIGH
|
ar-blog
|
ar-blog
|
Ar-blog 5.2 and earlier allows remote attackers to bypass authentication by modifying cookies.
|
NVD-CWE-Other
|
CVE-2005-3495
|
2008-09-6 05:54 |
2005-11-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273588
|
7.5 |
HIGH
|
ketm
|
ketm
|
Buffer overflow in KETM 0.0.6 allows local users to execute arbitrary code via unknown vectors.
|
NVD-CWE-Other
|
CVE-2005-3535
|
2008-09-6 05:54 |
2005-12-28 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273589
|
7.5 |
HIGH
|
phpbb_group
|
phpbb
|
SQL injection vulnerability in phpBB 2 before 2.0.18 allows remote attackers to execute arbitrary SQL commands via the topic type.
|
NVD-CWE-Other
|
CVE-2005-3536
|
2008-09-6 05:54 |
2005-12-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273590
|
5.0 |
MEDIUM
|
phpbb_group
|
phpbb
|
A "missing request validation" error in phpBB 2 before 2.0.18 allows remote attackers to edit private messages of other users, probably by modifying certain parameters or other inputs.
|
NVD-CWE-Other
|
CVE-2005-3537
|
2008-09-6 05:54 |
2005-12-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273591
|
7.5 |
HIGH
|
petris
|
petris
|
Buffer overflow in petris before 1.0.1 allows remote attackers to execute arbitrary code via unspecified attack vectors.
|
NVD-CWE-Other
|
CVE-2005-3540
|
2008-09-6 05:54 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273592
|
5.0 |
MEDIUM
|
phpmyadmin
|
phpmyadmin
|
CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts.
|
NVD-CWE-Other
|
CVE-2005-3621
|
2008-09-6 05:54 |
2005-11-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273593
|
5.0 |
MEDIUM
|
redhat
|
fedora_core
|
Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache httpd.conf configurat…
|
NVD-CWE-Other
|
CVE-2005-3630
|
2008-09-6 05:54 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273594
|
7.5 |
HIGH
|
oracle
|
database_server
database_server_lite
oracle10g
oracle8i
oracle9i
|
Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username.
|
NVD-CWE-Other
|
CVE-2005-3641
|
2008-09-6 05:54 |
2005-11-17 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273595
|
7.5 |
HIGH
|
ibm
|
informix_dynamic_database_server
|
IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account by supplying an invalid u…
|
NVD-CWE-Other
|
CVE-2005-3642
|
2008-09-6 05:54 |
2005-11-17 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273596
|
7.5 |
HIGH
|
ibm
|
db2_universal_database
|
IBM DB2 Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account without supplying a password.
|
NVD-CWE-Other
|
CVE-2005-3643
|
2008-09-6 05:54 |
2005-11-17 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273597
|
10.0 |
HIGH
|
internet_key_exchange
|
internet_key_exchange
|
Multiple unspecified format string vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts, as demonstr…
|
NVD-CWE-Other
|
CVE-2005-3666
|
2008-09-6 05:54 |
2005-11-19 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273598
|
5.0 |
MEDIUM
|
internet_key_exchange
|
internet_key_exchange
|
Multiple unspecified vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial of servi…
|
NVD-CWE-Other
|
CVE-2005-3667
|
2008-09-6 05:54 |
2005-11-19 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273599
|
5.0 |
MEDIUM
|
internet_key_exchange
|
internet_key_exchange
|
Multiple buffer overflows in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial of service, as demo…
|
NVD-CWE-Other
|
CVE-2005-3668
|
2008-09-6 05:54 |
2005-11-19 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273600
|
4.6 |
MEDIUM
|
microsoft
|
antispyware
|
Unquoted Windows search path vulnerability in Microsoft AntiSpyware might allow local users to execute code via a malicious c:\program.exe file, which is run by AntiSpywareMain.exe when it attempts t…
|
NVD-CWE-Other
|
CVE-2005-2935
|
2008-09-6 05:53 |
2005-09-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
