|
273651
|
2.1 |
LOW
|
fuse
|
fuse
|
FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensit…
|
NVD-CWE-Other
|
CVE-2005-1858
|
2008-09-6 05:50 |
2005-06-3 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273652
|
5.0 |
MEDIUM
|
vincent_hor
|
calendarix_advanced
|
PHP remote file inclusion vulnerability in cal_admintop.php in Calendarix Advanced 1.5 allows remote attackers to execute arbitrary PHP code via the calpath parameter.
|
NVD-CWE-Other
|
CVE-2005-1864
|
2008-09-6 05:50 |
2005-06-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273653
|
4.3 |
MEDIUM
|
vincent_hor
|
calendarix_advanced
|
Cross-site scripting (XSS) vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject arbitrary web script or HTML via the year parameter.
|
NVD-CWE-Other
|
CVE-2005-1866
|
2008-09-6 05:50 |
2005-05-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273654
|
4.3 |
MEDIUM
|
lpanel
|
lpanel
|
Cross-site scripting (XSS) vulnerability in view_ticket.php in Lpanel 1.59 and earlier allows remote attackers to inject arbitrary web script or HTML and obtain sensitive information via the pid para…
|
NVD-CWE-Other
|
CVE-2005-1877
|
2008-09-6 05:50 |
2005-06-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273655
|
1.2 |
LOW
|
giptables
|
giptables_firewall
|
GIPTables Firewall 1.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the temp.ip.addresses temporary file.
|
NVD-CWE-Other
|
CVE-2005-1878
|
2008-09-6 05:50 |
2005-06-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273656
|
7.5 |
HIGH
|
yapig
|
yapig
|
PHP remote file inclusion vulnerability in last_gallery.php in YaPiG 0.93u and 0.94u allows remote attackers to execute arbitrary PHP code via the YAPIG_PATH parameter.
|
NVD-CWE-Other
|
CVE-2005-1882
|
2008-09-6 05:50 |
2005-06-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273657
|
5.0 |
MEDIUM
|
yapig
|
yapig
|
global.php in YaPiG 0.92b allows remote attackers to include arbitrary local files via the BASE_DIR parameter.
|
NVD-CWE-Other
|
CVE-2005-1883
|
2008-09-6 05:50 |
2005-06-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273658
|
6.4 |
MEDIUM
|
yapig
|
yapig
|
Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to create or delete arbitrary directories via a .. (dot …
|
NVD-CWE-Other
|
CVE-2005-1884
|
2008-09-6 05:50 |
2005-06-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273659
|
5.0 |
MEDIUM
|
yapig
|
yapig
|
view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to obtain sensitive information via a phid parameter that is not an integer, which reveals the path in an error message.
|
NVD-CWE-Other
|
CVE-2005-1885
|
2008-09-6 05:50 |
2005-06-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273660
|
4.3 |
MEDIUM
|
yapig
|
yapig
|
Cross-site scripting (XSS) vulnerability in view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to inject arbitrary web script or HTML via (1) the phid parameter or (2) unknown parameter…
|
NVD-CWE-Other
|
CVE-2005-1886
|
2008-09-6 05:50 |
2005-06-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273661
|
4.3 |
MEDIUM
|
mediawiki
|
mediawiki
|
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates.
|
NVD-CWE-Other
|
CVE-2005-1888
|
2008-09-6 05:50 |
2005-06-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273662
|
5.0 |
MEDIUM
|
mortiforo
|
mortiforo
|
Unknown vulnerability in Mortiforo before 0.9.1 allows users to access private forums via unknown attack vectors.
|
NVD-CWE-Other
|
CVE-2005-1890
|
2008-09-6 05:50 |
2005-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273663
|
10.0 |
HIGH
|
flexcast
|
flexcast_audio_video_streaming_server
|
Unknown vulnerability in FlexCast Audio Video Streaming Server before 2.0 has unknown impact and attack vectors.
|
NVD-CWE-Other
|
CVE-2005-1897
|
2008-09-6 05:50 |
2005-06-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273664
|
5.0 |
MEDIUM
|
phpthumb
|
phpthumb
|
The passthrough functionality in phpThumb.php in phpThumb() before 1.5.4 allows remote attackers to read files that are not images.
|
NVD-CWE-Other
|
CVE-2005-1898
|
2008-09-6 05:50 |
2005-06-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273665
|
7.5 |
HIGH
|
perception
|
liteweb
|
Perception LiteWeb allows remote attackers to bypass access controls for files via an extra leading / (slash) or leading \ (backslash) in the URL.
|
NVD-CWE-Other
|
CVE-2005-1908
|
2008-09-6 05:50 |
2005-06-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273666
|
4.3 |
MEDIUM
|
software602
|
602lan_suite
|
The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult for the administrator to read portions of log files via a "</pre><!-" sequence in an HTTP GET reque…
|
NVD-CWE-Other
|
CVE-2005-1909
|
2008-09-6 05:50 |
2005-06-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273667
|
5.0 |
MEDIUM
|
leafnode
|
leafnode
|
The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives, which allows remote NNTP servers to cause a denial of service (news loss).
|
NVD-CWE-Other
|
CVE-2005-1911
|
2008-09-6 05:50 |
2005-06-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273668
|
2.1 |
LOW
|
centericq
|
centericq
|
CenterICQ 4.20.0 and earlier creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack on the gg.token.PID temporary file.
|
NVD-CWE-Other
|
CVE-2005-1914
|
2008-09-6 05:50 |
2005-07-18 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273669
|
2.1 |
LOW
|
kpopper
|
kpopper
|
kpopper 1.0 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the .popper-new temporary file.
|
NVD-CWE-Other
|
CVE-2005-1917
|
2008-09-6 05:50 |
2005-07-5 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273670
|
5.0 |
MEDIUM
|
clam_anti-virus
|
clamav
|
The MS-Expand file handling in Clam AntiVirus (ClamAV) before 0.86 allows remote attackers to cause a denial of service (file descriptor and memory consumption) via a crafted file that causes repeate…
|
NVD-CWE-Other
|
CVE-2005-1922
|
2008-09-6 05:50 |
2005-07-5 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273671
|
2.6 |
LOW
|
clam_anti-virus
|
clamav
|
The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a cabin…
|
NVD-CWE-Other
|
CVE-2005-1923
|
2008-09-6 05:50 |
2005-07-5 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273672
|
2.1 |
LOW
|
lpanel
|
lpanel
|
Lpanel 1.59 and earlier, and other versions before 1.597, allows remote authenticated users to modify certain critical variables and (1) modify DNS settings for arbitrary domains via the domain param…
|
NVD-CWE-Other
|
CVE-2005-1932
|
2008-09-6 05:50 |
2005-07-5 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273673
|
7.5 |
HIGH
|
apple
|
mac_os_x
|
Dashboard in Apple Mac OS X Tiger 10.4 allows attackers to execute arbitrary commands by overriding the behavior of system widgets via a user widget with the same bundle identifier (CFBundleIdentifie…
|
NVD-CWE-Other
|
CVE-2005-1933
|
2008-09-6 05:50 |
2005-06-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273674
|
7.5 |
HIGH
|
jammail
|
jammail
|
jammail.pl in jamchen JamMail 1.8 allows remote attackers to execute arbitrary commands via shell metacharacters in the mail parameter.
|
NVD-CWE-Other
|
CVE-2005-1959
|
2008-09-6 05:50 |
2005-06-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273675
|
7.5 |
HIGH
|
-
|
-
|
The getemails function in C.J. Steele Tattle allows remote attackers to execute arbitrary commands via shell metacharacters in certain log entries, as demonstrated using shell metacharacters in an FT…
|
NVD-CWE-Other
|
CVE-2005-1960
|
2008-09-6 05:50 |
2005-06-8 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273676
|
4.6 |
MEDIUM
|
objectweb
|
consortium_c-jdbc
|
Unknown vulnerability in ObjectWeb Consortium C-JDBC before 1.3.1 allows local users to bypass intended access restrictions and obtain the cache results from another user.
|
NVD-CWE-Other
|
CVE-2005-1961
|
2008-09-6 05:50 |
2005-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273677
|
4.3 |
MEDIUM
|
cerberus
|
cerberus_helpdesk
|
Cross-site scripting (XSS) vulnerability in Cerberus Helpdesk 0.97.3 allows remote attackers to inject arbitrary web script or HTML via the (1) errorcode parameter to index.php or (2) certain fields …
|
NVD-CWE-Other
|
CVE-2005-1962
|
2008-09-6 05:50 |
2005-06-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273678
|
5.0 |
MEDIUM
|
cerberus
|
cerberus_helpdesk
|
Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to (1) reports.php, (2) knowledgebase.php, or (3) configuration.php, which leaks the information …
|
NVD-CWE-Other
|
CVE-2005-1963
|
2008-09-6 05:50 |
2005-06-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273679
|
7.5 |
HIGH
|
cantico
|
ovidentia
|
PHP remote file inclusion vulnerability in utilit.php for Ovidentia Portal allows remote attackers to execute arbitrary PHP code via the babInstallPath parameter.
|
NVD-CWE-Other
|
CVE-2005-1964
|
2008-09-6 05:50 |
2005-06-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273680
|
7.5 |
HIGH
|
early_impact
|
productcart_ecommerce
|
Multiple SQL injection vulnerabilities in ProductCart Ecommerce before 2.7 allow remote attackers to execute arbitrary SQL commands via the (1) idcategory parameter to viewPrd.asp, (2) lid parameter …
|
NVD-CWE-Other
|
CVE-2005-1967
|
2008-09-6 05:50 |
2005-06-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273681
|
4.3 |
MEDIUM
|
early_impact
|
productcart
|
Cross-site scripting (XSS) vulnerability in ProductCart Ecommerce before 2.7 allows remote attackers to inject arbitrary web script or HTML via the error parameter to techErr.asp.
|
NVD-CWE-Other
|
CVE-2005-1968
|
2008-09-6 05:50 |
2005-06-8 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273682
|
4.3 |
MEDIUM
|
pragma_systems
|
pragma_telnetserver
|
Cross-site scripting (XSS) vulnerability in Pragma Systems Telnetserver 6.0 allows remote attackers to inject arbitrary web script or HTML, and hide activities in log files, via a "<!--" (HTML commen…
|
NVD-CWE-Other
|
CVE-2005-1969
|
2008-09-6 05:50 |
2005-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273683
|
7.2 |
HIGH
|
symantec
|
pcanywhere
|
Symantec pcAnywhere 10.5x and 11.x before 11.5, with "Launch with Windows" enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature.
|
NVD-CWE-Other
|
CVE-2005-1970
|
2008-09-6 05:50 |
2005-06-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273684
|
7.5 |
HIGH
|
interactivephp
|
fusionbb
|
Directory traversal vulnerability in InteractivePHP FusionBB .11 Beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the language parameter.
|
NVD-CWE-Other
|
CVE-2005-1971
|
2008-09-6 05:50 |
2005-06-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273685
|
7.5 |
HIGH
|
interactivephp
|
fusionbb
|
Multiple SQL injection vulnerabilities in InteractivePHP FusionBB .11 Beta and earlier allow remote attackers to execute arbitrary SQL commands via (1) the username, which is not properly handled by …
|
NVD-CWE-Other
|
CVE-2005-1972
|
2008-09-6 05:50 |
2005-06-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273686
|
4.3 |
MEDIUM
|
annuaire
|
1two
|
Multiple cross-site scripting (XSS) vulnerabilities in Annuaire 1Two 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter to index.php, or the (2) si…
|
NVD-CWE-Other
|
CVE-2005-1975
|
2008-09-6 05:50 |
2005-06-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273687
|
1.7 |
LOW
|
novell
|
netmail
|
Novell NetMail 3.5.2a, 3.5.2b, and 3.5.2c, when running on Linux, sets the owner and group ID to 500 for certain files, which could allow users or groups with that ID to execute arbitrary code or cau…
|
NVD-CWE-Other
|
CVE-2005-1976
|
2008-09-6 05:50 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273688
|
6.4 |
MEDIUM
|
edgewall_software
|
trac
|
Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the id parameter to the (1) upload or (2) attachmen…
|
NVD-CWE-Other
|
CVE-2005-2007
|
2008-09-6 05:50 |
2005-06-19 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273689
|
10.0 |
HIGH
|
symantec
|
norton_antivirus
|
Symantec AntiVirus 9 Corporate Edition allows local users to gain privileges via the "Scan for viruses" option, which launches a help window with raised privileges, a re-introduction of a vulnerabili…
|
NVD-CWE-Other
|
CVE-2005-2017
|
2008-09-6 05:50 |
2005-08-30 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273690
|
5.0 |
MEDIUM
|
freebsd
|
freebsd
|
ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor (SMP) or Uni Processor (UP) systems with the PREEMPTION kernel option enabled, does not sufficiently lock certain resources while perfor…
|
NVD-CWE-Other
|
CVE-2005-2019
|
2008-09-6 05:50 |
2005-07-5 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273691
|
4.3 |
MEDIUM
|
cpanel
|
cpanel
|
Cross-site scripting (XSS) vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the user parameter in the login page.
|
NVD-CWE-Other
|
CVE-2005-2021
|
2008-09-6 05:50 |
2005-06-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273692
|
5.0 |
MEDIUM
|
vipul
|
razor-agents
|
Vipul Razor Agents (razor-agents) before 2.70 allows remote attackers to cause a denial of service via (1) certain "unusual HTML messages" or (2) "certain malformed headers" such as Content-Type.
|
NVD-CWE-Other
|
CVE-2005-2024
|
2008-09-6 05:50 |
2005-06-17 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273693
|
7.5 |
HIGH
|
enterasys
|
vertical_horizon-2402s
|
Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 has a hard-coded account and password for debugging, which allows remote attackers to gain privileges.
|
NVD-CWE-Other
|
CVE-2005-2026
|
2008-09-6 05:50 |
2005-06-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273694
|
5.0 |
MEDIUM
|
enterasys
|
vertical_horizon-2402s
|
Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 does not properly restrict certain debugging commands to the ADMIN account, which could allow attackers to obtain sensitive information …
|
NVD-CWE-Other
|
CVE-2005-2027
|
2008-09-6 05:50 |
2005-06-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273695
|
7.5 |
HIGH
|
amarok
|
web_frontend
|
amaroK Web Frontend 1.3 stores the globals.inc file under the web root without a .php extension and insufficient access control, which allows remote attackers to obtain the database username and pass…
|
NVD-CWE-Other
|
CVE-2005-2029
|
2008-09-6 05:50 |
2005-06-17 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273696
|
7.5 |
HIGH
|
socialmpn
|
socialmpn
|
Multiple SQL injection vulnerabilities in socialMPN allow remote attackers to execute arbitrary SQL commands via (1) the sid parameter to article.php, (2) uname parameter to user.php, (3) siteid para…
|
NVD-CWE-Other
|
CVE-2005-2031
|
2008-09-6 05:50 |
2005-06-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273697
|
5.0 |
MEDIUM
|
fortibus
|
fortibus_cms
|
Fortibus CMS 4.0.0 allows remote attackers to modify information of other users, including Admin, via the "My info" page.
|
NVD-CWE-Other
|
CVE-2005-2038
|
2008-09-6 05:50 |
2005-06-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273698
|
5.0 |
MEDIUM
|
nanoblogger
|
nanoblogger
|
Unknown vulnerability in "various plugins" for NanoBlogger 3.2.1 and earlier allows remote attackers to execute arbitrary commands.
|
NVD-CWE-Other
|
CVE-2005-2039
|
2008-09-6 05:50 |
2005-06-19 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273699
|
5.0 |
MEDIUM
|
telnetd
|
telnetd
|
Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2005-0468 and CV…
|
NVD-CWE-Other
|
CVE-2005-2040
|
2008-09-6 05:50 |
2005-06-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273700
|
4.3 |
MEDIUM
|
ajax-spell
|
ajax-spell
|
Cross-site scripting (XSS) vulnerability in ajax-spell before 1.8 allows remote attackers to inject arbitrary web script or HTML via onmouseover or other events in HTML tags.
|
NVD-CWE-Other
|
CVE-2005-2042
|
2008-09-6 05:50 |
2005-06-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
