|
355451
|
5.8 |
MEDIUM
|
floosietek
|
ftgate
|
Multiple cross-site scripting (XSS) vulnerabilities in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (Build 4.4.000 Oct 26 2005) allow remote attackers to inject arbitrary web script or…
|
NVD-CWE-Other
|
CVE-2005-4567
|
2011-03-8 11:28 |
2005-12-29 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355452
|
7.5 |
HIGH
|
floosietek
|
ftgate
|
Multiple format string vulnerabilities in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (aka Build 4.4.000 Oct 26 2005) allow remote attackers to execute arbitrary code via format strin…
|
NVD-CWE-Other
|
CVE-2005-4568
|
2011-03-8 11:28 |
2005-12-29 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355453
|
7.5 |
HIGH
|
floosietek
|
ftgate
|
Stack-based buffer overflow in index.fts in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (aka Build 4.4.000 Oct 26 2005) allows remote attackers to execute arbitrary code via a long tz…
|
NVD-CWE-Other
|
CVE-2005-4569
|
2011-03-8 11:28 |
2005-12-29 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355454
|
7.8 |
HIGH
|
-
|
-
|
The Internet Key Exchange version 1 (IKEv1) implementations in Fortinet FortiOS 2.50, 2.80 and 3.0, FortiClient 2.0,; and FortiManager 2.80 and 3.0 allow remote attackers to cause a denial of service…
|
NVD-CWE-Other
|
CVE-2005-4570
|
2011-03-8 11:28 |
2005-12-29 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355455
|
7.5 |
HIGH
|
dopewars
|
dopewars
|
Format string vulnerability in the server for Dopewars before 1.5.12, when running as an NT service, allows remote attackers to execute arbitrary code via unspecified attack vectors.
|
NVD-CWE-Other
|
CVE-2005-4610
|
2011-03-8 11:28 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355456
|
6.4 |
MEDIUM
|
hp
|
oracle_for_openview
|
Multiple unspecified vulnerabilities in Oracle for OpenView (OfO) 8.1.7, 9.1.01, and 9.2, and OfO for Linux, allow remote attackers to have an unknown impact via unknown attack vectors. NOTE: becaus…
|
NVD-CWE-Other
|
CVE-2005-4654
|
2011-03-8 11:28 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355457
|
4.3 |
MEDIUM
|
php_fusion
|
php_fusion
|
Cross-site scripting (XSS) vulnerability in submit.php in PHP-Fusion 6.0.204 allows remote attackers to inject arbitrary web script or HTML via nested tags in the news_body parameter, as demonstrated…
|
NVD-CWE-Other
|
CVE-2005-4655
|
2011-03-8 11:28 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355458
|
5.0 |
MEDIUM
|
symantec
|
brightmail_antispam
|
Symantec Brightmail AntiSpam 6.0 build 1 and 2 allows remote attackers to cause a denial of service (bmserver component termination) via malformed MIME messages.
|
NVD-CWE-Other
|
CVE-2005-4695
|
2011-03-8 11:28 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355459
|
2.1 |
LOW
|
sun
|
solaris
|
Unspecified vulnerability in Process File System (procfs) in Sun Solaris 10 allows local users to obtain sensitive information such as process working directories via unknown attack vectors, possibly…
|
NVD-CWE-Other
|
CVE-2005-4701
|
2011-03-8 11:28 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355460
|
2.1 |
LOW
|
sun
|
solaris
|
Unspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors that trigger a null dereference in the se…
|
NVD-CWE-Other
|
CVE-2005-4706
|
2011-03-8 11:28 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355461
|
4.3 |
MEDIUM
|
php_gen
|
php_gen
|
Multiple cross-site scripting (XSS) vulnerabilities in PHP GEN before 1.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
|
NVD-CWE-Other
|
CVE-2005-4707
|
2011-03-8 11:28 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355462
|
5.0 |
MEDIUM
|
pam_mysql
|
pam_mysql
|
Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service (segmentation fault) via unspecifie…
|
NVD-CWE-Other
|
CVE-2005-4713
|
2011-03-8 11:28 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355463
|
7.5 |
HIGH
|
arki-db
|
arki-db
|
SQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action (view.php) to index.php.
|
NVD-CWE-Other
|
CVE-2005-3696
|
2011-03-8 11:27 |
2005-11-21 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355464
|
5.0 |
MEDIUM
|
apple
|
mac_os_x
mac_os_x_server
|
Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows remote attackers to cause files to be downloaded to locations outside the download directory via a long file name.
|
NVD-CWE-Other
|
CVE-2005-3702
|
2011-03-8 11:27 |
2005-12-1 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355465
|
7.5 |
HIGH
|
senao
|
si-680h_wireless_voip_phone
|
Senao SI-680H Wireless VoIP Phone Firmware 0.03.0839 leaves the VxWorks debugger UDP port 17185 available without authentication, which allows attackers to access the phone OS, obtain sensitive infor…
|
NVD-CWE-Other
|
CVE-2005-3715
|
2011-03-8 11:27 |
2005-11-21 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355466
|
7.5 |
HIGH
|
utstarcom
|
f1000_voip_wifi_phone
|
The telnet daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has a default username "target" and password "password", which allows remote attackers to gain ful…
|
NVD-CWE-Other
|
CVE-2005-3717
|
2011-03-8 11:27 |
2005-11-21 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355467
|
7.5 |
HIGH
|
utstarcom
|
f1000_voip_wifi_phone
|
UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 does not allow users to disable access to (1) SNMP or (2) the rlogin port TCP 513, which allows remote attackers to exp…
|
NVD-CWE-Other
|
CVE-2005-3718
|
2011-03-8 11:27 |
2005-11-21 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355468
|
7.5 |
HIGH
|
interspire
|
articlelive_nx
|
SQL injection vulnerability in Interspire ArticleLive NX 0.3 allows remote attackers to execute arbitrary SQL commands via the Query parameter.
|
NVD-CWE-Other
|
CVE-2005-3726
|
2011-03-8 11:27 |
2005-11-21 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355469
|
7.5 |
HIGH
|
juniper
|
junos_e
junos_j
junos_m
junos_t
junose_e
junose_j
junose_m
junose_t
|
The Internet Key Exchange version 1 (IKEv1) implementation in Juniper JUNOS and JUNOSe software for M, T, and J-series routers before release 6.4, and E-series routers before 7-1-0, allows remote att…
|
NVD-CWE-Other
|
CVE-2005-3733
|
2011-03-8 11:27 |
2005-11-22 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355470
|
7.5 |
HIGH
|
coastal_data_management
|
e-quick_cart
|
Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in shopaddtocart.asp, (2) strpemail parameter in shoppr…
|
NVD-CWE-Other
|
CVE-2005-3735
|
2011-03-8 11:27 |
2005-11-22 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355471
|
5.1 |
MEDIUM
|
inkscape
|
inkscape
|
Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long CSS style property values.
|
NVD-CWE-Other
|
CVE-2005-3737
|
2011-03-8 11:27 |
2005-11-22 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355472
|
5.0 |
MEDIUM
|
-
|
-
|
Unspecified vulnerability in subheader.php in PHP-Fusion 6.00.206 and earlier allows remote attackers to obtain the full path via unspecified vectors.
|
NVD-CWE-Other
|
CVE-2005-3739
|
2011-03-8 11:27 |
2005-11-22 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355473
|
7.5 |
HIGH
|
php_fusion
|
php_fusion
|
Multiple SQL injection vulnerabilities in PHP-Fusion 6.00.206 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the forum_id parameter to options.php or (2) lastvisited par…
|
NVD-CWE-Other
|
CVE-2005-3740
|
2011-03-8 11:27 |
2005-11-22 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355474
|
4.3 |
MEDIUM
|
advanced_poll
|
advanced_poll
|
Cross-site scripting (XSS) vulnerability in popup.php in Advanced Poll 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the poll_ident parameter.
|
NVD-CWE-Other
|
CVE-2005-3742
|
2011-03-8 11:27 |
2005-11-22 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355475
|
7.8 |
HIGH
|
ibm
|
websphere_application_server
|
Double free vulnerability in the BBOORB module in IBM WebSphere Application Server for z/OS 5.0 allows attackers to cause a denial of service (ABEND).
|
CWE-119
バッファエラー
|
CVE-2005-3760
|
2011-03-8 11:27 |
2005-11-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355476
|
7.5 |
HIGH
|
symantec
|
enterprise_firewall
firewall_vpn_appliance_100
firewall_vpn_appliance_200
gateway_security_300
gateway_security_400
gateway_security_5000_series
gateway_security_5100
gateway_sec…
|
Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products,…
|
NVD-CWE-Other
|
CVE-2005-3768
|
2011-03-8 11:27 |
2005-11-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355477
|
4.3 |
MEDIUM
|
joomla
|
joomla
|
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via (1) "GET and other variables" and (2) "SEF".
|
NVD-CWE-Other
|
CVE-2005-3771
|
2011-03-8 11:27 |
2005-11-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355478
|
10.0 |
HIGH
|
joomla
|
joomla
|
Unspecified vulnerability in Joomla! before 1.0.4 has unknown impact and attack vectors, related to "Potential misuse of Media component file management functions."
|
NVD-CWE-Other
|
CVE-2005-3773
|
2011-03-8 11:27 |
2005-11-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355479
|
7.5 |
HIGH
|
ipupdate
|
ipupdate
|
Multiple buffer overflows in IPUpdate 1.1 might allow attackers to execute arbitrary code via (1) memmcat in the memm module or (2) certain TSIG format records.
|
NVD-CWE-Other
|
CVE-2005-3780
|
2011-03-8 11:27 |
2005-11-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355480
|
5.0 |
MEDIUM
|
gentoo
|
linux_eix
|
Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX (eix) before 0.5.0_pre2 allows local users to overwrite arbitrary files via a symlink attack on the exi.X.sync temporary file, which …
|
NVD-CWE-Other
|
CVE-2005-3785
|
2011-03-8 11:27 |
2005-11-24 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355481
|
4.6 |
MEDIUM
|
novell
|
zenworks
zenworks_desktops
zenworks_servers
|
Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict access to Remote Diagnostics, which allows local users to bypass security policie…
|
NVD-CWE-Other
|
CVE-2005-3786
|
2011-03-8 11:27 |
2005-11-24 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355482
|
7.5 |
HIGH
|
greywyvern
|
orca_forum
|
SQL injection vulnerability in forum.php in Orca Forum 4.3b and earlier allows remote attackers to execute arbitrary SQL commands via the msg parameter.
|
NVD-CWE-Other
|
CVE-2005-3815
|
2011-03-8 11:27 |
2005-11-26 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355483
|
7.5 |
HIGH
|
zoneo-soft
|
freeforum
|
Multiple SQL injection vulnerabilities in forum.php in freeForum 1.1 and earlier and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter or (2) thread parameter…
|
NVD-CWE-Other
|
CVE-2005-3816
|
2011-03-8 11:27 |
2005-11-26 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355484
|
7.5 |
HIGH
|
comdev
|
comdev_vote_caster
|
SQL injection vulnerability in index.php in Comdev Vote Caster 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the campaign_id parameter in a result action.
|
NVD-CWE-Other
|
CVE-2005-3825
|
2011-03-8 11:27 |
2005-11-26 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355485
|
7.5 |
HIGH
|
ezy_helpdesk
|
ezyhelpdesk
|
Multiple SQL injection vulnerabilities in Ezyhelpdesk 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) edit_id, (2) faq_id, and (3) c_id parameters in a query string, and (4) …
|
NVD-CWE-Other
|
CVE-2005-3826
|
2011-03-8 11:27 |
2005-11-26 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355486
|
7.5 |
HIGH
|
agileco
|
agilebill
|
SQL injection vulnerability in product_cat in AgileBill 1.4.92 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
NVD-CWE-Other
|
CVE-2005-3827
|
2011-03-8 11:27 |
2005-11-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355487
|
7.5 |
HIGH
|
activecampaign
|
knowledgebuilder
|
SQL injection vulnerability in index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter.
|
NVD-CWE-Other
|
CVE-2005-3828
|
2011-03-8 11:27 |
2005-11-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355488
|
7.8 |
HIGH
|
activecampaign
|
knowledgebuilder
|
index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an invalid category parameter, which causes a large number of S…
|
NVD-CWE-Other
|
CVE-2005-3829
|
2011-03-8 11:27 |
2005-11-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355489
|
5.0 |
MEDIUM
|
-
|
-
|
index.php in ActiveCampaign SupportTrio 1.4 and earlier allows remote attackers to read or include arbitrary files via the page parameter, possibly due to a directory traversal vulnerability.
|
NVD-CWE-Other
|
CVE-2005-3830
|
2011-03-8 11:27 |
2005-11-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355490
|
7.5 |
HIGH
|
tunez
|
tunez
|
SQL injection vulnerability in songinfo.php in Tunez 1.21 and earlier allows remote attackers to execute arbitrary SQL commands via the song_id parameter.
|
NVD-CWE-Other
|
CVE-2005-3833
|
2011-03-8 11:27 |
2005-11-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355491
|
4.3 |
MEDIUM
|
tunez
|
tunez
|
Cross-site scripting (XSS) vulnerability in search.php in Tunez 1.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchFor parameter.
|
NVD-CWE-Other
|
CVE-2005-3834
|
2011-03-8 11:27 |
2005-11-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355492
|
7.5 |
HIGH
|
desklance
|
desklance
|
SQL injection vulnerability in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the announce parameter.
|
NVD-CWE-Other
|
CVE-2005-3836
|
2011-03-8 11:27 |
2005-11-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355493
|
4.3 |
MEDIUM
|
-
|
-
|
Cross-site scripting (XSS) vulnerability in the search module in sCssBoard 1.2 and 1.12, and earlier versions, allows remote attackers to inject arbitrary web script or HTML via the search_term param…
|
NVD-CWE-Other
|
CVE-2005-3837
|
2011-03-8 11:27 |
2005-11-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355494
|
7.5 |
HIGH
|
isolsoft
|
support_center
|
Multiple SQL injection vulnerabilities in search.php in IsolSoft Support Center 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) lorder, (2) Priority, (3) Status, …
|
NVD-CWE-Other
|
CVE-2005-3838
|
2011-03-8 11:27 |
2005-11-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355495
|
4.3 |
MEDIUM
|
supportpro
|
supportdesk
|
Cross-site scripting (XSS) vulnerability in SupportPRO Supportdesk allows remote attackers to inject arbitrary web script or HTML via the (1) post tickers and (2) view tickets options.
|
NVD-CWE-Other
|
CVE-2005-3839
|
2011-03-8 11:27 |
2005-11-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355496
|
4.3 |
MEDIUM
|
kplaylist
|
kplaylist
|
Cross-site scripting (XSS) vulnerability in kPlaylist 1.6 (build 400), and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchfor search parameter.
|
NVD-CWE-Other
|
CVE-2005-3841
|
2011-03-8 11:27 |
2005-11-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355497
|
7.5 |
HIGH
|
pdjkeelan.com
|
pdjk-support_suite
|
SQL injection vulnerability in index.php in pdjk-support suite 1.1a and earlier allows remote attackers to execute arbitrary SQL commands via the (1) rowstart, (2) news_id, and (3) faq_id parameters.
|
NVD-CWE-Other
|
CVE-2005-3842
|
2011-03-8 11:27 |
2005-11-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355498
|
7.5 |
HIGH
|
phpwordpress
|
php_news_and_article_manager
|
SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the (1) poll and (2) category parameters to index.php, and (…
|
NVD-CWE-Other
|
CVE-2005-3844
|
2011-03-8 11:27 |
2005-11-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355499
|
4.3 |
MEDIUM
|
onlinetechtools.com
|
okbsys_lite
|
Cross-site scripting (XSS) vulnerability in search.asp in Online Knowledge Base System (OKBSYS) Lite Edition 1.0 allows remote attackers to inject arbitrary web script or HTML via hex-encoded values …
|
NVD-CWE-Other
|
CVE-2005-3850
|
2011-03-8 11:27 |
2005-11-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355500
|
4.3 |
MEDIUM
|
onlinetechtools.com
|
oasys_lite
|
Cross-site scripting (XSS) vulnerability in search.asp in Online Attendance System (OASYS) Lite 1.0 allows remote attackers to inject arbitrary web script or HTML via certain search parameters, possi…
|
NVD-CWE-Other
|
CVE-2005-3851
|
2011-03-8 11:27 |
2005-11-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
