CVEs

342,497 total · page 6603 of 6,850

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2005-1788	Hosting Controller Hosting Controller		0.03	—	0.02	Jun 1, 2005	SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL commands via the jresourceid parameter.
CVE-2005-1790	Microsoft Internet Explorer		0.10	—	0.83	Jun 1, 2005	Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Javascript BODY onload event that calls the window function, aka "Mismatched Document Object…
CVE-2005-1792	Microsoft Windows Management Instrumentation		0.01	—	0.07	Jun 1, 2005	Memory leak in Windows Management Instrumentation (WMI) service allows attackers to cause a denial of service (memory consumption and crash) by creating security contexts more quickly than they can be cleared from the RPC cache.
CVE-2005-1793	Microsoft Windows 98		0.01	—	0.07	Jun 1, 2005	User32.DLL in Microsoft Windows 98SE, and possibly other operating systems, allows local and remote attackers to cause a denial of service (crash) via an icon (.ico) bitmap file with large width and height values.
CVE-2005-1794	Microsoft Terminal Server	Hig	0.49	7.4	0.16	Jun 1, 2005	Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks.
CVE-2005-1809	Sony Ericsson P900 Beamer		0.00	—	0.02	Jun 1, 2005	Sony Ericsson P900 Beamer allows remote attackers to cause a denial of service (panic) via an obexftp session with a long filename in an OBEX File Transfer or OBEX Object Push.
CVE-2005-1810	WordPress WordPress		0.00	—	0.03	Jun 1, 2005	SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands via the $cat_ID variable, as demonstrated using the cat parameter to index.php.
CVE-2005-1811	MyBB Mybb		0.00	—	0.01	Jun 1, 2005	Cross-site scripting (XSS) vulnerability in usercp.php for MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via the website field in a user profile.
CVE-2005-1812	Futuresoft TFTP Server 2000		0.10	—	0.63	Jun 1, 2005	Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code via a long (1) filename or (2) transfer mode string in a Read Request (RRQ) or Write Request (WRQ) packet.
CVE-2005-1813	Futuresoft TFTP Server 2000		0.00	—	0.02	Jun 1, 2005	Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing (1) "../" (dot dot slash) or (2) "..\" (dot dot backslash) sequences.
CVE-2005-1814	Newmad Technologies Picowebserver		0.00	—	0.04	Jun 1, 2005	Stack-based buffer overflow in PicoWebServer 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long URL.
CVE-2005-1815	Hummingbird Connectivity		0.08	—	0.47	Jun 1, 2005	Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of service and possibly execute arbitrary code via (1) an FTP command with a long argument to FTPD (ftpdw.exe) or (2) a large amount of data to LPD (Lpdw.exe).
CVE-2005-1816	Invision Power Services Power Board		0.00	—	0.01	Jun 1, 2005	Invision Power Board (IPB) 1.0 through 2.0.4 allows non-root admins to add themselves or other users to the root admin group via the "Move users in this group to" screen.
CVE-2005-1817	Invision Power Services Power Board		0.03	—	0.02	Jun 1, 2005	Invision Power Board (IPB) 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to index.php with modified parameters.
CVE-2005-1818	Newlife Blogger Newlife Blogger		0.00	—	0.01	Jun 1, 2005	Multiple SQL injection vulnerabilities in NewLife Blogger before 3.3.1 allow remote attackers to execute arbitrary SQL commands via unknown attack vectors.
CVE-2005-1819	Nikosoft Webmail		0.00	—	0.01	Jun 1, 2005	Cross-site scripting (XSS) vulnerability in NikoSoft WebMail before 0.11.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVE-2005-1820	Zeroboard Zeroboard		0.03	—	0.03	Jun 1, 2005	zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the preg_replace function.
CVE-2005-1821	Powerscripts.org Powerdownload		0.03	—	0.03	Jun 1, 2005	PHP remote file inclusion vulnerability in pdl_header.inc.php in PowerDownload 3.0.2 and 3.0.3 allows remote attackers to execute arbitrary PHP code via the incdir parameter to downloads.php.
CVE-2005-1822	Qualiteam X Cart		0.03	—	0.02	Jun 1, 2005	Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) printable parameter to home.php, (3) productid or (4) mode parameter to product.php, (5) id parameter to error_message.php, (6)…
CVE-2005-1823	Qualiteam X Cart		0.03	—	0.04	Jun 1, 2005	Multiple cross-site scripting (XSS) vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) cat or (2) printable parameter to home.php, (3) productid or (4) mode parameter to product.php, (5) id parameter to…
CVE-2005-1834	Nextweb (i)Site		0.00	—	0.01	Jun 1, 2005	SQL injection vulnerability in login.asp in NEXTWEB (i)Site allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field.
CVE-2005-1835	Nextweb (i)Site		0.00	—	0.02	Jun 1, 2005	NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to databases/Users.mdb.
CVE-2005-1836	Nextweb (i)Site		0.00	—	0.02	Jun 1, 2005	NEXTWEB (i)Site allows remote attackers to cause a denial of service (error 500) via a crafted HTTP request, possibly involving wildcard requests for .jsp files.
CVE-2005-1837	Fortinet Fortinet Firewall		0.00	—	0.01	Jun 1, 2005	Fortinet firewall running FortiOS 2.x contains a hardcoded username with the password set to the serial number, which allows local users with console access to gain privileges.
CVE-2005-0356	Microsoft Windows 2000		0.10	—	0.83	May 31, 2005	Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later…
CVE-2005-1765	Linux Kernel		0.00	—	0.00	May 31, 2005	syscall in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform, when running in 32-bit compatibility mode, allows local users to cause a denial of service (kernel hang) via crafted arguments.
CVE-2005-1770	Alwil Avast Antivirus		0.00	—	0.01	May 31, 2005	Buffer overflow in the Aavmker4 device driver in Avast! Antivirus 4.6 and possibly other versions allows local users to cause a denial of service (system crash) and possibly execute arbitrary code via certain signals combined with crafted input.
CVE-2005-1771	HPE HP-UX		0.00	—	0.02	May 31, 2005	Unknown vulnerability in HP-UX trusted systems B.11.00 through B.11.23 allows remote attackers to gain unauthorized access, possibly involving remshd and/or telnet -t.
CVE-2005-1772	Atari Terminator 3 War Of The Machines		0.00	—	0.02	May 31, 2005	Buffer overflow in the client cd-key hash in Terminator 3: War of the Machines 1.16 and earlier allows remote attackers to cause a denial of service (application crash) via a long client cd-key hash value, a different vulnerability than CVE-2005-1556.
CVE-2005-1773	Lsoft Listserv		0.00	—	0.03	May 31, 2005	Multiple unknown vulnerabilities in L-Soft LISTSERV 14.3, 1.8e, and 1.8d allow remote attackers to execute arbitrary code or cause a denial of service. NOTE: this candidate may be SPLIT in the future when more precise technical details become available.
CVE-2005-1774	Davfs2 Davfs2		0.00	—	0.00	May 31, 2005	WEB-DAV Linux File System (davfs2) 0.2.3 does not properly enforce Unix permissions, which allows local users to write arbitrary files on a davfs2 mounted filesystem.
CVE-2005-1775	Terminator 3: War of the Machines Terminator 3: War of the Machines		0.00	—	0.01	May 31, 2005	Terminator 3: War of the Machines 1.16 and earlier allows remote attackers to cause a denial of service (application crash) via a large nickname.
CVE-2005-1776	Cnedra Cnedra		0.00	—	0.04	May 31, 2005	Buffer overflow in the READ_TCP_STRING function in game_message_functions.cpp in the network plugin for C'Nedra 0.4.0 and earlier allows remote attackers to execute arbitrary code via a long text string.
CVE-2005-1777	Postnuke Postnuke		0.03	—	0.01	May 31, 2005	SQL injection vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to execute arbitrary SQL commands via the start parameter.
CVE-2005-1778	Postnuke Postnuke		0.00	—	0.01	May 31, 2005	Cross-site scripting (XSS) vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to inject arbitrary web script or HTML via the start parameter.
CVE-2005-1779	Maxwebportal Maxwebportal		0.03	—	0.02	May 31, 2005	SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers to execute arbitrary SQL commands via the memKey parameter.
CVE-2005-1780	Dotnetindex Active News Manager		0.00	—	0.01	May 31, 2005	SQL injection vulnerability in admin/login.asp in Active News Manager allows remote attackers to execute arbitrary SQL commands via the password.
CVE-2005-1781	MailEnable Mailenable		0.00	—	0.02	May 31, 2005	Unknown vulnerability in SMTP authentication for MailEnable allows remote attackers to cause a denial of service (crash).
CVE-2005-1783	W.m.r. Simpson Bookreview		0.00	—	0.02	May 31, 2005	BookReview beta 1.0 allows remote attackers to obtain the path of the web server via certain parameters to search.htm, possibly due to a search[string] parameter with a missing value or an incorrect submit[type] value, which reveals the path in the resulting error message. …
CVE-2005-1785	Zongg Zongg		0.00	—	0.01	May 31, 2005	SQL injection vulnerability in ad/login.asp in ZonGG 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter.
CVE-2005-1796	Ettercap Project Ettercap		0.01	—	0.05	May 31, 2005	Format string vulnerability in the curses_msg function in the Ncurses interface (ec_curses.c) for Ettercap before 0.7.3 allows remote attackers to execute arbitrary code.
CVE-2005-1799	Freestyle Wiki		0.00	—	0.01	May 31, 2005	Cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.5.7 and WikiLite (FSWikiLite) .10 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVE-2005-1831	Todd Miller Sudo	Hig	0.55	8.4	0.00	May 31, 2005	Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue,…
CVE-2005-1832	MyBB Mybb		0.00	—	0.01	May 31, 2005	Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 and earlier allow remote attackers to execute arbitrary web script or HTML via the (1) forums, (2) version, or (3) limit parameter to misc.php, (4) page or (5) datecut parameter to…
CVE-2005-1833	MyBB Mybb		0.03	—	0.02	May 31, 2005	Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to calendar.php, (2) idsql parameter to online.php, (3) usersearch parameter to memberlist.php, (4) pid parameter to…
CVE-2005-1866	Vincent Hor Calendarix Advanced		0.00	—	0.01	May 31, 2005	Cross-site scripting (XSS) vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject arbitrary web script or HTML via the year parameter.
CVE-2005-1907	Microsoft Isa Server		0.02	—	0.19	May 31, 2005	The ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (Wspsrv.exe crash) via a large amount of SecureNAT network traffic.
CVE-2005-1808	Firefly Studios Stronghold 2		0.00	—	0.02	May 30, 2005	Firefly Studios Stronghold 2 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large size value for the nickname, which causes a memory allocation failure and generates an exception.
CVE-2005-1789	India Software Solution Shopping Cart		0.00	—	0.01	May 29, 2005	SQL injection vulnerability in SignIn.asp in India Software Solution shopping cart allows remote attackers to execute arbitrary SQL commands via the password.
CVE-2005-1798	Serverscheck Monitoring Software		0.00	—	0.02	May 29, 2005	Directory traversal vulnerability in ServersCheck Monitoring Software 5.9.0 to 5.10.0 allows remote attackers to read arbitrary files via .. (dot dot) sequences in an HTTP request.

CVE-2005-1788Jun 1, 2005
Hosting Controller
Hosting Controller
risk 0.03cvss —epss 0.02
SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL commands via the jresourceid parameter.
CVE-2005-1790Jun 1, 2005
Microsoft
Internet Explorer
risk 0.10cvss —epss 0.83
Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Javascript BODY onload event that calls the window function, aka "Mismatched Document Object…
CVE-2005-1792Jun 1, 2005
Microsoft
Windows Management Instrumentation
risk 0.01cvss —epss 0.07
Memory leak in Windows Management Instrumentation (WMI) service allows attackers to cause a denial of service (memory consumption and crash) by creating security contexts more quickly than they can be cleared from the RPC cache.
CVE-2005-1793Jun 1, 2005
Microsoft
Windows 98
risk 0.01cvss —epss 0.07
User32.DLL in Microsoft Windows 98SE, and possibly other operating systems, allows local and remote attackers to cause a denial of service (crash) via an icon (.ico) bitmap file with large width and height values.
CVE-2005-1794HigJun 1, 2005
Microsoft
Terminal Server
risk 0.49cvss 7.4epss 0.16
Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks.
CVE-2005-1809Jun 1, 2005
Sony Ericsson
P900 Beamer
risk 0.00cvss —epss 0.02
Sony Ericsson P900 Beamer allows remote attackers to cause a denial of service (panic) via an obexftp session with a long filename in an OBEX File Transfer or OBEX Object Push.
CVE-2005-1810Jun 1, 2005
WordPress
WordPress
risk 0.00cvss —epss 0.03
SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands via the $cat_ID variable, as demonstrated using the cat parameter to index.php.
CVE-2005-1811Jun 1, 2005
MyBB
Mybb
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in usercp.php for MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via the website field in a user profile.
CVE-2005-1812Jun 1, 2005
Futuresoft
TFTP Server 2000
risk 0.10cvss —epss 0.63
Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code via a long (1) filename or (2) transfer mode string in a Read Request (RRQ) or Write Request (WRQ) packet.
CVE-2005-1813Jun 1, 2005
Futuresoft
TFTP Server 2000
risk 0.00cvss —epss 0.02
Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing (1) "../" (dot dot slash) or (2) "..\" (dot dot backslash) sequences.
CVE-2005-1814Jun 1, 2005
Newmad Technologies
Picowebserver
risk 0.00cvss —epss 0.04
Stack-based buffer overflow in PicoWebServer 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long URL.
CVE-2005-1815Jun 1, 2005
Hummingbird
Connectivity
risk 0.08cvss —epss 0.47
Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of service and possibly execute arbitrary code via (1) an FTP command with a long argument to FTPD (ftpdw.exe) or (2) a large amount of data to LPD (Lpdw.exe).
CVE-2005-1816Jun 1, 2005
Invision Power Services
Power Board
risk 0.00cvss —epss 0.01
Invision Power Board (IPB) 1.0 through 2.0.4 allows non-root admins to add themselves or other users to the root admin group via the "Move users in this group to" screen.
CVE-2005-1817Jun 1, 2005
Invision Power Services
Power Board
risk 0.03cvss —epss 0.02
Invision Power Board (IPB) 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to index.php with modified parameters.
CVE-2005-1818Jun 1, 2005
Newlife Blogger
Newlife Blogger
risk 0.00cvss —epss 0.01
Multiple SQL injection vulnerabilities in NewLife Blogger before 3.3.1 allow remote attackers to execute arbitrary SQL commands via unknown attack vectors.
CVE-2005-1819Jun 1, 2005
Nikosoft
Webmail
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in NikoSoft WebMail before 0.11.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVE-2005-1820Jun 1, 2005
Zeroboard
Zeroboard
risk 0.03cvss —epss 0.03
zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the preg_replace function.
CVE-2005-1821Jun 1, 2005
Powerscripts.org
Powerdownload
risk 0.03cvss —epss 0.03
PHP remote file inclusion vulnerability in pdl_header.inc.php in PowerDownload 3.0.2 and 3.0.3 allows remote attackers to execute arbitrary PHP code via the incdir parameter to downloads.php.
CVE-2005-1822Jun 1, 2005
Qualiteam
X Cart
risk 0.03cvss —epss 0.02
Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) printable parameter to home.php, (3) productid or (4) mode parameter to product.php, (5) id parameter to error_message.php, (6)…
CVE-2005-1823Jun 1, 2005
Qualiteam
X Cart
risk 0.03cvss —epss 0.04
Multiple cross-site scripting (XSS) vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) cat or (2) printable parameter to home.php, (3) productid or (4) mode parameter to product.php, (5) id parameter to…
CVE-2005-1834Jun 1, 2005
Nextweb
(i)Site
risk 0.00cvss —epss 0.01
SQL injection vulnerability in login.asp in NEXTWEB (i)Site allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field.
CVE-2005-1835Jun 1, 2005
Nextweb
(i)Site
risk 0.00cvss —epss 0.02
NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to databases/Users.mdb.
CVE-2005-1836Jun 1, 2005
Nextweb
(i)Site
risk 0.00cvss —epss 0.02
NEXTWEB (i)Site allows remote attackers to cause a denial of service (error 500) via a crafted HTTP request, possibly involving wildcard requests for .jsp files.
CVE-2005-1837Jun 1, 2005
Fortinet
Fortinet Firewall
risk 0.00cvss —epss 0.01
Fortinet firewall running FortiOS 2.x contains a hardcoded username with the password set to the serial number, which allows local users with console access to gain privileges.
CVE-2005-0356May 31, 2005
Microsoft
Windows 2000
risk 0.10cvss —epss 0.83
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later…
CVE-2005-1765May 31, 2005
Linux
Kernel
risk 0.00cvss —epss 0.00
syscall in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform, when running in 32-bit compatibility mode, allows local users to cause a denial of service (kernel hang) via crafted arguments.
CVE-2005-1770May 31, 2005
Alwil
Avast Antivirus
risk 0.00cvss —epss 0.01
Buffer overflow in the Aavmker4 device driver in Avast! Antivirus 4.6 and possibly other versions allows local users to cause a denial of service (system crash) and possibly execute arbitrary code via certain signals combined with crafted input.
CVE-2005-1771May 31, 2005
HPE
HP-UX
risk 0.00cvss —epss 0.02
Unknown vulnerability in HP-UX trusted systems B.11.00 through B.11.23 allows remote attackers to gain unauthorized access, possibly involving remshd and/or telnet -t.
CVE-2005-1772May 31, 2005
Atari
Terminator 3 War Of The Machines
risk 0.00cvss —epss 0.02
Buffer overflow in the client cd-key hash in Terminator 3: War of the Machines 1.16 and earlier allows remote attackers to cause a denial of service (application crash) via a long client cd-key hash value, a different vulnerability than CVE-2005-1556.
CVE-2005-1773May 31, 2005
Lsoft
Listserv
risk 0.00cvss —epss 0.03
Multiple unknown vulnerabilities in L-Soft LISTSERV 14.3, 1.8e, and 1.8d allow remote attackers to execute arbitrary code or cause a denial of service. NOTE: this candidate may be SPLIT in the future when more precise technical details become available.
CVE-2005-1774May 31, 2005
Davfs2
Davfs2
risk 0.00cvss —epss 0.00
WEB-DAV Linux File System (davfs2) 0.2.3 does not properly enforce Unix permissions, which allows local users to write arbitrary files on a davfs2 mounted filesystem.
CVE-2005-1775May 31, 2005
Terminator 3: War of the Machines
Terminator 3: War of the Machines
risk 0.00cvss —epss 0.01
Terminator 3: War of the Machines 1.16 and earlier allows remote attackers to cause a denial of service (application crash) via a large nickname.
CVE-2005-1776May 31, 2005
Cnedra
Cnedra
risk 0.00cvss —epss 0.04
Buffer overflow in the READ_TCP_STRING function in game_message_functions.cpp in the network plugin for C'Nedra 0.4.0 and earlier allows remote attackers to execute arbitrary code via a long text string.
CVE-2005-1777May 31, 2005
Postnuke
Postnuke
risk 0.03cvss —epss 0.01
SQL injection vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to execute arbitrary SQL commands via the start parameter.
CVE-2005-1778May 31, 2005
Postnuke
Postnuke
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to inject arbitrary web script or HTML via the start parameter.
CVE-2005-1779May 31, 2005
Maxwebportal
Maxwebportal
risk 0.03cvss —epss 0.02
SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers to execute arbitrary SQL commands via the memKey parameter.
CVE-2005-1780May 31, 2005
Dotnetindex
Active News Manager
risk 0.00cvss —epss 0.01
SQL injection vulnerability in admin/login.asp in Active News Manager allows remote attackers to execute arbitrary SQL commands via the password.
CVE-2005-1781May 31, 2005
MailEnable
Mailenable
risk 0.00cvss —epss 0.02
Unknown vulnerability in SMTP authentication for MailEnable allows remote attackers to cause a denial of service (crash).
CVE-2005-1783May 31, 2005
W.m.r. Simpson
Bookreview
risk 0.00cvss —epss 0.02
BookReview beta 1.0 allows remote attackers to obtain the path of the web server via certain parameters to search.htm, possibly due to a search[string] parameter with a missing value or an incorrect submit[type] value, which reveals the path in the resulting error message. …
CVE-2005-1785May 31, 2005
Zongg
Zongg
risk 0.00cvss —epss 0.01
SQL injection vulnerability in ad/login.asp in ZonGG 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter.
CVE-2005-1796May 31, 2005
Ettercap Project
Ettercap
risk 0.01cvss —epss 0.05
Format string vulnerability in the curses_msg function in the Ncurses interface (ec_curses.c) for Ettercap before 0.7.3 allows remote attackers to execute arbitrary code.
CVE-2005-1799May 31, 2005
Freestyle
Wiki
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.5.7 and WikiLite (FSWikiLite) .10 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVE-2005-1831HigMay 31, 2005
Todd Miller
Sudo
risk 0.55cvss 8.4epss 0.00
Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue,…
CVE-2005-1832May 31, 2005
MyBB
Mybb
risk 0.00cvss —epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 and earlier allow remote attackers to execute arbitrary web script or HTML via the (1) forums, (2) version, or (3) limit parameter to misc.php, (4) page or (5) datecut parameter to…
CVE-2005-1833May 31, 2005
MyBB
Mybb
risk 0.03cvss —epss 0.02
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to calendar.php, (2) idsql parameter to online.php, (3) usersearch parameter to memberlist.php, (4) pid parameter to…
CVE-2005-1866May 31, 2005
Vincent Hor
Calendarix Advanced
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject arbitrary web script or HTML via the year parameter.
CVE-2005-1907May 31, 2005
Microsoft
Isa Server
risk 0.02cvss —epss 0.19
The ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (Wspsrv.exe crash) via a large amount of SecureNAT network traffic.
CVE-2005-1808May 30, 2005
Firefly Studios
Stronghold 2
risk 0.00cvss —epss 0.02
Firefly Studios Stronghold 2 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large size value for the nickname, which causes a memory allocation failure and generates an exception.
CVE-2005-1789May 29, 2005
India Software Solution
Shopping Cart
risk 0.00cvss —epss 0.01
SQL injection vulnerability in SignIn.asp in India Software Solution shopping cart allows remote attackers to execute arbitrary SQL commands via the password.
CVE-2005-1798May 29, 2005
Serverscheck
Monitoring Software
risk 0.00cvss —epss 0.02
Directory traversal vulnerability in ServersCheck Monitoring Software 5.9.0 to 5.10.0 allows remote attackers to read arbitrary files via .. (dot dot) sequences in an HTTP request.