CVEs published in April 2005
386 vulnerabilities, 15 critical, 0 exploited.
- francisco burzi php-nukeMultiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x to 7.6 allow remote attackers...4.3 Medium
- macromedia coldfusionColdFusion 6.1 Updater 1 places Java .class files under the web root in the /WEB-INF/cfclasses...5.0 Medium
- cisco iosMemory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a...7.1 High
- cisco iosSecure Shell (SSH) 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of...7.1 High
- aeonBuffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain...7.2 High
- No product listedFTP Now 2.6.14 stores usernames and passwords in plaintext in sites.xml, which is world-readable,...4.6 Medium
- punbbCross-site scripting (XSS) vulnerability in PunBB before 1.2.5 allows remote attackers to inject...4.3 Medium
- access user class user classVulnerability in Access_user Class before 1.75 allows local users to gain access as other users...7.5 High
- maxwebportalSQL injection vulnerability in the Update_Events function in events_functions.asp in MaxWebPortal...7.5 High
- maxwebportalCross-site scripting (XSS) vulnerability in links_add_form.asp for MaxWebPortal 1.33 and earlier...4.3 Medium
- mailenable imapdBuffer overflow in MailEnable Imapd (MEIMAP.exe) allows remote attackers to execute arbitrary...10.0 High
- mailenable enterprise, professional +1 moreBuffer overflow in the IMAP service for MailEnable Enterprise 1.04 and earlier and Professional 1...7.5 High
- mailenable enterprise, professional +1 moreThe SMTP service in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier...5.0 Medium
- iatek siteenableCross-site scripting (XSS) vulnerability in Iatek SiteEnable allows remote attackers to inject...4.3 Medium
- iatek siteenableSQL injection vulnerability in content.asp in SiteEnable allows remote attackers to execute...7.5 High
- comersus open technologies cartCross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject...4.3 Medium
- bakbone netvaultMultiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute...10.0 High
- asp-dev xm forumCross-site scripting (XSS) vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote...4.3 Medium
- sgi irixgr_osview in SGI IRIX does not drop privileges before opening files, which allows local users to...2.1 Low
- sgi irixgr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when...2.1 Low
- an an-httpdCRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote...6.4 Medium
- phpbb group phpbbMeilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files...7.5 High
- stalker communigate proUnknown vulnerability in the LIST functionality in CommuniGate Pro before 4.3c3 allows remote...5.0 Medium
- sonicwall soho firmwareMultiple cross-site scripting (XSS) vulnerabilities in SonicWALL SOHO 5.1.7.0 allow remote...4.3 Medium
- profitcode payprocartProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain...7.5 High
- profitcode payprocartCross-site scripting (XSS) vulnerability in usrdetails.php in ProfitCode PayProCart 3.0 allows...4.3 Medium
- profitcode payprocartDirectory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote...7.5 High
- logics software log-ftlogwebftbs2000.exe in Logics Software File Transfer (LOG-FT) allows remote attackers to read...5.0 Medium
- francisco burzi php-nukePHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1)...5.0 Medium
- francisco burzi php-nukeMultiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to...4.3 Medium
- francisco burzi php-nukeSQL injection vulnerability in the Top module for PHP-Nuke 6.x through 7.6 allows remote...7.5 High
- francisco burzi php-nukeThe Web_Links module for PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via...5.0 Medium
- francisco burzi php-nukeMultiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 7.6 allow remote...7.5 High
- francisco burzi php-nukeMultiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 7.6 allow remote...5.0 Medium
- early impact productcartMultiple cross-site scripting (XSS) vulnerabilities in ProductCart 2.7 allow remote attackers to...4.3 Medium
- early impact productcartMultiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute...7.5 High
- sco openserverBuffer overflow in nwprint in SCO OpenServer 5.0.7 allows local users to execute arbitrary code...4.6 Medium
- phpmyadminCross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows...4.3 Medium
- sco openserverBuffer overflow in (1) termsh, (2) atcronsh, and (3) auditsh in SCO OpenServer 5.0.6 and 5.0.7...4.6 Medium
- ocean12 technologies membership manager proSQL injection vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote...7.5 High
- active web softwares auction houseMultiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute...7.5 High
- No product listedRC.BOOT in IBM AIX 5.1, 5.2, and 5.3 does not "use a secure location for temporary files," which...2.1 Low
- gnu sharutilsunshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a...2.1 Low
- mozilla firefox, mozilla, netscape navigator +2 moreThe find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0...5.0 Medium
- gnu gzip, freebsd, gentoo linux +9 more +11 moreRace condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local...3.7 Low
- irc services nickserv listlinksUnknown vulnerability in IRC Services NickServ LISTLINKS before 5.0.50 allows remote attackers to...5.0 Medium
- ibm lotus domino serverNLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other...5.0 Medium
- rob flynn gaimGaim 1.2.0 allows remote attackers to cause a denial of service (application crash) via a...5.0 Medium
- pavukMultiple buffer overflows in Pavuk before 0.9.32 have unknown attack vectors and impact.7.5 High
- lucasarts star wars jedi knight jedi academyBuffer overflow in the G_Printf function in Star Wars Jedi Knight: Jedi Academy 1.011 and earlier...5.0 Medium
- Show moreLoading…