CVEs published in May 2005
437 vulnerabilities, 14 critical, 0 exploited.
- mozilla bugzillaBugzilla 2.17.1 through 2.18, 2.19.1, and 2.19.2, when a user is prompted to log in while...5.0 Medium
- mozilla bugzillapost_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users...7.5 High
- mozilla firefox, mozilla +1 moreFirefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of...7.5 High
- mozilla firefox, mozilla +1 moreFirefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security...7.5 High
- apple mac os xUnknown vulnerability in the nfs_mount call in Mac OS X 10.3.9 and earlier allows local users to...7.2 High
- apple mac os xUnknown vulnerability in the setsockopt system call in Mac OS X 10.3.9 and earlier allows local...2.1 Low
- apple mac os x, mac os x server +1 moreInteger overflow in the searchfs system call in Mac OS X 10.3.9 and earlier allows local users to...7.2 High
- apple mac os xStack-based buffer overflow in the semop system call in Mac OS X 10.3.9 and earlier allows local...4.6 Medium
- apple mac os xHeap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9...4.6 Medium
- open solution quick.cart** DISPUTED ** SQL injection vulnerability in index.php for Quick.cart 0.3.0 allows remote...7.5 High
- open solution quick.forumMultiple SQL injection vulnerabilities in Quick.Forum 2.1.6 allow remote attackers to execute...7.5 High
- boastmachineusers.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be...7.5 High
- darrel oneil asp virtual news managerSQL injection vulnerability in admin_login.asp for ASP Virtual News Manager allows remote...7.5 High
- wenig and spitzer-williams showoff digital media softwareShowOff! 1.5.4 allows remote attackers to cause a denial of service (server crash) via a...5.0 Medium
- maxwebportalMultiple SQL injection vulnerabilities in MaxWebPortal 1.3.5 and earlier allow remote attackers...7.5 High
- maxwebportalMultiple cross-site scripting (XSS) vulnerabilities in post.asp in MaxWebPortal 1.3.5 and earlier...4.3 Medium
- neteyes nexuswayThe SSH module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via...10.0 High
- No product listedThe web module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via hex...10.0 High
- neteyes nexuswayThe web module in Neteyes Nexusway allows remote attackers to bypass authentication and gain...7.5 High
- pixysoft guestbook proMultiple cross-site scripting (XSS) vulnerabilities in WebApp Guestbook PRO 3.2.1 and earlier...4.3 Medium
- squidSquid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does...6.4 Medium
- sun solaris, sunos +1 moreUnknown vulnerability in Solaris 7 through 9, when using Federated Naming Services (FNS), autofs,...2.1 Low
- cisco firewall services moduleUnknown vulnerability in Cisco Firewall Services Module (FWSM) 2.3.1 and earlier, when using URL,...7.5 High
- netwin dmailDList (dlist.exe) in DMail 3.1a allows remote attackers to bypass authentication, read log files,...7.5 High
- dan bernstein qmailInteger signedness error in the qmail_put and substdio_put functions in qmail, when running on 64...5.0 Medium
- dan bernstein qmailcommands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory,...5.0 Medium
- pwsphpThe Admin panel in PwsPHP 1.2.2 does not properly verify uploaded picture files, which allows...7.5 High
- pwsphpPwsPHP 1.2.2 allows remote attackers to bypass authentication and post arbitrary comments via the...7.5 High
- pwsphpPwsPHP 1.2.2 allows remote attackers to obtain sensitive information via a direct request to the...7.5 High
- pwsphpSQL injection vulnerability in profil.php in PwsPHP 1.2.2 allows remote attackers to execute...7.5 High
- pwsphpMultiple cross-site scripting (XSS) vulnerabilities in PwsPHP 1.2.2 allow remote attackers to...6.8 Medium
- 4d webstarBuffer overflow in the Tomcat plugin in 4d WebSTAR 5.33 and 5.4 allows remote attackers to cause...5.0 Medium
- cj ultra plusSQL injection vulnerability in out.php in CJ Ultra (CJUltra) Plus 1.0.3 and 1.0.4 allows remote...7.5 High
- No product listedThe new account wizard in Mail.app 2.0 in Mac OS 10.4, when configuring an IMAP mail account and...7.5 High
- gamespy cd-key validation systemGameSpy SDK CD-Key Validation Toolkit, as used by many online games, allows remote attackers to...5.0 Medium
- No product listedMultiple SQL injection vulnerabilities in MidiCart PHP Shopping Cart allow remote attackers to...7.5 High
- midicart software php shopping cartCross-site scripting (XSS) vulnerability in MidiCart PHP Shopping Cart allows remote attackers to...6.8 Medium
- midicart software php shopping cartMidiCart PHP Shopping Cart allows remote attackers to obtain sensitive information via a direct...7.5 High
- mywebland mybloggieMultiple SQL injection vulnerabilities in myBloggie 2.1.1 allow remote attackers to execute...7.5 High
- mywebland mybloggiedelcomment.php in myBloggie 2.1.1 allows remote attackers to delete arbitrary comments by...7.5 High
- mywebland mybloggieMultiple cross-site scripting (XSS) vulnerabilities in myBloggie 2.1.1 allow remote attackers to...4.3 Medium
- mywebland mybloggieindex.php in myBloggie 2.1.1 allows remote attackers to obtain sensitive information via an...5.0 Medium
- oracle application server, oracle10g +1 moreThe DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain...4.6 Medium
- oracle application server, oracle10g, oracle9i +2 moreOracle Database 9i and 10g disables Fine Grained Audit (FGA) after the SYS user executes a SELECT...7.5 High
- megabookMultiple cross-site scripting (XSS) vulnerabilities in admin.cgi in MegaBook 2.0 and 2.1 allow...4.3 Medium
- dead pirate software simplecamDirectory traversal vulnerability in SimpleCam 1.2 allows remote attackers to read arbitrary...5.0 Medium
- gossamer threads links, links-sql +1 moreCross-site scripting (XSS) vulnerability in user.cgi in Gossamer Threads Links SQL 2.x and 3.0...4.3 Medium
- icewarp web mail, merak mail server +1 moreMerak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to (1) move...4.6 Medium
- icewarp web mail, merak mail server +1 moreMerak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist,...2.1 Low
- icewarp web mail, merak mail server +1 moreUnknown vulnerability in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote...5.0 Medium
- Show moreLoading…