|
357601
|
4.6 |
MEDIUM
|
-
|
-
|
Trusted Mobility Agent PC Policy in Trust Digital Trusted Mobility Suite provides a cancel button that bypasses the domain-authentication prompt, which allows local users to sync a handheld (PDA) dev…
|
NVD-CWE-Other
|
CVE-2005-4771
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357602
|
6.4 |
MEDIUM
|
suse
|
suse_linux_openexchange_server
suse_linux_school_server
suse_linux_standard_server
suse_sled_beagle
suse_linux
|
liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensiti…
|
NVD-CWE-Other
|
CVE-2005-4772
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357603
|
5.0 |
MEDIUM
|
michael_scholz
|
contineo
|
Michael Scholz and Sebastian Stein Contineo 2.0, when the admin account lacks an e-mail address attribute, displays the password hash in a warning upon page reload, which might allow remote attackers…
|
NVD-CWE-Other
|
CVE-2005-4775
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357604
|
5.0 |
MEDIUM
|
michael_scholz
|
contineo
|
This vulnerability is addressed in the following product release:
Michael Scholz, Contineo, 2.1 Beta 1
|
NVD-CWE-Other
|
CVE-2005-4775
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357605
|
7.2 |
HIGH
|
netbsd
|
netbsd
|
Integer overflow in the FreeBSD compatibility code (freebsd_misc.c) in NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2 before 20050913; and NetBSD-1.6 before 20050914; allows local users to cause …
|
NVD-CWE-Other
|
CVE-2005-4776
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357606
|
7.2 |
HIGH
|
netbsd
|
netbsd
|
this vulnerbaility is addressed in the following product versions:
NetBSD, NetBSD, 2.0.3, and higher
|
NVD-CWE-Other
|
CVE-2005-4776
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357607
|
4.9 |
MEDIUM
|
tashcom
|
aspedit
|
Tashcom ASPEdit 2.9 stores the administration password (aka the FTP password) in cleartext in the registry, which might allow local users to view the password.
|
NVD-CWE-Other
|
CVE-2005-4777
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357608
|
2.1 |
LOW
|
-
|
-
|
The powersave daemon in SUSE Linux 10.0 before 20051007 has an unspecified "configuration problem," which allows local users to suspend the computer and possibly perform certain other unauthorized ac…
|
NVD-CWE-Other
|
CVE-2005-4778
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357609
|
2.1 |
LOW
|
-
|
-
|
This vulnerablility is addressed in the following product release:
SUSE, Linux, 10.0 2005-10-07
|
NVD-CWE-Other
|
CVE-2005-4778
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357610
|
3.6 |
LOW
|
netbsd
|
netbsd
|
verifiedexecioctl in verified_exec.c in NetBSD 2.0.2 calls NDINIT with UIO_USERSPACE rather than UID_SYSSPACE, which removes the functionality of the verified exec kernel subsystem and might allow lo…
|
NVD-CWE-Other
|
CVE-2005-4779
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357611
|
4.9 |
MEDIUM
|
netbsd
|
netbsd
|
NetBSD 2.0 before 2.0.4, 2.1 before 2.1.1, and 3, when the kernel is compiled with "options DIAGNOSTIC," allows local users to cause a denial of service (kernel assertion panic) via a negative linger…
|
NVD-CWE-Other
|
CVE-2005-4782
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357612
|
2.1 |
LOW
|
netbsd
|
netbsd
|
kernfs_xread in kernfs_vnops.c in NetBSD before 20050831 does not check for a negative offset when reading the message buffer, which allows local users to read arbitrary kernel memory.
|
NVD-CWE-Other
|
CVE-2005-4783
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357613
|
5.6 |
MEDIUM
|
austin_group
|
posix
|
Multiple buffer overflows in the POSIX readdir_r function, as used in multiple packages, allow local users to cause a denial of service and possibly execute arbitrary code via (1) a symlink attack th…
|
NVD-CWE-Other
|
CVE-2005-4784
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357614
|
2.1 |
LOW
|
suse
|
suse_linux
|
resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, allows local users to bypass access control rules for USB devices via "alternate syntax for specifying USB devices."
|
NVD-CWE-Other
|
CVE-2005-4788
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357615
|
2.1 |
LOW
|
suse
|
suse_linux
|
resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, does not properly enforce class-specific exclude rules in some situations, which allows local users to bypass intended access restr…
|
NVD-CWE-Other
|
CVE-2005-4789
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357616
|
7.5 |
HIGH
|
phpwebsite
|
phpwebsite
|
SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and earlier allows remote attackers to execute arbitrary SQL commands via the module parameter. NOTE: the p…
|
NVD-CWE-Other
|
CVE-2005-4792
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357617
|
7.5 |
HIGH
|
hitachi
|
cm2-network_node_manager
jp1-cm2-network_node_manager_250
|
Multiple unspecified vulnerabilities in the web utility function in Hitachi Cm2/Network Node Manager and JP1/Cm2/Network Node Manager before 20050930 allow attackers to execute arbitrary commands, di…
|
NVD-CWE-Other
|
CVE-2005-4793
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357618
|
5.0 |
MEDIUM
|
sun
|
java_system_application_server
|
Unspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6 and earlier, and 2004Q2 Standard and Platform Edition Update 2 and earlier, allows remote attackers t…
|
NVD-CWE-Other
|
CVE-2005-4805
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357619
|
7.5 |
HIGH
|
middlebury_college
|
segue_cms
|
Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter, allows remote attackers to upload and execute arbitrary PH…
|
NVD-CWE-Other
|
CVE-2005-4814
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357620
|
7.5 |
HIGH
|
proftpd_project
|
proftpd
|
Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password.
|
NVD-CWE-Other
|
CVE-2005-4816
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357621
|
7.5 |
HIGH
|
copernicus
|
europa
|
Multiple SQL injection vulnerabilities in Copernicus Europa allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: the provenance of this information is unknown; the det…
|
NVD-CWE-Other
|
CVE-2005-4818
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357622
|
7.5 |
HIGH
|
glen_campbell
|
siteframe
|
PHP remote file inclusion vulnerability in web/classes.php in Siteframe before 3.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the LOCAL_PATH parameter, a different vulnerabi…
|
NVD-CWE-Other
|
CVE-2005-4824
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357623
|
5.0 |
MEDIUM
|
claymore_systems_inc
|
puretls
|
PureTLS before 0.9b5 does not clear optional Extensions and Algorithm.Parameters values before parsing, which might trigger an information leak of values from earlier certificates.
|
NVD-CWE-Other
|
CVE-2005-4839
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357624
|
4.3 |
MEDIUM
|
spey
|
spey
|
Format string vulnerability in Logger.cc for Spey 0.3.3 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a syslog call.
|
CWE-20
不適切な入力確認
|
CVE-2005-4846
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357625
|
4.6 |
MEDIUM
|
appfluent_technology
|
database_ids
|
Buffer overflow in Appfluent Technology Database IDS 2.0 allows local users to execute arbitrary code via a long APPFLUENT_HOME environment variable.
|
NVD-CWE-Other
|
CVE-2005-4076
|
2008-09-6 05:56 |
2005-12-8 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357626
|
7.5 |
HIGH
|
realnetworks
|
realplayer
|
** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPla…
|
NVD-CWE-Other
|
CVE-2005-4126
|
2008-09-6 05:56 |
2005-12-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357627
|
7.5 |
HIGH
|
realnetworks
|
realplayer
|
** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPla…
|
NVD-CWE-Other
|
CVE-2005-4130
|
2008-09-6 05:56 |
2005-12-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357628
|
7.5 |
HIGH
|
adaptive_technology_resource_centre
|
atutor
|
registration.PHP in ATutor 1.5.1 pl2 allows remote attackers to execute arbitrary SQL commands via an e-mail address that ends in a NULL character, which bypasses the PHP regular expression check. NO…
|
NVD-CWE-Other
|
CVE-2005-4155
|
2008-09-6 05:56 |
2005-12-11 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357629
|
9.4 |
HIGH
|
mambo
|
mambo_open_source_4.5
|
Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (1.0.9), with magic_quotes_gpc disabled, allows remote attackers to read arbitrary files and possibly cause a denial of service via a query …
|
NVD-CWE-Other
|
CVE-2005-4156
|
2008-09-6 05:56 |
2005-12-11 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357630
|
4.3 |
MEDIUM
|
efiction_project
|
efiction
|
Cross-site scripting (XSS) vulnerability in eFiction 1.0 and 1.1 allows remote attackers to inject arbitrary web script or HTML via the let parameter in a viewlist action to titles.php.
|
NVD-CWE-Other
|
CVE-2005-4167
|
2008-09-6 05:56 |
2005-12-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357631
|
7.5 |
HIGH
|
efiction_project
|
efiction
|
Multiple SQL injection vulnerabilities in eFiction 1.0, 1.1, and 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the let parameter in a viewlist action to titles.php and (2) the …
|
NVD-CWE-Other
|
CVE-2005-4168
|
2008-09-6 05:56 |
2005-12-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357632
|
7.5 |
HIGH
|
efiction_project
|
efiction
|
The "Upload new image" command in the "Manage Images" eFiction 1.1, when members are allowed to upload images, allows remote attackers to execute arbitrary PHP code by uploading a filename with a .ph…
|
NVD-CWE-Other
|
CVE-2005-4171
|
2008-09-6 05:56 |
2005-12-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357633
|
5.0 |
MEDIUM
|
efiction_project
|
efiction
|
eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information via a direct request to storyblock.php without arguments, which leaks the full pathname in the resulting PHP error m…
|
NVD-CWE-Other
|
CVE-2005-4172
|
2008-09-6 05:56 |
2005-12-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357634
|
5.0 |
MEDIUM
|
efiction_project
|
efiction
|
eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing phpinfo.php, which executes the PHP phpinfo function.
|
NVD-CWE-Other
|
CVE-2005-4173
|
2008-09-6 05:56 |
2005-12-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357635
|
7.5 |
HIGH
|
-
|
-
|
eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessing (1) install.php or (2) upgrade.php. NOTE: it is unclear…
|
NVD-CWE-Other
|
CVE-2005-4174
|
2008-09-6 05:56 |
2005-12-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357636
|
4.3 |
MEDIUM
|
logisphere
|
logisphere
|
Cross-site scripting (XSS) vulnerability in LogiSphere 0.9.9j allows remote attackers to inject arbitrary Javascript via the msg command. NOTE: due to lack of appropriate details by the original rese…
|
NVD-CWE-Other
|
CVE-2005-4204
|
2008-09-6 05:56 |
2005-12-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357637
|
4.3 |
MEDIUM
|
asp-dev
|
xm_forum
|
Cross-site scripting (XSS) vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via the forum_title parameter. NOTE: the provenance of th…
|
NVD-CWE-Other
|
CVE-2005-4256
|
2008-09-6 05:56 |
2005-12-15 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357638
|
7.8 |
HIGH
|
linksys
|
befw11s4
befw11s4_v3
befw11s4_v4
wrt54gs
|
Linksys WRT54GS and BEFW11S4 allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LA…
|
NVD-CWE-Other
|
CVE-2005-4257
|
2008-09-6 05:56 |
2005-12-15 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357639
|
7.5 |
HIGH
|
alt-n
|
mdaemon
worldclient
|
WorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a randomly generated session ID that is associated with a username, which allows remote attackers to pe…
|
NVD-CWE-Other
|
CVE-2005-4266
|
2008-09-6 05:56 |
2005-12-15 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357640
|
7.8 |
HIGH
|
microsoft
|
ie
windows_2003_server
windows_xp
|
mshtml.dll in Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers to cause a denial of service (access violation) by causing mshtml.dll to process button-focus events at…
|
NVD-CWE-Other
|
CVE-2005-4269
|
2008-09-6 05:56 |
2005-12-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357641
|
7.8 |
HIGH
|
scientific_atlanta
|
dpx2100_cable_modem
|
Scientific Atlanta DPX2100 Cable Modem allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag s…
|
NVD-CWE-Other
|
CVE-2005-4275
|
2008-09-6 05:56 |
2005-12-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357642
|
7.8 |
HIGH
|
westell
|
versalink
|
Westell Versalink 327W allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LanD). N…
|
NVD-CWE-Other
|
CVE-2005-4276
|
2008-09-6 05:56 |
2005-12-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357643
|
7.8 |
HIGH
|
-
|
-
|
AppServ Open Project 2.5.3 allows remote attackers to cause a denial of service via a large HTTP request.
|
NVD-CWE-Other
|
CVE-2005-4296
|
2008-09-6 05:56 |
2005-12-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357644
|
7.5 |
HIGH
|
john_andersson
|
zixforum
|
SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the H_ID parameter to (1) zixforum/forum.asp, as used in (2) Headforums.asp and (3) Subject.…
|
NVD-CWE-Other
|
CVE-2005-4334
|
2008-09-6 05:56 |
2005-12-17 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357645
|
7.5 |
HIGH
|
blackboard
|
academic_suite
|
The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileg…
|
NVD-CWE-Other
|
CVE-2005-4337
|
2008-09-6 05:56 |
2005-12-19 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357646
|
10.0 |
HIGH
|
blackboard
|
academic_suite
|
announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to gain administrator privileges by setti…
|
NVD-CWE-Other
|
CVE-2005-4338
|
2008-09-6 05:56 |
2005-12-19 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357647
|
4.3 |
MEDIUM
|
blackboard
|
academic_suite
|
Cross-site scripting (XSS) vulnerability in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to inject arbitr…
|
NVD-CWE-Other
|
CVE-2005-4339
|
2008-09-6 05:56 |
2005-12-19 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357648
|
5.0 |
MEDIUM
|
blackboard
|
academic_suite
|
Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to list all available categories via a blank category_id par…
|
NVD-CWE-Other
|
CVE-2005-4341
|
2008-09-6 05:56 |
2005-12-19 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357649
|
4.3 |
MEDIUM
|
icms_content_management_systems
|
icms
|
Cross-site scripting (XSS) vulnerability in admin/Default.asp in iCMS allows remote attackers to inject arbitrary web script or HTML via the LoginMSG parameter. NOTE: the provenance of this issue is…
|
NVD-CWE-Other
|
CVE-2005-4396
|
2008-09-6 05:56 |
2005-12-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357650
|
7.5 |
HIGH
|
icms_content_management_systems
|
icms
|
SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute arbitrary SQL commands via the Event_ID parameter.
|
NVD-CWE-Other
|
CVE-2005-4397
|
2008-09-6 05:56 |
2005-12-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
