2005

Unknown vulnerability in the LDAP dissector in Ethereal 0.8.5 through 0.10.11 allows remote attackers to cause a denial

Unknown vulnerability in the (1) AgentX dissector, (2) PER dissector, (3) DOCSIS dissector, (4) SCTP graphs, (5) HTTP di

Unknown vulnerability several dissectors in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a denial of

Unknown vulnerability in the (1) SMPP dissector, (2) 802.3 dissector, (3) DHCP, (4) MEGACO dissector, or (5) H1 dissecto

Unknown vulnerability in the (1) GIOP dissector, (2) WBXML, or (3) CAMEL dissector in Ethereal 0.8.20 through 0.10.11 al

Unknown vulnerability in the SMB dissector in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a buffer o

Unknown vulnerability in the BER dissector in Ethereal 0.10.11 allows remote attackers to cause a denial of service (abo

FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via a direct reques

FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via (1) a null byte

CRLF injection vulnerability in FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to execute arbitrar

Invision Power Board (IPB) 1.0.3 allows remote attackers to inject arbitrary web script or HTML via an attachment, which

Directory traversal vulnerability in wce.download.php in Comdev eCommerce 3.0 allows remote attackers to download arbitr

PHP remote file inclusion vulnerability in config.php in Comdev eCommerce 3.0 allows remote attackers to execute arbitra

Arab Portal 2.0 allows remote attackers to obtain sensitive information via a long (1) username or (2) password, which r

Multiple cross-site scripting (XSS) vulnerabilities in FlatNuke 2.5.5 and possibly earlier versions allow remote attacke

Multiple cross-site scripting (XSS) vulnerabilities in PHPOpenChat 3.0.2 allow remote attackers to inject arbitrary web

The StateToOptions function in msfweb in Metasploit Framework 2.4 and earlier, when running with the -D option (defanged

Cross-site scripting (XSS) vulnerability in the Helpdesk in Logicampus before 1.1.1 allows remote attackers to inject ar

Cross-site scripting (XSS) vulnerability in Web Content Management News System allows remote attackers to inject arbitra

Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to us

The AES-XCBC-MAC algorithm in IPsec in FreeBSD 5.3 and 5.4, when used for authentication without other encryption, uses

Multiple buffer overflows in BusinessMail 4.60.00 allow remote attackers to cause a denial of service (application crash

ChurchInfo allows remote attackers to execute obtain sensitive information via the PersonID parameter to (1) PersonView.

shop_display_products.php in Naxtor Shopping Cart 1.0 allows remote attackers to obtain sensitive information via a cat_

Quick 'n Easy FTP Server 3.0 allows remote attackers to cause a denial of service (application crash or CPU consumption)

ColdFusion Fusebox 4.1.0 allows remote attackers to obtain sensitive information via an invalid fuseaction parameter, wh

Cross-site scripting (XSS) vulnerability in lost_passowrd.php in Naxtor Shopping Cart 1.0 allows remote attackers to inj

Cross-site scripting (XSS) vulnerability in ColdFusion Fusebox 4.1.0 allows remote attackers to inject arbitrary web scr

Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to caus

Greasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request to a file:// URL in th

Cross-site scripting (XSS) vulnerability in NetworkActiv Web Server 1.0, 2.0.0.6, 3.0.1.1, and 3.5.13, and possibly othe

PHP remote file inclusion vulnerability in block.php in PHP FirstPost allows remote attackers to execute arbitrary PHP c

PHP remote file inclusion vulnerability in apa_phpinclude.inc.php in Atomic Photo Album (APA) allows remote attackers to

Contrexx before 1.0.5 allows remote attackers to obtain sensitive information via a direct request to /config/version.xm

Beehive Forum allows remote attackers to obtain sensitive information via (1) an invalid final_uri or sort_by parameter

Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hid

Firefox, when opening Microsoft Word documents, does not properly set the permissions on shared sections, which allows r

The (1) lost password and (2) account pending features in GForge 4.5 do not properly set a limit on the number of e-mail

PhpList allows remote attackers to obtain sensitive information via a direct request to (1) about.php, (2) connect.php,

Linksys WRT54G router uses the same private key and certificate for every router, which allows remote attackers to sniff

browse.php in Website Baker Project allows remote attackers to obtain sensitive data via (1) a directory that does not e

Website Baker Project does not properly verify the file extensions of uploaded files, which allows remote attackers to u

Cross-Application Scripting (XAS) vulnerability in SPI Dynamics WebInspect 5.0.196 allows remote attackers to inject Jav

Kshout 2.x and 3.x stores settings.dat under the web document root with insufficient access control, which allows remote

Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service (invali

libtiff up to 3.7.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image header wit

Multiple cross-site scripting (XSS) vulnerabilities in Contrexx before 1.0.5 allow remote attackers to inject arbitrary

Cross-site scripting (XSS) vulnerability in index.php in Beehive Forum allows remote attackers to inject arbitrary web s

Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ allows remote attackers to inject arbitrary web scri

Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script