2005

Directory traversal vulnerability in the third party tool from Powertech, as used to secure the iSeries AS/400 FTP serve

Directory traversal vulnerability in the third party tool from NetIQ, as used to secure the iSeries AS/400 FTP server, a

The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascri

Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.

McAfee Internet Security Suite 2005 uses insecure default ACLs for installed files, which allows local users to gain pri

Heap-based buffer overflow in the readpgm function in pnm.c for GOCR 0.40, when it is not using netpbm, allows remote at

SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter fo

Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an u

Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact

fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," poss

Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of s

The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel nam

Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters

Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial

Opera 8 Beta 3, when using first-generation vetted digital certificates, displays the Organizational information of an S

Buffer overflow in the exported_display function in xatitv in gatos before 0.0.5 allows local users to execute arbitrary

Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code.

SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL

SQL injection vulnerability in admin/login.asp in aspclick.it ACNews 1.0 allows remote attackers to execute arbitrary SQ

Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is l

Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execut

GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary cod

SQL injection vulnerability in banner.inc.php in JPortal Web Portal 2.3.1 allows remote attackers to execute arbitrary S

XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges.

Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrar

SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to exec

TowerBlog 0.6 and earlier stores the login data file under the web root, which allows remote attackers to obtain the MD5

Multiple SQL injection vulnerabilities in AzDGDatingPlatinum 1.1.0 allows remote attackers to execute arbitrary SQL comm

Vulnerability in Access_user Class before 1.75 allows local users to gain access as other users via the password "new".

Meilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded,

Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands

SQL injection vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to execute arbitr

Multiple buffer overflows in Pavuk before 0.9.32 have unknown attack vectors and impact.

The load_elf_library in the Linux kernel before 2.6.11.6 allows local users to cause a denial of service (kernel crash)

Bay Technical Associates RPC-3 Telnet Host 3.05 allows remote attackers to bypass authentication by pressing the escape

Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code

PHP remote file inclusion vulnerability in The Includer 1.0 and 1.1 allows remote attackers to execute arbitrary PHP cod

SQL injection vulnerability in phpCoin 1.2.1b and earlier allows remote attackers to execute arbitrary SQL commands via

Buffer overflow in smail 3.2.0.120 allows remote attackers or local users to execute arbitrary code via a long string in

Multiple SQL injection vulnerabilities in exoops may allow remote attackers to execute arbitrary SQL commands via (1) th

The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5

Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla before 1.7.6 might allo

Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code

Unknown vulnerabilities in deplate before 0.7.2 have unknown impact, possibly involving elements.rb.

Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions,

Servers Alive 4.1 and 5.0, when running as a service, does not drop SYSTEM privileges before loading local manual under

SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) uname pa

PHP remote file inclusion vulnerability in zpanel.php in ZPanel allows remote attackers to (1) execute arbitrary PHP cod

Novell iChain Mini FTP Server 2.3, and possibly earlier versions, does not limit the number of incorrect logins, which m

Unknown vulnerability in Information Resource Manager (IRM) before 1.5.2.1 allows remote attackers to have "potentially