2005

Directory traversal vulnerability in WinHKI 1.4d allows remote attackers to overwrite arbitrary files via a .. (dot dot)

Directory traversal vulnerability in Simple PHP Blog (SPHPBlog) 0.3.7c allows remote attackers to read or create arbitra

Mozilla 1.6 and possibly other versions allows remote attackers to cause a denial of service (application crash) via a X

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: (RFC 2397

Cross-site scripting vulnerability in login.php in Gallery 1.4.4-pl2 allows remote attackers to inject arbitrary web scr

main.php in Gallery 2.0 Alpha allows remote attackers to gain sensitive information by changing the value of g2_subView

The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attackers

The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode

The International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain names using punycode e

The International Domain Name (IDN) support in Omniweb 5 allows remote attackers to spoof domain names using punycode en

The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain name

The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode enc

The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context

The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via cra

String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::R

The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service

TFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) via a GET

Multiple format string vulnerabilities in the FTP service in 3Com 3CDaemon 2.0 revision 10 allow remote attackers to cau

Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service

The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command

Soldner Secret Wars 30830 and earlier does not properly handle the "message too long" socket error, which allows remote

eMotion MediaPartner Web Server 5.0 and 5.1 allows remote attackers to obtain sensitive information via an HTTP request

Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Service (WDS), allows rem

Directory traversal vulnerability in minis.php in Minis 0.2.1 allows remote attackers to read arbitrary files via a .. (

The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, whi

Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a

Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files vi

Exponent 0.95 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) search.info.php,

Infinite Mobile Delivery Webmail 2.6 allows remote attackers to gain sensitive information via an HTTP request that cont

Xpand Rally 1.0.0.0 allows remote attackers or remote malicious game servers to cause a denial of service (application c

pafiledb.php in PaFileDB 3.1 allows remote attackers to gain sensitive information via an invalid or missing action para

Zyxel P310, P314, P324 and Netgear RT311, RT314 running the latest firmware, allows remote attackers on the WAN to obtai

LANChat Pro Revival 1.666c allows remote attackers to cause a denial of service (application crash) via a malformed UDP

Linksys PSUS4 running firmware 6032 allows remote attackers to cause a denial of service (device crash) via an HTTP POST

Directory traversal vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to read arbitrary files

Integer signedness error in Apple File Service (AFP Server) allows remote attackers to cause a denial of service (applic

Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote authenticated users to upload and execute

viewthread.php in php-fusion 4.x does not check the (1) forum_id or (2) forum_cat parameters, which allows remote attack

The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback (CFB) mode, all

Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of s

Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of s

Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary f

imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information via an HTTP request with (1) idal

Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary fi

Breed patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via an empty UDP pack

geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers

KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitall

Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attac

Unknown vulnerability in Solaris 8 and 9 allows remote attackers to cause a denial of service (panic) via "Heavy UDP Usa

The ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file whe