2005

Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into pr

Yager 5.24 and earlier allows remote attackers to cause a denial of service (application hang) via a packet with a game

Yager 5.24 and earlier allows remote attackers to cause a denial of service (application crash) via certain malformed da

DiagCollectionControl.dll in Musicmatch 10.00.2047 and earlier allows remote attackers to overwrite arbitrary files via

Unknown vulnerability in Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000

HTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote attackers to spoof web content

Unknown vulnerability in Incoming Remote Command (iSeries Access for Windows Remote Command service) in IBM OS/400 R510,

The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service (CPU consumption) vi

WebcamXP PRO v2.16.468 and earlier allows remote attackers to cause a denial of service via a long chat name, which take

The Web View DLL (webvw.dll), as used in Windows Explorer on Windows 2000 systems, does not properly filter an apostroph

Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remo

Directory traversal vulnerability in apexec.pl for Anaconda Foundation Directory allows remote attackers to read arbitra

Desktop Rover 3.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application cras

Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary

Directory traversal vulnerability in Yawcam 0.2.5 allows remote attackers to read arbitrary files via "..\" (dot dot bac

Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the

auction_my_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an

Directory traversal vulnerability in the third party tool from Raz-Lee, as used to secure the iSeries AS/400 FTP server,

Directory traversal vulnerability in the third party tool from Bsafe, as used to secure the iSeries AS/400 FTP server, a

Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP serve

The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a den

tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP pac

The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop

The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

set_lang.php in phpMyVisites 1.3 allows remote attackers to read and include arbitrary files via the mylang parameter.

Buffer overflow in VooDoo cIRCle BOTNET before 1.0.33 allows remote authenticated attackers to cause a denial of service

OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnect

owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parame

The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.

includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a simi

text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain p

Race condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary files via a hard link attac

Buffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as c

Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbit

The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which al

Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash) and hijack the deskto

Multiple buffer overflows in golddig 2.0 and earlier allow local users to execute arbitrary code via (1) a long map name

The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbitr

KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged fil

Webseries Payment Application does not properly restrict privileged operations, which allows remote authenticated users

Ingate Firewall 4.1.3 and earlier does not terminate the PPTP session for an active user when the administrator disables

Chat Anywhere 2.72a stores sensitive information such as passwords in plaintext in the .INI file for a chatroom, which a

Unknown vulnerability in IBM Hardware Management Console (HMC) before 4.4 for POWER5 servers allows local users to gain

saveUser.do in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows local users to gain privileges by setting th

Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execu

lnss.exe in GFI Languard Network Security Scanner 5.0 stores the username and password in memory in plaintext, which cou

Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless

phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name, which grants remote authe