| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2005-4438 | 7.5 | Heap-based buffer overflow in Dec2Rar.dll 3.2.14.3, as distributed in the Symantec Antivirus Library and used by various Symantec products, allows remote attackers to execute arbitrary code via RAR archives with sub-block headers that contain incorre | 2018-10-19 15:40:00 | 2005-12-21 01:03:00 |
| CVE-2005-4437 | 7.5 | MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code (MAC) in the checksum, which allows remote attackers to sniff message | 2018-10-19 15:40:00 | 2005-12-21 01:03:00 |
| CVE-2005-4436 | 7.8 | Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS after 12.3(2), 12.3(3)B, and 12.3(2)T and other products, allows remote attackers to cause a denial of service by sending a "spoofed neighbor announcement" with (1) m | 2018-10-19 15:40:00 | 2005-12-21 01:03:00 |
| CVE-2005-4348 | 7.8 | fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers. | 2018-10-19 15:40:00 | 2005-12-21 00:03:00 |
| CVE-2005-4428 | 4.3 | Cross-site scripting (XSS) vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML via the kb_ask parameter. | 2018-10-19 15:40:00 | 2005-12-20 23:03:00 |
| CVE-2005-4427 | 7.5 | Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to attachment_send.php, (2) the $addy variable in email_parser.php, (3) $address variable in email_pars | 2018-10-19 15:40:00 | 2005-12-20 23:03:00 |
| CVE-2005-4417 | 6.4 | The default configuration of Widcomm Bluetooth for Windows (BTW) 4.0.1.1500 and earlier, as installed on Belkin Bluetooth Software 1.4.2 Build 10 and ANYCOM Blue USB-130-250 Software 4.0.1.1500, and possibly other devices, sets null Authentication an | 2018-10-19 15:40:00 | 2005-12-20 11:03:00 |
| CVE-2005-4371 | 5.0 | Acidcat 2.1.13 and earlier stores the database under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a request to databases/acidcat.mdb. | 2018-10-19 15:40:00 | 2005-12-20 02:03:00 |
| CVE-2005-4370 | 7.5 | SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter to default.asp. | 2018-10-19 15:40:00 | 2005-12-20 02:03:00 |
| CVE-2005-4368 | 5.0 | roundcube webmail Alpha, with a default high verbose level ($rcmail_config['debug_level'] = 1), allows remote attackers to obtain the full path of the application via an invalid_task parameter, which leaks the path in an error message. | 2018-10-19 15:40:00 | 2005-12-20 02:03:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: