| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2005-3983 | 7.8 | Unknown vulnerability in the login page for HP Systems Insight Manager (SIM) 4.0 and 4.1, when accessed by Microsoft Internet Explorer with the MS04-025 patch, leads to a denial of service (browser hang). NOTE: although the advisory is vague, this is | 2018-10-19 15:39:00 | 2005-12-04 11:03:00 |
| CVE-2005-3982 | 5.0 | CRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via the ret parameter, which is used to redirect URL requests. | 2018-10-19 15:39:00 | 2005-12-04 11:03:00 |
| CVE-2005-3980 | 7.5 | SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter. | 2018-10-19 15:39:00 | 2005-12-04 11:03:00 |
| CVE-2005-3975 | 4.0 | Interpretation conflict in file.inc in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF or JPEG file extension, which causes the HTML to be execu | 2018-10-19 15:39:00 | 2005-12-03 19:03:00 |
| CVE-2005-3974 | 6.4 | Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote attackers to bypass the "access user profiles" permission. | 2018-10-19 15:39:00 | 2005-12-03 19:03:00 |
| CVE-2005-3973 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allow remote attackers to inject arbitrary web script or HTML via various HTML tags and values, such as the (1) legend tag and the value paramet | 2018-10-19 15:39:00 | 2005-12-03 19:03:00 |
| CVE-2005-3968 | 7.5 | SQL injection vulnerability in auth.inc.php in PHPX 3.5.9 and earlier allows remote attackers to execute arbitrary SQL commands, bypass authentication, and upload arbitrary PHP code via the username parameter. | 2018-10-19 15:39:00 | 2005-12-03 19:03:00 |
| CVE-2005-3964 | 7.5 | Multiple buffer overflows in libUil (libUil.so) in OpenMotif 2.2.3, and possibly other versions, allows attackers to execute arbitrary code via the (1) diag_issue_diagnostic function in UilDiags.c and (2) open_source_file function in UilSrcSrc.c. | 2018-10-19 15:39:00 | 2005-12-02 11:03:00 |
| CVE-2005-3962 | 4.6 | Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an int | 2018-10-19 15:39:00 | 2005-12-01 17:03:00 |
| CVE-2005-3961 | 5.0 | export_handler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter. | 2018-10-19 15:39:00 | 2005-12-01 06:03:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: