| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2005-2441 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and HTML via the (1) UserName parameter to profile.php or (2) UserID parameter to login.php. | 2018-10-19 15:32:00 | 2005-08-03 04:00:00 |
| CVE-2005-2392 | 4.3 | Cross-site scripting (XSS) vulnerability in index.php for CMSimple 2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in the search function. | 2018-10-19 15:32:00 | 2005-07-27 04:00:00 |
| CVE-2005-2335 | 5.0 | Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service and possibly execute arbitrary code via long UIDL responses. NOTE: a typo in an advisory accidentally used the wrong CVE identifie | 2018-10-19 15:32:00 | 2005-07-27 04:00:00 |
| CVE-2005-2378 | 5.0 | Directory traversal vulnerability in Oracle Reports allows remote attackers to read arbitrary files via an absolute or relative path to the (1) CUSTOMIZE or (2) desformat parameters to rwservlet. NOTE: vector 2 is probably the same as CVE-2006-0289, | 2018-10-19 15:32:00 | 2005-07-26 04:00:00 |
| CVE-2005-2371 | 5.0 | Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) "..", (2) Windows drive letter (C:), and (3) absolute path sequences in the desname parameter. NOTE: this issue was | 2018-10-19 15:32:00 | 2005-07-26 04:00:00 |
| CVE-2005-2370 | 5.0 | Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message. | 2018-10-19 15:32:00 | 2005-07-26 04:00:00 |
| CVE-2005-2177 | 5.0 | Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote attackers to cause a denial of service (daemon hang and CPU consumption) via a TCP packet of length 1, which triggers an | 2018-10-19 15:32:00 | 2005-07-11 04:00:00 |
| CVE-2005-2110 | 5.0 | WordPress 1.5.1.2 and earlier allows remote attackers to obtain sensitive information via (1) a direct request to menu-header.php or a "1" value in the feed parameter to (2) wp-atom.php, (3) wp-rss.php, or (4) wp-rss2.php, which reveal the path in an | 2018-10-19 15:32:00 | 2005-07-05 04:00:00 |
| CVE-2005-2077 | 4.3 | Cross-site scripting (XSS) vulnerability in error.asp for Hosting Controller allows remote attackers to inject arbitrary web script or HTML via the error parameter. | 2018-10-19 15:32:00 | 2005-06-29 04:00:00 |
| CVE-2005-2048 | 7.5 | Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via the (1) iMsg parameter to messages.asp, iFor parameter to (2) post.asp or (3) forums.asp, or (4) i | 2018-10-19 15:32:00 | 2005-06-22 04:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: