| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2005-1628 | 7.5 | apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter. | 2018-10-19 15:31:00 | 2005-05-17 04:00:00 |
| CVE-2005-1264 | 7.2 | Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2 | 2018-10-19 15:31:00 | 2005-05-17 04:00:00 |
| CVE-2005-1619 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in (1) start_page.css.php3 (aka start-page.css.php3) or (2) style.css.php3 in PHPMyChat 0.14.5 allow remote attackers to inject arbitrary web script or HTML commands via the FontName parameter. NOT | 2018-10-19 15:31:00 | 2005-05-16 04:00:00 |
| CVE-2005-1604 | 7.5 | PHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via filenames containing multiple file extensions, as demonstrated using a filename ending in "php.ns", which allows execution of arbitrary PHP code. | 2018-10-19 15:31:00 | 2005-05-16 04:00:00 |
| CVE-2005-1486 | 5.0 | Multiple cross-site scripting vulnerabilities in FishCart 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) trackingnum, (2) reqagree, or (3) m parameter to upstracking.php or (4) nlst parameter to display.php. NOTE: the | 2018-10-19 15:31:00 | 2005-05-11 04:00:00 |
| CVE-2005-1263 | 7.2 | The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the create_elf_tables | 2018-10-19 15:31:00 | 2005-05-11 04:00:00 |
| CVE-2005-1262 | 5.0 | Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed MSN message. | 2018-10-19 15:31:00 | 2005-05-11 04:00:00 |
| CVE-2005-1261 | 7.5 | Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message (IM) with a large URL. | 2018-10-19 15:31:00 | 2005-05-11 04:00:00 |
| CVE-2005-1425 | 5.0 | Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/guestbook.mdb. | 2018-10-19 15:31:00 | 2005-05-03 04:00:00 |
| CVE-2005-1410 | 2.1 | The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as "internal" even when they do not take an internal argument, which allows attackers to cause | 2018-10-19 15:31:00 | 2005-05-03 04:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: