2005

SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via th

Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews pref

The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could c

Php-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or missing arguments to (1

Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (hang) via a flood of certain ARP packets.

The buffer_urldecode function in Lighttpd 1.3.7 and earlier does not properly handle control characters, which allows re

Yahoo! Messenger 6.0.0.1750, and possibly other versions before 6.0.0.1921, does not properly display long filenames in

Directory traversal vulnerability in Xinkaa 1.0.3 and earlier allows remote attackers to read arbitrary files via (1) ..

Gigafast router (aka CompUSA router) with the DNS proxy option enabled allows remote attackers to cause a denial of serv

The RealServer RealSubscriber on Cisco devices running Application and Content Networking System (ACNS) 5.1 allow remote

Cisco devices running Application and Content Networking System (ACNS) 5.0, 5.1 before 5.1.13.7, or 5.2 before 5.2.3.9 a

The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 allows remote authe

viewtopic.php in phpBB 2.0.12 and earlier allows remote attackers to obtain sensitive information via a highlight parame

Unknown vulnerability in FCKeditor 2.0 RC2, when used with PHP-Nuke, allows remote attackers to upload arbitrary files.

The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (inf

Integer overflow on Apple QuickTime before 6.5.2, when running on Windows systems, allows remote attackers to cause a de

Trend ScanMail allows remote attackers to obtain potentially sensitive information or disable the anti-virus capability

The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a denial of service (applic

Directory traversal vulnerability in the -x (extract) command line option in unarj allows remote attackers to overwrite

RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view the PHP source code via a

PHP remote file inclusion vulnerability in auth.php in PHPNews 1.2.4 and possibly 1.2.3, allows remote attackers to exec

Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (

Nokia Symbian 60 allows remote attackers to cause a denial of service (phone restart) via a Bluetooth nickname.

Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obta

The password recovery feature (forgotpassword.asp) in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attack

The export_index action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly by

Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrar

SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the u

Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and

eXPerience2 allows remote attackers to obtain the full path for the web root via a direct request to modules.php without

ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing th

PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (CPU consumpti

Unknown vulnerability in the JXTA dissector in Ethereal 0.10.9 allows remote attackers to cause a denial of service (app

paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, (

Directory traversal vulnerability in (1) usercp_register.php and (2) usercp_avatar.php for phpBB 2.0.11, and possibly ot

The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malfor

Buffer overflow in wpa_supplicant before 0.2.7 allows remote attackers to cause a denial of service (segmentation fault)

Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system tha

Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC packets from (

The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (application crash)

The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a

Directory traversal vulnerability in SD Server 4.0.70 and earlier allows remote attackers to read arbitrary files via ..

LimeWire 4.1.2 through 4.5.6 allows remote attackers to read arbitrary files by specifying the full pathname in a Gnutel

Directory traversal vulnerability in LimeWire 3.9.6 through 4.6.0 allows remote attackers to read arbitrary files via a

phpAdsNew 2.0.4 allows remote attackers to obtain sensitive information via a direct request to (1) lib-xmlrpcs.inc.php,

HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite ar

Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of servic

Novell iChain Mini FTP Server 2.3 displays different error messages if a user exists or not, which allows remote attacke

MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service

ImageMagick before 6.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image with an