2005

Yager 5.24 and earlier allows remote attackers to cause a denial of service (application hang) via a packet with a game

Yager 5.24 and earlier allows remote attackers to cause a denial of service (application crash) via certain malformed da

DiagCollectionControl.dll in Musicmatch 10.00.2047 and earlier allows remote attackers to overwrite arbitrary files via

Unknown vulnerability in Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000

HTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote attackers to spoof web content

Unknown vulnerability in Incoming Remote Command (iSeries Access for Windows Remote Command service) in IBM OS/400 R510,

The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service (CPU consumption) vi

WebcamXP PRO v2.16.468 and earlier allows remote attackers to cause a denial of service via a long chat name, which take

The Web View DLL (webvw.dll), as used in Windows Explorer on Windows 2000 systems, does not properly filter an apostroph

Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remo

Directory traversal vulnerability in apexec.pl for Anaconda Foundation Directory allows remote attackers to read arbitra

Desktop Rover 3.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application cras

Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary

Directory traversal vulnerability in Yawcam 0.2.5 allows remote attackers to read arbitrary files via "..\" (dot dot bac

Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the

auction_my_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an

Directory traversal vulnerability in the third party tool from Raz-Lee, as used to secure the iSeries AS/400 FTP server,

Directory traversal vulnerability in the third party tool from Bsafe, as used to secure the iSeries AS/400 FTP server, a

Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP serve

The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a den

tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP pac

The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop

The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

set_lang.php in phpMyVisites 1.3 allows remote attackers to read and include arbitrary files via the mylang parameter.

Buffer overflow in VooDoo cIRCle BOTNET before 1.0.33 allows remote authenticated attackers to cause a denial of service

OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnect

owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parame

The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.

includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a simi

text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

The webcacheadmin module in Oracle Webcache 9i allows remote attackers to corrupt arbitrary files via a full pathname in

PHP-Nuke 7.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) ipban.php,

phpcart.php in PHPCart 3.2 allows remote attackers to change product price information by modifying the (1) price or (2)

Integer signedness error in certain older versions of the NeL library, as used in Mtp-Target 1.2.2 and earlier, and poss

MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser parameter to post.php or (2) s

Directory traversal vulnerability in 04WebServer 1.81 allows remote attackers to read files outside of the web root but

Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to determine the full pathname of the server via a r

Directory traversal vulnerability in Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to read arbitra

Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allo

Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows

The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial o

Format string vulnerability in Lotus Domino 6.0.x before 6.0.5 and 6.5.x before 6.5.4 allows remote attackers to cause a

Directory traversal vulnerability in the Bluetooth file and object exchange (OBEX) services in Mac OS X 10.3.9 allows re

The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote a

fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (crash) by closing the co

Multiple unknown vulnerabilities in the (1) DHCP and (2) Telnet dissectors in Ethereal before 0.10.11 allow remote attac

Multiple unknown vulnerabilities in the (1) AIM, (2) LDAP, (3) FibreChannel, (4) GSM_MAP, (5) SRVLOC, and (6) NTLMSSP di

Multiple unknown "other problems" in the KINK dissector in Ethereal before 0.10.11 have unknown impact and attack vector

Multiple unknown vulnerabilities in the (1) WSP, (2) BER, (3) SMB, (4) NDPS, (5) IAX2, (6) RADIUS, (7) TCAP, (8) MRDISC,