Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-12-31 | CVE-2005-4806 | Denial-Of-Service vulnerability in SUN Java System web Proxy Server 3.6 Multiple unspecified vulnerabilities in Sun Java System Web Proxy Server 3.6 SP7 and earlier allow remote attackers to cause a denial of service (unresponsive service) via unknown vectors. | 5.0 |
| 2005-12-31 | CVE-2005-4805 | Unspecified vulnerability in SUN Java System Application Server 6.0/7.0 Unspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6 and earlier, and 2004Q2 Standard and Platform Edition Update 2 and earlier, allows remote attackers to obtain the source code for Java Server pages (JSP) via unknown vectors. | 5.0 |
| 2005-12-31 | CVE-2005-4804 | Unspecified vulnerability in SUN Java System Application Server 8.1 Unspecified vulnerability in Sun Java System Application Server Platform Edition and Enterprise Edition 8.1 2005 Q1, and Platform Edition UR1, allows remote attackers to read .jar files via unknown vectors related to deployed web applications. | 5.0 |
| 2005-12-31 | CVE-2005-4803 | Unspecified vulnerability in Graphviz graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files. | 3.6 |
| 2005-12-31 | CVE-2005-4802 | Local Security vulnerability in Flexbackup Flexbackup 1.2.1 and earlier allows local users to overwrite files and execute code via a symlink attack on temporary files. | 4.6 |
| 2005-12-31 | CVE-2005-4801 | Cross-Site Request Forgery vulnerability in YaPig Multiple cross-site request forgery (CSRF) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to perform unauthorized actions as a logged-in user, as demonstrated by tricking the administrator to access a web page that performs a mod_info action in modify_gallery.php. | 7.5 |
| 2005-12-31 | CVE-2005-4800 | Remote Security vulnerability in YaPig Direct static code injection vulnerability in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allows remote authenticated administrators to inject arbitrary PHP code via the TestGallery parameter in a mod_info action to modify_gallery.php, which inserts the code into guid_info.php. | 9.0 |
| 2005-12-31 | CVE-2005-4799 | Cross-Site Scripting vulnerability in Yapig Multiple cross-site scripting (XSS) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the Homepage field (aka the Website field) in an "image-related comment" and (2) the img_size field in view.php. | 5.1 |
| 2005-12-31 | CVE-2005-4797 | Unspecified vulnerability in SUN Solaris and Sunos Directory traversal vulnerability in printd line printer daemon (lpd) in Solaris 7 through 10 allows remote attackers to delete arbitrary files via ".." sequences in an "Unlink data file" command. | 5.0 |
| 2005-12-31 | CVE-2005-4796 | Local Arbitrary File Corruption vulnerability in Sun Solaris XView Unspecified vulnerability in the XView library (libxview.so) in Solaris 2.5 to 10 allows local users to corrupt files via unknown vectors related to the handling of the clipboard selection while an XView application exits. | 3.6 |