Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2005-11-17 CVE-2005-3647 Local Security vulnerability in Folder Guard
Folder Guard allows local users to bypass protections by running from or installing to the temporary files directory.
local
low complexity
winability
4.6
2005-11-17 CVE-2005-3646 SQL Injection vulnerability in multiple products
Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in (1) logout.php and (2) index.php.
network
low complexity
phpadsnew phppgads CWE-89
7.5
2005-11-17 CVE-2005-3645 Information Exposure vulnerability in multiple products
phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sensitive information via direct requests to (1) create.php, and if display_errors is enabled, (2) lib-updates.inc.php, (3) lib-targetstats.inc.php, (4) lib-size.inc.php, (5) lib-misc-stats.inc.php, (6) lib-hourly-hosts.inc.php, (7) lib-hourly.inc.php, (8) lib-history.inc.php, and (9) graph-daily.php.
network
low complexity
phpadsnew phppgads CWE-200
5.0
2005-11-17 CVE-2005-3644 Resource Management Errors vulnerability in Microsoft Windows 2000 and Windows XP
PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and a different vulnerability than CVE-2005-2120.
network
low complexity
microsoft CWE-399
7.8
2005-11-16 CVE-2005-3643 Authentication Bypass vulnerability in IBM DB2 Windows XP Simple File Sharing
IBM DB2 Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account without supplying a password.
network
low complexity
ibm
7.5
2005-11-16 CVE-2005-3642 Authentication Bypass vulnerability in IBM Informix Dynamic Server Windows XP Simple File Sharing
IBM Informix Dynamic Database server running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication and log on to the guest account by supplying an invalid username.
network
low complexity
ibm
7.5
2005-11-16 CVE-2005-3641 Authentication Bypass vulnerability in Oracle Database Windows XP Simple File Sharing
Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username.
network
low complexity
oracle
7.5
2005-11-16 CVE-2005-3640 Buffer Errors vulnerability in Floosietek Ftgate 44.1
Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command.
network
low complexity
floosietek CWE-119
critical
10.0
2005-11-16 CVE-2005-3639 Local File Include vulnerability in Help Center Live
PHP file inclusion vulnerability in the osTicket module in Help Center Live before 2.0.3 allows remote attackers to access or include arbitrary files via the file parameter, possibly due to a directory traversal vulnerability.
network
low complexity
ubertec
7.5
2005-11-16 CVE-2005-3636 Cross-Site Scripting vulnerability in SAP web Application Server 6.10
Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages.
network
sap
4.3