Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2005-05-14 CVE-2005-1569 Cross-Site Scripting vulnerability in Directtopics 2.1/2.2
Cross-site scripting (XSS) vulnerability in DirectTopics 2.1 and 2.2 allows remote attackers to inject arbitrary web script via a javascript: URL in (1) a thread or (2) an IMG tag.
network
directtopics
4.3
2005-05-14 CVE-2005-1566 Denial-Of-Service vulnerability in Arcowave Systems Wlan AP + Adsl Router Aap3100Ar
Acrowave AAP-3100AR wireless router allows remote attackers to bypass authentication by pressing CTRL-C at the username or password prompt in a telnet session, which causes the shell to crash and restart, then leave the user in the new shell.
network
low complexity
arcowave-systems
7.5
2005-05-14 CVE-2005-1563 Information Disclosure vulnerability in Bugzilla Hidden Product
Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 displays a different error message depending on whether a product exists or not, which allows remote attackers to determine hidden products.
network
low complexity
mozilla
5.0
2005-05-14 CVE-2005-1556 Denial-Of-Service vulnerability in Gamespy Sdk Cd-Key Validation Toolkit
Gamespy cd-key validation system allows remote attackers to cause a denial of service (cd-key already in use) by capturing and replaying a cd-key authorization session.
network
low complexity
gamespy
5.0
2005-05-14 CVE-2005-1554 SQL Injection vulnerability in Wowbb web Forum 1.6/1.61/1.62
SQL injection vulnerability in view_user.php in WowBB 1.6, 1.61, and 1.62 allows remote attackers to execute arbitrary SQL commands via the sort_by parameter.
network
low complexity
wowbb
7.5
2005-05-14 CVE-2005-1553 Remote Security vulnerability in Digital Surveillance System 6.0.4/6.1/7.0
GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via sniffing.
network
low complexity
geovision
7.5
2005-05-14 CVE-2005-1552 Unspecified vulnerability in Geovision Digital Surveillance System 6.0.4/6.1/7.0
GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0, when set to create JPEG images, does not properly protect an image even when a password and username is assigned, which may allow remote attackers to gain sensitive information via a direct request to the image.
network
low complexity
geovision
5.0
2005-05-14 CVE-2005-1551 Denial-Of-Service vulnerability in Sophos Anti-Virus 3.93
Sophos Anti-Virus 3.93 does not check downloaded files for viruses when they have only been written, which creates a race condition and may allow remote attackers to bypass virus protection if the file is executed before the antivirus starts on system reboot.
network
high complexity
sophos
5.1
2005-05-14 CVE-2005-1550 Remote Command Execution vulnerability in Easy Message Board
easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the print parameter.
network
low complexity
colored-scripts
7.5
2005-05-14 CVE-2005-1549 Directory Traversal vulnerability in Easy Message Board
Directory traversal vulnerability in easymsgb.pl in Easy Message Board allows remote attackers to read arbitrary files via a ..
network
low complexity
colored-scripts
5.0