Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2005-05-02 CVE-2005-0217 SQL Injection vulnerability in Invision Power Services Invision Community Blog 1.0
SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execute arbitrary SQL commands via the eid parameter.
network
low complexity
invision-power-services
7.5
2005-05-02 CVE-2005-0216 Cross-Site Scripting vulnerability in WoltLab Burning Board Lite Form Mail Script
Cross-site scripting (XSS) vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote attackers to inject arbitrary web script and HTML via the userid parameter.
network
woltlab
4.3
2005-05-02 CVE-2005-0215 Denial-Of-Service vulnerability in Mozilla 1.6
Mozilla 1.6 and possibly other versions allows remote attackers to cause a denial of service (application crash) via a XBM (X BitMap) file with a large (1) height or (2) width value.
network
low complexity
mozilla
5.0
2005-05-02 CVE-2005-0214 Remote Directory Traversal vulnerability in Alexander Palmo Simple PHP Blog 0.3.7C
Directory traversal vulnerability in Simple PHP Blog (SPHPBlog) 0.3.7c allows remote attackers to read or create arbitrary files via a ..
network
low complexity
alexander-palmo
5.0
2005-05-02 CVE-2005-0213 Remote vulnerability in Webtoolmaster Software Winhki 1.4D
Directory traversal vulnerability in WinHKI 1.4d allows remote attackers to overwrite arbitrary files via a ..
network
low complexity
webtoolmaster-software
5.0
2005-05-02 CVE-2005-0212 Remote Denial Of Service vulnerability in Amp II 3D Game Engine
The Amp II engine as used by Gore: Ultimate Soldier 1.50 and earlier allows remote attackers to cause a denial of service (infinite loop) via a zero byte UDP packet.
network
low complexity
amp
5.0
2005-05-02 CVE-2005-0211 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long WCCP packet, which is processed by a recvfrom function call that uses an incorrect length parameter.
network
low complexity
squid-cache debian CWE-119
7.5
2005-05-02 CVE-2005-0210 Resource Management Errors vulnerability in Linux Kernel 2.6.8.1
Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice.
local
low complexity
linux CWE-399
4.9
2005-05-02 CVE-2005-0209 Improper Input Validation vulnerability in Linux Kernel 2.6.8.1
Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via crafted IP packet fragments.
network
low complexity
linux CWE-20
7.8
2005-05-02 CVE-2005-0208 Remote Denial of Service vulnerability in Gaim
The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0473.
network
low complexity
rob-flynn
5.0