Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-06-19 | CVE-2005-2007 | Directory Traversal vulnerability in Trac Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. | 6.4 |
| 2005-06-18 | CVE-2005-0773 | Remote Agent for Windows Servers Authentication Buffer Overflow vulnerability in Veritas Backup Exec Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers to execute arbitrary code via a CONNECT_CLIENT_AUTH request with authentication method type 3 (Windows credentials) and a long password argument. | 7.5 |
| 2005-06-17 | CVE-2005-2043 | Directory Traversal vulnerability in XAMMP Directory traversal vulnerability in XAMPP before 1.4.14 allows remote attackers to inject arbitrary HTML and PHP code via lang.php. | 5.0 |
| 2005-06-17 | CVE-2005-2029 | Remote Security vulnerability in Amarok web Frontend 1.3 amaroK Web Frontend 1.3 stores the globals.inc file under the web root without a .php extension and insufficient access control, which allows remote attackers to obtain the database username and password via a direct request to the file. | 7.5 |
| 2005-06-17 | CVE-2005-2024 | Denial Of Service vulnerability in Vipul Razor-Agents 2.70/2.71/2.72 Vipul Razor Agents (razor-agents) before 2.70 allows remote attackers to cause a denial of service via (1) certain "unusual HTML messages" or (2) "certain malformed headers" such as Content-Type. | 5.0 |
| 2005-06-17 | CVE-2005-2023 | Remote Security vulnerability in Suse Linux 9.3 The send_pinentry_environment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pinentry from being found and causes S/MIME signing to fail. | 10.0 |
| 2005-06-17 | CVE-2005-2022 | Cross-Site Scripting vulnerability in SUN Iplanet Messaging Server and ONE Messaging Server Unknown vulnerability in Webmail in iPlanet Messaging Server 5.2 Patch 1 and Sun ONE Messaging Server 6.2 allows remote attackers to execute arbitrary Javascript, possibly due to a cross-site scripting (XSS) vulnerability. | 4.3 |
| 2005-06-17 | CVE-2005-2008 | Remote Security vulnerability in Webserver Yaws Webserver 1.55 and earlier allows remote attackers to obtain the source code for yaws scripts via a request to a yaw script with a trailing %00 (null). | 5.0 |
| 2005-06-17 | CVE-2005-2006 | Remote Information Disclosure vulnerability in JBoss Malformed HTTP Request JBOSS 3.2.2 through 3.2.7 and 4.0.2 allows remote attackers to obtain sensitive information via a GET request (1) with a "%." (percent dot), which reveals the installation path or (2) with a % (percent) before a filename, which reveals the contents of the file. | 5.0 |
| 2005-06-17 | CVE-2005-2004 | Cross-Site Scripting vulnerability in Ultimate PHP Board Multiple cross-site scripting vulnerabilities in Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ref parameter to login.php, (2) id or (3) page parameter to viewtopic.php, id parameter to (4) profile.php, (5) newpost.php, (6) email.php, (7) icq.php, or (8) aol.php, (9) t_id parameter to newpost.php, (10) ref parameter to getpass.php, or (11) sText parameter to search.php. | 5.0 |