 |
|
|
|
Multiple Kerio WinRoute Firewall, Kerio Personal Firewall and Kerio MailServer administration protocol vulnerabilities
updated since 30.04.2005 | | Published: |  | 01.05.2005 | | Source: |  | BUGTRAQ | | SecurityVulns ID: |  | 4746 | | Type: |  | remote | | Level: |  | 5/10 | | Description: |  | Password bruteforcing, DoS. |
| Mac OS X Cocktail information leak | | Published: | | 01.05.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4747 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Password is used on command line. |
| GOCR optical character recognitin program integer overflow | | Published: | | 01.05.2005 | | Source: | | SECURITEAM | | SecurityVulns ID: | | 4748 | | Type: | | local | | Level: | | 5/10 | | Description: | | Integer overflow on PGM format parsing. |
| BIG-IP 3-DNS Controller protection bypass | | Published: | | 01.05.2005 | | Source: | | SECUNIA | | SecurityVulns ID: | | 4750 | | Type: | | remote | | Level: | | 5/10 |
PHP, ASP, CGI web applications security vulnerabilities
updated since 25.04.2005 | | Published: | | 01.05.2005 | | Source: | | | | SecurityVulns ID: | | 4724 | | Type: | | remote | | Level: | | 5/10 | | Description: | | PHP inclusions, SQL injections, directory traversals, crossite scripting, etc. |
| Original document |  | SECUNIA, [SA15173] enVivo!CMS SQL Injection Vulnerabilities (01.05.2005) |
| | | GENTOO, [Full-disclosure] [ GLSA 200504-30 ] phpMyAdmin: Insecure SQL script installation (01.05.2005) |
| | | SECURITEAM, [UNIX] All4WWW-Homepagecreator site Parameter Command Execution (01.05.2005) |
| | | Luis Fernando, Multiples Full Path Disclosure in php-nuke 7.6 (and below) (30.04.2005) |
| | | dcrab_(at)_hackerscenter.com, Multiple Sql injections in phpCoin v1.2.2 and below (30.04.2005) |
| | | Zinho, [HSC Security Group] Ocean12 Mailing List Manager Pro SQL injection (30.04.2005) |
| | | JeiAr, phpBB Notes Mod SQL Injection Vulnerability (30.04.2005) |
| | | durito, еще один бажный скрипт в WebAPP v0.9.9. (30.04.2005) |
| | | SECUNIA, [SA15073] Vacation Parent Frame Page Title Cross-Site Scripting Vulnerability (28.04.2005) |
| | | SECUNIA, [SA15080] Kronolith Parent Frame Page Title Cross-Site Scripting Vulnerability (28.04.2005) |
| | | SECUNIA, [SA15081] Accounts Parent Frame Page Title Cross-Site Scripting Vulnerability (28.04.2005) |
| | | SECUNIA, [SA15074] Turba Parent Frame Page Title Cross-Site Scripting Vulnerability (28.04.2005) |
| | | SECUNIA, [SA15075] Passwd Parent Frame Page Title Cross-Site Scripting Vulnerability (28.04.2005) |
| | | SECUNIA, [SA15077] Horde IMP Parent Frame Page Title Cross-Site Scripting Vulnerability (28.04.2005) |
| | | SECUNIA, [SA15079] Nag Parent Frame Page Title Cross-Site Scripting Vulnerability (28.04.2005) |
| | | SECUNIA, [SA15083] Chora Parent Frame Page Title Cross-Site Scripting Vulnerability (28.04.2005) |
| | | SECUNIA, [SA15078] Mnemo Parent Frame Page Title Cross-Site Scripting Vulnerability (28.04.2005) |
| | | SECUNIA, [SA15082] Forwards Parent Frame Page Title Cross-Site Scripting Vulnerability (28.04.2005) |
| | | Sieg Fried, ZRCSA-200501 - Multiple vulnerabilities in Claroline (28.04.2005) |
| | | CENSORED, SQL-injections in koobi-cms (28.04.2005) |
| | | Terencentanio Enache, myPHP Forum v3 (possible v1 & 2 also) Identification 'spoof' (27.04.2005) |
| | | Zinho, [HSC Security Group] Comersus v6 Script injection (27.04.2005) |
| | | Kold, GrayCMS php code injection (27.04.2005) |
| | | dcrab_(at)_hackerscenter.com, Multiple SQL Injections in MetaBid Auctions (27.04.2005) |
| | | dcrab_(at)_hackerscenter.com, MetaCart2 for PayFlow Multiple Sql Injection Vulnerabilities (27.04.2005) |
| | | dcrab_(at)_hackerscenter.com, Multiple SQL Injections in MetaCart2 for SQL Server Special Edition U.K (27.04.2005) |
| | | dcrab_(at)_hackerscenter.com, Multiple SQL Injections in MetaCart2 for PayPal (27.04.2005) |
| | | dcrab_(at)_hackerscenter.com, Multiple SQL Injections in MetaCart e-Shop V-8 (27.04.2005) |
| | | Zinho, [Hackers Center Security Group] Sqwebmail Http Splitting Vulnerability (27.04.2005) |
| | | CENSORED, SQL-injections in Invision Power Board v2.0.1 (27.04.2005) |
| | | fireboy fireboy, remote command execution in text.cgi script (26.04.2005) |
| | | fireboy fireboy, index.cgi script XSS + file show (26.04.2005) |
| | | fireboy fireboy, remote command execution in forum.pl script (26.04.2005) |
| | | fireboy fireboy, remote command execution in ad.cgi script (26.04.2005) |
| | | admin_(at)_batznet.com, WoltLab Burning Board <= 2.3.1 PL2 - XSS Vulnerability (24.04.05) (26.04.2005) |
| | | fireboy fireboy, remote command execution in includer.cgi script (26.04.2005) |
| | | fireboy fireboy, remote command execution in citat.pl script (26.04.2005) |
| | | dcrab_(at)_hackerscenter.com, Multiple SQL Injections in StorePortal 2.63 (26.04.2005) |
| | | fireboy fireboy, remote command execution in include.cgi script (26.04.2005) |
| | | fireboy fireboy, remote command execution in inserter.cgi script (26.04.2005) |
| | | Max Cerny, [exploit] phpMyVisites 1.3 local file retrieval (26.04.2005) |
| | | Nicolas Montoza, E-Cart v1.1 Remote Command Execution (25.04.2005) |
| | | dcrab_(at)_hackerscenter.com, Multiple Sql injection and XSS in CartWIZ ASP Cart (25.04.2005) |
| | | Adam n30n Simuntis, artmedic_links5 remote file access exploit (25.04.2005) |
| | | HaCkZaTaN, -==phpBB 2.0.14 Multiple Vulnerabilities==- (25.04.2005) |
| | | farhad koosha, ACSblog bug (25.04.2005) |
| | | dcrab_(at)_hackerscenter.com, Multiple Sql injection vulnerabilities in BK Forum v.4 (25.04.2005) |
| | | durito, Просмотр файлов и директорий в WebAPP Web Automated Perl Portal System v0.9.9. (25.04.2005) |
pound reverse proxy / load balancer / HTTPS front-end buffer overflow
updated since 01.05.2005 | | Published: | | 10.01.2006 | | Source: | | FULL-DISCLOSURE | | SecurityVulns ID: | | 4749 | | Type: | | remote | | Level: | | 6/10 | | Description: | | Buffer overflow on oversized hostname. |
|
|
|
|
|
|
|
|
