Latest CVE Feed
-
7.5
HIGHCVE-2005-1600
A "mathematical flaw" in the implementation of the El Gamal signature algorithm for LibTomCrypt 1.0 to 1.0.2 allows attackers to generate valid signatures without having the private key.... Read more
Affected Products : libtomcrypt- EPSS Score: %0.70
- Published: May. 16, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2005-1609
Unknown vulnerability in Sun StorEdge 6130 Arrays (SE6130) with serial numbers between 0451AWF00G and 0513AWF00J allows local users and remote attackers to delete data.... Read more
Affected Products : storedge_6130_arrays- EPSS Score: %4.79
- Published: May. 16, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2005-1556
Gamespy cd-key validation system allows remote attackers to cause a denial of service (cd-key already in use) by capturing and replaying a cd-key authorization session.... Read more
Affected Products : gamespy_sdk_cd-key_validation_toolkit- EPSS Score: %1.13
- Published: May. 14, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2005-1575
The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to hide the real file types of downloaded files via the Content-Type HTTP header and a filename containing whitespace, dots, or ASCII byte 160.... Read more
Affected Products : firefox- EPSS Score: %0.49
- Published: May. 14, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2005-1547
Heap-based buffer overflow in the demo version of Bakbone Netvault, and possibly other versions, allows remote attackers to execute arbitrary commands via a large packet to port 20031.... Read more
Affected Products : netvault- EPSS Score: %4.76
- Published: May. 14, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2005-1544
Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.... Read more
Affected Products : libtiff- EPSS Score: %15.65
- Published: May. 14, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2005-1548
SQL injection vulnerability in index.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arbitrary SQL commands via the entry parameter.... Read more
Affected Products : advanced_guestbook- EPSS Score: %0.29
- Published: May. 14, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2005-1563
Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 displays a different error message depending on whether a product exists or not, which allows remote attackers to determine hidden products.... Read more
Affected Products : bugzilla- EPSS Score: %0.81
- Published: May. 14, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2005-1552
GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0, when set to create JPEG images, does not properly protect an image even when a password and username is assigned, which may allow remote attackers to gain sensitive information via a direct re... Read more
Affected Products : digital_surveillance_system- EPSS Score: %5.02
- Published: May. 14, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2005-1554
SQL injection vulnerability in view_user.php in WowBB 1.6, 1.61, and 1.62 allows remote attackers to execute arbitrary SQL commands via the sort_by parameter.... Read more
Affected Products : wowbb_web_forum- EPSS Score: %0.74
- Published: May. 14, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2005-1583
1Two News 1.0 allows remote attackers to (1) delete images for new stories via a direct request to admin/delete.php or (2) upload arbitrary images via a direct request to admin/upload.php.... Read more
Affected Products : 1two_news- EPSS Score: %0.40
- Published: May. 14, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2005-1553
GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via sniffing.... Read more
Affected Products : digital_surveillance_system- EPSS Score: %0.48
- Published: May. 14, 2005
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2005-1581
Cross-site scripting (XSS) vulnerability in Bug Report 1.0 allows remote attackers to inject arbitrary web script or HTML via various fields to bug_report.php, which are not filtered or quoted when processed by bug_list.php or admin/index.php.... Read more
Affected Products : bug_report- EPSS Score: %0.30
- Published: May. 14, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2005-1570
forum.asp in bttlxeForum 2.0 allows remote attackers to obtain full path information via a certain hex-encoded argument to the page parameter, possibly due to a SQL injection vulnerability.... Read more
Affected Products : bttlxeforum- EPSS Score: %0.34
- Published: May. 14, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2005-1550
easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the print parameter.... Read more
Affected Products : easy_message_board- EPSS Score: %6.58
- Published: May. 14, 2005
- Modified: Apr. 03, 2025
-
5.1
MEDIUMCVE-2005-1546
Buffer overflow in the PE parser in HT Editor before 0.8.0 allows remote attackers to execute arbitrary code via a crafted PE file.... Read more
Affected Products : ht_editor- EPSS Score: %2.91
- Published: May. 14, 2005
- Modified: Apr. 03, 2025
-
5.1
MEDIUMCVE-2005-1545
Integer overflow in the ELF parser in HT Editor before 0.8.0 allows remote attackers to execute arbitrary code via a crafted ELF file, which leads to a heap-based buffer overflow.... Read more
Affected Products : ht_editor- EPSS Score: %2.91
- Published: May. 14, 2005
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2005-1584
Cross-site scripting (XSS) vulnerability in index.php for Quick.Forum 2.1.6 allows remote attackers to inject arbitrary web script or HTML via the topic field in a NewTopic action.... Read more
Affected Products : quick.forum- EPSS Score: %0.44
- Published: May. 14, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2005-1577
APG Technology ClassMaster does not properly restrict access to sensitive folders, which allows remote attackers to access folders via a network share.... Read more
Affected Products : classmaster- EPSS Score: %0.66
- Published: May. 14, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2005-1571
Multiple directory traversal vulnerabilities in ShowOff! 1.5.4 allow remote attackers to read arbitrary files via ".." sequences in arguments to the (1) ShowAlbum, (2) ShowVideo, or (3) ShowGraphic scripts.... Read more
Affected Products : showoff_digital_media_software- EPSS Score: %0.27
- Published: May. 14, 2005
- Modified: Apr. 03, 2025