Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 5.0

    MEDIUM
    CVE-2005-1089

    Unknown vulnerability in DC++ before 0.674 allows attackers to append data to arbitrary files.... Read more

    Affected Products : dc\+\+
    • EPSS Score: %0.38
    • Published: Apr. 11, 2005
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2005-1064

    The copy_symlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the symlink itself, which allows local users to obtain access to arbitrary files.... Read more

    Affected Products : filesystem_snapshot_utility
    • EPSS Score: %0.08
    • Published: Apr. 10, 2005
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2005-1055

    TowerBlog 0.6 and earlier stores the login data file under the web root, which allows remote attackers to obtain the MD5 checksums of the username and password via a direct request to the _dat/login file.... Read more

    Affected Products : towerblog
    • EPSS Score: %1.08
    • Published: Apr. 10, 2005
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2005-1082

    Multiple SQL injection vulnerabilities in AzDGDatingPlatinum 1.1.0 allows remote attackers to execute arbitrary SQL commands via (1) the id parameter to view.php or (2) the from parameter to members/index.php.... Read more

    Affected Products : azdgdating
    • EPSS Score: %0.51
    • Published: Apr. 09, 2005
    • Modified: Apr. 03, 2025

  • 4.3

    MEDIUM
    CVE-2005-1072

    Cross-site scripting (XSS) vulnerability in PunBB before 1.2.5 allows remote attackers to inject arbitrary web script or HTML.... Read more

    Affected Products : punbb
    • EPSS Score: %0.28
    • Published: Apr. 08, 2005
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2005-1094

    FTP Now 2.6.14 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges.... Read more

    Affected Products : ftp_now
    • EPSS Score: %0.15
    • Published: Apr. 08, 2005
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2005-1067

    Vulnerability in Access_user Class before 1.75 allows local users to gain access as other users via the password "new".... Read more

    Affected Products : access_user_class
    • EPSS Score: %0.47
    • Published: Apr. 08, 2005
    • Modified: Apr. 03, 2025

  • 4.6

    MEDIUM
    CVE-2005-0351

    Buffer overflow in (1) termsh, (2) atcronsh, and (3) auditsh in SCO OpenServer 5.0.6 and 5.0.7 might allow local users to execute arbitrary code via a long HOME environment variable.... Read more

    Affected Products : openserver
    • EPSS Score: %0.12
    • Published: Apr. 07, 2005
    • Modified: Apr. 03, 2025

  • 6.4

    MEDIUM
    CVE-2005-1087

    CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.... Read more

    Affected Products : an-httpd
    • EPSS Score: %4.25
    • Published: Apr. 07, 2005
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2005-1047

    Meilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, which allows remote authenticated users to execute arbitrary commands by uploading PHP files, then directly requesting them from the up... Read more

    Affected Products : phpbb
    • EPSS Score: %0.98
    • Published: Apr. 07, 2005
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2005-1096

    SQL injection vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to execute arbitrary SQL commands via the UserID parameter.... Read more

    Affected Products : membership_manager_pro
    • EPSS Score: %0.96
    • Published: Apr. 06, 2005
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2005-1029

    Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) itemID parameter to ItemInfo.asp, or (5) Email field to sen... Read more

    Affected Products : active_auction_house
    • EPSS Score: %4.48
    • Published: Apr. 06, 2005
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2005-1035

    Multiple buffer overflows in Pavuk before 0.9.32 have unknown attack vectors and impact.... Read more

    Affected Products : pavuk
    • EPSS Score: %0.44
    • Published: Apr. 05, 2005
    • Modified: Apr. 03, 2025

  • 7.2

    HIGH
    CVE-2005-0749

    The load_elf_library in the Linux kernel before 2.6.11.6 allows local users to cause a denial of service (kernel crash) via a crafted ELF library or executable, which causes a free of an invalid pointer.... Read more

    Affected Products : linux_kernel
    • EPSS Score: %0.04
    • Published: Apr. 01, 2005
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2005-0957

    Bay Technical Associates RPC-3 Telnet Host 3.05 allows remote attackers to bypass authentication by pressing the escape and enter keys at the username prompt.... Read more

    Affected Products : rpc3_telnet
    • EPSS Score: %0.62
    • Published: Mar. 31, 2005
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2005-0482

    TrackerCam 5.12 and earlier allows remote attackers to cause a denial of service (crash) via (1) a large number of connections with a negative Content-Length header, possibly triggering an integer signedness error, or (2) a large amount of data.... Read more

    Affected Products : trackercam
    • EPSS Score: %0.89
    • Published: Mar. 30, 2005
    • Modified: Apr. 03, 2025

  • 4.3

    MEDIUM
    CVE-2005-0476

    Cross-site scripting (XSS) vulnerability in hpm_guestbook.cgi allows remote attackers to inject arbitrary web script or HTML by posting a message.... Read more

    Affected Products : hpm_guestbook.cgi
    • EPSS Score: %0.30
    • Published: Mar. 30, 2005
    • Modified: Apr. 03, 2025

  • 7.5

    HIGH
    CVE-2005-0484

    Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code via an FTP transfer with a crafted filename that causes format string specifiers to be inserted into the ProFTPD transfer log.... Read more

    Affected Products : gproftpd
    • EPSS Score: %2.50
    • Published: Mar. 30, 2005
    • Modified: Apr. 03, 2025

  • 4.3

    MEDIUM
    CVE-2005-0480

    Cross-site scripting (XSS) vulnerability in TrackerCam 5.12 and earlier allows remote attackers to inject arbitrary HTML or web script via the login request, which is recorded in a log file but not properly handled when the administrator views the log fil... Read more

    Affected Products : trackercam
    • EPSS Score: %0.43
    • Published: Mar. 30, 2005
    • Modified: Apr. 03, 2025

  • 5.0

    MEDIUM
    CVE-2005-0478

    Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP request with a long User-Agent header or (2) a long argument to an arbitrary PHP script.... Read more

    Affected Products : trackercam
    • EPSS Score: %65.48
    • Published: Mar. 30, 2005
    • Modified: Apr. 03, 2025
Showing 20 of 292485 Results