Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
821 results · Feed
-
Unscored —
The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 allows remote auth…
-
Unscored —
The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 generates easily p…
-
Unscored —
The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an…
-
Unscored —
Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to dow…
-
Unscored —
Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote m…
-
Unscored —
KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged fi…
-
Unscored —
Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus …
-
Unscored —
The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows…
-
Unscored —
Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to …
-
Unscored —
Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla before 1.7.6 might all…
-
Unscored —
Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure site" lock icon via (1) …
-
Unscored —
The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (application crash)…
-
Unscored —
Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by trickin…
-
Unscored —
Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could…
-
Unscored —
String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::…
-
Unscored —
Format string vulnerability in DNA MKBold-MKItalic 0.06_1 and earlier allows remote attackers to execute arbitrary code…
-
Unscored —
cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows lo…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in phpMyAdmin 2.6.1 allow remote attackers to execute arbitrary PHP …
-
Unscored —
admin_loader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin parameter.
-
Unscored —
nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allo…
-
Unscored —
The Announce module in phpWebSite 0.10.0 and earlier allows remote attackers to execute arbitrary PHP code by setting t…
-
Unscored —
Gaim 1.1.3 on Windows systems allows remote attackers to cause a denial of service (client crash) via a file transfer i…
-
Unscored —
Directory traversal vulnerability in CIS WebServer 3.5.13 allows remote attackers to read arbitrary files via .. (dot d…
-
Unscored —CVE-2005-0569 Public exploit
Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —
Unknown vulnerability in Standard Type Services Framework (STSF) Font Server Daemon (stfontserverd) in Solaris 9 allows…
-
Unscored —CVE-2005-0575 Public exploit
Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers to cause a denial of service and possi…
-
Unscored —
Buffer overflow in Golden FTP Server Pro (goldenftpd) 2.x allows remote attackers to execute arbitrary code via a long …
-
Unscored —CVE-2005-0568 Public exploit
Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl…
-
Unscored —
index.php in phpWebSite 0.10.0 and earlier allows remote attackers to obtain sensitive information via an invalid SEA_s…
-
Unscored —
profile.php in PunBB 1.2.1 allows remote attackers to cause a denial of service (account lockout) by setting the user's…
-
Unscored —
Firefox before 1.0.1 and Mozilla Suite before 1.7.6 use a predictable filename for the plugin temporary directory, whic…
-
Unscored —
Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.…
-
Unscored —
Cross-site scripting (XSS) vulnerability in TypePad allows remote attackers to inject arbitrary Javascript via the name…
-
Unscored —
Cross-site scripting (XSS) vulnerability in post.php in Moodle before 1.3 allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2004-1739 Public exploit
Bird Chat 1.61 allows remote attackers to cause a denial of service (crash) via invalid users.
-
Unscored —CVE-2004-1752 Public exploit
Stack-based buffer overflow in Gaucho 1.4 Build 145 allows remote attackers to execute arbitrary code via a POP3 email …
-
Unscored —
The (1) updateuser.php and (2) forums_prune.php scripts in PHP-Fusion 4.00 allow remote attackers to obtain sensitive i…
-
Unscored —CVE-2004-1746 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in PHP Code Snippet Library allows remote attackers to inject arb…
-
Unscored —
Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to view arbitrary files via an HTTP request for the disk…
-
Unscored —
Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed routing configuration, …