6 February 2005

65 results · Feed

• Unscored —
  CVE-2005-0075

  prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code int…

  Feb 6, 2005
• Unscored —
  CVE-2005-0216

  Cross-site scripting (XSS) vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly othe…

  Feb 6, 2005
• Unscored —
  CVE-2005-0196

  Cisco IOS 12.0 through 12.3YL, with BGP enabled and running the bgp log-neighbor-changes command, allows remote attacke…

  Feb 6, 2005
• Unscored —
  CVE-2005-0200

  TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow…

  Feb 6, 2005
• Unscored —
  CVE-2005-0013

  nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client func…

  Feb 6, 2005
• Unscored —
  CVE-2005-0174 EPSS 50%

  Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do …

  squid Debian
  Feb 6, 2005
• Unscored —
  CVE-2005-0179

  Linux kernel 2.4.x and 2.6.x allows local users to cause a denial of service (CPU and memory consumption) and bypass RL…

  Feb 6, 2005
• Unscored —
  CVE-2005-0014

  Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on …

  Feb 6, 2005
• Unscored —
  CVE-2005-0184

  Directory traversal vulnerability in ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local user…

  Feb 6, 2005
• Unscored —
  CVE-2005-0224

  Unknown vulnerability in HP-UX B.11.04 running Virtualvault 4.5 through 4.7, when running the TGA daemon, allows remote…

  Feb 6, 2005
• Unscored —
  CVE-2005-0198

  A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Auth…

  uw-imap uw-imap Debian Azure Linux
  Feb 6, 2005
• Unscored —
  CVE-2005-0222

  main.php in Gallery 2.0 Alpha allows remote attackers to gain sensitive information by changing the value of g2_subView…

  Feb 6, 2005
• Unscored —
  CVE-2005-0180

  Multiple integer signedness errors in the sg_scsi_ioctl function in scsi_ioctl.c for Linux 2.6.x allow local users to r…

  Feb 6, 2005
• Unscored —
  CVE-2005-0195

  Cisco IOS 12.0S through 12.3YH allows remote attackers to cause a denial of service (device restart) via a crafted IPv6…

  Feb 6, 2005
• Unscored —
  CVE-2005-0215

  Mozilla 1.6 and possibly other versions allows remote attackers to cause a denial of service (application crash) via a …

  Feb 6, 2005
• Unscored —
  CVE-2005-0182

  The mod_dosevasive module 1.9 and earlier for Apache creates temporary files with predictable filenames, which could al…

  Feb 6, 2005
• Unscored —
  CVE-2005-0018

  The f2 shell script in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary…

  f2c Debian
  Feb 6, 2005
• Unscored —
  CVE-2005-0221

  Cross-site scripting (XSS) vulnerability in login.php in Gallery 2.0 Alpha allows remote attackers to inject arbitrary …

  Feb 6, 2005
• Unscored —
  CVE-2005-0217

  SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execute arbitrary SQL co…

  Feb 6, 2005
• Unscored —
  CVE-2005-0173 EPSS 32%

  squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control List…

  squid Debian
  Feb 6, 2005
• Unscored —
  CVE-2005-0189

  Stack-based buffer overflow in the HandleAction function in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote att…

  Feb 6, 2005
• Unscored —
  CVE-2005-0104

  Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject …

  Feb 6, 2005
• Unscored —
  CVE-2005-0211 EPSS 22%

  Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and poss…

  squid Debian
  Feb 6, 2005
• Unscored —
  CVE-2005-0101 Public exploit EPSS 16%

  Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to ex…

  Feb 6, 2005
• Unscored —
  CVE-2003-1021

  The scosession program in OpenServer 5.0.6 and 5.0.7 allows local users to gain privileges via crafted strings on the c…

  Feb 6, 2005