Archive
10 February 2005
Vulnerabilities first published on this day (UTC), newest first.
92 results · Feed
-
Unscored —
SQL injection vulnerability in addentry.php in Woltlab Burning Book 1.0 Gold, 1.1.1e, and possibly other versions, allo…
-
Unscored —CVE-2005-0343 Public exploit
SQL injection vulnerability in PerlDesk 1.x allows remote attackers to inject arbitrary SQL commands via the view param…
-
Unscored —
Multiple format string vulnerabilities in the FTP service in 3Com 3CDaemon 2.0 revision 10 allow remote attackers to ca…
-
Unscored —
Bottomline Webseries Payment Application allows remote attackers to read arbitrary files on the network via a report te…
-
Unscored —
Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2005-0305 Public exploit
CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to inject a…
-
Unscored —
Zyxel P310, P314, P324 and Netgear RT311, RT314 running the latest firmware, allows remote attackers on the WAN to obta…
-
Unscored —
Ingate Firewall 4.1.3 and earlier does not terminate the PPTP session for an active user when the administrator disable…
-
Unscored —
Infinite Mobile Delivery Webmail 2.6 allows remote attackers to gain sensitive information via an HTTP request that con…
-
Unscored —
pafiledb.php in PaFileDB 3.1 allows remote attackers to gain sensitive information via an invalid or missing action par…
-
Unscored —
Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Service (WDS), allows re…
-
Unscored —
MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via…
-
Unscored —
Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allow…
-
Unscored —
Soldner Secret Wars 30830 and earlier does not properly handle the "message too long" socket error, which allows remote…
-
Unscored —
Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote atta…
-
Unscored —
The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, wh…
-
Unscored —
SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary…
-
Unscored —
The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, whic…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web interface in Soldner Secret Wars 30830 allows remote attackers to i…
-
Unscored —
Multiple SQL injection vulnerabilities in index.php in PHP Gift Registry (phpGiftReg) 1.4.0, and possibly other version…
-
Unscored —CVE-2005-0273 Public exploit
Multiple SQL injection vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to execute ar…
-
Unscored —
The change password functionality in Bottomline Webseries Payment Application does not require the old password when us…
-
Unscored —CVE-2005-0340 Public exploit
Integer signedness error in Apple File Service (AFP Server) allows remote attackers to cause a denial of service (appli…
-
Unscored —
npptnt2.sys in nProtect Gameguard provides unrestricted I/O to any process that calls it, which allows local users to g…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the log viewer in NETGEAR FVS318 running firmware 2.4, and possibly other v…
-
Unscored —
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2005-0330 Public exploit
Buffer overflow in Painkiller 1.35 and earlier, and possibly other versions before 1.61, allows remote authenticated us…
-
Unscored —
Cross-site scripting (XSS) vulnerability in user.php in Magic Winmail Server 4.0 Build 1112 allows remote attackers to …
-
Unscored —
comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and …
-
Unscored —CVE-2005-0313 Public exploit
Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) uploa…
-
Unscored —
Direct remote injection vulnerability in modalfram.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to load external…
-
Unscored —
Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a…
-
Unscored —CVE-2005-0274 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers …
-
Unscored —
useredit_account.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the logged in user, which allo…
-
Unscored —
MercuryBoard 1.1.1 allows remote attackers to gain sensitive information via an HTTP request with the n parameter set t…
-
Unscored —CVE-2005-0262 Public exploit
Buffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argum…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_sup…
-
Unscored —
pafiledb.php in Pafiledb 3.1 may allow remote attackers to execute arbitrary PHP code via a modified action parameter t…
-
Unscored —CVE-2005-0338 Public exploit
Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request.