Skip to content
OpenAdvisories

Archive

10 February 2005

Vulnerabilities first published on this day (UTC), newest first.

27 results · Clear filters · Feed

  • Unscored —
    CVE-2005-0343 Public exploit

    SQL injection vulnerability in PerlDesk 1.x allows remote attackers to inject arbitrary SQL commands via the view param…

  • Unscored —
    CVE-2005-0308 Public exploit EPSS 69%

    Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code …

  • Unscored —
    CVE-2005-0305 Public exploit

    CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users …

  • Unscored —
    CVE-2005-0260 Public exploit EPSS 69%

    Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote atta…

  • Unscored —
    CVE-2005-0273 Public exploit

    Multiple SQL injection vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to execute ar…

  • Unscored —
    CVE-2005-0340 Public exploit

    Integer signedness error in Apple File Service (AFP Server) allows remote attackers to cause a denial of service (appli…

  • Unscored —
    CVE-2005-0277 Public exploit EPSS 62%

    Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2005-0330 Public exploit

    Buffer overflow in Painkiller 1.35 and earlier, and possibly other versions before 1.61, allows remote authenticated us…

  • Unscored —
    CVE-2005-0313 Public exploit

    Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) uploa…

  • Unscored —
    CVE-2005-0274 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers …

  • Unscored —
    CVE-2005-0262 Public exploit

    Buffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argum…

  • Unscored —
    CVE-2005-0338 Public exploit

    Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request.

  • Unscored —
    CVE-2005-0312 Public exploit

    WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service (access…

  • Unscored —
    CVE-2005-0342 Public exploit

    The Finder in Mac OS X and earlier allows local users to overwrite arbitrary files and gain privileges by creating a ha…

  • Unscored —
    CVE-2005-0283 Public exploit

    Directory traversal vulnerability in index.php in QwikiWiki allows remote attackers to read arbitrary files via a .. (d…

  • Unscored —
    CVE-2005-0344 Public exploit

    Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote authenticated users to upload and execut…

  • Unscored —
    CVE-2005-0339 Public exploit

    Buffer overflow in Foxmail 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code…

  • Unscored —
    CVE-2005-0272 Public exploit

    ReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary PHP files by posting a review fi…

  • Unscored —
    CVE-2005-0270 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to inject …

  • Unscored —
    CVE-2005-0263 Public exploit

    Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument.

  • Unscored —
    CVE-2005-0320 Public exploit

    Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attac…

  • Unscored —
    CVE-2005-0307 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject…

  • Unscored —
    CVE-2005-0316 Public exploit

    WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost …

  • Unscored —
    CVE-2005-0325 Public exploit

    Xpand Rally 1.0.0.0 allows remote attackers or remote malicious game servers to cause a denial of service (application …

  • Unscored —
    CVE-2005-0345 Public exploit

    viewthread.php in php-fusion 4.x does not check the (1) forum_id or (2) forum_cat parameters, which allows remote attac…

  • Unscored —
    CVE-2005-0271 Public exploit

    Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2005-0280 Public exploit

    Format string vulnerability in Soldner Secret Wars 30830 and earlier allows remote attackers to cause a denial of servi…