Archive
10 February 2005
Vulnerabilities first published on this day (UTC), newest first.
92 results · Feed
-
Unscored —
The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command is the sam…
-
Unscored —CVE-2005-0312 Public exploit
WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service (access…
-
Unscored —CVE-2005-0342 Public exploit
The Finder in Mac OS X and earlier allows local users to overwrite arbitrary files and gain privileges by creating a ha…
-
Unscored —
NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to bypass the filters using h…
-
Unscored —
SafeNet SoftRemote VPN Client stores the VPN password (pre-shared key) in cleartext in memory of the IreIKE.exe process…
-
Unscored —
eMotion MediaPartner Web Server 5.0 and 5.1 allows remote attackers to obtain sensitive information via an HTTP request…
-
Unscored —
Directory traversal vulnerability in session.php in JSBoard 2.0.9 and earlier allows remote attackers to read arbitrary…
-
Unscored —
Cross-site scripting (XSS) vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbit…
-
Unscored —CVE-2005-0283 Public exploit
Directory traversal vulnerability in index.php in QwikiWiki allows remote attackers to read arbitrary files via a .. (d…
-
Unscored —
Exponent 0.95 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) search.info.php,…
-
Unscored —
MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak enc…
-
Unscored —CVE-2005-0344 Public exploit
Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote authenticated users to upload and execut…
-
Unscored —CVE-2005-0339 Public exploit
Buffer overflow in Foxmail 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code…
-
Unscored —
Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to (1) upload…
-
Unscored —
SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Directory traversal vulnerability in RealArcade 1.2.0.994 allows remote attackers to delete arbitrary files via an RGP …
-
Unscored —
The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects v…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2005-0272 Public exploit
ReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary PHP files by posting a review fi…
-
Unscored —
lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) mod.php in Exponent 0.95 allow remote attac…
-
Unscored —CVE-2005-0270 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to inject …
-
Unscored —
Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files v…
-
Unscored —
Firefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has an image/gif content …
-
Unscored —
SQL injection vulnerability in Oracle Database 9i and 10g allows remote attackers to execute arbitrary SQL commands and…
-
Unscored —
Webseries Payment Application does not properly restrict privileged operations, which allows remote authenticated users…
-
Unscored —
Linksys PSUS4 running firmware 6032 allows remote attackers to cause a denial of service (device crash) via an HTTP POS…
-
Unscored —
Cross-site scripting (XSS) vulnerability in useredit_account.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to inj…
-
Unscored —
Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions…
-
Unscored —CVE-2005-0263 Public exploit
Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument.
-
Unscored —
Directory traversal vulnerability in minis.php in Minis 0.2.1 allows remote attackers to read arbitrary files via a .. …
-
Unscored —
Multiple buffer overflows in the XView library 3.2 may allow local users to execute arbitrary code via setuid applicati…
-
Unscored —CVE-2005-0320 Public exploit
Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attac…
-
Unscored —
Apple Safari 1.2.4 does not obey the Content-type field in the HTTP header and renders text as HTML, which allows remot…
-
Unscored —
Direct code injection vulnerability in FlatNuke 2.5.1 allows remote attackers to execute arbitrary PHP code by placing …
-
Unscored —CVE-2005-0307 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject…
-
Unscored —
Directory traversal vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to read arbitrary file…
-
Unscored —
Multiple SQL injection vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to execute arbitrary SQL…
-
Unscored —
LANChat Pro Revival 1.666c allows remote attackers to cause a denial of service (application crash) via a malformed UDP…
-
Unscored —
NOTE: this issue has been disputed by the vendor. The error module in Novell GroupWise WebAccess allows remote attacker…