Skip to content
OpenAdvisories

Archive

10 February 2005

Vulnerabilities first published on this day (UTC), newest first.

92 results · Feed

  • Unscored —

    Integer overflow in RealArcade 1.2.0.994 and earlier allows remote attackers to execute arbitrary code via an RGS file …

  • Unscored —

    The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command…

  • Unscored —

    minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service (infinite loop) via an HTTP request for a…

  • Unscored —
    CVE-2005-0316 Public exploit

    WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost …

  • Unscored —

    TFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) via a GE…

  • Unscored —

    Directory traversal vulnerability in ZipGenius 5.5 and earlier allows remote attackers to create and possibly modify ar…

  • Unscored —
    CVE-2005-0325 Public exploit

    Xpand Rally 1.0.0.0 allows remote attackers or remote malicious game servers to cause a denial of service (application …

  • Unscored —

    index.php in FlatNuke 2.5.1 allows remote attackers to create an administrator account via carriage returns and #10 in …

  • Unscored —
    CVE-2005-0345 Public exploit

    viewthread.php in php-fusion 4.x does not check the (1) forum_id or (2) forum_cat parameters, which allows remote attac…

  • Unscored —
    CVE-2005-0271 Public exploit

    Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQ…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Infinite Mobile Delivery Webmail 2.6 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2005-0280 Public exploit

    Format string vulnerability in Soldner Secret Wars 30830 and earlier allows remote attackers to cause a denial of servi…