Skip to content
OpenAdvisories

Archive

12 February 2005

Vulnerabilities first published on this day (UTC), newest first.

← January 2005 2005 / February /12 March 2005 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 665
  7. 710
  8. 863
  9. 91
  10. 1092
  11. 1114
  12. 1237
  13. 1374
  14. 147
  15. 1535
  16. 1621
  17. 1716
  18. 183
  19. 1971
  20. 20156
  21. 2122
  22. 229
  23. 2316
  24. 2419
  25. 257
  26. 2652
  27. 2716
  28. 2815
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Unscored —
    CVE-2004-1418 Public exploit

    Cross-site scripting (XSS) vulnerability in WPKontakt 3.0.1 and earlier allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2004-1412 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.x allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2004-1405 Public exploit

    MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, s…

    mediawiki Debian
  • Unscored —
    CVE-2004-1421 Public exploit

    Multiple PHP remote file inclusion vulnerabilities (1) step_one.php, (2) step_one_tables.php, (3) step_two_tables.php i…

  • Unscored —
    CVE-2004-1406 Public exploit

    SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2004-1402 Public exploit

    SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via (1) the string p…

  • Unscored —
    CVE-2004-1410 Public exploit

    Cross-site scripting (XSS) vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2004-1420 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote att…

  • Unscored —
    CVE-2004-1423 Public exploit EPSS 15%

    Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth …

  • Unscored —
    CVE-2004-1422 Public exploit

    WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which reveals php …

  • Unscored —
    CVE-2004-1400 Public exploit

    The control panel in ASP Calendar does not require authentication to access, which allows remote attackers to gain unau…

  • Unscored —
    CVE-2004-1415 Public exploit

    SQL injection vulnerability in (1) disp_album.php and possibly (2) disp_img.php in 2Bgal 2.4 and 2.5.1 allows remote at…

  • Unscored —
    CVE-2004-1417 Public exploit

    Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to …

  • Unscored —
    CVE-2004-1401 Public exploit

    SQL injection vulnerability in verify.asp in Asp-rider allows remote attackers to execute arbitrary SQL statements and …

  • Unscored —
    CVE-2004-1395 Public exploit

    The Lithtech engine, as used in (1) Contract Jack 1.1 and earlier, (2) No one lives forever 2 1.3 and earlier, (3) Tron…

  • Unscored —
    CVE-2004-1413 Public exploit

    Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands …