15 February 2005

35 results · Feed

• Unscored —
  CVE-2004-1488 Public exploit EPSS 12%

  wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which …

  wget Debian
  Feb 15, 2005
• Unscored —
  CVE-2004-1487

  wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a…

  wget Debian
  Feb 15, 2005
• Unscored —
  CVE-2005-0439 Public exploit EPSS 10%

  Buffer overflow in the decode_post function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via …

  Feb 15, 2005
• Unscored —
  CVE-2005-0436 Public exploit

  Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of…

  awstats Debian
  Feb 15, 2005
• Unscored —
  CVE-2005-0019

  Unknown vulnerability in hztty 2.0 and earlier allows local users to execute arbitrary commands.

  Feb 15, 2005
• Unscored —
  CVE-2005-0421 Public exploit

  DelphiTurk FTP 1.0 stores usernames and passwords in the profile.dat file, which allows local users to gain privileges.

  Feb 15, 2005
• Unscored —
  CVE-2005-0426

  Unknown vulnerability in Solaris 8 and 9 allows remote attackers to cause a denial of service (panic) via "Heavy UDP Us…

  Feb 15, 2005
• Unscored —
  CVE-2005-0441

  Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote …

  Feb 15, 2005
• Unscored —
  CVE-2005-0433

  Php-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or missing arguments to (…

  Feb 15, 2005
• Unscored —
  CVE-2005-0435 Public exploit

  awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginm…

  awstats Debian
  Feb 15, 2005
• Unscored —
  CVE-2005-0438 Public exploit

  awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by setting the debug paramete…

  awstats Debian
  Feb 15, 2005
• Unscored —
  CVE-2005-0431

  Barracuda Spam Firewall 3.1.10 and earlier does not restrict the domains that white-listed domains can send mail to, wh…

  Feb 15, 2005
• Unscored —
  CVE-2005-0159

  The tpkg-* scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitra…

  Feb 15, 2005
• Unscored —
  CVE-2005-0442 Public exploit

  Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via t…

  Feb 15, 2005
• Unscored —
  CVE-2005-0444

  VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writ…

  Feb 15, 2005
• Unscored —
  CVE-2005-0427

  The ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file wh…

  Feb 15, 2005
• Unscored —
  CVE-2005-0425

  Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote atta…

  Feb 15, 2005
• Unscored —
  CVE-2005-0429 Public exploit

  Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when showforumusers is enabled,…

  Feb 15, 2005
• Unscored —
  CVE-2005-0206

  The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectur…

  cups Debian
  Feb 15, 2005
• Unscored —
  CVE-2005-0437

  Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to include arbitrary Per…

  awstats Debian
  Feb 15, 2005
• Unscored —
  CVE-2005-0420 Public exploit EPSS 26%

  Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URL…

  Feb 15, 2005
• Unscored —
  CVE-2005-0445

  Cross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web sc…

  Feb 15, 2005
• Unscored —
  CVE-2005-0428

  The DNSPacket::expand method in dnspacket.cc in PowerDNS before 2.9.17 allows remote attackers to cause a denial of ser…

  pdns Debian
  Feb 15, 2005
• Unscored —
  CVE-2005-0423

  SQL injection vulnerability in login.asp in ASPjar Guestbook allows remote attackers to execute arbitrary SQL commands …

  Feb 15, 2005
• Unscored —
  CVE-2005-0424

  Unknown vulnerability in the delete.asp program in certain versions of ASPjar Guestbook allows remote attackers to dele…

  Feb 15, 2005
• Unscored —
  CVE-2005-0440

  ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a se…

  Feb 15, 2005
• Unscored —
  CVE-2005-0087

  The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier f…

  alsa-lib Debian
  Feb 15, 2005
• Unscored —
  CVE-2005-0446 EPSS 41%

  Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses re…

  squid Debian
  Feb 15, 2005
• Unscored —
  CVE-2005-0085

  Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitra…

  htdig Debian
  Feb 15, 2005
• Unscored —
  CVE-2005-0443 Public exploit

  index.php in CubeCart 2.0.4 allows remote attackers to (1) obtain the full path for the web server or (2) conduct cross…

  Feb 15, 2005
• Unscored —
  CVE-2005-0432

  BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates different login excep…

  Feb 15, 2005
• Unscored —
  CVE-2005-0434

  Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 7.5 allow remote attackers to inject arbitrary HTML or …

  Feb 15, 2005
• Unscored —
  CVE-2005-0447

  Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (hang) via a flood of certain ARP packets.

  Feb 15, 2005
• Unscored —
  CVE-2005-0419 Public exploit

  Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via lo…

  Feb 15, 2005
• Unscored —
  CVE-2005-0422 Public exploit

  DelphiTurk CodeBank (aka KodBank) 3.1 and earlier stores usernames and passwords in the Codebank registry key, which al…

  Feb 15, 2005