Skip to content
OpenAdvisories

Archive

15 February 2005

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • Unscored —
    CVE-2004-1488 Public exploit EPSS 12%

    wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which …

  • Unscored —
    CVE-2005-0439 Public exploit EPSS 10%

    Buffer overflow in the decode_post function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via …

  • Unscored —
    CVE-2005-0436 Public exploit

    Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of…

  • Unscored —
    CVE-2005-0421 Public exploit

    DelphiTurk FTP 1.0 stores usernames and passwords in the profile.dat file, which allows local users to gain privileges.

  • Unscored —
    CVE-2005-0435 Public exploit

    awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginm…

  • Unscored —
    CVE-2005-0438 Public exploit

    awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by setting the debug paramete…

  • Unscored —
    CVE-2005-0442 Public exploit

    Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via t…

  • Unscored —
    CVE-2005-0429 Public exploit

    Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when showforumusers is enabled,…

  • Unscored —
    CVE-2005-0420 Public exploit EPSS 26%

    Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URL…

  • Unscored —
    CVE-2005-0443 Public exploit

    index.php in CubeCart 2.0.4 allows remote attackers to (1) obtain the full path for the web server or (2) conduct cross…

  • Unscored —
    CVE-2005-0419 Public exploit

    Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via lo…

  • Unscored —
    CVE-2005-0422 Public exploit

    DelphiTurk CodeBank (aka KodBank) 3.1 and earlier stores usernames and passwords in the Codebank registry key, which al…