16 February 2005

21 results · Feed

• Unscored —
  CVE-2005-0452 Public exploit EPSS 23%

  Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attacke…

  Feb 16, 2005
• Unscored —
  CVE-2005-0406

  A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, whic…

  imagemagick Debian
  Feb 16, 2005
• Unscored —
  CVE-2005-0451

  Sami HTTP Server 1.0.5 allows remote attackers to cause a denial of service via an HTTP request containing two CRLF seq…

  Feb 16, 2005
• Unscored —
  CVE-2005-0105 Public exploit

  Unknown vulnerability in typespeed 0.4.1 and earlier allows local users to gain privileges.

  typespeed Debian
  Feb 16, 2005
• Unscored —
  CVE-2005-0454

  Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL …

  Feb 16, 2005
• Unscored —
  CVE-2005-0450

  Directory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read arbitrary files via an HTTP…

  Feb 16, 2005
• Unscored —
  CVE-2005-0177

  nls_ascii.c in Linux before 2.6.8.1 uses an incorrect table size, which allows attackers to cause a denial of service (…

  Feb 16, 2005
• Unscored —
  CVE-2005-0408 Public exploit

  CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allow…

  Feb 16, 2005
• Unscored —
  CVE-2005-0178

  Race condition in the setsid function in Linux before 2.6.8.1 allows local users to cause a denial of service (crash) a…

  Feb 16, 2005
• Unscored —
  CVE-2005-0363

  awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the…

  awstats Debian
  Feb 16, 2005
• Unscored —
  CVE-2005-0409 Public exploit

  CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows re…

  Feb 16, 2005
• Unscored —
  CVE-2005-0176

  The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could …

  Feb 16, 2005
• Unscored —
  CVE-2005-0407

  Cross-site scripting (XSS) vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attac…

  Feb 16, 2005
• Unscored —
  CVE-2005-0362

  awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) "pl…

  awstats Debian
  Feb 16, 2005
• Unscored —
  CVE-2005-0430 Public exploit

  The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (shutdown g…

  Feb 16, 2005
• Unscored —
  CVE-2005-0410 Public exploit

  SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via t…

  Feb 16, 2005
• Unscored —
  CVE-2005-0070

  Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before …

  Feb 16, 2005
• Unscored —
  CVE-2005-0011

  Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neut…

  Feb 16, 2005
• Unscored —
  CVE-2005-0411 Public exploit

  Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users t…

  Feb 16, 2005
• Unscored —
  CVE-2005-0453

  The buffer_urldecode function in Lighttpd 1.3.7 and earlier does not properly handle control characters, which allows r…

  Feb 16, 2005
• Unscored —
  CVE-2005-0449

  The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel cras…

  Feb 16, 2005