Skip to content
OpenAdvisories

Archive

16 February 2005

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Unscored —
    CVE-2005-0452 Public exploit EPSS 23%

    Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attacke…

  • Unscored —
    CVE-2005-0105 Public exploit

    Unknown vulnerability in typespeed 0.4.1 and earlier allows local users to gain privileges.

  • Unscored —
    CVE-2005-0408 Public exploit

    CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allow…

  • Unscored —
    CVE-2005-0409 Public exploit

    CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows re…

  • Unscored —
    CVE-2005-0430 Public exploit

    The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (shutdown g…

  • Unscored —
    CVE-2005-0410 Public exploit

    SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via t…

  • Unscored —
    CVE-2005-0411 Public exploit

    Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users t…