17 February 2005

16 results · Feed

• Unscored —
  CVE-2004-1491 Public exploit EPSS 13%

  Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbit…

  Feb 17, 2005
• Unscored —
  CVE-2004-1490

  Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via dots and non-breaking spa…

  Feb 17, 2005
• Unscored —
  CVE-2004-1489

  Opera 7.54 and earlier does not properly limit an applet's access to internal Java packages from Sun, which allows remo…

  Feb 17, 2005
• Low 3.7
  CVE-2005-0254

  BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS file…

  Feb 17, 2005
• Unscored —
  CVE-2005-0456

  Opera 7.54 and earlier does not properly validate base64 encoded binary data in a data: (RFC 2397) URL, which causes th…

  Feb 17, 2005
• Unscored —
  CVE-2005-0457

  Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privile…

  Feb 17, 2005
• Unscored —
  CVE-2005-0251 Public exploit

  Cross-site scripting (XSS) vulnerability in bibindex.php for BibORB 1.3.2, and possibly earlier versions, allows remote…

  Feb 17, 2005
• Unscored —
  CVE-2005-0462

  Cross-site scripting (XSS) vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers to inject arbitrary HT…

  Feb 17, 2005
• Unscored —
  CVE-2005-0252 Public exploit

  SQL injection vulnerability in BibORB 1.3.2, and possibly earlier versions, allows remote attackers to execute arbitrar…

  Feb 17, 2005
• Unscored —
  CVE-2005-0458

  Cross-site scripting (XSS) vulnerability in contact_us.php in osCommerce 2.2-MS2 allows remote attackers to inject arbi…

  Feb 17, 2005
• Unscored —
  CVE-2005-0459

  phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root…

  phpmyadmin Debian
  Feb 17, 2005
• Unscored —
  CVE-2005-0463

  Unknown "major security flaws" in Ulog-php before 1.0, related to input validation, have unknown impact and attack vect…

  Feb 17, 2005
• Unscored —
  CVE-2005-0253 Public exploit

  Directory traversal vulnerability in index.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers…

  Feb 17, 2005
• Unscored —
  CVE-2005-0461

  Unknown vulnerability in NewsBruiser 2.x before 2.6.1 allows remote attackers to "take actions on comments."

  Feb 17, 2005
• Unscored —
  CVE-2005-0372

  Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary …

  gftp Debian
  Feb 17, 2005
• Unscored —
  CVE-2005-0460

  index.php in MercuryBoard 1.0.x and 1.1.x allows remote attackers to obtain sensitive information by setting the debug …

  Feb 17, 2005