Archive
19 February 2005
Vulnerabilities first published on this day (UTC), newest first.
71 results · Feed
-
Unscored —
Format string vulnerability in Army Men RTS 1.0 allows remote attackers to cause a denial of service (application crash…
-
Unscored —
Format string vulnerability in the game console in Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to exec…
-
Unscored —CVE-2004-1521 Public exploit
Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printabl…
-
Unscored —CVE-2004-1537 Public exploit
Cross-site scripting (XSS) vulnerability in popup.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute…
-
Unscored —
SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// …
-
Unscored —
Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local use…
-
Unscored —
CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to perform HTTP Response Splitt…
-
Unscored —
ZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to cause a denial of serv…
-
Unscored —
WebCalendar allows remote attackers to gain privileges by modifying critical parameters to (1) view_entry.php or (2) up…
-
Unscored —
validate.php in WebCalendar allows remote attackers to gain sensitive information via an invalid encoded_login paramete…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar allow remote attackers to inject arbitrary web scrip…
-
Unscored —
Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (application crash) vi…
-
Unscored —
Zone Labs IMsecure and IMsecure Pro before 1.5 allow remote attackers to bypass Active Link Filtering via an instant me…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Search.jsp in JSPWiki 2.1.120-cvs and earlier allows remote attackers to ex…
-
Unscored —
SQL injection vulnerability in include.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execut…
-
Unscored —CVE-2004-1499 Public exploit
Cross-site scripting (XSS) vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers…
-
Unscored —
The Repair Archive command in WinRAR 3.40 allows remote attackers to cause a denial of service (application crash) via …
-
Unscored —
AppServ 2.5.x and earlier installs a default username and password, which allows remote attackers to gain access.
-
Unscored —
Directory traversal vulnerability in Web Forums Server 1.6 and 2.0 Power Pack allows remote attackers to read arbitrary…
-
Unscored —
Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a lo…
-
Unscored —
The displaycontent function in config.php for Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to gain se…
-
Unscored —
SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2004-1536 Public exploit
SQL injection vulnerability in index.php in the ibProArcade module for Invision Power Board (IPB) 1.x and 2.x allows re…
-
Unscored —
Hotfoon 4.0 does not notify users before opening links in web browsers, which could allow remote attackers to execute a…
-
Unscored —
Buffer overflow in the Screen Fetch option in XDICT 2002 through 2005 allows remote attackers to cause a denial of serv…
-
Unscored —
SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arb…
-
Unscored —CVE-2004-1519 Public exploit
SQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2004-1535 Public exploit
PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to …
-
Unscored —CVE-2004-1543 Public exploit
Directory traversal vulnerability in viewimg.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to list arb…
-
Unscored —CVE-2004-1539 Public exploit
Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long…
-
Unscored —
init.php in WebCalendar allows remote attackers to execute arbitrary local PHP scripts via the user_inc parameter.
-
Unscored —
Microsoft Internet Explorer 6.0 SP1 does not properly handle certain character strings in the Path attribute, which can…
-
Unscored —
Directory traversal vulnerability in index.php in Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to rea…
-
Unscored —CVE-2004-1500 Public exploit
Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cau…
-
Unscored —
Hired Team: Trial 2.0 and earlier and 2.200 does not limit how game players can kick other players off the server, incl…
-
Unscored —
04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP request fo…
-
Unscored —CVE-2004-1515 Public exploit
SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute …
-
Unscored —
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (game exit) via a data packe…