Skip to content
OpenAdvisories

Archive

19 February 2005

Vulnerabilities first published on this day (UTC), newest first.

71 results · Feed

  • Unscored —

    The Event Calendar module 2.13 for PHP-Nuke allows remote attackers to gain sensitive information via an HTTP request t…

  • Unscored —
    CVE-2004-1531 Public exploit

    SQL injection vulnerability in post.php in Invision Power Board (IPB) 2.0.0 through 2.0.2 allows remote attackers to ex…

  • Unscored —
    CVE-2004-1533 Public exploit

    Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service (…

  • Unscored —

    CRLF injection vulnerability in login.php in WebCalendar allows remote attackers to inject CRLF sequences via the retur…

  • Unscored —
    CVE-2004-1540 Public exploit

    ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does…

  • Unscored —

    The webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (C…

  • Unscored —

    04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to in…

  • Unscored —

    Integer overflow in the InitialDirContext in Java Runtime Environment (JRE) 1.4.2, 1.5.0 and possibly other versions al…

  • Unscored —
    CVE-2004-1493 Public exploit

    Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (server crash) via multiple …

  • Unscored —

    The Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (sock…

  • Unscored —

    Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (game interruption) vi…

  • Unscored —
    CVE-2004-1542 Public exploit

    Buffer overflow in Soldier of Fortune II 1.03 Gold and earlier allows remote attackers to cause a denial of service (se…

  • Unscored —

    SQL injection vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execute arbitrary…

  • Unscored —

    TrackerCam 5.12 and earlier allows remote attackers to read log files via the fn parameter in a direct request to the C…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in comment.php for paNews 2.0b4 for PHP Arena allows remote attackers to injec…

  • Unscored —

    Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC packets from …

  • Unscored —
    CVE-2005-0477 Public exploit

    Cross-site scripting (XSS) vulnerability in the SML code for Invision Power Board 1.3.1 FINAL allows remote attackers t…

  • Unscored —
    CVE-2005-0484 EPSS 11%

    Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows re…

  • Unscored —

    TrackerCam 5.12 and earlier allows remote attackers to cause a denial of service (crash) via (1) a large number of conn…

  • Unscored —
    CVE-2005-0475 Public exploit

    SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary S…

  • Unscored —

    The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (application crash)…

  • Unscored —

    Buffer overflow in wpa_supplicant before 0.2.7 allows remote attackers to cause a denial of service (segmentation fault…

  • Unscored —

    Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when usin…

  • Unscored —

    SQL injection vulnerability in the user_valid_crypt function in user.php in WebCalendar 0.9.45 allows remote attackers …

  • Unscored —

    Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system th…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in TrackerCam 5.12 and earlier allows remote attackers to inject arbitrary HTM…

  • Unscored —
    CVE-2005-0478 Public exploit EPSS 66%

    Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possib…

  • Unscored —

    Multiple directory traversal vulnerabilities in sitenfo.sh, sitezipchk.sh, and siteziplist.sh in Glftpd 1.26 to 2.00 al…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in hpm_guestbook.cgi allows remote attackers to inject arbitrary web script or…

  • Unscored —
    CVE-2005-0479 Public exploit

    Directory traversal vulnerability in ComGetLogFile.php3 for TrackerCam 5.12 and earlier allows remote attackers to read…