Archive
20 February 2005
Vulnerabilities first published on this day (UTC), newest first.
156 results · Feed
-
Unscored —
index.php in PHP Links allows remote attackers to gain sensitive information via an invalid show parameter, which revea…
-
Unscored —
SQL injection vulnerability in GoSmart Message Board allows remote attackers to execute arbitrary SQL code via the (1) …
-
Unscored —
Cross-site scripting (XSS) vulnerability in SettingsBase.php in Pinnacle ShowCenter 1.51 build 121 allows remote attack…
-
Unscored —
Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with…
-
Unscored —
Buffer overflow in Vypress Messenger 3.5.1 and earlier allows remote attackers to execute arbitrary code via a message …
-
Unscored —
The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to cause a denial of service (…
-
Unscored —
SalesLogix 6.1 includes usernames, passwords, and other sensitive information in the headers of an HTTP response, which…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the registration page in phpScheduleIt 1.0.0 RC1 allow remote at…
-
Unscored —CVE-2004-1585 Public exploit
Flash Messaging 5.2.0g (rev 1.1.2) and earlier allows remote attackers to cause a denial of service (application crash)…
-
Unscored —CVE-2004-1553 Public exploit
SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the user…
-
Unscored —
application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to cause a …
-
Unscored —CVE-2004-1621 Public exploit
NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in IBM Lotus Notes R6 and Do…
-
Unscored —
The Hawking Technologies HAR11A modem/router allows remote attackers to obtain sensitive information by connecting to p…
-
Unscored —CVE-2004-1693 Public exploit
PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote attackers to execute arbitra…
-
Unscored —
Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to conduct port scans of remote hosts by specifying the ta…
-
Unscored —
phpScheduleIt 1.0.0 RC1 does not clear administrative privileges if the administrator logs in as a normal user, which a…
-
Unscored —
SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow rem…
-
Unscored —CVE-2004-1620 Public exploit
CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting at…
-
Unscored —
Heap-based buffer overflow in Titan FTP 3.21 and earlier allows remote attackers to cause a denial of service (crash) v…
-
Unscored —CVE-2004-1696 Public exploit
EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to cause a denial of service (application crash) vi…
-
Unscored —CVE-2004-1555 Public exploit
Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary …
-
Unscored —
Buffer overflow in Microsoft Msinfo32.exe might allow local users to execute arbitrary code via a long filename in the …
-
Unscored —CVE-2004-1699 Public exploit
SettingsBase.php in Pinnacle ShowCenter 1.51 allows remote attackers to cause a denial of service (web interface errors…
-
Unscored —
pGina 1.7.6 and possibly older versions, when the Restart or Shutdown options are enabled on the login screen, allows r…
-
Unscored —
process_bug.cgi in Bugzilla 2.9 through 2.18rc2 and 2.19 from CVS does not check edit permissions on the keywords field…
-
Unscored —
Cross-site scripting (XSS) vulnerability in wiki.php in MoniWiki 1.0.8 and earlier allows remote attackers to inject ar…
-
Unscored —
SalesLogix 6.1 uses client-specified pathnames for writing certain files, which might allow remote authenticated users …
-
Unscored —
Motorola Wireless Router WR850G running firmware 4.03 allows remote attackers to bypass authentication, log on as an ad…
-
Unscored —
SQL injection vulnerability in bBlog 0.7.2 and 0.7.3 allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —
RIM Blackberry 7230 running RIM Blackberry OS 3.7 SP1 allows remote attackers to cause a denial of service (device rebo…
-
Unscored —
Xedus 1.0 allows remote attackers to cause a denial of service (refuse connections) by connecting multiple times from t…
-
Unscored —CVE-2004-1686 EPSS 10%
Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Ja…
-
Unscored —
accountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remot…
-
Unscored —
Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code …
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to execute arbitrar…
-
Unscored —
UploadFile.php in MoniWiki 1.0.9.2 and earlier, when used with Apache mod_mime, does not properly handle files with two…
-
Unscored —CVE-2004-1656 Public exploit
CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splittin…
-
Unscored —
Cross-site scripting (XSS) vulnerability in (1) index.asp, (2) ChangePassword.asp, (3) users_list.asp, (4) and users_ad…
-
Unscored —
Buffer overflow in Ability Server 2.25, 2.32, 2.34, and possibly other versions, allows remote attackers to execute arb…
-
Unscored —
pdesk.cgi in PerlDesk allows remote attackers to gain sensitive information via an invalid lang parameter, which includ…