Skip to content
OpenAdvisories

Archive

20 February 2005

Vulnerabilities first published on this day (UTC), newest first.

← January 2005 2005 / February /20 March 2005 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 665
  7. 710
  8. 863
  9. 91
  10. 1092
  11. 1114
  12. 1237
  13. 1374
  14. 147
  15. 1535
  16. 1621
  17. 1716
  18. 183
  19. 1971
  20. 20156
  21. 2122
  22. 229
  23. 2316
  24. 2419
  25. 257
  26. 2652
  27. 2716
  28. 2815
All Critical High Medium Low Exploited only Public exploit

156 results · Feed

  • Unscored —
    CVE-2004-1575

    The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU consumption) via XML attri…

  • Unscored —
    CVE-2004-1546 Public exploit EPSS 31%

    Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via …

  • Unscored —
    CVE-2004-1690

    Cross-site scripting (XSS) vulnerability in the Web Server in DNS4Me 3.0.0.4 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2004-1603

    cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature…

  • Unscored —
    CVE-2004-1698 Public exploit

    The Base64 function in PopMessenger 1.60 (before 20 Sep 2004) and earlier allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2004-1624

    Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, w…

  • Unscored —
    CVE-2004-1593

    Cross-site scripting (XSS) vulnerability in render.UserLayoutRootNode.uP in SCT Campus Pipeline allows remote attackers…

  • Unscored —
    CVE-2004-1568

    Directory traversal vulnerability in ParaChat Server 5.5 allows remote attackers to read arbitrary files via a ..%5C (h…

  • Unscored —
    CVE-2004-1607

    slxweb.dll in SalesLogix 6.1 allows remote attackers to obtain sensitive information via a (1) Library or (2) Attachmen…

  • Unscored —
    CVE-2004-1560 Public exploit EPSS 26%

    Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long req…

  • Unscored —
    CVE-2004-1667

    Off-by-one error in Halo Combat Evolved 1.04 and earlier allows remote attackers to cause a denial of service (server c…

  • Unscored —
    CVE-2004-1559 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web scr…

    wordpress Debian
  • Unscored —
    CVE-2004-1563 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to execute arbitrary web s…

  • Unscored —
    CVE-2004-1557

    MyWebServer 1.0.3 allows remote attackers to bypass authentication, modify configuration, and read arbitrary files via …

  • Unscored —
    CVE-2004-1692 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2004-1605

    SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Admin, teams…

  • Unscored —
    CVE-2004-1616

    Links allows remote attackers to cause a denial of service (memory consumption) via a web page or HTML email that conta…

  • Unscored —
    CVE-2004-1665 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in PsNews 1.1 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2004-1589

    Cross-site scripting (XSS) vulnerability in GoSmart Message Board allows remote attackers to execute inject web script …

  • Unscored —
    CVE-2004-1552 Public exploit

    SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the u…

  • Unscored —
    CVE-2004-1596 Public exploit

    The 3COM Wireless router 3CRADSL72 running Boot Code 1.3d allows remote attackers to gain sensitive information such as…

  • Unscored —
    CVE-2004-1635

    Bugzilla 2.17.1 through 2.18rc2 and 2.19 from cvs, when using the insidergroup feature, does not sufficiently protect p…

  • Unscored —
    CVE-2004-1668

    Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute a…

  • Unscored —
    CVE-2004-1645 Public exploit

    Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML v…

  • Unscored —
    CVE-2004-1670

    Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other ve…

  • Unscored —
    CVE-2004-1592 Public exploit

    PHP remote file inclusion vulnerability in index.php in ocPortal 1.0.3 and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2004-1642 Public exploit

    WFTPD Pro Server 3.21 allows remote authenticated users to cause a denial of service (crash) via a series of long MLIST…

  • Unscored —
    CVE-2004-1613

    Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop)…

  • Unscored —
    CVE-2004-1662

    YaBB SE 1.5.1 allows remote attackers to obtain sensitive information via a direct HTTP request to Admin.php, which rev…

  • Unscored —
    CVE-2004-1663

    Engenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM DS4100 (formerly FastT 100)…

  • Unscored —
    CVE-2004-1664 Public exploit

    Call of Duty 1.4 and earlier allows remote attackers to cause a denial of service (game end) via a large (1) query or (…

  • Unscored —
    CVE-2004-1601 Public exploit

    Directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files …

  • Unscored —
    CVE-2004-1634

    show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a …

  • Unscored —
    CVE-2004-1681 Public exploit

    Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI …

  • Unscored —
    CVE-2004-1618

    Vypress Tonecast 1.3 and earlier allows remote attackers to cause a denial of service (application crash) via a malform…

  • Unscored —
    CVE-2004-1628

    Format string vulnerability in log.c in rssh before 2.2.2 allows remote authenticated users to execute arbitrary code.