Archive
26 February 2005
Vulnerabilities first published on this day (UTC), newest first.
52 results · Feed
-
Unscored —
Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.…
-
Unscored —
Cross-site scripting (XSS) vulnerability in TypePad allows remote attackers to inject arbitrary Javascript via the name…
-
Unscored —
Cross-site scripting (XSS) vulnerability in post.php in Moodle before 1.3 allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2004-1739 Public exploit
Bird Chat 1.61 allows remote attackers to cause a denial of service (crash) via invalid users.
-
Unscored —CVE-2004-1752 Public exploit
Stack-based buffer overflow in Gaucho 1.4 Build 145 allows remote attackers to execute arbitrary code via a POP3 email …
-
Unscored —
The (1) updateuser.php and (2) forums_prune.php scripts in PHP-Fusion 4.00 allow remote attackers to obtain sensitive i…
-
Unscored —CVE-2004-1746 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in PHP Code Snippet Library allows remote attackers to inject arb…
-
Unscored —
Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to view arbitrary files via an HTTP request for the disk…
-
Unscored —
Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed routing configuration, …
-
Unscored —CVE-2004-1727 Public exploit
BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number of connec…
-
Unscored —CVE-2004-1714 Public exploit
BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.…
-
Unscored —CVE-2004-1707 Public exploit
The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default p…
-
Unscored —
SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQ…
-
Unscored —
Unknown vulnerability in HP Process Resource Manager (PRM) C.02.01[.01] and earlier, as used by HP-UX Workload Manager …
-
Unscored —
Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered users to read arbitrary fi…
-
Unscored —CVE-2004-1748 Public exploit
NtRegmon before 6.12 allows local users to cause a denial of service (crash), while NtRegmon is running, via invalid po…
-
Unscored —CVE-2004-1744 Public exploit
Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to cause a denial of service (CPU consumption or crash) …
-
Unscored —CVE-2004-1720 Public exploit
The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sen…
-
Unscored —
The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service (device crash) a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in NetworkEverywhere NR041 running firmware 1.2 Release 03 allows remote attac…
-
Unscored —CVE-2004-1745 Public exploit
Buffer overflow in Painkiller 1.3.1 and earlier allows remote attackers to cause a denial of service (crash) and possib…
-
Unscored —
The ZwOpenSection function in Integrity Protection Driver (IPD) 1.4 and earlier allows local users to cause a denial of…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Nihuo Web Log Analyzer 1.6 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2004-1742 Public exploit
Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .. (dot dot) in…
-
Unscored —CVE-2004-1741 Public exploit
Music daemon (musicd) 0.0.3 and earlier allows remote attackers to cause a denial of service (crash) by calling LOAD wi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Mantis bugtracker allows remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2004-1735 Public exploit
Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticat…
-
Unscored —
Datakey Rainbow iKey2032 USB token, when using the CIP client package, does not encrypt communications between the toke…
-
Unscored —CVE-2004-1722 Public exploit
SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2004-1751 Public exploit
Ground Control II: Operation Exodus 1.0.0.7 and earlier allows remote servers to cause a denial of service (client or s…
-
Unscored —CVE-2004-1719 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PForum before 1.26 allows remote attackers to inject arbitrary web script o…
-
Unscored —CVE-2004-1728 Public exploit
Buffer overflow in British National Corpus SARA (sarad) allows remote attackers to execute arbitrary code by calling th…
-
Unscored —CVE-2004-1703 Public exploit
Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that c…
-
Unscored —
WpQuiz 2.60b1 through 2.60b8 allows remote attackers to gain privileges via a direct request to adminrestore.php in the…
-
Unscored —CVE-2004-1724 Public exploit
The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups direc…
-
Unscored —CVE-2004-1731 Public exploit
signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and provid…
-
Unscored —
Stack-based buffer overflow in xvbmp.c in XV allows remote attackers to execute arbitrary code via a crafted image file.
-
Unscored —
The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed…
-
Unscored —
Multiple integer overflows in (1) xviris.c, (2) xvpcx.c, and (3) xvpm.c in XV allow remote attackers to execute arbitra…