Skip to content
OpenAdvisories

Archive

26 February 2005

Vulnerabilities first published on this day (UTC), newest first.

23 results · Clear filters · Feed

  • Unscored —
    CVE-2004-1739 Public exploit

    Bird Chat 1.61 allows remote attackers to cause a denial of service (crash) via invalid users.

  • Unscored —
    CVE-2004-1752 Public exploit

    Stack-based buffer overflow in Gaucho 1.4 Build 145 allows remote attackers to execute arbitrary code via a POP3 email …

  • Unscored —
    CVE-2004-1746 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in PHP Code Snippet Library allows remote attackers to inject arb…

  • Unscored —
    CVE-2004-1727 Public exploit

    BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number of connec…

  • Unscored —
    CVE-2004-1714 Public exploit

    BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.…

  • Unscored —
    CVE-2004-1707 Public exploit

    The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default p…

  • Unscored —
    CVE-2004-1748 Public exploit

    NtRegmon before 6.12 allows local users to cause a denial of service (crash), while NtRegmon is running, via invalid po…

  • Unscored —
    CVE-2004-1744 Public exploit

    Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to cause a denial of service (CPU consumption or crash) …

  • Unscored —
    CVE-2004-1720 Public exploit

    The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sen…

  • Unscored —
    CVE-2004-1745 Public exploit

    Buffer overflow in Painkiller 1.3.1 and earlier allows remote attackers to cause a denial of service (crash) and possib…

  • Unscored —
    CVE-2004-1742 Public exploit

    Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .. (dot dot) in…

  • Unscored —
    CVE-2004-1741 Public exploit

    Music daemon (musicd) 0.0.3 and earlier allows remote attackers to cause a denial of service (crash) by calling LOAD wi…

  • Unscored —
    CVE-2004-1735 Public exploit

    Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticat…

  • Unscored —
    CVE-2004-1722 Public exploit

    SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2004-1751 Public exploit

    Ground Control II: Operation Exodus 1.0.0.7 and earlier allows remote servers to cause a denial of service (client or s…

  • Unscored —
    CVE-2004-1719 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbi…

  • Unscored —
    CVE-2004-1728 Public exploit

    Buffer overflow in British National Corpus SARA (sarad) allows remote attackers to execute arbitrary code by calling th…

  • Unscored —
    CVE-2004-1703 Public exploit

    Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that c…

  • Unscored —
    CVE-2004-1724 Public exploit

    The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups direc…

  • Unscored —
    CVE-2004-1731 Public exploit

    signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and provid…

  • Unscored —
    CVE-2004-1717 Public exploit

    Multiple buffer overflows in the psscan function in ps.c for gv (ghostview) allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2004-1705 Public exploit

    Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username.

  • Unscored —
    CVE-2004-1737 Public exploit

    SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands…