Skip to content
OpenAdvisories

Archive

27 February 2005

Vulnerabilities first published on this day (UTC), newest first.

16 results · Feed

  • Unscored —

    Format string vulnerability in DNA MKBold-MKItalic 0.06_1 and earlier allows remote attackers to execute arbitrary code…

  • Unscored —

    cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows lo…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in phpMyAdmin 2.6.1 allow remote attackers to execute arbitrary PHP …

  • Unscored —

    admin_loader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin parameter.

  • Unscored —

    nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allo…

  • Unscored —

    The Announce module in phpWebSite 0.10.0 and earlier allows remote attackers to execute arbitrary PHP code by setting t…

  • Unscored —

    Gaim 1.1.3 on Windows systems allows remote attackers to cause a denial of service (client crash) via a file transfer i…

  • Unscored —

    Directory traversal vulnerability in CIS WebServer 3.5.13 allows remote attackers to read arbitrary files via .. (dot d…

  • Unscored —
    CVE-2005-0569 Public exploit

    Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary SQL commands via the …

  • Unscored —

    Unknown vulnerability in Standard Type Services Framework (STSF) Font Server Daemon (stfontserverd) in Solaris 9 allows…

  • Unscored —
    CVE-2005-0575 Public exploit

    Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers to cause a denial of service and possi…

  • Unscored —
    CVE-2005-0566 Public exploit EPSS 16%

    Buffer overflow in Golden FTP Server Pro (goldenftpd) 2.x allows remote attackers to execute arbitrary code via a long …

  • Unscored —
    CVE-2005-0568 Public exploit

    Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl…

  • Unscored —

    index.php in phpWebSite 0.10.0 and earlier allows remote attackers to obtain sensitive information via an invalid SEA_s…

  • Unscored —

    profile.php in PunBB 1.2.1 allows remote attackers to cause a denial of service (account lockout) by setting the user's…

  • Unscored —

    Firefox before 1.0.1 and Mozilla Suite before 1.7.6 use a predictable filename for the plugin temporary directory, whic…