Skip to content
OpenAdvisories

Archive

28 February 2005

Vulnerabilities first published on this day (UTC), newest first.

15 results · Feed

  • Unscored —

    The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 allows remote auth…

  • Unscored —

    The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 generates easily p…

  • Unscored —

    The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an…

  • Unscored —

    Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to dow…

  • Unscored —

    Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote m…

  • Unscored —

    KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged fi…

  • Unscored —

    Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus …

  • Unscored —

    The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows…

  • Unscored —

    Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to …

  • Unscored —

    Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla before 1.7.6 might all…

  • Unscored —

    Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure site" lock icon via (1) …

  • Unscored —

    The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (application crash)…

  • Unscored —

    Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by trickin…

  • Unscored —

    Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could…

  • Unscored —

    String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::…