Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
236 results · Clear filters · Feed
-
Unscored —CVE-2005-0569 Public exploit
Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2005-0575 Public exploit
Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers to cause a denial of service and possi…
-
Unscored —
Buffer overflow in Golden FTP Server Pro (goldenftpd) 2.x allows remote attackers to execute arbitrary code via a long …
-
Unscored —CVE-2005-0568 Public exploit
Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl…
-
Unscored —CVE-2004-1739 Public exploit
Bird Chat 1.61 allows remote attackers to cause a denial of service (crash) via invalid users.
-
Unscored —CVE-2004-1752 Public exploit
Stack-based buffer overflow in Gaucho 1.4 Build 145 allows remote attackers to execute arbitrary code via a POP3 email …
-
Unscored —CVE-2004-1746 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in PHP Code Snippet Library allows remote attackers to inject arb…
-
Unscored —CVE-2004-1727 Public exploit
BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number of connec…
-
Unscored —CVE-2004-1714 Public exploit
BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.…
-
Unscored —CVE-2004-1707 Public exploit
The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default p…
-
Unscored —CVE-2004-1748 Public exploit
NtRegmon before 6.12 allows local users to cause a denial of service (crash), while NtRegmon is running, via invalid po…
-
Unscored —CVE-2004-1744 Public exploit
Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to cause a denial of service (CPU consumption or crash) …
-
Unscored —CVE-2004-1720 Public exploit
The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sen…
-
Unscored —CVE-2004-1745 Public exploit
Buffer overflow in Painkiller 1.3.1 and earlier allows remote attackers to cause a denial of service (crash) and possib…
-
Unscored —CVE-2004-1742 Public exploit
Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .. (dot dot) in…
-
Unscored —CVE-2004-1741 Public exploit
Music daemon (musicd) 0.0.3 and earlier allows remote attackers to cause a denial of service (crash) by calling LOAD wi…
-
Unscored —CVE-2004-1735 Public exploit
Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticat…
-
Unscored —CVE-2004-1722 Public exploit
SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2004-1751 Public exploit
Ground Control II: Operation Exodus 1.0.0.7 and earlier allows remote servers to cause a denial of service (client or s…
-
Unscored —CVE-2004-1719 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbi…
-
Unscored —CVE-2004-1728 Public exploit
Buffer overflow in British National Corpus SARA (sarad) allows remote attackers to execute arbitrary code by calling th…
-
Unscored —CVE-2004-1703 Public exploit
Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that c…
-
Unscored —CVE-2004-1724 Public exploit
The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups direc…
-
Unscored —CVE-2004-1731 Public exploit
signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and provid…
-
Unscored —CVE-2004-1717 Public exploit
Multiple buffer overflows in the psscan function in ps.c for gv (ghostview) allow remote attackers to execute arbitrary…
-
Unscored —CVE-2004-1705 Public exploit
Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username.
-
Unscored —CVE-2004-1737 Public exploit
SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2005-0256 Public exploit
The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service…
-
Unscored —CVE-2005-0161 Public exploit
Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE arch…
-
Unscored —CVE-2005-0543 Public exploit
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web s…
-
Unscored —
Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows re…
-
Unscored —CVE-2005-0517 Public exploit
PeerFTP_5 stores sensitive information such as passwords in plaintext in the PeerFTP.ini files, which allows local user…
-
Unscored —CVE-2005-0513 Public exploit
PHP remote file inclusion vulnerability in mail_autocheck.php in the Email This Entry add-on for pMachine Pro 2.4, and …
-
Unscored —
misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers…
-
Unscored —CVE-2005-0522 Public exploit
Chat Anywhere 2.72a stores sensitive information such as passwords in plaintext in the .INI file for a chatroom, which …
-
Unscored —CVE-2005-0523 Public exploit
Format string vulnerability in ProZilla 1.3.7.3 and earlier allows remote attackers to execute arbitrary code via forma…
-
Unscored —CVE-2005-0521 Public exploit
SendLink 1.5 stores sensitive information, possibly including passwords, in plaintext in the data.eat file, which allow…
-
Unscored —CVE-2005-0518 Public exploit
eXeem 0.21 stores sensitive information such as passwords in plaintext in the Exeem registry key, which allows local us…
-
Unscored —CVE-2003-1086 Public exploit
PHP remote file inclusion vulnerability in pm/lib.inc.php in pMachine Free and pMachine Pro 2.2 and 2.2.1 allows remote…
-
Unscored —CVE-2005-0506 Public exploit
The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a…