Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
236 results · Clear filters · Feed
-
Unscored —
Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remot…
-
Unscored —
Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a …
-
Unscored —CVE-2005-0494 Public exploit
The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a …
-
Unscored —CVE-2003-1085 Public exploit
The HTTP server in the Thomson TWC305, TWC315, and TCW690 cable modem ST42.03.0a allows remote attackers to cause a den…
-
Unscored —
Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with…
-
Unscored —CVE-2004-1585 Public exploit
Flash Messaging 5.2.0g (rev 1.1.2) and earlier allows remote attackers to cause a denial of service (application crash)…
-
Unscored —CVE-2004-1553 Public exploit
SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the user…
-
Unscored —CVE-2004-1621 Public exploit
NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in IBM Lotus Notes R6 and Do…
-
Unscored —CVE-2004-1693 Public exploit
PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote attackers to execute arbitra…
-
Unscored —CVE-2004-1620 Public exploit
CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting at…
-
Unscored —
Heap-based buffer overflow in Titan FTP 3.21 and earlier allows remote attackers to cause a denial of service (crash) v…
-
Unscored —CVE-2004-1696 Public exploit
EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to cause a denial of service (application crash) vi…
-
Unscored —CVE-2004-1555 Public exploit
Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary …
-
Unscored —CVE-2004-1699 Public exploit
SettingsBase.php in Pinnacle ShowCenter 1.51 allows remote attackers to cause a denial of service (web interface errors…
-
Unscored —
Motorola Wireless Router WR850G running firmware 4.03 allows remote attackers to bypass authentication, log on as an ad…
-
Unscored —
Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2004-1656 Public exploit
CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splittin…
-
Unscored —
Buffer overflow in Ability Server 2.25, 2.32, 2.34, and possibly other versions, allows remote attackers to execute arb…
-
Unscored —CVE-2004-1689 Public exploit
sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbi…
-
Unscored —CVE-2004-1551 Public exploit
Cross-site scripting (XSS) vulnerability in the (1) email or (2) file modules in paFileDB 3.1 Final allows remote attac…
-
Unscored —
EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administrat…
-
Unscored —CVE-2004-1569 Public exploit
Buffer overflow in (1) MusicConverter.exe, (2) playlist.exe, and (3) amp.exe in dBpowerAMP Audio Player 2.0 and dbPower…
-
Unscored —CVE-2004-1646 Public exploit
Directory traversal vulnerability in Xedus 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in th…
-
Unscored —CVE-2004-1650 Public exploit
D-Link DCS-900 Internet Camera listens on UDP port 62976 for an IP address, which allows remote attackers to change the…
-
Unscored —CVE-2004-1643 Public exploit
WS_FTP 5.0.2 allows remote authenticated users to cause a denial of service (CPU consumption) via a CD command that con…
-
Unscored —CVE-2004-1691 Public exploit
The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service (CPU consumption and crash) via a…
-
Unscored —CVE-2004-1636 Public exploit
Heap-based buffer overflow in the WvTFTPServer::new_connection function in wvtftpserver.cc for WvTftp 0.9 allows remote…
-
Unscored —
Buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long (1) EHLO and possibly …
-
Unscored —CVE-2004-1640 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 0.94 and 1.0 allow remote attackers to execute arbitrary w…
-
Unscored —
The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service (infinite loop in …
-
Unscored —CVE-2004-1659 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Admini…
-
Unscored —CVE-2004-1619 Public exploit
Buffer overflow in Privateer's Bounty: Age of Sail II allows remote attackers to execute arbitrary code via a long nick…
-
Unscored —CVE-2004-1647 Public exploit
SQL injection vulnerability in Password Protect allows remote attackers to execute arbitrary SQL statements and bypass …
-
Unscored —CVE-2004-1678 Public exploit
Directory traversal vulnerability in pdesk.cgi in PerlDesk allows remote attackers to read portions of arbitrary files …
-
Unscored —CVE-2004-1688 Public exploit
Pigeon Server 3.02.0143 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consump…
-
Unscored —CVE-2004-1587 Public exploit
Buffer overflow in Monolith games including (1) Alien versus Predator 2 1.0.9.6 and earlier, (2) Blood 2 2.1 and earlie…
-
Unscored —CVE-2004-1564 Public exploit
CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response…
-
Unscored —CVE-2004-1661 Public exploit
MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains …
-
Unscored —CVE-2004-1622 Public exploit
SQL injection vulnerability in dosearch.php in UBB.threads 3.4.x allows remote attackers to execute arbitrary SQL state…
-
Unscored —
Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denia…