Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
236 results · Clear filters · Feed
-
Unscored —CVE-2004-1657 Public exploit
Cross-site scripting (XSS) vulnerability in the Activity and Events Viewer for Newtelligence DasBlog allows remote atta…
-
Unscored —CVE-2004-1666 Public exploit
Buffer overflow in the MSN module in Trillian 0.74i allows remote MSN servers to execute arbitrary code via a long stri…
-
Unscored —CVE-2004-1687 Public exploit
CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response …
-
Unscored —CVE-2004-1580 Public exploit
SQL injection vulnerability in index.php in CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2004-1562 Public exploit
SQL injection vulnerability in redir_url.php in w-Agora 4.1.6a allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2004-1655 Public exploit
Cross-site scripting (XSS) vulnerability in phpWebsite 0.9.3-4 and earlier allows remote attackers to inject arbitrary …
-
Unscored —CVE-2004-1554 Public exploit
PHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows remote attackers to execute arbit…
-
Unscored —
ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which a…
-
Unscored —
CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splittin…
-
Unscored —CVE-2004-1567 Public exploit
profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter…
-
Unscored —
Buffer overflow in ShixxNote 6.net build 117 allows remote attackers to execute arbitrary code via a long font field.
-
Unscored —
Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQ…
-
Unscored —CVE-2004-1612 Public exploit
Directory traversal vulnerability in SalesLogix 6.1 allows remote attackers to upload arbitrary files via a .. (dot dot…
-
Unscored —
Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via …
-
Unscored —CVE-2004-1698 Public exploit
The Base64 function in PopMessenger 1.60 (before 20 Sep 2004) and earlier allows remote attackers to cause a denial of …
-
Unscored —
Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long req…
-
Unscored —CVE-2004-1559 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2004-1563 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to execute arbitrary web s…
-
Unscored —CVE-2004-1692 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary …
-
Unscored —CVE-2004-1665 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in PsNews 1.1 allows remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2004-1552 Public exploit
SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the u…
-
Unscored —CVE-2004-1596 Public exploit
The 3COM Wireless router 3CRADSL72 running Boot Code 1.3d allows remote attackers to gain sensitive information such as…
-
Unscored —CVE-2004-1645 Public exploit
Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML v…
-
Unscored —CVE-2004-1592 Public exploit
PHP remote file inclusion vulnerability in index.php in ocPortal 1.0.3 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2004-1642 Public exploit
WFTPD Pro Server 3.21 allows remote authenticated users to cause a denial of service (crash) via a series of long MLIST…
-
Unscored —CVE-2004-1664 Public exploit
Call of Duty 1.4 and earlier allows remote attackers to cause a denial of service (game end) via a large (1) query or (…
-
Unscored —CVE-2004-1601 Public exploit
Directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files …
-
Unscored —CVE-2004-1681 Public exploit
Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI …
-
Unscored —CVE-2004-1521 Public exploit
Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printabl…
-
Unscored —CVE-2004-1537 Public exploit
Cross-site scripting (XSS) vulnerability in popup.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute…
-
Unscored —CVE-2004-1499 Public exploit
Cross-site scripting (XSS) vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers…
-
Unscored —
Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a lo…
-
Unscored —CVE-2004-1536 Public exploit
SQL injection vulnerability in index.php in the ibProArcade module for Invision Power Board (IPB) 1.x and 2.x allows re…
-
Unscored —CVE-2004-1519 Public exploit
SQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2004-1535 Public exploit
PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to …
-
Unscored —CVE-2004-1543 Public exploit
Directory traversal vulnerability in viewimg.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to list arb…
-
Unscored —CVE-2004-1539 Public exploit
Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long…
-
Unscored —CVE-2004-1500 Public exploit
Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cau…
-
Unscored —CVE-2004-1515 Public exploit
SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute …
-
Unscored —CVE-2004-1531 Public exploit
SQL injection vulnerability in post.php in Invision Power Board (IPB) 2.0.0 through 2.0.2 allows remote attackers to ex…