Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
236 results · Clear filters · Feed
-
Unscored —CVE-2004-1533 Public exploit
Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service (…
-
Unscored —CVE-2004-1540 Public exploit
ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does…
-
Unscored —CVE-2004-1493 Public exploit
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (server crash) via multiple …
-
Unscored —CVE-2004-1542 Public exploit
Buffer overflow in Soldier of Fortune II 1.03 Gold and earlier allows remote attackers to cause a denial of service (se…
-
Unscored —CVE-2005-0477 Public exploit
Cross-site scripting (XSS) vulnerability in the SML code for Invision Power Board 1.3.1 FINAL allows remote attackers t…
-
Unscored —CVE-2005-0475 Public exploit
SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary S…
-
Unscored —
Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possib…
-
Unscored —CVE-2005-0479 Public exploit
Directory traversal vulnerability in ComGetLogFile.php3 for TrackerCam 5.12 and earlier allows remote attackers to read…
-
Unscored —
Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbit…
-
Unscored —CVE-2005-0251 Public exploit
Cross-site scripting (XSS) vulnerability in bibindex.php for BibORB 1.3.2, and possibly earlier versions, allows remote…
-
Unscored —CVE-2005-0252 Public exploit
SQL injection vulnerability in BibORB 1.3.2, and possibly earlier versions, allows remote attackers to execute arbitrar…
-
Unscored —CVE-2005-0253 Public exploit
Directory traversal vulnerability in index.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attacke…
-
Unscored —CVE-2005-0105 Public exploit
Unknown vulnerability in typespeed 0.4.1 and earlier allows local users to gain privileges.
-
Unscored —CVE-2005-0408 Public exploit
CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allow…
-
Unscored —CVE-2005-0409 Public exploit
CitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2) uploadcc.php, which allows re…
-
Unscored —CVE-2005-0430 Public exploit
The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (shutdown g…
-
Unscored —CVE-2005-0410 Public exploit
SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via t…
-
Unscored —CVE-2005-0411 Public exploit
Directory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote attackers and local users t…
-
Unscored —
wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which …
-
Unscored —
Buffer overflow in the decode_post function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via …
-
Unscored —CVE-2005-0436 Public exploit
Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of…
-
Unscored —CVE-2005-0421 Public exploit
DelphiTurk FTP 1.0 stores usernames and passwords in the profile.dat file, which allows local users to gain privileges.
-
Unscored —CVE-2005-0435 Public exploit
awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginm…
-
Unscored —CVE-2005-0438 Public exploit
awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by setting the debug paramete…
-
Unscored —CVE-2005-0442 Public exploit
Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via t…
-
Unscored —CVE-2005-0429 Public exploit
Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when showforumusers is enabled,…
-
Unscored —
Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URL…
-
Unscored —CVE-2005-0443 Public exploit
index.php in CubeCart 2.0.4 allows remote attackers to (1) obtain the full path for the web server or (2) conduct cross…
-
Unscored —CVE-2005-0419 Public exploit
Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via lo…
-
Unscored —CVE-2005-0422 Public exploit
DelphiTurk CodeBank (aka KodBank) 3.1 and earlier stores usernames and passwords in the Codebank registry key, which al…
-
Unscored —CVE-2005-0229 Public exploit
CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers…
-
Unscored —CVE-2005-0413 Public exploit
Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2005-0414 Public exploit
SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windo…
-
Unscored —CVE-2004-1465 Public exploit
Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors,…
-
Unscored —CVE-2004-1466 Public exploit
The set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary directory every 30 second…
-
Unscored —
Multiple buffer overflows in the digest authentication functionality in Pavuk 0.9.28-r2 and earlier allow remote attack…
-
Unscored —
filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.
-
Unscored —CVE-2004-1475 Public exploit
Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via (1)…