Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
236 results · Clear filters · Feed
-
Unscored —CVE-2004-1442 Public exploit
Cross-site scripting (XSS) vulnerability in db2www CGI interpreter in IBM Net.Data 7 and 7.2 allows remote attackers to…
-
Unscored —CVE-2004-1441 Public exploit
Cross-site scripting (XSS) vulnerability in icq.cgi in Board Power 2.04PF allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2004-1470 Public exploit
CRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote attackers to perform HT…
-
Unscored —CVE-2004-1484 Public exploit
Format string vulnerability in the _msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy cl…
-
Unscored —CVE-2004-1467 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.0.00.003 and earlier allow remote attackers to inje…
-
Unscored —
Buffer overflow in BlackJumboDog 3.x allows remote attackers to execute arbitrary code via long FTP commands such as (1…
-
Unscored —CVE-2004-1471 Public exploit
Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attacke…
-
Medium —CVE-2004-1444 Public exploit
Roundup Directory traversal vulnerability
Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via .. (dot dot) sequences in an @@ command in an HTTP GET request.
-
Unscored —CVE-2005-0382 Public exploit
Breed patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via an empty UDP pac…
-
Unscored —
Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP reque…
-
Unscored —CVE-2004-1418 Public exploit
Cross-site scripting (XSS) vulnerability in WPKontakt 3.0.1 and earlier allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2004-1412 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.x allows remote attackers to inject arbitrar…
-
Unscored —CVE-2004-1405 Public exploit
MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, s…
-
Unscored —CVE-2004-1421 Public exploit
Multiple PHP remote file inclusion vulnerabilities (1) step_one.php, (2) step_one_tables.php, (3) step_two_tables.php i…
-
Unscored —CVE-2004-1406 Public exploit
SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attackers to inject arbitra…
-
Unscored —CVE-2004-1402 Public exploit
SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via (1) the string p…
-
Unscored —CVE-2004-1410 Public exploit
Cross-site scripting (XSS) vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary…
-
Unscored —CVE-2004-1420 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote att…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth …
-
Unscored —CVE-2004-1422 Public exploit
WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which reveals php …
-
Unscored —CVE-2004-1400 Public exploit
The control panel in ASP Calendar does not require authentication to access, which allows remote attackers to gain unau…
-
Unscored —CVE-2004-1415 Public exploit
SQL injection vulnerability in (1) disp_album.php and possibly (2) disp_img.php in 2Bgal 2.4 and 2.5.1 allows remote at…
-
Unscored —CVE-2004-1417 Public exploit
Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to …
-
Unscored —CVE-2004-1401 Public exploit
SQL injection vulnerability in verify.asp in Asp-rider allows remote attackers to execute arbitrary SQL statements and …
-
Unscored —CVE-2004-1395 Public exploit
The Lithtech engine, as used in (1) Contract Jack 1.1 and earlier, (2) No one lives forever 2 1.3 and earlier, (3) Tron…
-
Unscored —CVE-2004-1413 Public exploit
Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2005-0370 Public exploit
Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of …
-
Unscored —CVE-2005-0368 Public exploit
Multiple SQL injection vulnerabilities in CMScore allow remote attackers to execute arbitrary SQL commands via the (1) …
-
Medium 5.3CVE-2005-0369 Public exploit
Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 earlier allows remote attackers to cause a denial of ser…
-
Unscored —CVE-2005-0343 Public exploit
SQL injection vulnerability in PerlDesk 1.x allows remote attackers to inject arbitrary SQL commands via the view param…
-
Unscored —
Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2005-0305 Public exploit
CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users …
-
Unscored —
Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote atta…
-
Unscored —CVE-2005-0273 Public exploit
Multiple SQL injection vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to execute ar…
-
Unscored —CVE-2005-0340 Public exploit
Integer signedness error in Apple File Service (AFP Server) allows remote attackers to cause a denial of service (appli…
-
Unscored —
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2005-0330 Public exploit
Buffer overflow in Painkiller 1.35 and earlier, and possibly other versions before 1.61, allows remote authenticated us…
-
Unscored —CVE-2005-0313 Public exploit
Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) uploa…
-
Unscored —CVE-2005-0274 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers …
-
Unscored —CVE-2005-0262 Public exploit
Buffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argum…