Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
236 results · Clear filters · Feed
-
Unscored —CVE-2005-0338 Public exploit
Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request.
-
Unscored —CVE-2005-0312 Public exploit
WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service (access…
-
Unscored —CVE-2005-0342 Public exploit
The Finder in Mac OS X and earlier allows local users to overwrite arbitrary files and gain privileges by creating a ha…
-
Unscored —CVE-2005-0283 Public exploit
Directory traversal vulnerability in index.php in QwikiWiki allows remote attackers to read arbitrary files via a .. (d…
-
Unscored —CVE-2005-0344 Public exploit
Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote authenticated users to upload and execut…
-
Unscored —CVE-2005-0339 Public exploit
Buffer overflow in Foxmail 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code…
-
Unscored —CVE-2005-0272 Public exploit
ReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary PHP files by posting a review fi…
-
Unscored —CVE-2005-0270 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to inject …
-
Unscored —CVE-2005-0263 Public exploit
Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument.
-
Unscored —CVE-2005-0320 Public exploit
Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attac…
-
Unscored —CVE-2005-0307 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject…
-
Unscored —CVE-2005-0316 Public exploit
WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost …
-
Unscored —CVE-2005-0325 Public exploit
Xpand Rally 1.0.0.0 allows remote attackers or remote malicious game servers to cause a denial of service (application …
-
Unscored —CVE-2005-0345 Public exploit
viewthread.php in php-fusion 4.x does not check the (1) forum_id or (2) forum_cat parameters, which allows remote attac…
-
Unscored —CVE-2005-0271 Public exploit
Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2005-0280 Public exploit
Format string vulnerability in Soldner Secret Wars 30830 and earlier allows remote attackers to cause a denial of servi…
-
Unscored —
The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate …
-
Unscored —
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large nu…
-
Unscored —CVE-2005-0047 Public exploit
Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage fil…
-
Unscored —
Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the …
-
Unscored —CVE-2003-1073 Public exploit
A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r ar…
-
Unscored —CVE-2003-1071 Public exploit
rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to…
-
Unscored —CVE-2003-1055 Public exploit
Buffer overflow in the nss_ldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a lo…
-
Unscored —CVE-2005-0155 Public exploit
The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbit…
-
Unscored —CVE-2005-0156 Public exploit
Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local us…
-
Unscored —CVE-2004-1385 Public exploit
phpGroupWare 0.9.16.003 and earlier allows remote attackers to gain sensitive information via (1) unexpected characters…
-
Unscored —CVE-2004-1383 Public exploit
Multiple SQL injection vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to execute arbitra…
-
Unscored —CVE-2004-1389 Public exploit
Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.…
-
Unscored —CVE-2004-1384 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to in…
-
Unscored —
PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a f…
-
Unscored —
Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7…
-
Unscored —CVE-2005-0185 Public exploit
Stack-based buffer overflow in NodeManager Professional 2.00 allows remote attackers to execute arbitrary commands via …
-
Unscored —
Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a…
-
Unscored —CVE-2005-0193 Public exploit
Buffer overflow in the (1) -v and (2) -a switches in mRouter in iSync 1.5 in Mac OS X 10.3.7 and earlier allows local u…
-
Unscored —CVE-2005-0226 Public exploit
Format string vulnerability in the Log_Resolver function in log.c for ngIRCd 0.8.2 and earlier, when compiled with IDEN…
-
Unscored —
Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to ex…