Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
821 results · Feed
-
Unscored —CVE-2004-1493 Public exploit
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (server crash) via multiple …
-
Unscored —
The Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (sock…
-
Unscored —
Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (game interruption) vi…
-
Unscored —CVE-2004-1542 Public exploit
Buffer overflow in Soldier of Fortune II 1.03 Gold and earlier allows remote attackers to cause a denial of service (se…
-
Unscored —
SQL injection vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execute arbitrary…
-
Unscored —
TrackerCam 5.12 and earlier allows remote attackers to read log files via the fn parameter in a direct request to the C…
-
Unscored —
Cross-site scripting (XSS) vulnerability in comment.php for paNews 2.0b4 for PHP Arena allows remote attackers to injec…
-
Unscored —
Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC packets from …
-
Unscored —CVE-2005-0477 Public exploit
Cross-site scripting (XSS) vulnerability in the SML code for Invision Power Board 1.3.1 FINAL allows remote attackers t…
-
Unscored —CVE-2005-0484 EPSS 11%
Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows re…
-
Unscored —
TrackerCam 5.12 and earlier allows remote attackers to cause a denial of service (crash) via (1) a large number of conn…
-
Unscored —CVE-2005-0475 Public exploit
SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary S…
-
Unscored —
The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (application crash)…
-
Unscored —
Buffer overflow in wpa_supplicant before 0.2.7 allows remote attackers to cause a denial of service (segmentation fault…
-
Unscored —
Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when usin…
-
Unscored —
SQL injection vulnerability in the user_valid_crypt function in user.php in WebCalendar 0.9.45 allows remote attackers …
-
Unscored —
Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system th…
-
Unscored —
Cross-site scripting (XSS) vulnerability in TrackerCam 5.12 and earlier allows remote attackers to inject arbitrary HTM…
-
Unscored —
Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possib…
-
Unscored —
Multiple directory traversal vulnerabilities in sitenfo.sh, sitezipchk.sh, and siteziplist.sh in Glftpd 1.26 to 2.00 al…
-
Unscored —
Cross-site scripting (XSS) vulnerability in hpm_guestbook.cgi allows remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2005-0479 Public exploit
Directory traversal vulnerability in ComGetLogFile.php3 for TrackerCam 5.12 and earlier allows remote attackers to read…
-
Unscored —
The Audio Setup Wizard (asw.dll) in Yahoo! Messenger 6.0.0.1750, and possibly other versions, allows attackers to arbit…
-
Unscored —
Format string vulnerability in bidwatcher before 1.3.17 allows remote malicious web servers from eBay, or a spoofed eBa…
-
Unscored —
Yahoo! Messenger 6.0.0.1750, and possibly other versions before 6.0.0.1921, does not properly display long filenames in…
-
Unscored —
Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbit…
-
Unscored —
Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via dots and non-breaking spa…
-
Unscored —
Opera 7.54 and earlier does not properly limit an applet's access to internal Java packages from Sun, which allows remo…
-
Low 3.7
BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS file…
-
Unscored —
Opera 7.54 and earlier does not properly validate base64 encoded binary data in a data: (RFC 2397) URL, which causes th…
-
Unscored —
Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privile…
-
Unscored —CVE-2005-0251 Public exploit
Cross-site scripting (XSS) vulnerability in bibindex.php for BibORB 1.3.2, and possibly earlier versions, allows remote…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers to inject arbitrary HT…
-
Unscored —CVE-2005-0252 Public exploit
SQL injection vulnerability in BibORB 1.3.2, and possibly earlier versions, allows remote attackers to execute arbitrar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in contact_us.php in osCommerce 2.2-MS2 allows remote attackers to inject arbi…
-
Unscored —
phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root…
-
Unscored —
Unknown "major security flaws" in Ulog-php before 1.0, related to input validation, have unknown impact and attack vect…
-
Unscored —CVE-2005-0253 Public exploit
Directory traversal vulnerability in index.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers…
-
Unscored —
Unknown vulnerability in NewsBruiser 2.x before 2.6.1 allows remote attackers to "take actions on comments."