Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
821 results · Feed
-
Unscored —CVE-2005-0429 Public exploit
Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when showforumusers is enabled,…
-
Unscored —
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectur…
-
Unscored —
Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to include arbitrary Per…
-
Unscored —
Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URL…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web sc…
-
Unscored —
The DNSPacket::expand method in dnspacket.cc in PowerDNS before 2.9.17 allows remote attackers to cause a denial of ser…
-
Unscored —
SQL injection vulnerability in login.asp in ASPjar Guestbook allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
Unknown vulnerability in the delete.asp program in certain versions of ASPjar Guestbook allows remote attackers to dele…
-
Unscored —
ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a se…
-
Unscored —
The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier f…
-
Unscored —CVE-2005-0446 EPSS 41%
Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses re…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitra…
-
Unscored —CVE-2005-0443 Public exploit
index.php in CubeCart 2.0.4 allows remote attackers to (1) obtain the full path for the web server or (2) conduct cross…
-
Unscored —
BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates different login excep…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 7.5 allow remote attackers to inject arbitrary HTML or …
-
Unscored —
Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (hang) via a flood of certain ARP packets.
-
Unscored —CVE-2005-0419 Public exploit
Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via lo…
-
Unscored —CVE-2005-0422 Public exploit
DelphiTurk CodeBank (aka KodBank) 3.1 and earlier stores usernames and passwords in the Codebank registry key, which al…
-
Unscored —
Multiple memory leaks in the MQL parser in Emdros before 1.1.22 allow remote attackers to cause a denial of service (me…
-
Unscored —CVE-2005-0229 Public exploit
CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers…
-
Unscored —CVE-2005-0413 Public exploit
Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2005-0414 Public exploit
SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Spidean PostWrap allows remote attackers to inject arbitrary HTML and web s…
-
Unscored —
Unknown "high risk" vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors. NOTE…
-
Unscored —CVE-2004-0869 EPSS 15%
Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a se…
-
Unscored —
Opera does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel…
-
Unscored —
The syscons CONS_SCRSHOT ioctl in FreeBSD 5.x allows local users to read arbitrary kernel memory via (1) negative coord…
-
Unscored —
KDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure…
-
Unscored —
The (1) write_list and (2) dump_curr_list functions in Net-Acct before 0.71 allows local users to overwrite arbitrary f…
-
Unscored —CVE-2004-0866 EPSS 10%
Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk,…
-
Unscored —
Mozilla does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure chann…
-
Unscored —
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 3…
-
Unscored —
Unknown vulnerability in LiveConnect in Mozilla 1.7 beta allows remote attackers to read arbitrary files in known locat…
-
Unscored —
Jetbox One 2.0.8 and possibly other versions stores passwords in the database in plaintext, which could allow attackers…
-
Unscored —
Cisco Secure Access Control Server (ACS) 3.2(3) and earlier spawns a separate unauthenticated TCP connection on a rando…
-
Unscored —CVE-2004-1465 Public exploit
Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors,…
-
Unscored —
Multiple unknown vulnerabilities in the ActiveX and HTML file browsers in Symantec Clientless VPN Gateway 4400 Series 5…
-
Unscored —CVE-2004-1466 Public exploit
The set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary directory every 30 second…
-
Unscored —
Cisco Secure Access Control Server (ACS) 3.2, when configured as a Light Extensible Authentication Protocol (LEAP) RADI…