Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
821 results · Feed
-
Unscored —
Multiple buffer overflows in the digest authentication functionality in Pavuk 0.9.28-r2 and earlier allow remote attack…
-
Unscored —
Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(…
-
Unscored —
filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.
-
Unscored —
Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(…
-
Unscored —
Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows …
-
Unscored —CVE-2004-1475 Public exploit
Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via (1)…
-
Unscored —
Mozilla before 1.6 does not display the entire URL in the status bar when a link contains %00, which could allow remote…
-
Unscored —
Cisco IOS 12.0S, 12.2, and 12.3, with Open Shortest Path First (OSPF) enabled, allows remote attackers to cause a denia…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the inline MIME viewer in Horde-IMP (Internet Messaging Program) 3.2.4 and …
-
High —
MoinMoin Improper Access Control
Unknown vulnerability in MoinMoin 1.2.2 and earlier allows remote attackers to gain unauthorized access to administrator functions such as (1) revert and (2) delete.
-
Unscored —
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to c…
-
Unscored —CVE-2004-1442 Public exploit
Cross-site scripting (XSS) vulnerability in db2www CGI interpreter in IBM Net.Data 7 and 7.2 allows remote attackers to…
-
Unscored —
Cisco Secure Access Control Server (ACS) 3.2(3) and earlier, when configured with an anonymous bind in Novell Directory…
-
Unscored —
Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on W…
-
Unscored —
The sbuf_getmsg function in BNC incorrectly handles backspace characters, which could allow remote attackers to bypass …
-
Unscored —
The Virtual Private Network (VPN) capability in Novell Bordermanager 3.8 allows remote attackers to cause a denial of s…
-
Unscored —CVE-2004-1441 Public exploit
Cross-site scripting (XSS) vulnerability in icq.cgi in Board Power 2.04PF allows remote attackers to inject arbitrary w…
-
Unscored —
Unknown vulnerability in ScreenOS in Juniper Networks NetScreen firewall 3.x through 5.x allows remote attackers to cau…
-
Unscored —
JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixat…
-
Unscored —
The Transaction Language 1 (TL1) login interface in Cisco ONS 15327 4.6(0) and 4.6(1) and 15454 and 15454 SDH 4.6(0) an…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Management Console in JRun 4.0 allows remote attackers to execute arbit…
-
Unscored —
Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1_rc5-r2 and earlier allows remote attackers to execute arbitra…
-
Unscored —
Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(…
-
Unscored —
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determine the location of…
-
Unscored —
A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable i…
-
Unscored —
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 3…
-
Unscored —CVE-2004-1470 Public exploit
CRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote attackers to perform HT…
-
Unscored —
Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.1(0) to 4.1(2), 4.5(x), 4.0(0) to 4.0(2…
-
High —
MoinMoin Improper Privilege Management
Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknown impact.
-
Unscored —
The CSAdmin web administration interface for Cisco Secure Access Control Server (ACS) 3.2(2) build 15 allows remote att…
-
Unscored —CVE-2004-1484 Public exploit
Format string vulnerability in the _msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy cl…
-
Unscored —CVE-2004-1467 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.0.00.003 and earlier allow remote attackers to inje…
-
Medium 5.9CVE-2004-1464 Exploited
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) con…
KEV May 19, 2023 -
Unscored —
Buffer overflow in BlackJumboDog 3.x allows remote attackers to execute arbitrary code via long FTP commands such as (1…
-
Unscored —
The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shel…
-
Unscored —
Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via…
-
Unscored —
Format string vulnerability in the log function in SUS 2.0.2, and other versions before 2.0.6, allows local users to ex…
-
Unscored —
Unknown vulnerability in Serviceguard A.11.13 through A.11.16.00 and Cluster Object Manager A.01.03 and B.01.04 through…
-
Unscored —
Unknown vulnerability in the management station in HP StorageWorks Command View XP 1.8B and earlier allows remote attac…
-
Unscored —CVE-2004-1471 Public exploit
Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attacke…