Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
821 results · Feed
-
Medium —CVE-2004-1444 Public exploit
Roundup Directory traversal vulnerability
Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via .. (dot dot) sequences in an @@ command in an HTTP GET request.
-
Unscored —
The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write acces…
-
Unscored —
GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the us…
-
Unscored —
Multiple heap-based buffer overflows in the modpow function in PuTTY before 0.55 allow (1) remote attackers to execute …
-
Unscored —
Jetbox One 2.0.8 and possibly other versions allow remote attackers with Author privileges in the IMAGES module to uplo…
-
Unscored —
Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes…
-
Unscored —
imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information via an HTTP request with (1) ida…
-
Unscored —
PHP remote file inclusion vulnerability in SGallery 1.01 allows local and possibly remote attackers to execute arbitrar…
-
Unscored —
SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Horde 3.0 allow remote attackers to inject arbitrary web script …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Bitboard 2.5 and earlier allows remote attackers to inject arbitrary web sc…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_pas…
-
Unscored —
Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary f…
-
Unscored —
Cross-site scripting (XSS) vulnerability in f.aspx in forumKIT 1.0 allows remote attackers to inject arbitrary web scri…
-
Unscored —
Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plu…
-
Unscored —
Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of th…
-
Unscored —CVE-2005-0382 Public exploit
Breed patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via an empty UDP pac…
-
Unscored —
Monit 1.4 to 4.1 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request with a ne…
-
Unscored —
Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP reque…
-
Unscored —CVE-2004-1418 Public exploit
Cross-site scripting (XSS) vulnerability in WPKontakt 3.0.1 and earlier allows remote attackers to inject arbitrary web…
-
Unscored —
FormMail.php 5.0, and possibly other versions, allows remote attackers to read arbitrary files via a full pathname in t…
-
Unscored —CVE-2004-1412 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.x allows remote attackers to inject arbitrar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in view.php in Moodle 1.4.2 and earlier allows remote attackers to inject arbi…
-
Unscored —CVE-2004-1405 Public exploit
MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, s…
-
Unscored —
Multiple directory traversal vulnerabilities in singapore Image Gallery Web Application 0.9.10 allow remote attackers t…
-
Unscored —CVE-2004-1421 Public exploit
Multiple PHP remote file inclusion vulnerabilities (1) step_one.php, (2) step_one_tables.php, (3) step_two_tables.php i…
-
Unscored —CVE-2004-1406 Public exploit
SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attackers to inject arbitra…
-
Unscored —
ArGoSoft FTP before 1.4.2.1 generates an error message if the user name does not exist instead of prompting for a passw…
-
Unscored —CVE-2004-1402 Public exploit
SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via (1) the string p…
-
Unscored —
Attachment Mod 2.3.10 module for phpBB, when used with Apache mod_mime, does not properly handle files with multiple fi…
-
Unscored —
The addImage method for admin.class.php in Image Gallery Web Application 0.9.10 does not properly check filenames, whic…
-
Unscored —CVE-2004-1410 Public exploit
Cross-site scripting (XSS) vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary…
-
Unscored —
pnxr3260.dll in the RealOne 2.0 build 6.0.11.868 browser plugin, as used in Internet Explorer, allows remote attackers …
-
Unscored —
Gadu-Gadu 6.1 build 156 allows remote attackers to cause a denial of service (application hang) via a message that cont…
-
Unscored —
Directory traversal vulnerability in index.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to read arbit…
-
Unscored —
Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary ses…
-
Unscored —
Cross-site scripting (XSS) vulnerability in UseModWiki 1.0 allows remote attackers to inject arbitrary web script or HT…
-
Unscored —CVE-2004-1420 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote att…
-
Unscored —
PHP remote file inclusion vulnerability in main.inc in KorWeblog 1.6.2-cvs and earlier allows remote attackers to execu…
-
Unscored —
Format string vulnerability in prelink.c in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and …