Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
821 results · Feed
-
Unscored —
Winamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service (application crash or CPU…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth …
-
Unscored —
Multiple cross-site scripting vulnerabilities in Image Gallery Web Application 0.9.10 allow remote attackers to inject …
-
Unscored —
PHP remote file inclusion vulnerability in index.php in GNUBoard 3.39 and earlier allows remote attackers to execute ar…
-
Unscored —CVE-2004-1422 Public exploit
WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which reveals php …
-
Unscored —
ArGoSoft FTP 1.4.2.4 and earlier does not limit the number of times that a bad password can be entered, which makes it …
-
Unscored —CVE-2004-1400 Public exploit
The control panel in ASP Calendar does not require authentication to access, which allows remote attackers to gain unau…
-
Unscored —CVE-2004-1415 Public exploit
SQL injection vulnerability in (1) disp_album.php and possibly (2) disp_img.php in 2Bgal 2.4 and 2.5.1 allows remote at…
-
Unscored —CVE-2004-1417 Public exploit
Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to …
-
Unscored —
SQL injection vulnerability in the show_stats module in Arcade.php in IbProArcade allows remote attackers to execute ar…
-
Unscored —
Gadu-Gadu build 155 and earlier allows remote attackers to cause a denial of service (infinite loop) via a message that…
-
Unscored —CVE-2004-1401 Public exploit
SQL injection vulnerability in verify.asp in Asp-rider allows remote attackers to execute arbitrary SQL statements and …
-
Unscored —
PHP remote file inclusion vulnerability in ZeroBoard 4.1pl4 and earlier allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2004-1395 Public exploit
The Lithtech engine, as used in (1) Contract Jack 1.1 and earlier, (2) No one lives forever 2 1.3 and earlier, (3) Tron…
-
Unscored —
Directory traversal vulnerability in the Attachment module 2.3.10 and earlier for phpBB allows remote attackers to read…
-
Unscored —CVE-2004-1413 Public exploit
Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands …
-
Unscored —
Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures, allows remote attackers t…
-
Unscored —CVE-2005-0370 Public exploit
Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of …
-
Unscored —
Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 and earlier allow remote attackers to cause a denial of …
-
Unscored —
Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to cause a denial of…
-
Unscored —
vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Cli…
-
Unscored —
The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback (CFB) mode, al…
-
Unscored —
Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbi…
-
Unscored —CVE-2005-0368 Public exploit
Multiple SQL injection vulnerabilities in CMScore allow remote attackers to execute arbitrary SQL commands via the (1) …
-
Unscored —
The production release of the UniversalAgent for UNIX in BrightStor ARCserve Backup 11.1 contains hard-coded credential…
-
Unscored —
Buffer overflow in pcdsvgaview in xpcd 2.08 allows local users to execute arbitrary code.
-
Unscored —
Heap-based buffer overflow in multiple F-Secure Anti-Virus and Internet Security products allows remote attackers to ex…
-
Unscored —
The dcopidlng script in KDE 3.2.x and 3.3.x creates temporary files with predictable filenames, which allows local user…
-
Unscored —
Multiple directory traversal vulnerabilities in ArGoSoft Mail Server 1.8.7.3 allow remote authenticated users to read, …
-
Medium 5.3CVE-2005-0369 Public exploit
Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 earlier allows remote attackers to cause a denial of ser…
-
Unscored —
SQL injection vulnerability in addentry.php in Woltlab Burning Book 1.0 Gold, 1.1.1e, and possibly other versions, allo…
-
Unscored —CVE-2005-0343 Public exploit
SQL injection vulnerability in PerlDesk 1.x allows remote attackers to inject arbitrary SQL commands via the view param…
-
Unscored —
Multiple format string vulnerabilities in the FTP service in 3Com 3CDaemon 2.0 revision 10 allow remote attackers to ca…
-
Unscored —
Bottomline Webseries Payment Application allows remote attackers to read arbitrary files on the network via a report te…
-
Unscored —
Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2005-0305 Public exploit
CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to inject a…
-
Unscored —
Zyxel P310, P314, P324 and Netgear RT311, RT314 running the latest firmware, allows remote attackers on the WAN to obta…
-
Unscored —
Ingate Firewall 4.1.3 and earlier does not terminate the PPTP session for an active user when the administrator disable…
-
Unscored —
Infinite Mobile Delivery Webmail 2.6 allows remote attackers to gain sensitive information via an HTTP request that con…