Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
821 results · Feed
-
Unscored —
pafiledb.php in PaFileDB 3.1 allows remote attackers to gain sensitive information via an invalid or missing action par…
-
Unscored —
Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Service (WDS), allows re…
-
Unscored —
MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via…
-
Unscored —
Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allow…
-
Unscored —
Soldner Secret Wars 30830 and earlier does not properly handle the "message too long" socket error, which allows remote…
-
Unscored —
Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote atta…
-
Unscored —
The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, wh…
-
Unscored —
SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary…
-
Unscored —
The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, whic…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web interface in Soldner Secret Wars 30830 allows remote attackers to i…
-
Unscored —
Multiple SQL injection vulnerabilities in index.php in PHP Gift Registry (phpGiftReg) 1.4.0, and possibly other version…
-
Unscored —CVE-2005-0273 Public exploit
Multiple SQL injection vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to execute ar…
-
Unscored —
The change password functionality in Bottomline Webseries Payment Application does not require the old password when us…
-
Unscored —CVE-2005-0340 Public exploit
Integer signedness error in Apple File Service (AFP Server) allows remote attackers to cause a denial of service (appli…
-
Unscored —
npptnt2.sys in nProtect Gameguard provides unrestricted I/O to any process that calls it, which allows local users to g…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the log viewer in NETGEAR FVS318 running firmware 2.4, and possibly other v…
-
Unscored —
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2005-0330 Public exploit
Buffer overflow in Painkiller 1.35 and earlier, and possibly other versions before 1.61, allows remote authenticated us…
-
Unscored —
Cross-site scripting (XSS) vulnerability in user.php in Magic Winmail Server 4.0 Build 1112 allows remote attackers to …
-
Unscored —
comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and …
-
Unscored —CVE-2005-0313 Public exploit
Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) uploa…
-
Unscored —
Direct remote injection vulnerability in modalfram.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to load external…
-
Unscored —
Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a…
-
Unscored —CVE-2005-0274 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers …
-
Unscored —
useredit_account.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the logged in user, which allo…
-
Unscored —
MercuryBoard 1.1.1 allows remote attackers to gain sensitive information via an HTTP request with the n parameter set t…
-
Unscored —CVE-2005-0262 Public exploit
Buffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argum…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_sup…
-
Unscored —
pafiledb.php in Pafiledb 3.1 may allow remote attackers to execute arbitrary PHP code via a modified action parameter t…
-
Unscored —CVE-2005-0338 Public exploit
Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request.
-
Unscored —
The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command is the sam…
-
Unscored —CVE-2005-0312 Public exploit
WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service (access…
-
Unscored —CVE-2005-0342 Public exploit
The Finder in Mac OS X and earlier allows local users to overwrite arbitrary files and gain privileges by creating a ha…
-
Unscored —
NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to bypass the filters using h…
-
Unscored —
SafeNet SoftRemote VPN Client stores the VPN password (pre-shared key) in cleartext in memory of the IreIKE.exe process…
-
Unscored —
eMotion MediaPartner Web Server 5.0 and 5.1 allows remote attackers to obtain sensitive information via an HTTP request…
-
Unscored —
Directory traversal vulnerability in session.php in JSBoard 2.0.9 and earlier allows remote attackers to read arbitrary…
-
Unscored —
Cross-site scripting (XSS) vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbit…
-
Unscored —CVE-2005-0283 Public exploit
Directory traversal vulnerability in index.php in QwikiWiki allows remote attackers to read arbitrary files via a .. (d…
-
Unscored —
Exponent 0.95 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) search.info.php,…