Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
821 results · Feed
-
Unscored —
MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak enc…
-
Unscored —CVE-2005-0344 Public exploit
Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote authenticated users to upload and execut…
-
Unscored —CVE-2005-0339 Public exploit
Buffer overflow in Foxmail 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code…
-
Unscored —
Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to (1) upload…
-
Unscored —
SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Directory traversal vulnerability in RealArcade 1.2.0.994 allows remote attackers to delete arbitrary files via an RGP …
-
Unscored —
The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects v…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2005-0272 Public exploit
ReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary PHP files by posting a review fi…
-
Unscored —
lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) mod.php in Exponent 0.95 allow remote attac…
-
Unscored —CVE-2005-0270 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to inject …
-
Unscored —
Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files v…
-
Unscored —
Firefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has an image/gif content …
-
Unscored —
SQL injection vulnerability in Oracle Database 9i and 10g allows remote attackers to execute arbitrary SQL commands and…
-
Unscored —
Webseries Payment Application does not properly restrict privileged operations, which allows remote authenticated users…
-
Unscored —
Linksys PSUS4 running firmware 6032 allows remote attackers to cause a denial of service (device crash) via an HTTP POS…
-
Unscored —
Cross-site scripting (XSS) vulnerability in useredit_account.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to inj…
-
Unscored —
Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions…
-
Unscored —CVE-2005-0263 Public exploit
Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument.
-
Unscored —
Directory traversal vulnerability in minis.php in Minis 0.2.1 allows remote attackers to read arbitrary files via a .. …
-
Unscored —
Multiple buffer overflows in the XView library 3.2 may allow local users to execute arbitrary code via setuid applicati…
-
Unscored —CVE-2005-0320 Public exploit
Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attac…
-
Unscored —
Apple Safari 1.2.4 does not obey the Content-type field in the HTTP header and renders text as HTML, which allows remot…
-
Unscored —
Direct code injection vulnerability in FlatNuke 2.5.1 allows remote attackers to execute arbitrary PHP code by placing …
-
Unscored —CVE-2005-0307 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject…
-
Unscored —
Directory traversal vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to read arbitrary file…
-
Unscored —
Multiple SQL injection vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to execute arbitrary SQL…
-
Unscored —
LANChat Pro Revival 1.666c allows remote attackers to cause a denial of service (application crash) via a malformed UDP…
-
Unscored —
NOTE: this issue has been disputed by the vendor. The error module in Novell GroupWise WebAccess allows remote attacker…
-
Unscored —
Integer overflow in RealArcade 1.2.0.994 and earlier allows remote attackers to execute arbitrary code via an RGS file …
-
Unscored —
The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command…
-
Unscored —
minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service (infinite loop) via an HTTP request for a…
-
Unscored —CVE-2005-0316 Public exploit
WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost …
-
Unscored —
TFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) via a GE…
-
Unscored —
Directory traversal vulnerability in ZipGenius 5.5 and earlier allows remote attackers to create and possibly modify ar…
-
Unscored —CVE-2005-0325 Public exploit
Xpand Rally 1.0.0.0 allows remote attackers or remote malicious game servers to cause a denial of service (application …
-
Unscored —
index.php in FlatNuke 2.5.1 allows remote attackers to create an administrator account via carriage returns and #10 in …
-
Unscored —CVE-2005-0345 Public exploit
viewthread.php in php-fusion 4.x does not check the (1) forum_id or (2) forum_cat parameters, which allows remote attac…
-
Unscored —CVE-2005-0271 Public exploit
Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQ…