Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
821 results · Feed
-
Unscored —CVE-2004-1727 Public exploit
BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number of connec…
-
Unscored —CVE-2004-1714 Public exploit
BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.…
-
Unscored —CVE-2004-1707 Public exploit
The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default p…
-
Unscored —
SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQ…
-
Unscored —
Unknown vulnerability in HP Process Resource Manager (PRM) C.02.01[.01] and earlier, as used by HP-UX Workload Manager …
-
Unscored —
Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered users to read arbitrary fi…
-
Unscored —CVE-2004-1748 Public exploit
NtRegmon before 6.12 allows local users to cause a denial of service (crash), while NtRegmon is running, via invalid po…
-
Unscored —CVE-2004-1744 Public exploit
Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to cause a denial of service (CPU consumption or crash) …
-
Unscored —CVE-2004-1720 Public exploit
The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sen…
-
Unscored —
The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service (device crash) a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in NetworkEverywhere NR041 running firmware 1.2 Release 03 allows remote attac…
-
Unscored —CVE-2004-1745 Public exploit
Buffer overflow in Painkiller 1.3.1 and earlier allows remote attackers to cause a denial of service (crash) and possib…
-
Unscored —
The ZwOpenSection function in Integrity Protection Driver (IPD) 1.4 and earlier allows local users to cause a denial of…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Nihuo Web Log Analyzer 1.6 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2004-1742 Public exploit
Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .. (dot dot) in…
-
Unscored —CVE-2004-1741 Public exploit
Music daemon (musicd) 0.0.3 and earlier allows remote attackers to cause a denial of service (crash) by calling LOAD wi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Mantis bugtracker allows remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2004-1735 Public exploit
Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticat…
-
Unscored —
Datakey Rainbow iKey2032 USB token, when using the CIP client package, does not encrypt communications between the toke…
-
Unscored —CVE-2004-1722 Public exploit
SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2004-1751 Public exploit
Ground Control II: Operation Exodus 1.0.0.7 and earlier allows remote servers to cause a denial of service (client or s…
-
Unscored —CVE-2004-1719 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PForum before 1.26 allows remote attackers to inject arbitrary web script o…
-
Unscored —CVE-2004-1728 Public exploit
Buffer overflow in British National Corpus SARA (sarad) allows remote attackers to execute arbitrary code by calling th…
-
Unscored —CVE-2004-1703 Public exploit
Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that c…
-
Unscored —
WpQuiz 2.60b1 through 2.60b8 allows remote attackers to gain privileges via a direct request to adminrestore.php in the…
-
Unscored —CVE-2004-1724 Public exploit
The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups direc…
-
Unscored —CVE-2004-1731 Public exploit
signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and provid…
-
Unscored —
Stack-based buffer overflow in xvbmp.c in XV allows remote attackers to execute arbitrary code via a crafted image file.
-
Unscored —
The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed…
-
Unscored —
Multiple integer overflows in (1) xviris.c, (2) xvpcx.c, and (3) xvpm.c in XV allow remote attackers to execute arbitra…
-
Unscored —
The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitra…
-
Unscored —
Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read ar…
-
Unscored —CVE-2004-1717 Public exploit
Multiple buffer overflows in the psscan function in ps.c for gv (ghostview) allow remote attackers to execute arbitrary…
-
Unscored —
Music daemon (musicd) 0.0.3 and earlier allows remote attackers to read arbitrary files by calling LOAD with a full pat…
-
Unscored —
page.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the url parameter.
-
Unscored —
PHP remote file inclusion vulnerability in Mantis 0.19.0a allows remote attackers to execute arbitrary PHP code by modi…
-
Unscored —CVE-2004-1705 Public exploit
Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username.
-
Unscored —
Webbsyte Chat 0.9.0 allows remote attackers to cause a denial of service (crash) via a large number of connections.
-
Unscored —CVE-2004-1737 Public exploit
SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands…