Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
821 results · Feed
-
Unscored —CVE-2005-0521 Public exploit
SendLink 1.5 stores sensitive information, possibly including passwords, in plaintext in the data.eat file, which allow…
-
Unscored —
ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a…
-
Unscored —CVE-2005-0518 Public exploit
eXeem 0.21 stores sensitive information such as passwords in plaintext in the Exeem registry key, which allows local us…
-
Unscored —
ArGoSoft FTP Server before 1.4.2.8 allows remote attackers to read arbitrary files via shortcut (.LNK) files in the SIT…
-
Unscored —CVE-2003-1086 Public exploit
PHP remote file inclusion vulnerability in pm/lib.inc.php in pMachine Free and pMachine Pro 2.2 and 2.2.1 allows remote…
-
Unscored —
Directory traversal vulnerability in SD Server 4.0.70 and earlier allows remote attackers to read arbitrary files via .…
-
Unscored —
Unknown vulnerability in Information Resource Manager (IRM) before 1.5.2.1 allows remote attackers to have "potentially…
-
Unscored —
Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain…
-
Unscored —
phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read…
-
Unscored —CVE-2005-0506 Public exploit
The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a…
-
Unscored —
The daemon for fallback-reboot before 0.995 allows attackers to cause a denial of service (daemon exit), possibly relat…
-
Unscored —
Directory traversal vulnerability in (1) usercp_register.php and (2) usercp_avatar.php for phpBB 2.0.11, and possibly o…
-
Unscored —
Buffer overflow in the MoxaDriverIoctl function for the moxa serial driver (moxa.c) in Linux 2.2.x, 2.4.x, and 2.6.x be…
-
Unscored —CVE-2005-0509 EPSS 16%
Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote att…
-
Unscored —
The AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 does not properly check the return value o…
-
Unscored —
Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remot…
-
Unscored —
Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when using the hugemem kernel, allo…
-
Unscored —
ADP Elite System Max 9000 allows remote authenticated users to gain privileges by uploading a .profile that sets the AD…
-
Unscored —
Stack-based buffer overflow in Knox Arkeia Server Backup 5.3.x allows remote attackers to execute arbitrary code via a …
-
Unscored —
Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious w…
-
Unscored —
Multiple integer overflows in the (1) sftp_pkt_getstring and (2) fxp_readdir_recv functions in the PSFTP and PSCP clien…
-
Unscored —
Gigafast router (aka CompUSA router) allows remote attackers to gain sensitive information and bypass the login page vi…
-
Unscored —
Directory traversal vulnerability in Xinkaa 1.0.3 and earlier allows remote attackers to read arbitrary files via (1) .…
-
Unscored —
Arkeia Network Backup Client 5.x contains hard-coded credentials that effectively serve as a back door, which allows re…
-
Unscored —
uim before 0.4.5.1 trusts certain environment variables when libUIM is used in setuid or setgid applications, which all…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML vi…
-
Unscored —
A regression error in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch omits an "access check," which allows l…
-
Unscored —
Buffer overflow in Bontago 1.1 and earlier allows remote attackers to execute arbitrary code via a long nickname.
-
Unscored —
CRLF injection vulnerability in bizmail.cgi in Biz Mail Form before 2.2 allows remote attackers to bypass the email che…
-
Unscored —
Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when running on x86 with the hugeme…
-
Unscored —
Adobe Acrobat Reader 6.0.3 and 7.0.0 allows remote attackers to cause a denial of service (application crash) via a PDF…
-
Unscored —CVE-2005-0494 Public exploit
The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a …
-
Unscored —CVE-2005-0500 EPSS 11%
Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to spoof the domain name of a URL in a titlebar for a s…
-
Unscored —
Linux kernel before 2.6.9, when running on the AMD64 and Intel EM64T architectures, allows local users to write to priv…
-
Unscored —
Gigafast router (aka CompUSA router) with the DNS proxy option enabled allows remote attackers to cause a denial of ser…
-
Unscored —CVE-2003-1085 Public exploit
The HTTP server in the Thomson TWC305, TWC315, and TCW690 cable modem ST42.03.0a allows remote attackers to cause a den…
-
Unscored —
index.php in PHP Links allows remote attackers to gain sensitive information via an invalid show parameter, which revea…
-
Unscored —
SQL injection vulnerability in GoSmart Message Board allows remote attackers to execute arbitrary SQL code via the (1) …
-
Unscored —
Cross-site scripting (XSS) vulnerability in SettingsBase.php in Pinnacle ShowCenter 1.51 build 121 allows remote attack…
-
Unscored —
Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with…