Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
821 results · Feed
-
Unscored —
Multiple SQL injection vulnerabilities in Dwc_articles 1.6 and earlier allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2004-1569 Public exploit
Buffer overflow in (1) MusicConverter.exe, (2) playlist.exe, and (3) amp.exe in dBpowerAMP Audio Player 2.0 and dbPower…
-
Unscored —
BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2)…
-
Unscored —
slxweb.dll in SalesLogix 6.1 allows remote attackers to cause a denial service (application crash) via an invalid HTTP …
-
Unscored —
MyWebServer 1.0.3 allows remote attackers to cause a denial of service (application crash) via a large number of connec…
-
Unscored —
Directory traversal vulnerability in the file server in ActivePost Standard 3.1 allows remote authenticated users to up…
-
Unscored —
Zyxel P681 running ZyNOS Vt020225a contains portions of memory in an ARP request, which allows remote attackers to obta…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the login form in Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attack…
-
Unscored —CVE-2004-1646 Public exploit
Directory traversal vulnerability in Xedus 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in th…
-
Unscored —CVE-2004-1650 Public exploit
D-Link DCS-900 Internet Camera listens on UDP port 62976 for an IP address, which allows remote attackers to change the…
-
Unscored —CVE-2004-1643 Public exploit
WS_FTP 5.0.2 allows remote authenticated users to cause a denial of service (CPU consumption) via a CD command that con…
-
Unscored —CVE-2004-1691 Public exploit
The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service (CPU consumption and crash) via a…
-
Unscored —
Flash Messaging clients can ignore disconnecting commands such as "shutdown" from the Flash Messaging Server 5.2.0g (re…
-
Unscored —
The "Forgot your Password" link in Computer Associates (CA) Unicenter Management Portal 2.0 and 3.1 displays different …
-
Unscored —
Format string vulnerability in Judge Dredd: Dredd vs. Death 1.01 and earlier allows remote attackers to cause a denial …
-
Unscored —
list.php in w-Agora 4.1.6a allows remote attackers to reveal the full path via a crafted HTTP request, possibly involvi…
-
Unscored —
Symantec ON Command CCM 5.4.x and iCommand 3.0.x has four default usernames and passwords, one of which is hardcoded, w…
-
Unscored —CVE-2004-1636 Public exploit
Heap-based buffer overflow in the WvTFTPServer::new_connection function in wvtftpserver.cc for WvTftp 0.9 allows remote…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MERAK Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other vers…
-
Unscored —
cPanel 9.9.1-RELEASE-3 allows remote authenticated users to chmod arbitrary files via a symlink attack on the _private …
-
Unscored —
Buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long (1) EHLO and possibly …
-
Unscored —CVE-2004-1640 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 0.94 and 1.0 allow remote attackers to execute arbitrary w…
-
Unscored —
The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service (infinite loop in …
-
Unscored —
SQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL statements via the id pa…
-
Unscored —
Adobe Acrobat and Acrobat Reader 6.0 allow remote attackers to read arbitrary files via a PDF file that contains an emb…
-
Unscored —CVE-2004-1659 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Admini…
-
Unscored —
AJ-Fork 167 allows remote attackers to gain sensitive information via a direct request to (1) auto-acronyms.php, (2) au…
-
Unscored —CVE-2004-1619 Public exploit
Buffer overflow in Privateer's Bounty: Age of Sail II allows remote attackers to execute arbitrary code via a long nick…
-
Unscored —CVE-2004-1647 Public exploit
SQL injection vulnerability in Password Protect allows remote attackers to execute arbitrary SQL statements and bypass …
-
Unscored —
attachment.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attack…
-
Unscored —
A race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying the PATH environment var…
-
Unscored —CVE-2004-1678 Public exploit
Directory traversal vulnerability in pdesk.cgi in PerlDesk allows remote attackers to read portions of arbitrary files …
-
Unscored —CVE-2004-1688 Public exploit
Pigeon Server 3.02.0143 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consump…
-
Unscored —
SQL injection vulnerability in the calendar module in phpWebsite 0.9.3-4 and earlier allows remote attackers to execute…
-
Unscored —
The web interface for Micronet Wireless Broadband Router SP916BM running firmware before 1.9 08/04/2004 resets the pass…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute …
-
Unscored —CVE-2004-1587 Public exploit
Buffer overflow in Monolith games including (1) Alien versus Predator 2 1.0.9.6 and earlier, (2) Blood 2 2.1 and earlie…
-
Unscored —
Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Application Security…
-
Unscored —
PHP remote file inclusion vulnerability in CuteNews 1.3.6 and earlier allows remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2004-1564 Public exploit
CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response…