Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
821 results · Feed
-
Unscored —CVE-2004-1661 Public exploit
MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains …
-
Unscored —
Mozilla Firefox before 0.10, Mozilla 5.0, and Gecko 20040913 allows remote attackers to cause a denial of service (appl…
-
Unscored —
Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via fo…
-
Unscored —CVE-2004-1622 Public exploit
SQL injection vulnerability in dosearch.php in UBB.threads 3.4.x allows remote attackers to execute arbitrary SQL state…
-
Unscored —
Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denia…
-
Unscored —CVE-2004-1657 Public exploit
Cross-site scripting (XSS) vulnerability in the Activity and Events Viewer for Newtelligence DasBlog allows remote atta…
-
Unscored —
Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to gain sensiti…
-
Unscored —CVE-2004-1666 Public exploit
Buffer overflow in the MSN module in Trillian 0.74i allows remote MSN servers to execute arbitrary code via a long stri…
-
Unscored —CVE-2004-1687 Public exploit
CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response …
-
Unscored —
The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to exe…
-
Unscored —
The conference menu in ActivePost Standard 3.1 sends passwords of password-protected rooms in cleartext, which could al…
-
Unscored —CVE-2004-1580 Public exploit
SQL injection vulnerability in index.php in CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
SMC routers SMC7004VWBR running firmware 1.00.014 and SMC7008ABR EU running firmware 1.42.003 allow remote attackers to…
-
Unscored —
Clientexec allows remote attackers to gain sensitive information via an HTTP request to phpinfo.php, which calls the ph…
-
Unscored —
PHP remote file inclusion vulnerability in BlackBoard 1.5.1 allows remote attackers to execute arbitrary PHP code by mo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in FuseTalk 4.0 allows remote attackers to execute arbitrary web script via an…
-
Unscored —CVE-2004-1562 Public exploit
SQL injection vulnerability in redir_url.php in w-Agora 4.1.6a allows remote attackers to execute arbitrary SQL command…
-
Unscored —
viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attack…
-
Unscored —CVE-2004-1655 Public exploit
Cross-site scripting (XSS) vulnerability in phpWebsite 0.9.3-4 and earlier allows remote attackers to inject arbitrary …
-
Unscored —
Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of service (infinite loop) via …
-
Unscored —CVE-2004-1554 Public exploit
PHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows remote attackers to execute arbit…
-
Unscored —
Directory traversal vulnerability in TwinFTP 1.0.3 R2 allows remote attackers to create arbitrary files via a .../ (tri…
-
Unscored —
ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which a…
-
Unscored —
Directory traversal vulnerability in the FTP server in TriDComm 1.3 and earlier allows remote attackers to read or writ…
-
Unscored —
CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splittin…
-
Unscored —CVE-2004-1567 Public exploit
profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter…
-
Unscored —
Opera allows remote attackers to cause a denial of service (invalid memory reference and application crash) via a web p…
-
Unscored —
Buffer overflow in ShixxNote 6.net build 117 allows remote attackers to execute arbitrary code via a long font field.
-
Unscored —
Mozilla allows remote attackers to cause a denial of service (application crash from invalid memory access) via an "unu…
-
Unscored —
AJ-Fork 167 does not restrict access to directories such as (1) data, (2) inc, (3) plugins, (4) skins, or (5) tools, wh…
-
Unscored —
Heap-based buffer overflow in the image sending feature in Gadu-Gadu 6.0 build 149 allows remote attackers to execute a…
-
Unscored —
index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid c…
-
Unscored —
index.php in CoolPHP 1.0-stable allows remote attackers to gain sensitive information via an invalid op parameter, whic…
-
Unscored —
Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQ…
-
Unscored —CVE-2004-1612 Public exploit
Directory traversal vulnerability in SalesLogix 6.1 allows remote attackers to upload arbitrary files via a .. (dot dot…
-
Unscored —
The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU consumption) via XML attri…
-
Unscored —
Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Web Server in DNS4Me 3.0.0.4 allows remote attackers to execute arbitra…
-
Unscored —
cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature…