Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
821 results · Feed
-
Unscored —CVE-2004-1698 Public exploit
The Base64 function in PopMessenger 1.60 (before 20 Sep 2004) and earlier allows remote attackers to cause a denial of …
-
Unscored —
Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, w…
-
Unscored —
Cross-site scripting (XSS) vulnerability in render.UserLayoutRootNode.uP in SCT Campus Pipeline allows remote attackers…
-
Unscored —
Directory traversal vulnerability in ParaChat Server 5.5 allows remote attackers to read arbitrary files via a ..%5C (h…
-
Unscored —
slxweb.dll in SalesLogix 6.1 allows remote attackers to obtain sensitive information via a (1) Library or (2) Attachmen…
-
Unscored —
Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long req…
-
Unscored —
Off-by-one error in Halo Combat Evolved 1.04 and earlier allows remote attackers to cause a denial of service (server c…
-
Unscored —CVE-2004-1559 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2004-1563 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to execute arbitrary web s…
-
Unscored —
MyWebServer 1.0.3 allows remote attackers to bypass authentication, modify configuration, and read arbitrary files via …
-
Unscored —CVE-2004-1692 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary …
-
Unscored —
SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Admin, teams…
-
Unscored —
Links allows remote attackers to cause a denial of service (memory consumption) via a web page or HTML email that conta…
-
Unscored —CVE-2004-1665 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in PsNews 1.1 allows remote attackers to inject arbitrary web scr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in GoSmart Message Board allows remote attackers to execute inject web script …
-
Unscored —CVE-2004-1552 Public exploit
SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the u…
-
Unscored —CVE-2004-1596 Public exploit
The 3COM Wireless router 3CRADSL72 running Boot Code 1.3d allows remote attackers to gain sensitive information such as…
-
Unscored —
Bugzilla 2.17.1 through 2.18rc2 and 2.19 from cvs, when using the insidergroup feature, does not sufficiently protect p…
-
Unscored —
Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute a…
-
Unscored —CVE-2004-1645 Public exploit
Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML v…
-
Unscored —
Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other ve…
-
Unscored —CVE-2004-1592 Public exploit
PHP remote file inclusion vulnerability in index.php in ocPortal 1.0.3 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2004-1642 Public exploit
WFTPD Pro Server 3.21 allows remote authenticated users to cause a denial of service (crash) via a series of long MLIST…
-
Unscored —
Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop)…
-
Unscored —
YaBB SE 1.5.1 allows remote attackers to obtain sensitive information via a direct HTTP request to Admin.php, which rev…
-
Unscored —
Engenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM DS4100 (formerly FastT 100)…
-
Unscored —CVE-2004-1664 Public exploit
Call of Duty 1.4 and earlier allows remote attackers to cause a denial of service (game end) via a large (1) query or (…
-
Unscored —CVE-2004-1601 Public exploit
Directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files …
-
Unscored —
show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a …
-
Unscored —CVE-2004-1681 Public exploit
Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI …
-
Unscored —
Vypress Tonecast 1.3 and earlier allows remote attackers to cause a denial of service (application crash) via a malform…
-
Unscored —
Format string vulnerability in log.c in rssh before 2.2.2 allows remote authenticated users to execute arbitrary code.
-
Unscored —
Format string vulnerability in Army Men RTS 1.0 allows remote attackers to cause a denial of service (application crash…
-
Unscored —
Format string vulnerability in the game console in Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to exec…
-
Unscored —CVE-2004-1521 Public exploit
Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printabl…
-
Unscored —CVE-2004-1537 Public exploit
Cross-site scripting (XSS) vulnerability in popup.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute…
-
Unscored —
SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// …
-
Unscored —
Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local use…
-
Unscored —
CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to perform HTTP Response Splitt…