Archive
February 2005
Vulnerabilities first published in this month (UTC), newest first.
821 results · Feed
-
Unscored —
ZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to cause a denial of serv…
-
Unscored —
WebCalendar allows remote attackers to gain privileges by modifying critical parameters to (1) view_entry.php or (2) up…
-
Unscored —
validate.php in WebCalendar allows remote attackers to gain sensitive information via an invalid encoded_login paramete…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar allow remote attackers to inject arbitrary web scrip…
-
Unscored —
Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (application crash) vi…
-
Unscored —
Zone Labs IMsecure and IMsecure Pro before 1.5 allow remote attackers to bypass Active Link Filtering via an instant me…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Search.jsp in JSPWiki 2.1.120-cvs and earlier allows remote attackers to ex…
-
Unscored —
SQL injection vulnerability in include.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execut…
-
Unscored —CVE-2004-1499 Public exploit
Cross-site scripting (XSS) vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers…
-
Unscored —
The Repair Archive command in WinRAR 3.40 allows remote attackers to cause a denial of service (application crash) via …
-
Unscored —
AppServ 2.5.x and earlier installs a default username and password, which allows remote attackers to gain access.
-
Unscored —
Directory traversal vulnerability in Web Forums Server 1.6 and 2.0 Power Pack allows remote attackers to read arbitrary…
-
Unscored —
Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a lo…
-
Unscored —
The displaycontent function in config.php for Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to gain se…
-
Unscored —
SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2004-1536 Public exploit
SQL injection vulnerability in index.php in the ibProArcade module for Invision Power Board (IPB) 1.x and 2.x allows re…
-
Unscored —
Hotfoon 4.0 does not notify users before opening links in web browsers, which could allow remote attackers to execute a…
-
Unscored —
Buffer overflow in the Screen Fetch option in XDICT 2002 through 2005 allows remote attackers to cause a denial of serv…
-
Unscored —
SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arb…
-
Unscored —CVE-2004-1519 Public exploit
SQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2004-1535 Public exploit
PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to …
-
Unscored —CVE-2004-1543 Public exploit
Directory traversal vulnerability in viewimg.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to list arb…
-
Unscored —CVE-2004-1539 Public exploit
Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long…
-
Unscored —
init.php in WebCalendar allows remote attackers to execute arbitrary local PHP scripts via the user_inc parameter.
-
Unscored —
Microsoft Internet Explorer 6.0 SP1 does not properly handle certain character strings in the Path attribute, which can…
-
Unscored —
Directory traversal vulnerability in index.php in Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to rea…
-
Unscored —CVE-2004-1500 Public exploit
Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cau…
-
Unscored —
Hired Team: Trial 2.0 and earlier and 2.200 does not limit how game players can kick other players off the server, incl…
-
Unscored —
04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP request fo…
-
Unscored —CVE-2004-1515 Public exploit
SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute …
-
Unscored —
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (game exit) via a data packe…
-
Unscored —
The Event Calendar module 2.13 for PHP-Nuke allows remote attackers to gain sensitive information via an HTTP request t…
-
Unscored —CVE-2004-1531 Public exploit
SQL injection vulnerability in post.php in Invision Power Board (IPB) 2.0.0 through 2.0.2 allows remote attackers to ex…
-
Unscored —CVE-2004-1533 Public exploit
Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service (…
-
Unscored —
CRLF injection vulnerability in login.php in WebCalendar allows remote attackers to inject CRLF sequences via the retur…
-
Unscored —CVE-2004-1540 Public exploit
ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does…
-
Unscored —
The webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (C…
-
Unscored —
04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to in…
-
Unscored —
Integer overflow in the InitialDirContext in Java Runtime Environment (JRE) 1.4.2, 1.5.0 and possibly other versions al…