Skip to content
OpenAdvisories

Archive

4 March 2005

Vulnerabilities first published on this day (UTC), newest first.

← February 2005 2005 / March /4 April 2005 →
  1. 113
  2. 219
  3. 33
  4. 424
  5. 5 
  6. 6 
  7. 733
  8. 818
  9. 912
  10. 1024
  11. 1122
  12. 1224
  13. 1330
  14. 14 
  15. 15 
  16. 16 
  17. 174
  18. 1812
  19. 19 
  20. 2063
  21. 21 
  22. 2223
  23. 232
  24. 2435
  25. 2517
  26. 2646
  27. 27 
  28. 2826
  29. 2945
  30. 302
  31. 311
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2005-0630

    sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig par…

  • Unscored —
    CVE-2005-0649

    Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting (XSS) protection via "hexadecim…

  • Unscored —
    CVE-2005-0651

    Multiple SQL injection vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2005-0629 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in profile.php in 427BB 2.2 allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2005-0627

    Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless…

  • Unscored —
    CVE-2005-0645

    Cross-site scripting (XSS) vulnerability in show.inc.php in cuteNews 1.3.6 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2005-0638

    xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters …

    xli xloadimage Debian
  • Unscored —
    CVE-2005-0648

    Multiple vulnerabilities in Pixel-Apes SafeHTML before 1.3.0 allow remote attackers to bypass cross-site scripting (XSS…

  • Unscored —
    CVE-2005-0628

    Multiple cross-site scripting (XSS) vulnerabilities in Forumwa 1.0 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2005-0647 Public exploit

    admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1) $form[comments] or (2…

  • Unscored —
    CVE-2005-0650 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2005-0605

    scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer…

  • Unscored —
    CVE-2005-0631

    delpm.php in PBLang 4.63 allows remote authenticated users to delete arbitrary PM files by modifying the "id" and "a" p…

  • Unscored —
    CVE-2005-0641

    Cross-site scripting (XSS) vulnerability in the Reporter for Computer Associates (CA) Unicenter Asset Management (UAM) …

  • Unscored —
    CVE-2005-0632 Public exploit

    PHP remote file inclusion vulnerability in auth.php in PHPNews 1.2.4 and possibly 1.2.3, allows remote attackers to exe…

  • Unscored —
    CVE-2005-0635 Public exploit

    Buffer overflow in Foxmail Server 2.0 allows remote attackers to execute arbitrary code via a long USER command.

  • Unscored —
    CVE-2005-0646

    SQL injection vulnerability in auth.php in paNews 2.0.4b allows remote attackers to execute arbitrary SQL via the mysql…

  • Unscored —
    CVE-2005-0634 Public exploit EPSS 10%

    Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command.

  • Unscored —
    CVE-2005-0639

    Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management…

    xloadimage xli Debian
  • Unscored —
    CVE-2005-0637

    The copy functions in locore.s such as copyout in OpenBSD 3.5 and 3.6, and possibly other BSD based operating systems, …

  • Unscored —
    CVE-2005-0640

    Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 does not properly initialize the "Change Credentials for …

  • Unscored —
    CVE-2005-0642

    SQL injection vulnerability in the Query Designer for Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 all…

  • Unscored —
    CVE-2005-0636 Public exploit

    Format string vulnerability in Foxmail Server 2.0 allows remote attackers to cause a denial of service (crash) and poss…

  • Unscored —
    CVE-2005-0633 Public exploit

    Buffer overflow in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via a crafted PNG image f…