Skip to content
OpenAdvisories

Archive

7 March 2005

Vulnerabilities first published on this day (UTC), newest first.

← February 2005 2005 / March /7 April 2005 →
  1. 113
  2. 219
  3. 33
  4. 424
  5. 5 
  6. 6 
  7. 733
  8. 818
  9. 912
  10. 1024
  11. 1122
  12. 1224
  13. 1330
  14. 14 
  15. 15 
  16. 16 
  17. 174
  18. 1812
  19. 19 
  20. 2063
  21. 21 
  22. 2223
  23. 232
  24. 2435
  25. 2517
  26. 2646
  27. 27 
  28. 2826
  29. 2945
  30. 302
  31. 311
All Critical High Medium Low Exploited only Public exploit

33 results · Feed

  • Unscored —
    CVE-2005-0655

    auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to…

  • Unscored —
    CVE-2005-0682

    Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2005-0673

    Cross-site scripting (XSS) vulnerability in usercp_register.php for phpBB 2.0.13 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2005-0660

    Multiple cross-site scripting (XSS) vulnerabilities in D-Forum 1.11 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2005-0653

    phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name, which grants remote auth…

    phpmyadmin Debian
  • Unscored —
    CVE-2005-0662

    Cross-site scripting (XSS) vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2005-0679

    PHP remote file inclusion vulnerability in tell_a_friend.inc.php for Tell A Friend Script 2.7 before 20050305 allows re…

  • Unscored —
    CVE-2005-0667

    Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary c…

    sylpheed Debian
  • Unscored —
    CVE-2005-0657

    Directory traversal vulnerability in Computalynx CProxy 3.3.x and 3.4.x through 3.4.4 allows remote attackers to read a…

  • Unscored —
    CVE-2005-0665

    Format string vulnerability in xv before 3.10a allows remote attackers to execute arbitrary code via format string spec…

  • Unscored —
    CVE-2005-0674

    Cross-site scripting (XSS) vulnerability in the News module for paBox 1.6 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2005-0658

    SQL injection vulnerability in a third party extension to TYPO3 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2005-0681 Public exploit

    Nokia Symbian 60 allows remote attackers to cause a denial of service (phone restart) via a Bluetooth nickname.

  • Unscored —
    CVE-2005-0659

    phpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct request to oracle.php, wh…

  • Unscored —
    CVE-2005-0652

    Unknown vulnerability in HP OpenVMS VAX 7.x and 6.x and OpenVMS Alpha 7.x or 6.x allows local users to access privilege…

  • Unscored —
    CVE-2005-0676

    index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via…

  • Unscored —
    CVE-2005-0677

    index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter.

  • Unscored —
    CVE-2005-0666 Public exploit

    Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC …

  • Unscored —
    CVE-2005-0678 Public exploit

    PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier allows remote attacker…

  • Unscored —
    CVE-2005-0670 Public exploit

    Cross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 through 1.2.1b allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2005-0397

    Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote att…

    imagemagick graphicsmagick Debian
  • Unscored —
    CVE-2005-0661

    SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0…

  • Unscored —
    CVE-2005-0680 Public exploit

    PHP remote file inclusion vulnerability in download_center_lite.inc.php for Download Center Lite 1.6 allows remote atta…

  • Unscored —
    CVE-2005-0668

    Unknown vulnerability in HTTP Anti Virus Proxy (HAVP) before 0.51 prevents viruses from being properly detected in cert…

  • Unscored —
    CVE-2005-0672

    Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via text…

  • Unscored —
    CVE-2005-0654

    gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of servic…

  • Unscored —
    CVE-2005-0663

    SQL injection vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary SQL command…

  • Unscored —
    CVE-2005-0669

    Multiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 through 1.2.1b allow remote attackers to execute ar…

  • Unscored —
    CVE-2005-0675

    Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.5 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2005-0671 Public exploit

    Format string vulnerability in Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to …

  • Unscored —
    CVE-2005-0656

    Multiple cross-site scripting (XSS) vulnerabilities in auraCMS 1.5 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2003-1088 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.4 and 3.5 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2003-1089 Public exploit

    index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names,…