Skip to content
OpenAdvisories

Archive

8 March 2005

Vulnerabilities first published on this day (UTC), newest first.

18 results · Feed

  • Unscored —
    CVE-2005-0689 Public exploit

    includer.cgi in The Includer allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the …

  • Unscored —

    Buffer overflow in JoWood Chaser 1.50 and earlier allows remote attackers to cause a denial of service (client or serve…

  • Unscored —

    Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service (memory consumption) …

  • Unscored —

    Multiple access validation errors in OutStart Participate Enterprise (PE) allow remote attackers to (1) browse arbitrar…

  • Unscored —

    Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which al…

  • Unscored —

    SQL injection vulnerability in the process_picture function xp_publish.php in CopperExport 0.2.1 allows remote attacker…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in fusion_core.php for PHP-Fusion 5.x allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2005-0688 Public exploit EPSS 47%

    Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service …

  • Unscored —

    Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obt…

  • Unscored —
    CVE-2005-0353 Public exploit EPSS 71%

    Buffer overflow in the Sentinel LM (Lservnt) service in the Sentinel License Manager 7.2.0.2 allows remote attackers to…

  • Unscored —
    CVE-2005-0691 Public exploit

    PHP remote file inclusion vulnerability in article mode for modules.php in SocialMPN allows remote attackers to execute…

  • Unscored —

    The password recovery feature (forgotpassword.asp) in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attac…

  • Unscored —

    Gene6 FTP Server does not properly restrict access to the control console, which allows local users to modify the serve…

  • Unscored —

    The SDL port of abuse (abuse-SDL) before 2.00 does not properly drop privileges before creating certain files, which al…

  • Unscored —

    Buffer overflow in ArGoSoft FTP Server 1.4.2.8 allows remote authenticated users to execute arbitrary code via a long D…

  • Unscored —

    Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote attackers to execute arb…

  • Unscored —

    Multiple buffer overflows in the SDL port of abuse (abuse-SDL) before 2.00 allow local users to execute arbitrary code …

  • Unscored —

    Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other proc…