Skip to content
OpenAdvisories

Archive

12 March 2005

Vulnerabilities first published on this day (UTC), newest first.

24 results · Feed

  • Unscored —

    SQL injection vulnerability in editpost.php in UBB.threads 6.0 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2005-0725 Public exploit

    SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows re…

  • Unscored —

    Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setu…

  • Unscored —

    PHP remote file inclusion vulnerability in modules.php in eXPerience2 allows remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2005-0718 EPSS 13%

    Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the…

  • Unscored —
    CVE-2005-0720 Public exploit

    PHP remote file inclusion vulnerability in admin/header.php in PHP mcNews 1.3 allows remote attackers to execute arbitr…

  • Unscored —

    Unknown vulnerability in the systems message queue in HP Tru64 Unix 4.0F PK8 through 5.1B-2/PK4 allows local users to c…

  • Unscored —

    eXPerience2 allows remote attackers to obtain the full path for the web root via a direct request to modules.php withou…

  • Unscored —

    paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via (1) an invalid str parameter to pa…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the jumpmenu function in functions.php for paFileDB 3.1 and earlier allows …

  • Unscored —

    ScriptLogic 4.01, and possibly other versions before 4.14, uses insecure permissions for the LOGS$ share, which allows …

  • Unscored —

    Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is en…

  • Unscored —

    Whale Communications e-Gap 2.5 on Windows 2000 allows remote attackers to obtain the source code for the login page via…

  • Unscored —

    XMMS.pm in X2 XMMS Remote, as obtained from the vendor server between 4 AM 11 AM PST on May 7, 2003, allows remote atta…

  • Unscored —
    CVE-2003-1123 Public exploit EPSS 11%

    Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information …

  • Unscored —

    The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Busines…

  • Unscored —
    CVE-2003-1118 Public exploit EPSS 18%

    Buffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause a denial of service (c…

  • Unscored —

    Buffer overflow in RealSystem Server 6.x, 7.x and 8.x, and RealSystem Proxy 8.x, related to URL error handling, allows …

  • Unscored —
    CVE-2003-1129 Public exploit

    Buffer overflow in the Yahoo! Audio Conferencing (aka Voice Chat) ActiveX control before 1,0,0,45 allows remote attacke…

  • Unscored —

    Services in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at raised privileges, wh…

  • Unscored —

    Unknown vulnerability in Sun Management Center (SunMC) 2.1.1, 3.0, and 3.0 Revenue Release (RR), when installed and run…

  • Unscored —

    Unknown vulnerability in ns-ldapd for Sun ONE Directory Server 4.16, 5.0, and 5.1 allows LDAP clients to cause a denial…

  • Unscored —

    SSH Secure Shell before 3.2.9 allows remote attackers to cause a denial of service via malformed BER/DER packets.

  • Unscored —

    Unknown vulnerability in SunOne/iPlanet Web Server SP3 through SP5 on Windows platforms allows remote attackers to caus…