Skip to content
OpenAdvisories

Archive

13 March 2005

Vulnerabilities first published on this day (UTC), newest first.

30 results · Feed

  • Unscored —

    Buffer overflow in (1) grpck and (2) pwck, if installed setuid on a system as recommended in some AIX documentation, ma…

  • Unscored —

    AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user appr…

  • Unscored —

    mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a c…

  • Unscored —
    CVE-2002-1592 EPSS 12%

    The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error message…

  • Unscored —

    Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (halt) via a fragm…

  • Unscored —

    DansGuardian before 2.4.5-1 allows remote attackers to bypass content filtering rules via hex-encoded URLs.

  • Unscored —

    Cisco SN 5420 Storage Router 1.1(5) and earlier allows attackers to read configuration files without authorization.

  • Unscored —

    Directory traversal vulnerability in Mike Spice's My Classifieds (classifieds.cgi) before 1.3 allows remote attackers t…

  • Unscored —

    Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (router crash) via…

  • Unscored —

    Buffer overflows in Computer Associates MLink (CA-MLink) 6.5 and earlier may allow local users to execute arbitrary cod…

  • Unscored —

    PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (memory exhau…

  • Unscored —
    CVE-2005-0731 Public exploit

    PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (CPU consumpt…

  • Unscored —

    The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the …

  • Unscored —

    PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service via a request…

  • Unscored —

    The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privil…

  • Unscored —

    PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to obtain the full path of the web server …

  • Unscored —

    Format string vulnerability in Xpand Rally 1.1.0.0 and earlier allows remote attackers to execute arbitrary code via fo…

  • Unscored —

    PHP remote file inclusion vulnerability in initdb.php for WEBInsta Mailing list manager 1.3d allows remote attackers to…

  • Unscored —

    UTStarcom iAN-02EX VoIP Analog Terminal Adaptor (ATA) allows local users to bypass ATA access restrictions by dialing "…

  • Unscored —
    CVE-2005-0735 Public exploit

    newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin.

  • Unscored —

    The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) …

  • Unscored —
    CVE-2005-0737 Public exploit

    Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode.

  • Unscored —

    Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2005-0736 Public exploit

    Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel…

  • Unscored —

    ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing t…

  • Unscored —

    PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to determine the existence of files via an…

  • Unscored —
    CVE-2005-0741 Public exploit

    Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-0739 Public exploit

    The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting s…

  • Unscored —

    The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbi…