Skip to content
OpenAdvisories

Archive

20 March 2005

Vulnerabilities first published on this day (UTC), newest first.

← February 2005 2005 / March /20 April 2005 →
  1. 113
  2. 219
  3. 33
  4. 424
  5. 5 
  6. 6 
  7. 733
  8. 818
  9. 912
  10. 1024
  11. 1122
  12. 1224
  13. 1330
  14. 14 
  15. 15 
  16. 16 
  17. 174
  18. 1812
  19. 19 
  20. 2063
  21. 21 
  22. 2223
  23. 232
  24. 2435
  25. 2517
  26. 2646
  27. 27 
  28. 2826
  29. 2945
  30. 302
  31. 311
All Critical High Medium Low Exploited only Public exploit

63 results · Feed

  • Unscored —
    CVE-2001-1423

    Advanced Poll before 1.61, when using a flat file database, allows remote attackers to gain privileges by setting the l…

  • Unscored —
    CVE-2001-1421

    AOL Instant Messenger (AIM) 4.7 and earlier allows remote attackers to cause a denial of service (application crash) vi…

  • Unscored —
    CVE-2001-1418

    AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a malforme…

  • Unscored —
    CVE-2001-1422

    WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to…

  • Unscored —
    CVE-2001-1419

    AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application cras…

  • Unscored —
    CVE-2001-1417

    AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application hang or crash) via a …

  • Unscored —
    CVE-2001-1420

    AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a long fil…

  • Unscored —
    CVE-2001-1416

    Multiple cross-site scripting (XSS) vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messen…

  • Unscored —
    CVE-2002-1601

    The Connectables feature in Adobe PhotoDeluxe 3.1 prepends the Adobe directory to the CLASSPATH environment variable, w…

  • Unscored —
    CVE-2005-0792 Public exploit

    SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) uname p…

  • Unscored —
    CVE-2005-0783 Public exploit

    Cross-site scripting (XSS) vulnerability in Phorum before 5.0.14a allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2005-0818 Public exploit

    Cross-site scripting (XSS) vulnerability in PunBB 1.2.3 allows remote attackers to inject arbitrary web script or HTML …

  • Unscored —
    CVE-2005-0798

    Novell iChain Mini FTP Server 2.3, and possibly earlier versions, does not limit the number of incorrect logins, which …

  • Unscored —
    CVE-2005-0791 Public exploit

    Cross-site scripting (XSS) vulnerability in adframe.php in phpAdsNew 2.0.4-pr1, when register_globals is enabled, allow…

  • Unscored —
    CVE-2005-0804 Public exploit

    Format string vulnerability in MailEnable 1.8 allows remote attackers to cause a denial of service (application crash) …

  • Unscored —
    CVE-2005-0793

    PHP remote file inclusion vulnerability in zpanel.php in ZPanel allows remote attackers to (1) execute arbitrary PHP co…

  • Unscored —
    CVE-2005-0781 Public exploit

    SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers…

  • Unscored —
    CVE-2005-0777

    Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP 5.0 RC3 allow remote attackers to inject arbitrary…

  • Unscored —
    CVE-2005-0775

    The reportpost action in misc.php for PhotoPost PHP 5.0 RC3 does not limit the logging data that is sent to the adminis…

  • Unscored —
    CVE-2005-0823 Public exploit

    ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.…

  • Unscored —
    CVE-2005-0800 Public exploit

    PHP remote file inclusion vulnerability in install.php in mcNews 1.3 and earlier allows remote attackers to execute arb…

  • Unscored —
    CVE-2005-0812

    The web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page, which could allow remot…

  • Unscored —
    CVE-2005-0811

    The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, …

  • Unscored —
    CVE-2005-0352

    Servers Alive 4.1 and 5.0, when running as a service, does not drop SYSTEM privileges before loading local manual under…

  • Unscored —
    CVE-2005-0797

    Novell iChain Mini FTP Server 2.3 displays different error messages if a user exists or not, which allows remote attack…

  • Unscored —
    CVE-2005-0803 Public exploit EPSS 68%

    The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2005-0776 Public exploit

    adm-photo.php in PhotoPost PHP 5.0 RC3 does not properly verify administrative privileges before manipulating photos, w…

  • Unscored —
    CVE-2005-0816

    Buffer overflow in newgrp in Solaris 7 through 9 allows local users to gain root privileges.

  • Unscored —
    CVE-2005-0789

    Directory traversal vulnerability in LimeWire 3.9.6 through 4.6.0 allows remote attackers to read arbitrary files via a…

  • Unscored —
    CVE-2005-0779 Public exploit

    PlatinumFTP 1.0.18, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) …

  • Unscored —
    CVE-2005-0782 Public exploit

    Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier allows re…

  • Unscored —
    CVE-2005-0805 Public exploit

    SQL injection vulnerability in index.php in Subdreamer Light, when magic_quotes_gpc is enabled, allows remote attackers…

  • Unscored —
    CVE-2005-0806

    Evolution 2.0.3 allows remote attackers to cause a denial of service (application crash or hang) via crafted messages, …

    evolution Debian
  • Unscored —
    CVE-2005-0809

    NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request t…

  • Unscored —
    CVE-2005-0799

    MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of servic…

  • Unscored —
    CVE-2005-0790

    phpAdsNew 2.0.4 allows remote attackers to obtain sensitive information via a direct request to (1) lib-xmlrpcs.inc.php…

  • Unscored —
    CVE-2005-0795 Public exploit

    HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite a…

  • Unscored —
    CVE-2005-0796 Public exploit

    Directory traversal vulnerability in HolaCMS 1.4.9-1 allows remote attackers to overwrite arbitrary files via a "holaDB…

  • Unscored —
    CVE-2005-0820

    Microsoft Office InfoPath 2003 SP1 includes sensitive information in the Manifest.xsf file in a custom .xsn form, which…

  • Unscored —
    CVE-2005-0815 Public exploit EPSS 13%

    Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to ca…