Skip to content
OpenAdvisories

Archive

20 March 2005

Vulnerabilities first published on this day (UTC), newest first.

63 results · Feed

  • Unscored —
    CVE-2005-0808 EPSS 23%

    Apache Tomcat before 5.x allows remote attackers to cause a denial of service (application crash) via a crafted AJP12 p…

  • Unscored —

    Buffer overflow in Initial Redirect (ir) Squid Proxy Plug-In 0.1 and 0.2 may allow attackers to cause a denial of servi…

  • Unscored —

    Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewal…

  • Unscored —

    PhotoPost PHP 5.0 RC3 does not fully verify that an uploaded file is an image file, which allows remote attackers to in…

  • Unscored —

    ZPanel 2.0 and 2.5 beta 10 does not remove or protect installation scripts after they have been used, which allows remo…

  • Unscored —

    Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4436 allows remote attackers to execute arbitrary co…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2005-0788 Public exploit

    LimeWire 4.1.2 through 4.5.6 allows remote attackers to read arbitrary files by specifying the full pathname in a Gnute…

  • Unscored —
    CVE-2005-0643 Public exploit EPSS 10%

    Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary co…

  • Unscored —

    SQL injection vulnerability in NotifyLink before 3.0 allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in usersrecentposts in YaBB 2.0 rc1 allows remote attackers to inject arbitrar…

  • Unscored —

    SQL injection vulnerability in member.php and possibly other scripts in PhotoPost PHP 5.0 RC3 allows remote attackers t…

  • Unscored —

    Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when present…

  • Unscored —

    Unknown vulnerability in lshd in Lysator LSH 1.x and 2.x before 2.0.1 allows remote attackers to cause a denial of serv…

  • Unscored —

    The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authenticatio…

  • Unscored —

    Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restri…

  • Unscored —
    CVE-2005-0802 Public exploit

    Cross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 through 1.1b allows remote attackers to execute …

  • Unscored —
    CVE-2005-0780 Public exploit

    paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, …

  • Unscored —

    Wine 20050211 and earlier creates temp files with world readable permissions and predictable file names, which allows l…

  • Unscored —

    Directory traversal vulnerability in includer.cgi in The Includer allows remote attackers to read arbitrary files via (…

  • Unscored —

    Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of service (application c…

  • Unscored —
    CVE-2005-0786 Public exploit

    SQL injection vulnerability in gb_new.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the q…

  • Unscored —
    CVE-2003-1131 Public exploit

    PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as KnowledgeBase, allows remote a…