Archive
22 March 2005
Vulnerabilities first published on this day (UTC), newest first.
23 results · Feed
-
Unscored —
Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a p…
-
Unscored —
Unknown vulnerability in ColdFusion Server 2.0 through 4.5.1 SP2 allows remote attackers to overwrite templates with ze…
-
Unscored —
Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default …
-
Unscored —
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA…
-
Unscored —
The SNMP service in the Belkin 54G (F5D7130) wireless router allows remote attackers to cause a denial of service via u…
-
Unscored —CVE-2005-0829 Public exploit
Cross-site scripting (XSS) vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attack…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PHP-Post before 0.33 allows remote attackers to inject arbitrary web script…
-
Unscored —
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows untrusted applications to gain …
-
Unscored —CVE-2005-0838 Public exploit
Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possi…
-
Unscored —
PHP-Post allows remote attackers to spoof the names of other users by registering with a username containing hex-encode…
-
Unscored —
Belkin 54G (F5D7130) wireless router enables SNMP by default in a manner that allows remote attackers to obtain sensiti…
-
Unscored —
Mac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain pr…
-
Unscored —
Belkin 54G (F5D7130) wireless router allows remote attackers to access restricted resources by sniffing URIs from UPNP …
-
Unscored —CVE-2005-0713 Public exploit
The Bluetooth Setup Assistant for Mac OS X before 10.3.8 can be launched without a keyboard or Bluetooth device, which …
-
Unscored —
Buffer overflow in LTris before 1.0.10 allows local users to execute arbitrary code via a crafted highscores file.
-
Unscored —CVE-2005-0828 Public exploit
highlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other products based on e-X…
-
Unscored —
Multiple buffer overflows in Xzabite DYNDNSUpdate 0.6.15 and earlier, including the ipcheck function in dyndnsupdate.c,…
-
Unscored —
Viewcat.php in (1) RUNCMS 1.1A, (2) Ciamos 0.9.2 RC1, e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (…
-
Unscored —CVE-2005-0716 Public exploit
Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions…
-
Unscored —
AFP Server in Mac OS X before 10.3.8 uses insecure permissions for "Drop Boxes," which allows local users to read the c…
-
Unscored —
IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .…
-
Unscored —
Buffer overflow in command.C for rxvt-unicode before 5.3 allows remote attackers to execute arbitrary code via a crafte…
-
Unscored —
OllyDbg 1.10 and earlier allows remote attackers to cause a denial of service (application crash) via a dynamic link li…