Skip to content
OpenAdvisories

Archive

22 March 2005

Vulnerabilities first published on this day (UTC), newest first.

23 results · Feed

  • Unscored —

    Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a p…

  • Unscored —

    Unknown vulnerability in ColdFusion Server 2.0 through 4.5.1 SP2 allows remote attackers to overwrite templates with ze…

  • Unscored —

    Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default …

  • Unscored —

    The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA…

  • Unscored —

    The SNMP service in the Belkin 54G (F5D7130) wireless router allows remote attackers to cause a denial of service via u…

  • Unscored —
    CVE-2005-0829 Public exploit

    Cross-site scripting (XSS) vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attack…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in PHP-Post before 0.33 allows remote attackers to inject arbitrary web script…

  • Unscored —

    Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows untrusted applications to gain …

  • Unscored —
    CVE-2005-0838 Public exploit

    Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possi…

  • Unscored —

    PHP-Post allows remote attackers to spoof the names of other users by registering with a username containing hex-encode…

  • Unscored —

    Belkin 54G (F5D7130) wireless router enables SNMP by default in a manner that allows remote attackers to obtain sensiti…

  • Unscored —

    Mac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain pr…

  • Unscored —

    Belkin 54G (F5D7130) wireless router allows remote attackers to access restricted resources by sniffing URIs from UPNP …

  • Unscored —
    CVE-2005-0713 Public exploit

    The Bluetooth Setup Assistant for Mac OS X before 10.3.8 can be launched without a keyboard or Bluetooth device, which …

  • Unscored —

    Buffer overflow in LTris before 1.0.10 allows local users to execute arbitrary code via a crafted highscores file.

  • Unscored —
    CVE-2005-0828 Public exploit

    highlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other products based on e-X…

  • Unscored —

    Multiple buffer overflows in Xzabite DYNDNSUpdate 0.6.15 and earlier, including the ipcheck function in dyndnsupdate.c,…

  • Unscored —

    Viewcat.php in (1) RUNCMS 1.1A, (2) Ciamos 0.9.2 RC1, e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (…

  • Unscored —
    CVE-2005-0716 Public exploit

    Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions…

  • Unscored —

    AFP Server in Mac OS X before 10.3.8 uses insecure permissions for "Drop Boxes," which allows local users to read the c…

  • Unscored —

    IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .…

  • Unscored —

    Buffer overflow in command.C for rxvt-unicode before 5.3 allows remote attackers to execute arbitrary code via a crafte…

  • Unscored —

    OllyDbg 1.10 and earlier allows remote attackers to cause a denial of service (application crash) via a dynamic link li…