Skip to content
OpenAdvisories

Archive

26 March 2005

Vulnerabilities first published on this day (UTC), newest first.

← February 2005 2005 / March /26 April 2005 →
  1. 113
  2. 219
  3. 33
  4. 424
  5. 5 
  6. 6 
  7. 733
  8. 818
  9. 912
  10. 1024
  11. 1122
  12. 1224
  13. 1330
  14. 14 
  15. 15 
  16. 16 
  17. 174
  18. 1812
  19. 19 
  20. 2063
  21. 21 
  22. 2223
  23. 232
  24. 2435
  25. 2517
  26. 2646
  27. 27 
  28. 2826
  29. 2945
  30. 302
  31. 311
All Critical High Medium Low Exploited only Public exploit

46 results · Feed

  • Unscored —
    CVE-2004-1771

    Scalable OGo (SOGo) 1.0 allows remote authenticated users to bypass intended permissions and view private appointments …

  • Unscored —
    CVE-2002-1629

    Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null passw…

  • Unscored —
    CVE-2002-1632

    Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment va…

  • Unscored —
    CVE-2002-1625

    Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attacke…

  • Unscored —
    CVE-2002-1633

    Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments t…

  • Unscored —
    CVE-2002-1619

    Buffer overflow in the FC client for IBM AIX 4.3.x allows remote attackers to cause a denial of service (crash and core…

  • Unscored —
    CVE-2002-1620

    Unknown vulnerability in IBM AIX Parallel Systems Support Programs (PSSP) 3.1.1, 3.2, and 3.4 allows remote attackers t…

  • Unscored —
    CVE-2002-1622

    Buffer overflow in certain RPC routines in IBM AIX 4.3 may allow attackers to execute arbitrary code, related to a "var…

  • Unscored —
    CVE-2002-1623 EPSS 49%

    The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, do…

  • Unscored —
    CVE-2002-1626

    Directory traversal vulnerability in Mike Spice My Calendar before 1.5 allows remote attackers to write arbitrary files…

  • Unscored —
    CVE-2002-1628

    Directory traversal vulnerability in vote.cgi for Mike Spice Mike's Vote CGI before 1.3 allows remote attackers to writ…

  • Unscored —
    CVE-2002-1624

    Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause…

  • Unscored —
    CVE-2002-1630

    The sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote attackers to send arbitrary emails.

  • Unscored —
    CVE-2002-1631

    SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attacker…

  • Unscored —
    CVE-2002-1627

    Directory traversal vulnerability in quiz.cgi for Mike Spice Quiz Me! before 0.6 allows remote attackers to write arbit…

  • Unscored —
    CVE-2002-1621

    Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2005-0866

    cdrecord before 4:2.0, when DEBUG is enabled, allows local users to overwrite arbitrary files via a symlink attack on t…

  • Unscored —
    CVE-2005-0882

    SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2005-0889 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php for Dream4 Koobi CMS 4.2.3 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2005-0879 Public exploit

    PHP remote file include vulnerability in (1) content.php and (2) index.php for Vortex Portal allows remote attackers to…

  • Unscored —
    CVE-2005-0871

    calendar_scheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS server, allows remote …

  • Unscored —
    CVE-2005-0887 Public exploit

    Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2005-0872 Public exploit

    Cross-site scripting (XSS) vulnerability in calendar_scheduler.php in the Topic Calendar 1.0.1 module for phpBB allows …

  • Unscored —
    CVE-2005-0762

    Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary cod…

    imagemagick Debian
  • Unscored —
    CVE-2005-0874

    Multiple buffer overflows in the (1) AIM, (2) MSN, (3) RSS, and other plug-ins for Trillian 2.0 allow remote web server…

  • Unscored —
    CVE-2005-0398

    The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malfo…

  • Unscored —
    CVE-2005-0884

    DigitalHive 2.0 allows remote attackers to re-install the product by directly accessing the install script.

  • Unscored —
    CVE-2005-0868

    AS/400 Telnet 5250 terminal emulation clients, as implemented by (1) IBM client access, (2) Bosanova, (3) PowerTerm, (4…

    tn5250 Azure Linux
  • Unscored —
    CVE-2005-0885

    Multiple cross-site scripting (XSS) vulnerabilities in XMB Forum 1.9.1 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2005-0870 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is enabled, allow remote a…

    phpsysinfo Debian
  • Unscored —
    CVE-2005-0876

    Off-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute arbitrary code via the DHCP lease file.

    dnsmasq Debian
  • Unscored —
    CVE-2005-0873 Public exploit EPSS 11%

    Multiple cross-site scripting (XSS) vulnerabilities in test.jsp in Oracle Reports Server 10g (9.0.4.3.3) allow remote a…

  • Unscored —
    CVE-2005-0759

    ImageMagick before 6.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image with a…

    imagemagick Debian
  • Unscored —
    CVE-2005-0888

    Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote at…

  • Unscored —
    CVE-2005-0761

    Unknown vulnerability in ImageMagick before 6.1.8 allows remote attackers to cause a denial of service (application cra…

    imagemagick Debian
  • Unscored —
    CVE-2005-0760

    The TIFF decoder in ImageMagick before 6.0 allows remote attackers to cause a denial of service (crash) via a crafted T…

    imagemagick Debian
  • Unscored —
    CVE-2005-0881 Public exploit

    Cross-site scripting (XSS) vulnerability in articles.newcomment for Interspire ArticleLive 2005 allows remote attackers…

  • Unscored —
    CVE-2005-0880

    content.php in Vortex Portal allows remote attackers to obtain sensitive information via an invalid act parameter, whic…

  • Unscored —
    CVE-2005-0867

    Integer overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to a sysfs file.

  • Unscored —
    CVE-2005-0878

    Cross-site scripting (XSS) vulnerability in MercuryBoard before 1.1.3 allows remote attackers to inject arbitrary web s…