Archive
March 2005
Vulnerabilities first published in this month (UTC), newest first.
134 results · Clear filters · Feed
-
Unscored —CVE-2005-0929 Public exploit
SQL injection vulnerability in PhotoPost PHP Pro 5.x may allow remote attackers to execute arbitrary SQL commands via (…
-
Unscored —CVE-2005-0906 Public exploit
Buffer overflow in a player logging function in the Tincat network library 2.x before 2.0.28, as used in games such as …
-
Unscored —CVE-2005-0925 Public exploit
Cross-site scripting (XSS) vulnerability in login.asp for Ublog Reload 1.0 through 1.0.4 allows remote attackers to inj…
-
Unscored —CVE-2005-0895 Public exploit
Netcomm 1300NB DSL Modem allows remote attackers to cause a denial of service (device hang) via a large number of ping …
-
Unscored —CVE-2005-0928 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 5.x allow remote attackers to inject arbitrary…
-
Unscored —CVE-2005-0905 Public exploit
Maxthon 1.2.0 allows remote malicious web sites to obtain potentially sensitive data from the search bar via the m2_sea…
-
Unscored —CVE-2005-0896 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in review.php in phpMyDirectory 10.1.3-rel allow remote attackers t…
-
Unscored —CVE-2005-0936 Public exploit
Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitr…
-
Unscored —CVE-2005-0903 Public exploit
Buffer overflow in QuickTime PictureViewer 6.5.1 allows remote attackers to cause a denial of service (application cras…
-
Unscored —CVE-2005-0935 Public exploit
Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2005-0931 Public exploit
PHP remote file inclusion vulnerability in The Includer 1.0 and 1.1 allows remote attackers to execute arbitrary PHP co…
-
Unscored —CVE-2005-0904 Public exploit
Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote…
-
Unscored —CVE-2005-0892 Public exploit
Buffer overflow in smail 3.2.0.120 allows remote attackers or local users to execute arbitrary code via a long string i…
-
Unscored —CVE-2005-0916 Public exploit
AIO in the Linux kernel 2.6.11 on the PPC64 or IA64 architectures with CONFIG_HUGETLB_PAGE enabled allows local users t…
-
Unscored —
Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) nds…
-
Unscored —CVE-2002-1656 Public exploit
X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the pa…
-
Unscored —
Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbi…
-
Unscored —CVE-2002-1652 Public exploit
Buffer overflow in cgicso.c for cgiemail 1.6 allows remote attackers to cause a denial of service (crash) and possibly …
-
Unscored —
Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote a…
-
Unscored —CVE-2005-0889 Public exploit
Cross-site scripting (XSS) vulnerability in index.php for Dream4 Koobi CMS 4.2.3 allows remote attackers to inject arbi…
-
Unscored —CVE-2005-0879 Public exploit
PHP remote file include vulnerability in (1) content.php and (2) index.php for Vortex Portal allows remote attackers to…
-
Unscored —CVE-2005-0887 Public exploit
Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code…
-
Unscored —CVE-2005-0872 Public exploit
Cross-site scripting (XSS) vulnerability in calendar_scheduler.php in the Topic Calendar 1.0.1 module for phpBB allows …
-
Unscored —CVE-2005-0870 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is enabled, allow remote a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in test.jsp in Oracle Reports Server 10g (9.0.4.3.3) allow remote a…
-
Unscored —CVE-2005-0881 Public exploit
Cross-site scripting (XSS) vulnerability in articles.newcomment for Interspire ArticleLive 2005 allows remote attackers…
-
Unscored —CVE-2005-0886 Public exploit
Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject ar…
-
Unscored —CVE-2005-0883 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in base.php for DigitalHive 2.0 allow remote attackers to inject ar…
-
Unscored —CVE-2005-0890 Public exploit
SQL injection vulnerability in Dream4 Koobi CMS 4.2.3 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2002-1602 Public exploit
Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows local users to execut…
-
Unscored —CVE-2002-1616 Public exploit
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges vi…
-
Unscored —CVE-2002-1614 Public exploit
Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at.
-
Unscored —
Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long …
-
Unscored —
GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminate…
-
Unscored —
PHP remote file inclusion vulnerability in CzarNews 1.13b allows remote attackers to execute arbitrary PHP code via the…
-
Unscored —CVE-2005-0841 Public exploit
SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passt…
-
Unscored —CVE-2005-0847 Public exploit
Code Ocean FTP server 1.0 allows remote attackers to cause a denial of service via a large number of connections.
-
Unscored —CVE-2005-0842 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2005-0863 Public exploit
Cross-site scripting (XSS) vulnerability in PHPOpenChat v3.x allows remote attackers to inject arbitrary web script or …
-
Unscored —CVE-2005-0854 Public exploit
betaparticle blog (bp blog), posisbly before version 4, allows remote attackers to bypass authentication and (1) upload…