Archive
March 2005
Vulnerabilities first published in this month (UTC), newest first.
134 results · Clear filters · Feed
-
Unscored —CVE-2005-0852 Public exploit
Microsoft Windows XP SP1 allows local users to cause a denial of service (system crash) via an empty datagram to a raw …
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2005-0860 Public exploit
PHP remote file inclusion vulnerability in TRG News Script 3.0 allows remote attackers to execute arbitrary PHP code vi…
-
Unscored —CVE-2005-0843 Public exploit
CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting…
-
Unscored —CVE-2005-0853 Public exploit
betaparticle blog (bp blog) stores the database under the web root, which allows remote attackers to obtain sensitive i…
-
Unscored —CVE-2005-0857 Public exploit
Cross-site scripting (XSS) vulnerability in avatar.php for CoolForum 0.8 and earlier allows remote attackers to inject …
-
Unscored —CVE-2005-0858 Public exploit
Multiple SQL injection vulnerabilities in CoolForum 0.8 and earlier allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2005-0848 Public exploit
Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt…
-
Unscored —CVE-2005-0829 Public exploit
Cross-site scripting (XSS) vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attack…
-
Unscored —CVE-2005-0838 Public exploit
Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possi…
-
Unscored —CVE-2005-0713 Public exploit
The Bluetooth Setup Assistant for Mac OS X before 10.3.8 can be launched without a keyboard or Bluetooth device, which …
-
Unscored —CVE-2005-0828 Public exploit
highlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other products based on e-X…
-
Unscored —CVE-2005-0716 Public exploit
Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions…
-
Unscored —CVE-2005-0792 Public exploit
SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) uname p…
-
Unscored —CVE-2005-0783 Public exploit
Cross-site scripting (XSS) vulnerability in Phorum before 5.0.14a allows remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2005-0818 Public exploit
Cross-site scripting (XSS) vulnerability in PunBB 1.2.3 allows remote attackers to inject arbitrary web script or HTML …
-
Unscored —CVE-2005-0791 Public exploit
Cross-site scripting (XSS) vulnerability in adframe.php in phpAdsNew 2.0.4-pr1, when register_globals is enabled, allow…
-
Unscored —CVE-2005-0804 Public exploit
Format string vulnerability in MailEnable 1.8 allows remote attackers to cause a denial of service (application crash) …
-
Unscored —CVE-2005-0781 Public exploit
SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers…
-
Unscored —CVE-2005-0823 Public exploit
ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.…
-
Unscored —CVE-2005-0800 Public exploit
PHP remote file inclusion vulnerability in install.php in mcNews 1.3 and earlier allows remote attackers to execute arb…
-
Unscored —
The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service …
-
Unscored —CVE-2005-0776 Public exploit
adm-photo.php in PhotoPost PHP 5.0 RC3 does not properly verify administrative privileges before manipulating photos, w…
-
Unscored —CVE-2005-0779 Public exploit
PlatinumFTP 1.0.18, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) …
-
Unscored —CVE-2005-0782 Public exploit
Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier allows re…
-
Unscored —CVE-2005-0805 Public exploit
SQL injection vulnerability in index.php in Subdreamer Light, when magic_quotes_gpc is enabled, allows remote attackers…
-
Unscored —CVE-2005-0795 Public exploit
HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite a…
-
Unscored —CVE-2005-0796 Public exploit
Directory traversal vulnerability in HolaCMS 1.4.9-1 allows remote attackers to overwrite arbitrary files via a "holaDB…
-
Unscored —
Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to ca…
-
Unscored —CVE-2005-0788 Public exploit
LimeWire 4.1.2 through 4.5.6 allows remote attackers to read arbitrary files by specifying the full pathname in a Gnute…
-
Unscored —
Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary co…
-
Unscored —CVE-2005-0802 Public exploit
Cross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 through 1.1b allows remote attackers to execute …
-
Unscored —CVE-2005-0780 Public exploit
paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, …
-
Unscored —CVE-2005-0786 Public exploit
SQL injection vulnerability in gb_new.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the q…
-
Unscored —CVE-2003-1131 Public exploit
PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as KnowledgeBase, allows remote a…
-
Unscored —
Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions befo…
-
Unscored —CVE-2005-0385 Public exploit
Buffer overflow in luxman before 0.41, if used with certain insecure svgalib libraries, allows local users to execute a…
-
Unscored —CVE-2005-0731 Public exploit
PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (CPU consumpt…
-
Unscored —CVE-2005-0735 Public exploit
newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin.
-
Unscored —CVE-2005-0737 Public exploit
Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode.