Skip to content
OpenAdvisories

Archive

March 2005

Vulnerabilities first published in this month (UTC), newest first.

← February 2005 2005 / March April 2005 →
  1. 113
  2. 219
  3. 33
  4. 424
  5. 5 
  6. 6 
  7. 733
  8. 818
  9. 912
  10. 1024
  11. 1122
  12. 1224
  13. 1330
  14. 14 
  15. 15 
  16. 16 
  17. 174
  18. 1812
  19. 19 
  20. 2063
  21. 21 
  22. 2223
  23. 232
  24. 2435
  25. 2517
  26. 2646
  27. 27 
  28. 2826
  29. 2945
  30. 302
  31. 311
All Critical High Medium Low Exploited only Public exploit

134 results · Clear filters · Feed

  • Unscored —
    CVE-2005-0736 Public exploit

    Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel…

  • Unscored —
    CVE-2005-0741 Public exploit

    Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-0739 Public exploit

    The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting s…

  • Unscored —
    CVE-2005-0725 Public exploit

    SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows re…

  • Unscored —
    CVE-2005-0720 Public exploit

    PHP remote file inclusion vulnerability in admin/header.php in PHP mcNews 1.3 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2003-1123 Public exploit EPSS 11%

    Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information …

  • Unscored —
    CVE-2003-1118 Public exploit EPSS 18%

    Buffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause a denial of service (c…

  • Unscored —
    CVE-2003-1129 Public exploit

    Buffer overflow in the Yahoo! Audio Conferencing (aka Voice Chat) ActiveX control before 1,0,0,45 allows remote attacke…

  • Unscored —
    CVE-2005-0711 Public exploit

    MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which all…

  • Unscored —
    CVE-2005-0709 Public exploit EPSS 18%

    MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges t…

  • Unscored —
    CVE-2005-0710 Public exploit EPSS 13%

    MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges t…

  • Unscored —
    CVE-2003-1097 Public exploit

    Buffer overflow in rexec on HP-UX B.10.20, B.11.00, and B.11.04, when setuid root, may allow local users to gain privil…

  • Unscored —
    CVE-2004-1770 Public exploit EPSS 10%

    The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via she…

  • Unscored —
    CVE-2004-1769 Public exploit EPSS 35%

    The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x,…

  • Unscored —
    CVE-2003-1096 Public exploit EPSS 10%

    The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary at…

  • Unscored —
    CVE-2003-1090 Public exploit EPSS 12%

    Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window …

  • Unscored —
    CVE-2003-1091 Public exploit

    Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a…

  • Unscored —
    CVE-2003-1092 Public exploit

    Unknown vulnerability in the "Automatic File Content Type Recognition (AFCTR) Tool version of the file package before 3…

    file Debian
  • Unscored —
    CVE-2004-1754 Public exploit

    The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache vi…

  • Unscored —
    CVE-2005-0700 Public exploit

    The export_index action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly b…

  • Unscored —
    CVE-2005-0701 Public exploit EPSS 18%

    Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitra…

  • Unscored —
    CVE-2005-0548 Public exploit

    Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers…

  • Unscored —
    CVE-2005-0698 Public exploit

    PHP remote file inclusion vulnerability in PHPWebLog 0.5.3 and earlier allows remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2005-0549 Public exploit

    Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers…

  • Unscored —
    CVE-2005-0689 Public exploit

    includer.cgi in The Includer allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the …

  • Unscored —
    CVE-2005-0688 Public exploit EPSS 47%

    Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2005-0353 Public exploit EPSS 71%

    Buffer overflow in the Sentinel LM (Lservnt) service in the Sentinel License Manager 7.2.0.2 allows remote attackers to…

  • Unscored —
    CVE-2005-0691 Public exploit

    PHP remote file inclusion vulnerability in article mode for modules.php in SocialMPN allows remote attackers to execute…

  • Unscored —
    CVE-2005-0681 Public exploit

    Nokia Symbian 60 allows remote attackers to cause a denial of service (phone restart) via a Bluetooth nickname.

  • Unscored —
    CVE-2005-0666 Public exploit

    Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC …

  • Unscored —
    CVE-2005-0678 Public exploit

    PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier allows remote attacker…

  • Unscored —
    CVE-2005-0670 Public exploit

    Cross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 through 1.2.1b allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2005-0680 Public exploit

    PHP remote file inclusion vulnerability in download_center_lite.inc.php for Download Center Lite 1.6 allows remote atta…

  • Unscored —
    CVE-2005-0671 Public exploit

    Format string vulnerability in Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to …

  • Unscored —
    CVE-2003-1088 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.4 and 3.5 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2003-1089 Public exploit

    index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names,…

  • Unscored —
    CVE-2005-0629 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in profile.php in 427BB 2.2 allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2005-0647 Public exploit

    admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1) $form[comments] or (2…

  • Unscored —
    CVE-2005-0650 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2005-0632 Public exploit

    PHP remote file inclusion vulnerability in auth.php in PHPNews 1.2.4 and possibly 1.2.3, allows remote attackers to exe…