Skip to content
OpenAdvisories

Archive

March 2005

Vulnerabilities first published in this month (UTC), newest first.

← February 2005 2005 / March April 2005 →
  1. 113
  2. 219
  3. 33
  4. 424
  5. 5 
  6. 6 
  7. 733
  8. 818
  9. 912
  10. 1024
  11. 1122
  12. 1224
  13. 1330
  14. 14 
  15. 15 
  16. 16 
  17. 174
  18. 1812
  19. 19 
  20. 2063
  21. 21 
  22. 2223
  23. 232
  24. 2435
  25. 2517
  26. 2646
  27. 27 
  28. 2826
  29. 2945
  30. 302
  31. 311
All Critical High Medium Low Exploited only Public exploit

498 results · Feed

  • Unscored —
    CVE-2004-1758

    BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database…

  • Unscored —
    CVE-2004-1763

    Buffer overflow in hsrun.exe for HAHTsite Scenario Server 5.1 Patch 06 (build 91) allows remote attackers to cause a de…

  • Unscored —
    CVE-2004-1765

    Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allow…

  • Unscored —
    CVE-2004-1757

    BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, whi…

  • Unscored —
    CVE-2004-1761

    Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service (segmentation fault) v…

  • Unscored —
    CVE-2004-1766

    The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for communicati…

  • Unscored —
    CVE-2004-1768

    The character converters in the Spamhunter and Language ID modules for Symantec Brightmail AntiSpam 6.0.1 before patch …

  • Unscored —
    CVE-2004-1769 Public exploit EPSS 35%

    The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x,…

  • Unscored —
    CVE-2005-0707

    Buffer overflow in the IMAP daemon (IMAP4d32.exe) for Ipswitch Collaboration Suite (ICS) before 8.15 Hotfix 1 allows re…

  • Unscored —
    CVE-2003-1096 Public exploit EPSS 10%

    The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary at…

  • Unscored —
    CVE-2003-1094

    BEA WebLogic Server and Express version 7.0 SP3 may follow certain code execution paths that result in an incorrect cur…

  • Unscored —
    CVE-2003-1090 Public exploit EPSS 12%

    Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window …

  • Unscored —
    CVE-2003-1093

    BEA WebLogic Server 6.1, 7.0 and 7.0.0.1, when routing messages to a JMS target domain that is inaccessible, may leak t…

  • Unscored —
    CVE-2003-1095

    BEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web applications, does not…

  • Unscored —
    CVE-2003-1091 Public exploit

    Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a…

  • Unscored —
    CVE-2003-1092 Public exploit

    Unknown vulnerability in the "Automatic File Content Type Recognition (AFCTR) Tool version of the file package before 3…

    file Debian
  • Unscored —
    CVE-2004-0913

    Unknown vulnerability in ecartis 0.x before 0.129a+1.0.0-snap20020514-1.3 and 1.x before 1.0.0+cvs.20030911-8 allows at…

  • Unscored —
    CVE-2004-1754 Public exploit

    The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache vi…

  • Unscored —
    CVE-2005-0699

    Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for E…

  • Unscored —
    CVE-2005-0700 Public exploit

    The export_index action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly b…

  • Unscored —
    CVE-2005-0207

    Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O_DIR…

  • Unscored —
    CVE-2005-0701 Public exploit EPSS 18%

    Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitra…

  • Unscored —
    CVE-2005-0548 Public exploit

    Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers…

  • Unscored —
    CVE-2005-0698 Public exploit

    PHP remote file inclusion vulnerability in PHPWebLog 0.5.3 and earlier allows remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2005-0706

    Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service (crash) and possibly execute a…

    libcdaudio grip Debian
  • Unscored —
    CVE-2005-0702

    SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the …

  • Unscored —
    CVE-2005-0549 Public exploit

    Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers…

  • Unscored —
    CVE-2005-0703

    Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and…

  • Unscored —
    CVE-2005-0689 Public exploit

    includer.cgi in The Includer allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the …

  • Unscored —
    CVE-2005-0693

    Buffer overflow in JoWood Chaser 1.50 and earlier allows remote attackers to cause a denial of service (client or serve…

  • Unscored —
    CVE-2005-0687

    Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service (memory consumption) …

    hashcash Debian
  • Unscored —
    CVE-2005-0685

    Multiple access validation errors in OutStart Participate Enterprise (PE) allow remote attackers to (1) browse arbitrar…

  • Unscored —
    CVE-2005-0664

    Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which al…

    libexif Debian
  • Unscored —
    CVE-2005-0697

    SQL injection vulnerability in the process_picture function xp_publish.php in CopperExport 0.2.1 allows remote attacker…

  • Unscored —
    CVE-2005-0692

    Cross-site scripting (XSS) vulnerability in fusion_core.php for PHP-Fusion 5.x allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2005-0688 Public exploit EPSS 47%

    Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2005-0694

    Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obt…

  • Unscored —
    CVE-2005-0353 Public exploit EPSS 71%

    Buffer overflow in the Sentinel LM (Lservnt) service in the Sentinel License Manager 7.2.0.2 allows remote attackers to…

  • Unscored —
    CVE-2005-0691 Public exploit

    PHP remote file inclusion vulnerability in article mode for modules.php in SocialMPN allows remote attackers to execute…

  • Unscored —
    CVE-2005-0695

    The password recovery feature (forgotpassword.asp) in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attac…