Skip to content
OpenAdvisories

Archive

March 2005

Vulnerabilities first published in this month (UTC), newest first.

498 results · Feed

  • Unscored —
    CVE-2005-0619 Public exploit

    Einstein 1.0.1 stores sensitive information such as usernames and passwords in plaintext in the registry, which allows …

  • Unscored —
    CVE-2005-0582 Public exploit EPSS 36%

    Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code v…

  • Unscored —
    CVE-2005-0621 Public exploit

    Scrapland 1.0 and earlier allows remote attackers to cause a denial of service (server termination) by triggering an er…

  • Unscored —

    Multiple SQL injection vulnerabilities in (1) index.php, (2) modules.php, or (3) admin.php in PostNuke 0.760-RC2 allow …

  • Unscored —

    The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Secu…

  • Unscored —

    The RealServer RealSubscriber on Cisco devices running Application and Content Networking System (ACNS) 5.1 allow remot…

  • Unscored —

    PHP 4 (PHP4) allows attackers to cause a denial of service (daemon crash) by using the readfile function on a file whos…

  • Unscored —

    Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, or 5.1 before 5.1.11.6 allow remote at…

  • Unscored —

    Heap-based buffer overflow in server.cpp for WebMod 0.47 allows remote attackers to cause a denial of service (crash) a…

  • Unscored —
    CVE-2005-0606 Public exploit

    Cross-site scripting (XSS) vulnerability in settings.inc.php for CubeCart 2.0.0 through 2.0.5, as used in multiple PHP …

  • Unscored —

    lnss.exe in GFI Languard Network Security Scanner 5.0 stores the username and password in memory in plaintext, which co…

  • Unscored —

    Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local us…

  • Unscored —

    CubeCart 2.0.0 through 2.0.5 allows remote attackers to determine the full path of the server via direct calls without …

  • Unscored —

    Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, 5.1, or 5.2 use a default password whe…

  • Unscored —

    Cisco devices running Application and Content Networking System (ACNS) 5.0, 5.1 before 5.1.13.7, or 5.2 before 5.2.3.9 …

  • Unscored —

    Cisco devices running Application and Content Networking System (ACNS) 5.0 before 5.0.17.6 and 5.1 before 5.1.11.6 allo…

  • Unscored —
    CVE-2005-0595 Public exploit EPSS 60%

    Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand…

  • Unscored —
    CVE-2005-0603 Public exploit

    viewtopic.php in phpBB 2.0.12 and earlier allows remote attackers to obtain sensitive information via a highlight param…