Archive
March 2005
Vulnerabilities first published in this month (UTC), newest first.
498 results · Feed
-
Unscored —
The Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products, allows remote attackers to …
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2005-0860 Public exploit
PHP remote file inclusion vulnerability in TRG News Script 3.0 allows remote attackers to execute arbitrary PHP code vi…
-
Unscored —CVE-2005-0843 Public exploit
CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting…
-
Unscored —
CoolForum 0.8.1 beta and earlier allows remote attackers to obtain sensitive path information via direct requests to (1…
-
Unscored —
Nortel VPN client 5.01 stores the cleartext password in the memory of the Extranet.exe process, which could allow local…
-
Unscored —
Samsung ADSL Modem SMDK8947v1.2 uses default passwords for the (1) root, (2) admin, or (3) user users, which allows rem…
-
Unscored —CVE-2005-0853 Public exploit
betaparticle blog (bp blog) stores the database under the web root, which allows remote attackers to obtain sensitive i…
-
Unscored —CVE-2005-0857 Public exploit
Cross-site scripting (XSS) vulnerability in avatar.php for CoolForum 0.8 and earlier allows remote attackers to inject …
-
Unscored —
Directory traversal vulnerability in the Webmail interface in SurgeMail 2.2g3 allows remote authenticated users to writ…
-
Unscored —CVE-2005-0858 Public exploit
Multiple SQL injection vulnerabilities in CoolForum 0.8 and earlier allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2005-0848 Public exploit
Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt…
-
Unscored —
The internal_dump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is running with the -n opt…
-
Unscored —
Linux kernel 2.6 before 2.6.11 does not restrict access to the N_MOUSE line discipline for a TTY, which allows local us…
-
Unscored —
Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a p…
-
Unscored —
Unknown vulnerability in ColdFusion Server 2.0 through 4.5.1 SP2 allows remote attackers to overwrite templates with ze…
-
Unscored —
Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default …
-
Unscored —
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA…
-
Unscored —
The SNMP service in the Belkin 54G (F5D7130) wireless router allows remote attackers to cause a denial of service via u…
-
Unscored —CVE-2005-0829 Public exploit
Cross-site scripting (XSS) vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5.01 allows remote attack…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PHP-Post before 0.33 allows remote attackers to inject arbitrary web script…
-
Unscored —
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows untrusted applications to gain …
-
Unscored —CVE-2005-0838 Public exploit
Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possi…
-
Unscored —
PHP-Post allows remote attackers to spoof the names of other users by registering with a username containing hex-encode…
-
Unscored —
Belkin 54G (F5D7130) wireless router enables SNMP by default in a manner that allows remote attackers to obtain sensiti…
-
Unscored —
Mac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain pr…
-
Unscored —
Belkin 54G (F5D7130) wireless router allows remote attackers to access restricted resources by sniffing URIs from UPNP …
-
Unscored —CVE-2005-0713 Public exploit
The Bluetooth Setup Assistant for Mac OS X before 10.3.8 can be launched without a keyboard or Bluetooth device, which …
-
Unscored —
Buffer overflow in LTris before 1.0.10 allows local users to execute arbitrary code via a crafted highscores file.
-
Unscored —CVE-2005-0828 Public exploit
highlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other products based on e-X…
-
Unscored —
Multiple buffer overflows in Xzabite DYNDNSUpdate 0.6.15 and earlier, including the ipcheck function in dyndnsupdate.c,…
-
Unscored —
Viewcat.php in (1) RUNCMS 1.1A, (2) Ciamos 0.9.2 RC1, e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops (…
-
Unscored —CVE-2005-0716 Public exploit
Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions…
-
Unscored —
AFP Server in Mac OS X before 10.3.8 uses insecure permissions for "Drop Boxes," which allows local users to read the c…
-
Unscored —
IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .…
-
Unscored —
Buffer overflow in command.C for rxvt-unicode before 5.3 allows remote attackers to execute arbitrary code via a crafte…
-
Unscored —
OllyDbg 1.10 and earlier allows remote attackers to cause a denial of service (application crash) via a dynamic link li…
-
Unscored —
Advanced Poll before 1.61, when using a flat file database, allows remote attackers to gain privileges by setting the l…
-
Unscored —
AOL Instant Messenger (AIM) 4.7 and earlier allows remote attackers to cause a denial of service (application crash) vi…
-
Unscored —
AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a malforme…