Archive
March 2005
Vulnerabilities first published in this month (UTC), newest first.
498 results · Feed
-
Unscored —
PhotoPost PHP 5.0 RC3 does not fully verify that an uploaded file is an image file, which allows remote attackers to in…
-
Unscored —
ZPanel 2.0 and 2.5 beta 10 does not remove or protect installation scripts after they have been used, which allows remo…
-
Unscored —
Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4436 allows remote attackers to execute arbitrary co…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary …
-
Unscored —CVE-2005-0788 Public exploit
LimeWire 4.1.2 through 4.5.6 allows remote attackers to read arbitrary files by specifying the full pathname in a Gnute…
-
Unscored —
Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary co…
-
Unscored —
SQL injection vulnerability in NotifyLink before 3.0 allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —
Cross-site scripting (XSS) vulnerability in usersrecentposts in YaBB 2.0 rc1 allows remote attackers to inject arbitrar…
-
Unscored —
SQL injection vulnerability in member.php and possibly other scripts in PhotoPost PHP 5.0 RC3 allows remote attackers t…
-
Unscored —
Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when present…
-
Unscored —
Unknown vulnerability in lshd in Lysator LSH 1.x and 2.x before 2.0.1 allows remote attackers to cause a denial of serv…
-
Unscored —
The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authenticatio…
-
Unscored —
Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restri…
-
Unscored —CVE-2005-0802 Public exploit
Cross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 through 1.1b allows remote attackers to execute …
-
Unscored —CVE-2005-0780 Public exploit
paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, …
-
Unscored —
Wine 20050211 and earlier creates temp files with world readable permissions and predictable file names, which allows l…
-
Unscored —
Directory traversal vulnerability in includer.cgi in The Includer allows remote attackers to read arbitrary files via (…
-
Unscored —
Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of service (application c…
-
Unscored —CVE-2005-0786 Public exploit
SQL injection vulnerability in gb_new.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the q…
-
Unscored —CVE-2003-1131 Public exploit
PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as KnowledgeBase, allows remote a…
-
Unscored —
vi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as device nodes.
-
Unscored —
Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions befo…
-
Unscored —
Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP pa…
-
Unscored —
Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain …
-
Unscored —
Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of servi…
-
Unscored —
Format string vulnerability in DataRescue Interactive Disassembler and Debugger (IDA) Pro 4.7.0.830 allows remote attac…
-
Unscored —
Smc.exe in My Firewall Plus 5.0 build 1117, and possibly other versions, does not drop privileges before launching the …
-
Unscored —
Unknown vulnerability in the sFlow dissector in Ethereal 0.9.14 through 0.10.9 allows remote attackers to cause a denia…
-
Unscored —
Unknown vulnerability in the JXTA dissector in Ethereal 0.10.9 allows remote attackers to cause a denial of service (ap…
-
Unscored —
Race condition in the Radeon DRI driver for Linux kernel 2.6.8.1 allows local users with DRI privileges to execute arbi…
-
Unscored —
Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via crafted IP pa…
-
Unscored —
Desktop Communication Protocol (DCOP) daemon, aka dcopserver, in KDE before 3.4 allows local users to cause a denial of…
-
Unscored —
Buffer overflow in the Etheric dissector in Ethereal 0.10.7 through 0.10.9 allows remote attackers to cause a denial of…
-
Unscored —CVE-2005-0385 Public exploit
Buffer overflow in luxman before 0.41, if used with certain insecure svgalib libraries, allows local users to execute a…
-
Unscored —
MySQL MaxDB 7.5.00 for Windows, and possibly earlier versions and other platforms, allows remote attackers to cause a d…
-
Unscored —
The GPRS-LLC dissector in Ethereal 0.10.7 through 0.10.9, with the "ignore cipher bit" option enabled. allows remote at…
-
Unscored —
Buffer overflow in (1) grpck and (2) pwck, if installed setuid on a system as recommended in some AIX documentation, ma…
-
Unscored —
AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user appr…
-
Unscored —
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a c…
-
Unscored —CVE-2002-1592 EPSS 12%
The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error message…