Archive
March 2005
Vulnerabilities first published in this month (UTC), newest first.
498 results · Feed
-
Unscored —
Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (halt) via a fragm…
-
Unscored —
DansGuardian before 2.4.5-1 allows remote attackers to bypass content filtering rules via hex-encoded URLs.
-
Unscored —
Cisco SN 5420 Storage Router 1.1(5) and earlier allows attackers to read configuration files without authorization.
-
Unscored —
Directory traversal vulnerability in Mike Spice's My Classifieds (classifieds.cgi) before 1.3 allows remote attackers t…
-
Unscored —
Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (router crash) via…
-
Unscored —
Buffer overflows in Computer Associates MLink (CA-MLink) 6.5 and earlier may allow local users to execute arbitrary cod…
-
Unscored —
PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (memory exhau…
-
Unscored —CVE-2005-0731 Public exploit
PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (CPU consumpt…
-
Unscored —
The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the …
-
Unscored —
PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service via a request…
-
Unscored —
The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privil…
-
Unscored —
PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to obtain the full path of the web server …
-
Unscored —
Format string vulnerability in Xpand Rally 1.1.0.0 and earlier allows remote attackers to execute arbitrary code via fo…
-
Unscored —
PHP remote file inclusion vulnerability in initdb.php for WEBInsta Mailing list manager 1.3d allows remote attackers to…
-
Unscored —
UTStarcom iAN-02EX VoIP Analog Terminal Adaptor (ATA) allows local users to bypass ATA access restrictions by dialing "…
-
Unscored —CVE-2005-0735 Public exploit
newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin.
-
Unscored —
The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) …
-
Unscored —CVE-2005-0737 Public exploit
Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode.
-
Unscored —
Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbi…
-
Unscored —CVE-2005-0736 Public exploit
Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel…
-
Unscored —
ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing t…
-
Unscored —
PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to determine the existence of files via an…
-
Unscored —CVE-2005-0741 Public exploit
Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2005-0739 Public exploit
The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting s…
-
Unscored —
The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbi…
-
Unscored —
SQL injection vulnerability in editpost.php in UBB.threads 6.0 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2005-0725 Public exploit
SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows re…
-
Unscored —
Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setu…
-
Unscored —
PHP remote file inclusion vulnerability in modules.php in eXPerience2 allows remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2005-0718 EPSS 13%
Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the…
-
Unscored —CVE-2005-0720 Public exploit
PHP remote file inclusion vulnerability in admin/header.php in PHP mcNews 1.3 allows remote attackers to execute arbitr…
-
Unscored —
Unknown vulnerability in the systems message queue in HP Tru64 Unix 4.0F PK8 through 5.1B-2/PK4 allows local users to c…
-
Unscored —
eXPerience2 allows remote attackers to obtain the full path for the web root via a direct request to modules.php withou…
-
Unscored —
paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via (1) an invalid str parameter to pa…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the jumpmenu function in functions.php for paFileDB 3.1 and earlier allows …
-
Unscored —
ScriptLogic 4.01, and possibly other versions before 4.14, uses insecure permissions for the LOGS$ share, which allows …
-
Unscored —
Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is en…
-
Unscored —
Whale Communications e-Gap 2.5 on Windows 2000 allows remote attackers to obtain the source code for the login page via…
-
Unscored —
XMMS.pm in X2 XMMS Remote, as obtained from the vendor server between 4 AM 11 AM PST on May 7, 2003, allows remote atta…