Skip to content
OpenAdvisories

Archive

March 2005

Vulnerabilities first published in this month (UTC), newest first.

← February 2005 2005 / March April 2005 →
  1. 113
  2. 219
  3. 33
  4. 424
  5. 5 
  6. 6 
  7. 733
  8. 818
  9. 912
  10. 1024
  11. 1122
  12. 1224
  13. 1330
  14. 14 
  15. 15 
  16. 16 
  17. 174
  18. 1812
  19. 19 
  20. 2063
  21. 21 
  22. 2223
  23. 232
  24. 2435
  25. 2517
  26. 2646
  27. 27 
  28. 2826
  29. 2945
  30. 302
  31. 311
All Critical High Medium Low Exploited only Public exploit

498 results · Feed

  • Unscored —
    CVE-2003-1123 Public exploit EPSS 11%

    Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information …

  • Unscored —
    CVE-2003-1116

    The communications protocol for the Report Review Agent (RRA), aka FND File Server (FNDFS) program, in Oracle E-Busines…

  • Unscored —
    CVE-2003-1118 Public exploit EPSS 18%

    Buffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause a denial of service (c…

  • Unscored —
    CVE-2003-1117

    Buffer overflow in RealSystem Server 6.x, 7.x and 8.x, and RealSystem Proxy 8.x, related to URL error handling, allows …

  • Unscored —
    CVE-2003-1129 Public exploit

    Buffer overflow in the Yahoo! Audio Conferencing (aka Voice Chat) ActiveX control before 1,0,0,45 allows remote attacke…

  • Unscored —
    CVE-2003-1121

    Services in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at raised privileges, wh…

  • Unscored —
    CVE-2003-1124

    Unknown vulnerability in Sun Management Center (SunMC) 2.1.1, 3.0, and 3.0 Revenue Release (RR), when installed and run…

  • Unscored —
    CVE-2003-1125

    Unknown vulnerability in ns-ldapd for Sun ONE Directory Server 4.16, 5.0, and 5.1 allows LDAP clients to cause a denial…

  • Unscored —
    CVE-2003-1119

    SSH Secure Shell before 3.2.9 allows remote attackers to cause a denial of service via malformed BER/DER packets.

  • Unscored —
    CVE-2003-1126

    Unknown vulnerability in SunOne/iPlanet Web Server SP3 through SP5 on Windows platforms allows remote attackers to caus…

  • Unscored —
    CVE-2005-0711 Public exploit

    MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which all…

  • Unscored —
    CVE-2005-0709 Public exploit EPSS 18%

    MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges t…

  • Unscored —
    CVE-2005-0710 Public exploit EPSS 12%

    MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges t…

  • Unscored —
    CVE-2003-1108

    The Session Initiation Protocol (SIP) implementation in Alcatel OmniPCX Enterprise 5.0 Lx allows remote attackers to ca…

  • Unscored —
    CVE-2003-1111

    The Session Initiation Protocol (SIP) implementation in multiple dynamicsoft products including y and certain demo prod…

  • Unscored —
    CVE-2003-1107

    The DHTML capability in Microsoft Windows Media Player (WMP) 6.4, 7.0, 7.1, and 9 may run certain URL commands from a s…

  • Unscored —
    CVE-2003-1103

    SQL injection vulnerability in loginact.asp for Hummingbird CyberDOCS before 3.9 allows remote attackers to execute arb…

  • Unscored —
    CVE-2003-1099

    shar on HP-UX B.11.00, B.11.04, and B.11.11 creates temporary files with predictable names in /tmp, which allows local …

  • Unscored —
    CVE-2003-1097 Public exploit

    Buffer overflow in rexec on HP-UX B.10.20, B.11.00, and B.11.04, when setuid root, may allow local users to gain privil…

  • Unscored —
    CVE-2003-1112

    The Session Initiation Protocol (SIP) implementation in Ingate Firewall and Ingate SIParator before 3.1.3 allows remote…

  • Unscored —
    CVE-2003-1113

    The Session Initiation Protocol (SIP) implementation in IPTel SIP Express Router 0.8.9 and earlier allows remote attack…

  • Unscored —
    CVE-2003-1101

    Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allows remote attackers to obtain the full path of the DM Web Server via inva…

  • Unscored —
    CVE-2003-1102

    Hummingbird CyberDOCS 3.5, 3.9, and 4.0, when running on IIS, uses insecure permissions for script source code files, w…

  • Unscored —
    CVE-2003-1115

    The Session Initiation Protocol (SIP) implementation in Nortel Networks Succession Communication Server 2000, when usin…

  • Unscored —
    CVE-2003-1100

    Multiple cross-site scripting (XSS) vulnerabilities in Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allow remote attackers…

  • Unscored —
    CVE-2003-1109

    The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960…

  • Unscored —
    CVE-2003-1105 EPSS 18%

    Unknown vulnerability in Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2003-1104

    Buffer overflow in IBM Tivoli Firewall Toolbox (TFST) 1.2 allows remote attackers to execute arbitrary code via unknown…

  • Unscored —
    CVE-2003-1110

    The Session Initiation Protocol (SIP) implementation in Columbia SIP User Agent (sipc) 1.74 and other versions before s…

  • Unscored —
    CVE-2003-1114

    The Session Initiation Protocol (SIP) implementation in Mediatrix Telecom VoIP Access Devices and Gateways running SIPv…

  • Unscored —
    CVE-2003-1098

    The Xserver for HP-UX 11.22 was not properly built, which introduced a vulnerability that allows local users to gain pr…

  • Unscored —
    CVE-2003-1106

    The SMTP service in Microsoft Windows 2000 before SP4 allows remote attackers to cause a denial of service (crash or ha…

  • Unscored —
    CVE-2004-1756

    BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a cust…

  • Unscored —
    CVE-2004-1755

    The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple …

  • Unscored —
    CVE-2004-1760

    The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6…

  • Unscored —
    CVE-2004-1759

    Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to…

  • Unscored —
    CVE-2004-1770 Public exploit EPSS 10%

    The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via she…

  • Unscored —
    CVE-2004-1767

    The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modul…

  • Unscored —
    CVE-2004-1764

    Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privile…

  • Unscored —
    CVE-2004-1762

    Unknown vulnerability in F-Secure Anti-Virus (FSAV) 4.52 for Linux before Hotfix 3 allows the Sober.D worm to bypass FA…