Skip to content
OpenAdvisories

Archive

3 April 2005

Vulnerabilities first published on this day (UTC), newest first.

25 results · Feed

  • Unscored —
    CVE-2005-0952 Public exploit

    Cross-site scripting vulnerability in pafiledb.php in PaFileDB 3.1 allows remote attackers to inject arbitrary web scri…

  • Unscored —

    The php_next_marker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP fu…

  • Unscored —
    CVE-2005-0750 Public exploit

    The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.…

  • Unscored —
    CVE-2005-0954 EPSS 15%

    Windows Explorer and Internet Explorer in Windows 2000 SP1 allows remote attackers to cause a denial of service (CPU co…

  • Unscored —
    CVE-2005-0962 Public exploit

    SQL injection vulnerability in index.php for Lighthouse Squirrelcart allows remote attackers to execute arbitrary SQL c…

  • Unscored —

    The php_handle_iff function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP fun…

  • Unscored —
    CVE-2005-0945 Public exploit

    Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1 allows remote attackers to inject arbitrary web script or HT…

  • Unscored —
    CVE-2005-0958 Public exploit

    Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enab…

  • Unscored —
    CVE-2005-0955 Public exploit

    SQL injection vulnerability in InterAKT MX Shop 1.1.1 allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2005-0944 Public exploit EPSS 34%

    Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0, related to insufficient data validation, al…

  • Unscored —

    Bay Technical Associates RPC-3 Telnet Host 3.05 allows remote attackers to bypass authentication by pressing the escape…

  • Unscored —

    Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a ma…

  • Unscored —
    CVE-2005-0950 Public exploit

    Directory traversal vulnerability in FastStone 4in1 Browser 1.2 allows remote attackers to read arbitrary files via a (…

  • Unscored —

    Multiple SQL injection vulnerabilities in index.php in InterAKT MX Kart 1.1.2 allow remote attackers to execute arbitra…

  • Unscored —

    Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link a…

  • Unscored —

    The XP Server process (xp_server) in Sybase Adaptive Server Enterprise (ASE) XP Server 12.x before 12.5.3 ESD#1 allows …

  • Unscored —
    CVE-2005-0948 Public exploit

    SQL injection vulnerability in ad_click.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2005-0959 Public exploit

    Buffer overflow in the mt_do_dir function in YepYep mtftpd 0.0.3 may allow attackers to execute arbitrary code via a lo…

  • Unscored —

    Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of se…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary we…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject …

  • Unscored —

    Directory traversal vulnerability in auxpage.php in phpCoin 1.2.1b and earlier allows remote attackers to read and exec…

  • Unscored —

    SQL injection vulnerability in phpCoin 1.2.1b and earlier allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —

    Multiple vulnerabilities in the SACK functionality in (1) tcp_input.c and (2) tcp_usrreq.c OpenBSD 3.5 and 3.6 allow re…

  • Unscored —

    An error in the Toshiba ACPI BIOS 1.6 causes the BIOS to only examine the first slot in the Master Boot Record (MBR) ta…