Skip to content
OpenAdvisories

Archive

13 April 2005

Vulnerabilities first published on this day (UTC), newest first.

39 results · Feed

  • Unscored —
    CVE-2004-0791 Public exploit EPSS 20%

    Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduct…

  • Unscored —
    CVE-2004-0790 Public exploit EPSS 80%

    Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) vi…

  • Unscored —
    CVE-2004-1060 Public exploit EPSS 75%

    Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause…

  • Unscored —
    CVE-2005-0048 Public exploit EPSS 39%

    Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attacker…

  • Unscored —
    CVE-2005-0551 Public exploit EPSS 20%

    Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000…

  • Unscored —
    CVE-2005-0560 Public exploit EPSS 73%

    Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Serve…

  • Unscored —

    Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server …

  • Unscored —
    CVE-2005-0553 Public exploit EPSS 51%

    Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5…

  • Unscored —

    The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privil…

  • Unscored —
    CVE-2005-0059 Public exploit EPSS 73%

    Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers t…

  • Unscored —
    CVE-2005-0562 EPSS 23%

    GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary co…

  • Unscored —
    CVE-2005-0063 Public exploit EPSS 48%

    The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server…

  • Unscored —
    CVE-2005-0554 Public exploit EPSS 58%

    Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a…

  • Unscored —

    Buffer overflow in Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to cause …

  • Unscored —

    Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitra…

  • Unscored —
    CVE-2005-0404 Public exploit

    KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digital…

  • Unscored —
    CVE-2005-0555 Public exploit EPSS 58%

    Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execu…

  • Unscored —
    CVE-2005-0558 EPSS 15%

    Buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 allows remote attackers to execute arbitrary code via …

  • Unscored —
    CVE-2005-1095 Public exploit

    Cross-site scripting (XSS) vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow r…

  • Unscored —

    Buffer overflow in the PopUp Plus 2.0.3.8 plugin for Miranda IM, with "Use SmileyAdd Setting" enabled, allows remote at…

  • Unscored —

    Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via s…

  • Unscored —
    CVE-2005-1097 Public exploit

    Rebrand P2P Share Spy 2.2 stores the user password in plaintext in the txtPassword value in the registry, which allows …

  • Unscored —
    CVE-2005-1100 Public exploit EPSS 11%

    Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote att…

  • Unscored —
    CVE-2005-1086 Public exploit

    Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via…

  • Unscored —
    CVE-2005-1099 Public exploit EPSS 68%

    Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is …

  • Unscored —
    CVE-2005-1105 Public exploit

    Directory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows remote attackers to w…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Centra 7 allow remote attackers to inject arbitrary web script o…

  • Unscored —

    PictureViewer in QuickTime for Windows 6.5.2 allows remote attackers to cause a denial of service (application crash) v…

  • Unscored —
    CVE-2005-1087 Public exploit

    CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide…

  • Unscored —
    CVE-2005-1094 Public exploit

    FTP Now 2.6.14 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local us…

  • Unscored —

    Sygate Security Agent (SSA) in Sygate Secure Enterprise 3.5 through 4.1 does not prevent the security policy from being…

  • Unscored —

    Multiple buffer overflows in Lotus Domino Server 6.0.5 and 6.5.4 allow remote attackers to cause a denial of service (a…

  • Unscored —
    CVE-2005-1098 Public exploit

    GetDataBack for NTFS 2.31 stores the username and license key in plaintext in the Name value in the License registry ke…

  • Unscored —

    Unknown vulnerability in DameWare NT Utilities 4.8 and earlier, and Mini Remote Control 4.8 and earlier, allows local u…

  • Unscored —

    Directory traversal vulnerability in the readFile and writeFile API for Maxthon 1.2.0 and 1.2.1 allows remote attackers…

  • Unscored —

    SQL injection vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to execute arbit…

  • Unscored —
    CVE-2005-1092 Public exploit

    Lightspeed DeluxeFTP 6.01 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allo…

  • Unscored —

    Unknown vulnerability in DC++ before 0.674 allows attackers to append data to arbitrary files.