Skip to content
OpenAdvisories

Archive

18 April 2005

Vulnerabilities first published on this day (UTC), newest first.

24 results · Feed

  • Unscored —

    AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows rem…

  • Unscored —

    The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascr…

  • Unscored —

    The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arb…

  • Unscored —

    Firefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2005-1165 Public exploit

    Yager 5.24 and earlier allows remote attackers to cause a denial of service (application crash) via certain malformed d…

  • Unscored —
    CVE-2005-1170 Public exploit

    SQL injection vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2005-1162 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web scr…

  • Unscored —

    The DNTUS26 process in Dameware NT Utilities and the DWRCS process in MiniRemote Control 4.9 and earlier stores the use…

  • Unscored —

    Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domain…

  • Unscored —

    Musicmatch 10.00.2047 and earlier store log files in the Program Files directory instead of the user profile, which may…

  • Unscored —

    DiagCollectionControl.dll in Musicmatch 10.00.2047 and earlier allows remote attackers to overwrite arbitrary files via…

  • Unscored —

    Mafia Blog .4 BETA does not properly protect the admin directory, which allows remote attackers to execute arbitrary PH…

  • Unscored —

    Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into p…

  • Unscored —

    McAfee Internet Security Suite 2005 uses insecure default ACLs for installed files, which allows local users to gain pr…

  • Unscored —

    The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in init.inc.php in Coppermine Photo Gallery 1.3.x allows remote attackers to i…

  • Unscored —
    CVE-2005-1164 Public exploit

    Yager 5.24 and earlier allows remote attackers to cause a denial of service (application hang) via a packet with a game…

  • Unscored —

    Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to execute arbitrary script …

  • Unscored —

    The privileged "chrome" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain …

  • Unscored —
    CVE-2005-1173 Public exploit

    Buffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary code via a long GET re…

  • Unscored —
    CVE-2005-1161 Public exploit

    Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2005-1163 Public exploit EPSS 13%

    Multiple buffer overflows in Yager 5.24 and earlier allow remote attackers to execute arbitrary code via (1) a crafted …

  • Unscored —

    Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search p…

  • Unscored —
    CVE-2005-1171 Public exploit

    Cross-site scripting (XSS) vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to inject…