Skip to content
OpenAdvisories

Archive

19 April 2005

Vulnerabilities first published on this day (UTC), newest first.

19 results · Feed

  • Unscored —
    CVE-2004-1774 Public exploit

    Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in info2www before 1.2.2.9 allows remote attackers to inject arbitrary web scr…

  • Unscored —

    geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers…

  • Unscored —

    Race condition in JFS2 on AIX 5.2 and 5.3, when deleting a file while I/O is still occurring for that file, may write d…

  • Unscored —
    CVE-2005-1183 Public exploit

    Cross-site scripting (XSS) vulnerability in mvnForum 1.0 RC4 allows remote attackers to inject arbitrary web script or …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in WebcamXP PRO v2.16.468 and earlier allows remote attackers to inject arbitr…

  • Unscored —

    Unknown vulnerability in (1) Webmin and (2) Usermin before 1.200 causes Webmin to change permissions and ownership of c…

  • Unscored —

    Heap-based buffer overflow in WinHex 12.05 SR-14, and possibly other versions, may allow attackers to execute arbitrary…

  • Unscored —

    WebcamXP PRO v2.16.468 and earlier allows remote attackers to cause a denial of service via a long chat name, which tak…

  • Unscored —
    CVE-2005-1184 Public exploit EPSS 33%

    The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service (CPU consumption) v…

  • Unscored —

    Unknown vulnerability in Incoming Remote Command (iSeries Access for Windows Remote Command service) in IBM OS/400 R510…

  • Unscored —

    Unknown vulnerability in Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.00…

  • Unscored —

    Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet Explorer…

  • Unscored —
    CVE-2005-1188 Public exploit

    Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to…

  • Unscored —
    CVE-2005-1191 Public exploit EPSS 17%

    The Web View DLL (webvw.dll), as used in Windows Explorer on Windows 2000 systems, does not properly filter an apostrop…

  • Unscored —
    CVE-2005-1181 Public exploit

    NOTE: this issue has been disputed by the vendor. PHP remote code injection vulnerability in loader.php for Ariadne CMS…

  • Unscored —

    HTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote attackers to spoof web conten…

  • Unscored —

    SQL injection vulnerability in Oracle Forms 10g allows remote attackers to execute arbitrary SQL commands via the Query…

  • Unscored —

    Unquoted Windows search path vulnerability in Musicmatch Jukebox 10.00.2047 and earlier allows local users to gain priv…