Skip to content
OpenAdvisories

Archive

April 2005

Vulnerabilities first published in this month (UTC), newest first.

← March 2005 2005 / April May 2005 →
  1. 11
  2. 2 
  3. 325
  4. 44
  5. 512
  6. 67
  7. 716
  8. 812
  9. 916
  10. 106
  11. 11 
  12. 1244
  13. 1339
  14. 1431
  15. 157
  16. 1643
  17. 17 
  18. 1824
  19. 1919
  20. 20 
  21. 2183
  22. 2214
  23. 23 
  24. 2418
  25. 253
  26. 2633
  27. 2726
  28. 2821
  29. 292
  30. 30 
All Critical High Medium Low Exploited only Public exploit

154 results · Clear filters · Feed

  • Unscored —
    CVE-2005-1360 Public exploit

    PHP remote file inclusion vulnerability in error.php in GrayCMS 1.1 allows remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2005-1349 Public exploit EPSS 13%

    Buffer overflow in Convert-UUlib (Convert::UUlib) before 1.051 allows remote attackers to execute arbitrary code via a …

    libconvert-uulib-perl Debian
  • Unscored —
    CVE-2005-1348 Public exploit EPSS 73%

    Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote a…

  • Unscored —
    CVE-2005-1329 Public exploit

    owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder param…

  • Unscored —
    CVE-2005-1325 Public exploit

    set_lang.php in phpMyVisites 1.3 allows remote attackers to read and include arbitrary files via the mylang parameter.

  • Unscored —
    CVE-2005-1344 Public exploit EPSS 29%

    Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. N…

    apache2 Debian
  • Unscored —
    CVE-2005-1323 Public exploit EPSS 63%

    Buffer overflow in NetFtpd for NetTerm 5.1.1 and earlier allows remote attackers to execute arbitrary code via a long U…

  • Unscored —
    CVE-2005-1308 Public exploit

    SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter f…

    courier Debian
  • Unscored —
    CVE-2005-1312 Public exploit

    PHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to execute arbitrary PHP code …

  • Unscored —
    CVE-2005-0684 Public exploit EPSS 69%

    Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2005-1285 Public exploit

    Cross-site scripting (XSS) vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier allows remote attacke…

  • Unscored —
    CVE-2005-1294 Public exploit

    The affix_sock_register in the Affix Bluetooth Protocol Stack for Linux might allow local users to gain privileges via …

  • Unscored —
    CVE-2005-1279 Public exploit EPSS 19%

    tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP pa…

    tcpdump Debian
  • Unscored —
    CVE-2005-1293 Public exploit

    Multiple SQL injection vulnerabilities in default.asp in StorePortal 2.63 allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2005-1287 Public exploit

    Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2005-1278 Public exploit EPSS 11%

    The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a de…

    tcpdump Debian
  • Unscored —
    CVE-2005-1275 Public exploit EPSS 14%

    Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attack…

    imagemagick Debian
  • Unscored —
    CVE-2005-1289 Public exploit

    index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters…

  • Unscored —
    CVE-2005-1280 Public exploit EPSS 10%

    The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loo…

    tcpdump Debian
  • Unscored —
    CVE-2005-1246 Public exploit

    Format string vulnerability in the snmppd_log function in snmppd_util.c for snmppd 0.4.5 and earlier may allow remote a…

  • Unscored —
    CVE-2005-1237 Public exploit

    SQL injection vulnerability in news.php in FlexPHPNews 0.0.3 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2005-1233 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2005-1236 Public exploit

    Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2005-1222 Public exploit

    cat_for_gen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the ad_direct p…

  • Unscored —
    CVE-2005-1223 Public exploit

    Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2005-1224 Public exploit

    Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2001-1472 Public exploit

    SQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated users to execute arbitrar…

  • Unscored —
    CVE-2001-1471 Public exploit

    prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid lan…

  • Unscored —
    CVE-2001-1442 Public exploit

    Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privi…

    inn2 Debian
  • Unscored —
    CVE-2001-1460 Public exploit

    SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authenticati…

  • Unscored —
    CVE-1999-1577 Public exploit EPSS 19%

    Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers…

  • Unscored —
    CVE-1999-1578 Public exploit EPSS 19%

    Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.0…

  • Unscored —
    CVE-1999-1576 Public exploit EPSS 13%

    Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat Reader 4.0 allows remote …

  • Unscored —
    CVE-1999-1575 Public exploit EPSS 36%

    The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thum…

  • Unscored —
    CVE-2000-1220 Public exploit EPSS 14%

    The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root pr…

    lpr Debian
  • Unscored —
    CVE-2000-1221 Public exploit EPSS 17%

    The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the rev…

    lpr Debian
  • Unscored —
    CVE-2005-1196 Public exploit

    SQL injection vulnerability in kb.php in the Knowledge Base module for phpBB allows remote attackers to obtain sensitiv…

  • Unscored —
    CVE-2005-1204 Public exploit

    Desktop Rover 3.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application cra…

  • Unscored —
    CVE-2005-1202 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arb…

  • Unscored —
    CVE-2005-1199 Public exploit

    SQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to execute arbitrary SQL commands…