CVEs published in January 2005
147 vulnerabilities, 6 critical, 0 exploited.
- hp virtualvault Unknown vulnerability in HP-UX B.11.04 running Virtualvault 4.5 through 4.7, when running the TGA... 5.0 Medium
- mozilla firefox Firefox before 1.0 allows the user to store a (1) javascript: or (2) data: URLs as a Livefeed... 5.0 Medium
- mozilla, mozilla thunderbird +1 more Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie... 5.0 Medium
- mozilla thunderbird Thunderbird before 0.9, when running on Windows systems, uses the default handler when processing... 5.0 Medium
- mozilla firefox, mozilla +1 more Firefox before 1.0 and Mozilla before 1.7.5, when configured to use a proxy, respond to 407 proxy... 7.5 High
- mozilla firefox, mozilla +1 more Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from... 5.0 Medium
- mozilla firefox, mozilla +1 more Firefox before 1.0 and Mozilla before 1.7.5 display the secure site lock icon when a view-source:... 2.6 Low
- mozilla firefox, mozilla +1 more Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads... 2.6 Low
- mozilla firefox, mozilla, mozilla thunderbird +2 more Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save... 2.1 Low
- mozilla firefox, mozilla +1 more Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links ... 2.6 Low
- peid Buffer overflow in PeID allows attackers to execute arbitrary code via a PE file with an Import... 7.5 High
- apple mac os x, mac os x server +1 more Mail in Mac OS X 10.3.7, when generating a Message-ID header, generates a GUUID that includes... 5.0 Medium
- apple mac os x, mac os x server +1 more ColorSync on Mac OS X 10.3.7 and 10.3.8 allows attackers to execute arbitrary code via malformed... 7.5 High
- apple mac os x, mac os x server +1 more The "at" commands on Mac OS X 10.3.7 and earlier do not properly drop privileges, which allows... 7.2 High
- squirrelmail Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows... 4.3 Medium
- redhat enterprise linux, enterprise linux desktop +1 more Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a... 7.5 High
- squirrelmail prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to... 5.0 Medium
- isc bind An "incorrect assumption" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is... 4.3 Medium
- isc bind Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote... 5.0 Medium
- ethereal group ethereal Unknown vulnerability in the MMSE dissector in Ethereal 0.10.4 through 0.10.8 allows remote... 5.0 Medium
- ethereal group ethereal Unknown vulnerability in the Gnutella dissector in Ethereal 0.10.6 through 0.10.8 allows remote... 5.0 Medium
- ethereal group ethereal Unknown vulnerability in the DNP dissector in Ethereal 0.10.5 through 0.10.8 allows remote... 5.0 Medium
- ethereal group ethereal Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote... 5.0 Medium
- ethereal group ethereal The COPS dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of... 5.0 Medium
- icewarp web mail Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5... 5.0 Medium
- alt-n webadmin Direct remote injection vulnerability in modalfram.wdm in Alt-N WebAdmin 3.0.4 allows remote... 4.3 Medium
- alt-n webadmin useredit_account.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the... 2.1 Low
- alt-n webadmin Cross-site scripting (XSS) vulnerability in useredit_account.wdm in Alt-N WebAdmin 3.0.4 allows... 4.3 Medium
- webwasher classic WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT... 7.5 High
- amax information technologies magic winmail server The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a... 4.6 Medium
- No product listed Cross-site scripting (XSS) vulnerability in user.php in Magic Winmail Server 4.0 Build 1112... 4.3 Medium
- amax information technologies magic winmail server Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote... 7.5 High
- war ftp daemon ftp daemon WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a... 2.1 Low
- openswan Stack-based buffer overflow in the get_internal_addresses function in the pluto application for... 7.2 High
- No product listed The scosession program in OpenServer 5.0.6 and 5.0.7 allows local users to gain privileges via... 7.2 High
- kde, debian linux, redhat enterprise linux +2 more +4 more The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain... 4.6 Medium
- debian linux Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pam_radius_auth.conf set to... 2.1 Low
- exponent Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) mod.php in Exponent 0... 4.3 Medium
- mercuryboard Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow... 4.3 Medium
- mercuryboard MercuryBoard 1.1.1 allows remote attackers to gain sensitive information via an HTTP request with... 5.0 Medium
- xpdf Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in... 7.5 High
- xpdf Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS,... 7.5 High
- easy software products cups, kde kpdf, libextractor +24 more +26 more Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and... 5.0 Medium
- easy software products cups, kde kpdf, libextractor +24 more +26 more Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and... 10.0 High
- easy software products cups, kde kpdf, libextractor +24 more +26 more The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler... 5.0 Medium
- xpdf Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing... 5.1 Medium
- kde kpdf, xpdf +1 more xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to... 2.1 Low
- debian linux, redhat enterprise linux, enterprise linux desktop +2 more The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a... 2.1 Low
- vdr vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary... 5.0 Medium
- ursoftware w32dasm Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to... 7.5 High
- Show olderLoading…