CVEs published in February 2005
357 vulnerabilities, 13 critical, 0 exploited.
- comersus open technologies backoffice liteMultiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2)...4.3 Medium
- comersus open technologies backoffice liteSQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote...7.5 High
- comersus open technologies backoffice litecomersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to...7.5 High
- gforgeDirectory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list...5.0 Medium
- oracle database serverThe DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific...5.0 Medium
- minisDirectory traversal vulnerability in minis.php in Minis 0.2.1 allows remote attackers to read...5.0 Medium
- apple airport express, airport extreme +1 moreApple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data...5.0 Medium
- emotion mediapartner web servereMotion MediaPartner Web Server 5.0 and 5.1 allows remote attackers to obtain sensitive...5.0 Medium
- bottomline webseries payment applicationWebseries Payment Application does not properly restrict privileged operations, which allows...4.6 Medium
- mybulletinboardSQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to...7.5 High
- jowood productions soldner secret warsCross-site scripting (XSS) vulnerability in the web interface in Soldner Secret Wars 30830 allows...4.3 Medium
- jowood productions soldner secret warsSoldner Secret Wars 30830 and earlier does not properly handle the "message too long" socket...5.0 Medium
- 3com 3cdaemonThe FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive...5.0 Medium
- 3com 3cdaemonBuffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to...5.0 Medium
- 3com 3cdaemonMultiple format string vulnerabilities in the FTP service in 3Com 3CDaemon 2.0 revision 10 allow...5.0 Medium
- 3com 3cdaemonTFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service ...5.0 Medium
- photopost php proMultiple SQL injection vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote...7.5 High
- photopost reviewpost php proReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary PHP files...7.5 High
- photopost reviewpost php proMultiple cross-site scripting (XSS) vulnerabilities in ReviewPost PHP Pro before 2.84 allow...4.3 Medium
- sir gnuboardThe file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all...9.8 Critical
- flatnukeindex.php in FlatNuke 2.5.1 allows remote attackers to create an administrator account via...7.5 High
- owl intranet engineMultiple SQL injection vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to...7.5 High
- owl intranet engineMultiple cross-site scripting (XSS) vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote...4.3 Medium
- ibm aixBuffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code...7.2 High
- ibm aixBuffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary...7.2 High
- ibm aixlspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing...2.1 Low
- broadcom brightstor arcserve backupStack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and...10.0 High
- mozilla firefoxFirefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has...5.1 Medium
- apache mod pythonThe publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access...7.5 High
- yongguang zhang hzttyUnknown vulnerability in hztty 2.0 and earlier allows local users to execute arbitrary commands.4.6 Medium
- argosoft mail serverMultiple directory traversal vulnerabilities in ArGoSoft Mail Server 1.8.7.3 allow remote...4.6 Medium
- awstatsawstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell...4.6 Medium
- gnu mailmanDirectory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and...5.0 Medium
- debian linuxMultiple buffer overflows in the XView library 3.2 may allow local users to execute arbitrary...7.2 High
- ibm aixFormat string vulnerability in auditselect on IBM AIX 5.1, 5.2, and 5.3 allows local users to...7.2 High
- symantec antivirus scan engine, brightmail antispam, client security +8 more +10 moreHeap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote...7.5 High
- sun solaris, sunos +1 moreThe Solaris Management Console (SMC) GUI for Solaris 8 and 9, when creating user accounts that...7.5 High
- postgresqlMultiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to...6.5 Medium
- postgresqlThe intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of...5.0 Medium
- postgresqlPostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for...6.5 Medium
- squidThe httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly...5.0 Medium
- mozilla firefoxFirefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about...2.6 Low
- microsoft windows 98, windows 2000, windows 2003 server +3 more +5 moreThe Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to...7.5 High
- microsoft internet explorer, ie +1 moreInternet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition...5.1 Medium
- microsoft internet explorer, ie +1 moreInternet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML...7.5 High
- microsoft internet explorer, ie +1 moreInternet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security...5.1 Medium
- microsoft internet explorer, ie, windows 2000 +5 more +7 moreInternet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and...7.5 High
- microsoft windows xpThe Server service (srvsvc.dll) in Windows XP SP1 and SP2 allows remote attackers to obtain...7.5 High
- microsoft windows 2000, windows nt, windows 2003 server +2 moreThe License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003...10.0 High
- microsoft sharepoint team services, sharepoint portal server +1 moreWindows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not...4.3 Medium
- Show moreLoading…