Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
February

CVEs published in February 2005

357 vulnerabilities, 13 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

squidSquid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via...CVE-2005-0446Fix availableEPSS 41.1%5.0 MediumFebruary 15, 2005
open webmail webmailCross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject...CVE-2005-04454.3 MediumFebruary 15, 2005
devellion cubecartindex.php in CubeCart 2.0.4 allows remote attackers to (1) obtain the full path for the web...CVE-2005-0443Public exploit4.3 MediumFebruary 15, 2005
devellion cubecartDirectory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read...CVE-2005-0442Public exploit5.0 MediumFebruary 15, 2005
stefan ritt elog web logbookELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration...CVE-2005-04407.5 HighFebruary 15, 2005
stefan ritt elog web logbookBuffer overflow in the decode_post function in ELOG before 2.5.7 allows remote attackers to...CVE-2005-0439Public exploitEPSS 10.0%7.5 HighFebruary 15, 2005
awstatsawstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by...CVE-2005-0438Public exploitFix available5.0 MediumFebruary 15, 2005
awstatsDirectory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to...CVE-2005-0437Fix available7.5 HighFebruary 15, 2005
awstatsDirect code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers...CVE-2005-0436Public exploitFix available7.5 HighFebruary 15, 2005
awstatsawstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the...CVE-2005-0435Public exploitFix available5.0 MediumFebruary 15, 2005
francisco burzi php-nukeMultiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 7.5 allow remote attackers to...CVE-2005-04344.3 MediumFebruary 15, 2005
francisco burzi php-nukePhp-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or...CVE-2005-04335.0 MediumFebruary 15, 2005
bea weblogic serverBEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates...CVE-2005-04325.0 MediumFebruary 15, 2005
barracuda networks spam firewallBarracuda Spam Firewall 3.1.10 and earlier does not restrict the domains that white-listed...CVE-2005-04317.5 HighFebruary 15, 2005
jelsoft vbulletinDirect code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when...CVE-2005-0429Public exploit5.0 MediumFebruary 15, 2005
powerdnsThe DNSPacket::expand method in dnspacket.cc in PowerDNS before 2.9.17 allows remote attackers to...CVE-2005-0428Fix available5.0 MediumFebruary 15, 2005
gentoo webminThe ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the...CVE-2005-04275.0 MediumFebruary 15, 2005
sun solaris, sunos +1 moreUnknown vulnerability in Solaris 8 and 9 allows remote attackers to cause a denial of service ...CVE-2005-04265.0 MediumFebruary 15, 2005
ibm websphere application serverUnknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on...CVE-2005-04255.0 MediumFebruary 15, 2005
aspjar guestbookUnknown vulnerability in the delete.asp program in certain versions of ASPjar Guestbook allows...CVE-2005-04245.0 MediumFebruary 15, 2005
aspjar guestbookSQL injection vulnerability in login.asp in ASPjar Guestbook allows remote attackers to execute...CVE-2005-04235.0 MediumFebruary 15, 2005
delphiturk codebankDelphiTurk CodeBank (aka KodBank) 3.1 and earlier stores usernames and passwords in the Codebank...CVE-2005-0422Public exploit2.1 LowFebruary 15, 2005
delphiturk ftpDelphiTurk FTP 1.0 stores usernames and passwords in the profile.dat file, which allows local...CVE-2005-0421Public exploit2.1 LowFebruary 15, 2005
microsoft exchange serverMicrosoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect...CVE-2005-0420Public exploitEPSS 29.1%5.8 MediumFebruary 15, 2005
3com 3cserverMultiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute...CVE-2005-0419Public exploit7.5 HighFebruary 15, 2005
debian linux, xpdf, ascii ptex +15 more +17 moreThe patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete...CVE-2005-0206Fix available7.5 HighFebruary 15, 2005
linux kernelThe shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other...CVE-2005-01765.0 MediumFebruary 15, 2005
alsa-project alsa-lib, redhat enterprise linux +1 moreThe alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library,...CVE-2005-0087Fix available4.6 MediumFebruary 15, 2005
gnu wgetwget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses...CVE-2004-1488Public exploitFix availableEPSS 11.9%5.0 MediumFebruary 15, 2005
gnu wgetwget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a...CVE-2004-1487Fix available5.0 MediumFebruary 15, 2005
awstatsawstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell...CVE-2005-0363Fix available7.5 HighFebruary 15, 2005
vmware workstationVMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes...CVE-2005-04444.6 MediumFebruary 14, 2005
ibm db2 universal databaseUnknown "high risk" vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact...CVE-2005-041710.0 HighFebruary 14, 2005
microsoft windows 2000, windows nt, windows xp +4 more +6 moreThe Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP...CVE-2005-0416Public exploitEPSS 41.0%7.5 HighFebruary 14, 2005
ulrik petersen emdros database engineMultiple memory leaks in the MQL parser in Emdros before 1.1.22 allow remote attackers to cause a...CVE-2005-04155.0 MediumFebruary 14, 2005
mercuryboardSQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute...CVE-2005-0414Public exploit7.5 HighFebruary 14, 2005
myphp forum forumMultiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute...CVE-2005-0413Public exploit7.5 HighFebruary 14, 2005
spidean postwrapCross-site scripting (XSS) vulnerability in Spidean PostWrap allows remote attackers to inject...CVE-2005-04126.8 MediumFebruary 14, 2005
citrusdbDirectory traversal vulnerability in index.php for CitrusDB 0.3.6 and earlier allows remote...CVE-2005-0411Public exploit7.5 HighFebruary 14, 2005
citrusdbSQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote...CVE-2005-0410Public exploit5.0 MediumFebruary 14, 2005
citrusdbCitrusDB 0.3.6 and earlier does not verify authorization for the (1) importcc.php and (2)...CVE-2005-0409Public exploit6.4 MediumFebruary 14, 2005
citrusdbCitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the...CVE-2005-0408Public exploit9.8 CriticalFebruary 14, 2005
image processing project processingA design flaw in image processing software that modifies JPEG images might not modify the...CVE-2005-04065.5 MediumFebruary 14, 2005
citrusdb customer databaseCitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which...CVE-2005-0229Public exploit5.0 MediumFebruary 14, 2005
debian linux, toolchain-source +1 moreThe tpkg-* scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local...CVE-2005-0159Fix available4.6 MediumFebruary 14, 2005
htdig, mandrakesoft mandrake linux, mandrake linux corporate server +2 more +4 moreCross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote...CVE-2005-0085Fix available6.8 MediumFebruary 14, 2005
synaesthesiaSynaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not...CVE-2005-0070Fix available7.2 HighFebruary 14, 2005
trend micro control managerTrend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via...CVE-2005-03837.5 HighFebruary 13, 2005
breedBreed patch 1 and earlier allows remote attackers to cause a denial of service (application crash...CVE-2005-0382Public exploit5.0 MediumFebruary 13, 2005
zeroboardMultiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3)...CVE-2005-03807.5 HighFebruary 13, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open