Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
February

CVEs published in February 2005

357 vulnerabilities, 13 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

pmachine proPHP remote file inclusion vulnerability in mail_autocheck.php in the Email This Entry add-on for...CVE-2005-0513Public exploit7.5 HighFebruary 19, 2005
zeroboardCross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary...CVE-2005-04954.3 MediumFebruary 19, 2005
kayako esupportCross-site scripting (XSS) vulnerability in index.php for Kayako ESupport 2.3.1, and possibly...CVE-2005-04876.8 MediumFebruary 19, 2005
tarantella secure global desktop, enterprise +1 moreTarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3...CVE-2005-04865.0 MediumFebruary 19, 2005
phparena panewsCross-site scripting (XSS) vulnerability in comment.php for paNews 2.0b4 for PHP Arena allows...CVE-2005-04856.8 MediumFebruary 19, 2005
gproftpdFormat string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to...CVE-2005-0484EPSS 10.8%7.5 HighFebruary 19, 2005
glftpdMultiple directory traversal vulnerabilities in sitenfo.sh, sitezipchk.sh, and siteziplist.sh in...CVE-2005-04835.0 MediumFebruary 19, 2005
trackercamTrackerCam 5.12 and earlier allows remote attackers to cause a denial of service (crash) via (1)...CVE-2005-04825.0 MediumFebruary 19, 2005
trackercamTrackerCam 5.12 and earlier allows remote attackers to read log files via the fn parameter in a...CVE-2005-04815.0 MediumFebruary 19, 2005
trackercamCross-site scripting (XSS) vulnerability in TrackerCam 5.12 and earlier allows remote attackers...CVE-2005-04804.3 MediumFebruary 19, 2005
trackercamDirectory traversal vulnerability in ComGetLogFile.php3 for TrackerCam 5.12 and earlier allows...CVE-2005-0479Public exploit5.0 MediumFebruary 19, 2005
trackercamMultiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial...CVE-2005-0478Public exploitEPSS 66.5%5.0 MediumFebruary 19, 2005
invision power services power boardCross-site scripting (XSS) vulnerability in the SML code for Invision Power Board 1.3.1 FINAL...CVE-2005-0477Public exploit4.3 MediumFebruary 19, 2005
hpm guestbook.cgi guestbook.cgiCross-site scripting (XSS) vulnerability in hpm_guestbook.cgi allows remote attackers to inject...CVE-2005-04764.3 MediumFebruary 19, 2005
php arena pafaqSQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers...CVE-2005-0475Public exploit6.4 MediumFebruary 19, 2005
webcalendarSQL injection vulnerability in the user_valid_crypt function in user.php in WebCalendar 0.9.45...CVE-2005-04746.4 MediumFebruary 19, 2005
rob flynn gaim, mandrakesoft mandrake linux, mandrake linux corporate server +2 more +4 moreThe HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of...CVE-2005-04735.0 MediumFebruary 19, 2005
rob flynn gaim, mandrakesoft mandrake linux, mandrake linux corporate server +2 more +4 moreGaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via...CVE-2005-0472Fix available5.0 MediumFebruary 19, 2005
sun jre, jdk +1 moreSun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become...CVE-2005-04715.0 MediumFebruary 19, 2005
wpa supplicant supplicant, gentoo linux +1 moreBuffer overflow in wpa_supplicant before 0.2.7 allows remote attackers to cause a denial of...CVE-2005-04705.0 MediumFebruary 19, 2005
redhat enterprise linux, enterprise linux desktop +1 moreUnknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when running...CVE-2005-00922.1 LowFebruary 19, 2005
argosoft ftp serverArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a...CVE-2005-051910.0 HighFebruary 18, 2005
xinkaa web station web stationDirectory traversal vulnerability in Xinkaa 1.0.3 and earlier allows remote attackers to read...CVE-2005-05025.0 MediumFebruary 18, 2005
yahoo messengerThe Audio Setup Wizard (asw.dll) in Yahoo! Messenger 6.0.0.1750, and possibly other versions,...CVE-2005-02424.6 MediumFebruary 18, 2005
bidwatcherFormat string vulnerability in bidwatcher before 1.3.17 allows remote malicious web servers from...CVE-2005-0158Fix available7.5 HighFebruary 18, 2005
inl ulog-phpUnknown "major security flaws" in Ulog-php before 1.0, related to input validation, have unknown...CVE-2005-04637.5 HighFebruary 17, 2005
mercuryboardCross-site scripting (XSS) vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers...CVE-2005-04624.3 MediumFebruary 17, 2005
No product listedUnknown vulnerability in NewsBruiser 2.x before 2.6.1 allows remote attackers to "take actions on...CVE-2005-04615.0 MediumFebruary 17, 2005
mercuryboardindex.php in MercuryBoard 1.0.x and 1.1.x allows remote attackers to obtain sensitive information...CVE-2005-04605.0 MediumFebruary 17, 2005
phpmyadminphpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the...CVE-2005-0459Fix available5.0 MediumFebruary 17, 2005
oscommerceCross-site scripting (XSS) vulnerability in contact_us.php in osCommerce 2.2-MS2 allows remote...CVE-2005-04584.3 MediumFebruary 17, 2005
opera browserOpera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local...CVE-2005-04577.2 HighFebruary 17, 2005
guillaumegardey biborbBibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for...CVE-2005-02544.3 MediumFebruary 17, 2005
guillaumegardey biborbDirectory traversal vulnerability in index.php for BibORB 1.3.2, and possibly earlier versions,...CVE-2005-0253Public exploit4.0 MediumFebruary 17, 2005
guillaumegardey biborbSQL injection vulnerability in BibORB 1.3.2, and possibly earlier versions, allows remote...CVE-2005-0252Public exploit7.5 HighFebruary 17, 2005
guillaumegardey biborbCross-site scripting (XSS) vulnerability in bibindex.php for BibORB 1.3.2, and possibly earlier...CVE-2005-0251Public exploit4.3 MediumFebruary 17, 2005
yahoo messengerYahoo! Messenger 6.0.0.1750, and possibly other versions before 6.0.0.1921, does not properly...CVE-2005-02435.0 MediumFebruary 17, 2005
gnome gtkDirectory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP...CVE-2005-0372Fix available5.0 MediumFebruary 17, 2005
codeworx technologies dcp-portalMultiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to...CVE-2005-04547.5 HighFebruary 16, 2005
lighttpdThe buffer_urldecode function in Lighttpd 1.3.7 and earlier does not properly handle control...CVE-2005-04535.0 MediumFebruary 16, 2005
microsoft asp.netMultiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to...CVE-2005-0452Public exploitEPSS 23.4%4.3 MediumFebruary 16, 2005
sami http serverSami HTTP Server 1.0.5 allows remote attackers to cause a denial of service via an HTTP request...CVE-2005-04515.0 MediumFebruary 16, 2005
sami http serverDirectory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read...CVE-2005-04505.0 MediumFebruary 16, 2005
linux kernelThe netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial...CVE-2005-04497.1 HighFebruary 16, 2005
zakon group openconfCross-site scripting (XSS) vulnerability in Openconf 1.04, and possibly other versions before 1...CVE-2005-04074.3 MediumFebruary 16, 2005
linux kernel, netkit linux netkit, vserver linux-vserver +2 moreRace condition in the setsid function in Linux before 2.6.8.1 allows local users to cause a...CVE-2005-01786.2 MediumFebruary 16, 2005
linux kernelnls_ascii.c in Linux before 2.6.8.1 uses an incorrect table size, which allows attackers to cause...CVE-2005-01777.8 HighFebruary 16, 2005
kdeMultiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars...CVE-2005-001110.0 HighFebruary 16, 2005
typespeedUnknown vulnerability in typespeed 0.4.1 and earlier allows local users to gain privileges.CVE-2005-0105Public exploitFix available4.6 MediumFebruary 16, 2005
sun solaris, sunos +1 moreSolaris 7, 8, and 9 allows remote attackers to cause a denial of service (hang) via a flood of...CVE-2005-04475.0 MediumFebruary 15, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open