CVEs published in March 2005
343 vulnerabilities, 11 critical, 0 exploited.
- broadcom unicenter asset managementSQL injection vulnerability in the Query Designer for Computer Associates (CA) Unicenter Asset...7.5 High
- openbsdThe copy functions in locore.s such as copyout in OpenBSD 3.5 and 3.6, and possibly other BSD...5.0 Medium
- foxmail email serverBuffer overflow in Foxmail Server 2.0 allows remote attackers to execute arbitrary code via a...10.0 High
- kmint21 software golden ftp serverBuffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a...7.5 High
- trolltech qtQt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load...4.6 Medium
- php arena paboxCross-site scripting (XSS) vulnerability in the News module for paBox 1.6 allows remote attackers...4.3 Medium
- ca3deFormat string vulnerability in Carsten's 3D Engine (Ca3DE), March 2004 version and earlier,...7.5 High
- squidRace condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie...2.6 Low
- phpbb group phpbbsessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges...7.5 High
- broadcom unicenter asset managementCross-site scripting (XSS) vulnerability in the Reporter for Computer Associates (CA) Unicenter...4.3 Medium
- broadcom unicenter asset managementComputer Associates (CA) Unicenter Asset Management (UAM) 4.0 does not properly initialize the ...4.6 Medium
- xli, altlinux alt linux, suse linux +2 moreMultiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code...7.5 High
- xli, altlinux alt linux, suse linux +2 morexloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via...7.5 High
- foxmail email serverFormat string vulnerability in Foxmail Server 2.0 allows remote attackers to cause a denial of...10.0 High
- cerulean studios trillian, trillian pro +1 moreBuffer overflow in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via...7.5 High
- enlight software scraplandScrapland 1.0 and earlier allows remote attackers to cause a denial of service (server...5.0 Medium
- bfriendly.com einsteinEinstein 1.0 stores credit card information in plaintext in the world-readable wallets.dat file,...2.1 Low
- nexland pro800turbo, symantec gateway security 360, firewall vpn appliance 200r +1 more +3 moreThe SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and...6.4 Medium
- postnuke software foundation postnukeSQL injection vulnerability in dl-search.php in PostNuke 0.750 and 0.760-RC2 allows remote...7.5 High
- postnuke software foundation postnukeMultiple SQL injection vulnerabilities in (1) index.php, (2) modules.php, or (3) admin.php in...7.5 High
- cisco ipvc-3510-mcu, ipvc-3520-gw-2b, ipvc-3520-gw-2b2v +4 more +6 moreCisco IP/VC Videoconferencing System 3510, 3520, 3525 and 3530 contain hard-coded default SNMP...7.5 High
- realnetworks realone player, realplayer, helix player +2 moreHeap-based buffer overflow in RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and...5.1 Medium
- altlinux alt linux, lesstif, mandrakesoft mandrake linux +7 more +9 morescan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value...7.5 High
- broadcom license softwareDirectory traversal vulnerability in Computer Associates (CA) License Client 0.1.0.15 allows...5.0 Medium
- broadcom license softwareBuffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to...10.0 High
- broadcom license softwareMultiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow...4.6 Medium
HelixPlayerRed Hat,HelixPlayer-debuginfoRed Hat +1 moreStack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for...5.1 Medium- phpnewsPHP remote file inclusion vulnerability in auth.php in PHPNews 1.2.4 and possibly 1.2.3, allows...5.0 Medium
- pblangdelpm.php in PBLang 4.63 allows remote authenticated users to delete arbitrary PM files by...2.1 Low
- pblangsendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full...2.1 Low
- 427bb fourtwosevenbbMultiple cross-site scripting (XSS) vulnerabilities in profile.php in 427BB 2.2 allow remote...4.3 Medium
- demof forumwaMultiple cross-site scripting (XSS) vulnerabilities in Forumwa 1.0 allow remote attackers to...4.3 Medium
- raidenhttpdBuffer overflow in RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote...7.5 High
- raidenhttpdRaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view...5.0 Medium
- devellion cubecartCubeCart 2.0.0 through 2.0.5 allows remote attackers to determine the full path of the server via...5.0 Medium
- devellion cubecartCross-site scripting (XSS) vulnerability in settings.inc.php for CubeCart 2.0.0 through 2.0.5, as...4.3 Medium
- gfi languard network security scannerlnss.exe in GFI Languard Network Security Scanner 5.0 stores the username and password in memory...4.6 Medium
- info-zip unzipUnzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files,...6.2 Medium
- cisco application and content networking softwareCisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, 5.1, or 5.2 use...7.5 High
- cisco application and content networking softwareCisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, or 5.1 before 5...5.0 Medium
- cisco application and content networking softwareCisco devices running Application and Content Networking System (ACNS) 5.0 before 5.0.17.6 and 5...5.0 Medium
- phpPHP 4 (PHP4) allows attackers to cause a denial of service (daemon crash) by using the readfile...2.1 Low
- working resources inc. badblueBuffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via...7.5 High