CVEs published in March 2005
343 vulnerabilities, 11 critical, 0 exploited.
- phorumCRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform...5.0 Medium
- kayako esupportCross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.3 allows remote...4.3 Medium
- phpmyfamilySQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5)...7.5 High
- sun j2seArgument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06, on Mac OS X,...7.5 High
- mozilla firefoxFirefox before 1.0.2 allows remote attackers to execute arbitrary code by tricking a user into...2.6 Low
- mozilla firefox, mozilla +1 moreFireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading...5.1 Medium
- mozilla firefox, mozilla, mozilla thunderbird +2 moreHeap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and...5.1 Medium
- digitalhiveMultiple cross-site scripting (XSS) vulnerabilities in base.php for DigitalHive 2.0 allow remote...4.3 Medium
- interspire articleliveCross-site scripting (XSS) vulnerability in articles.newcomment for Interspire ArticleLive 2005...4.3 Medium
- mercuryboard message boardCross-site scripting (XSS) vulnerability in MercuryBoard before 1.1.3 allows remote attackers to...4.3 Medium
- linux kernelLinux kernel 2.6 before 2.6.11 does not restrict access to the N_MOUSE line discipline for a TTY,...7.2 High
- mathopdThe internal_dump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is...5.5 Medium
- imagemagick, sgi propack +1 moreUnknown vulnerability in ImageMagick before 6.1.8 allows remote attackers to cause a denial of...5.0 Medium
- imagemagick, sgi propack +1 moreImageMagick before 6.0 allows remote attackers to cause a denial of service (application crash)...5.0 Medium
- icecastMultiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a...7.5 High
- icecastIceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files...5.0 Medium
- sun j2seArgument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows untrusted...10.0 High
- belkin 54g wireless routerThe SNMP service in the Belkin 54G (F5D7130) wireless router allows remote attackers to cause a...5.0 Medium
- No product listedBelkin 54G (F5D7130) wireless router enables SNMP by default in a manner that allows remote...5.0 Medium
- belkin 54g wireless routerBelkin 54G (F5D7130) wireless router allows remote attackers to access restricted resources by...7.5 High
- php-post web forumCross-site scripting (XSS) vulnerability in PHP-Post before 0.33 allows remote attackers to...4.3 Medium
- php-post web forumPHP-Post allows remote attackers to spoof the names of other users by registering with a username...5.0 Medium
- xzabite dyndnsupdateMultiple buffer overflows in Xzabite DYNDNSUpdate 0.6.15 and earlier, including the ipcheck...7.5 High
- php fusion fusionCross-site scripting (XSS) vulnerability in setuser.php of the Digitanium addon to PHP-Fusion 5...4.3 Medium
- ciamos, e-xoops, runcms +2 morehighlight.php in (1) RUNCMS 1.1A, (2) CIAMOS 0.9.2 RC1, (3) e-Xoops 1.05 Rev3, and possibly other...5.0 Medium
- ciamos, e-xoops, runcms +2 moreViewcat.php in (1) RUNCMS 1.1A, (2) Ciamos 0.9.2 RC1, e-Xoops 1.05 Rev3, and possibly other...5.0 Medium
- ollydbgOllyDbg 1.10 and earlier allows remote attackers to cause a denial of service (application crash)...5.0 Medium
- lgames ltrisBuffer overflow in LTris before 1.0.10 allows local users to execute arbitrary code via a crafted...7.5 High
- marc lehmann rxvt-unicodeBuffer overflow in command.C for rxvt-unicode before 5.3 allows remote attackers to execute...7.5 High
- apple mac os xMac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow...4.6 Medium
- apple mac os x, mac os x server +1 moreStack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and...7.2 High
- apple mac os x, mac os x server +1 moreAFP Server in Mac OS X before 10.3.8 uses insecure permissions for "Drop Boxes," which allows...2.1 Low
- apple mac os x, mac os x server +1 moreThe Bluetooth Setup Assistant for Mac OS X before 10.3.8 can be launched without a keyboard or...4.6 Medium
- thepoolclub ipool, isnooker +1 moreThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in...4.6 Medium
- citrix metaframe password managerCitrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is...2.1 Low
- No product listedUnknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to...7.5 High
- No product listedMicrosoft Office InfoPath 2003 SP1 includes sensitive information in the Manifest.xsf file in a...5.0 Medium
- novell netwareThe xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession...5.0 Medium
- punbbCross-site scripting (XSS) vulnerability in PunBB 1.2.3 allows remote attackers to inject...4.3 Medium
- symantec enterprise firewall, gateway security 5400, velociraptor +1 more +3 moreUnknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1...5.0 Medium
- sun solaris, sunos +1 moreBuffer overflow in newgrp in Solaris 7 through 9 allows local users to gain root privileges.7.2 High
- linux kernelMultiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may...6.4 Medium
- lysator lshUnknown vulnerability in lshd in Lysator LSH 1.x and 2.x before 2.0.1 allows remote attackers to...5.0 Medium
- initial redirect squid proxy plug-inBuffer overflow in Initial Redirect (ir) Squid Proxy Plug-In 0.1 and 0.2 may allow attackers to...5.0 Medium
- notify technology notifylinkThe web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page,...5.0 Medium
- notify technology notifylinkThe web interface in NotifyLink 3.0 does not properly restrict access to functions that have been...4.6 Medium
- notify technology notifylinkSQL injection vulnerability in NotifyLink before 3.0 allows remote attackers to execute arbitrary...7.5 High
- notify technology notifylinkNotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys...7.5 High
- apache tomcatApache Tomcat before 5.x allows remote attackers to cause a denial of service (application crash)...5.0 Medium
- oxid cain and abelMultiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of...7.5 High
- Show moreLoading…