Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-03-28 | CVE-2005-0892 | Unspecified vulnerability in Smail 3.2.0.120 Buffer overflow in smail 3.2.0.120 allows remote attackers or local users to execute arbitrary code via a long string in the MAIL FROM command and possibly other SMTP commands. | 10.0 |
| 2005-03-27 | CVE-2005-0750 | Buffer Index vulnerability in Linux Kernel Bluetooth Signed The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or (2) socketpair call with a negative protocol value. | 7.2 |
| 2005-03-26 | CVE-2005-0914 | Cross-Site Scripting vulnerability in Cpg-Nuke CPG Dragonfly CMS 9.0.2.0 Multiple cross-site scripting (XSS) vulnerabilities in CPG Dragonfly 9.0.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) the profile parameter to index.php or (2) the cat parameter. network cpg-nuke | 4.3 |
| 2005-03-26 | CVE-2005-0900 | Information Disclosure vulnerability in Nukebookmarks 0.6 marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to obtain sensitive information via an invalid (1) file or (2) category parameter, which reveal the path in an error message. | 5.0 |
| 2005-03-26 | CVE-2005-0898 | Cross-Site Scripting vulnerability in Magicscripts E-Store Kit-2 Paypal Cross-site scripting (XSS) vulnerability in downloadform.php in E-Store Kit-2 PayPal Edition allows remote attackers to inject arbitrary web script or HTML via the txn_id parameter. network magicscripts | 4.3 |
| 2005-03-25 | CVE-2005-0592 | Remote vulnerability in Mozilla Suite Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla before 1.7.6 might allow remote attackers to cause a denial of service (crash) or execute arbitrary code via invalid sequences in a UTF8 encoded string that result in a zero length value. | 7.5 |
| 2005-03-25 | CVE-2005-0587 | Link Following vulnerability in Mozilla Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK (link) file twice, which overwrites the file that was referenced in the first .LNK file. | 6.5 |
| 2005-03-25 | CVE-2005-0585 | Unspecified vulnerability in Mozilla Firefox and Mozilla Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to spoof legitimate sites and facilitate phishing attacks. | 2.6 |
| 2005-03-24 | CVE-2005-0912 | Remote Security vulnerability in Deplate Unknown vulnerabilities in deplate before 0.7.2 have unknown impact, possibly involving elements.rb. | 7.5 |
| 2005-03-24 | CVE-2005-0889 | Cross-Site Scripting vulnerability in Dream4 Koobi CMS 4.2.3 Cross-site scripting (XSS) vulnerability in index.php for Dream4 Koobi CMS 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the area parameter. network dream4 | 4.3 |