Vulnerabilities > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-01-21 | CVE-2004-1184 | Multiple vulnerability in GNU Enscript The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters. | 4.6 |
| 2005-01-20 | CVE-2005-1846 | Directory Traversal vulnerability in Yamt 0.5.2 Multiple directory traversal vulnerabilities in YaMT before 0.5_2 allow attackers to overwrite arbitrary files via the (1) rename or (2) sort options. | 5.0 |
| 2005-01-20 | CVE-2005-0300 | Local File Include File Disclosure vulnerability in Jsboard 2.0.7/2.0.8/2.0.9 Directory traversal vulnerability in session.php in JSBoard 2.0.9 and earlier allows remote attackers to read arbitrary files via a .. | 5.0 |
| 2005-01-19 | CVE-2005-0191 | Remote Security vulnerability in RealPlayer Off-by-one buffer overflow in the processing of tags in Real Metadata Package (RMP) files in RealPlayer 10.5 (6.0.12.1040) and earlier could allow remote attackers to execute arbitrary code via a long tag. | 5.1 |
| 2005-01-19 | CVE-2005-0186 | Denial-Of-Service vulnerability in IOS Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service (ITS), CallManager Express (CME) or Survivable Remote Site Telephony (SRST), allows remote attackers to cause a denial of service (device reboot) via a malformed packet to the SCCP port. | 5.0 |
| 2005-01-17 | CVE-2005-0295 | Unspecified vulnerability in Inca Nprotect Gameguard npptnt2.sys in nProtect Gameguard provides unrestricted I/O to any process that calls it, which allows local users to gain privileges. | 4.6 |
| 2005-01-17 | CVE-2005-0291 | Multiple vulnerability in Netgear Fvs318 2.4 Cross-site scripting (XSS) vulnerability in the log viewer in NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via a blocked URL phrase. network netgear | 4.3 |
| 2005-01-17 | CVE-2005-0221 | Cross-Site Scripting vulnerability in Gallery Project Gallery 2.0Alpha Cross-site scripting (XSS) vulnerability in login.php in Gallery 2.0 Alpha allows remote attackers to inject arbitrary web script or HTML via the g2_form[subject] field. network gallery-project | 4.3 |
| 2005-01-16 | CVE-2005-0294 | Unspecified vulnerability in Minis 0.2.1 minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service (infinite loop) via an HTTP request for a file that the web server does not have permission to read, as demonstrated using the month parameter. | 5.0 |
| 2005-01-15 | CVE-2005-0095 | Denial Of Service vulnerability in Squid Proxy Web Cache Communication Protocol The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache numbers. | 5.0 |