Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

2.1

LOW

CVE-2005-1126

The SIOCGIFCONF ioctl (ifconf function) in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, which allows local users to obtain portions of sensitive kernel memory....

Affected Products : freebsd
Published: Apr. 15, 2005

Modified: Apr. 03, 2025
9.8

CRITICAL

CVE-2005-1141

Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-based buffer overflow....

Affected Products : optical_character_recognition
Published: Apr. 15, 2005

Modified: Apr. 03, 2025
4.3

MEDIUM

CVE-2005-1140

Cross-site scripting (XSS) vulnerability in myBloggie 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the comments....

Affected Products : mybloggie
Published: Apr. 15, 2005

Modified: Apr. 03, 2025
7.5

HIGH

CVE-2005-1142

Heap-based buffer overflow in the readpgm function in pnm.c for GOCR 0.40, when it is not using netpbm, allows remote attackers to execute arbitrary code via a P3 format PNM file with more data than implied by its width and height values....

Affected Products : optical_character_recognition_utility
Published: Apr. 15, 2005

Modified: Apr. 03, 2025
7.5

HIGH

CVE-2005-1308

SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML....

Affected Products : sqwebmail
Published: Apr. 15, 2005

Modified: Apr. 03, 2025
7.5

HIGH

CVE-2005-0130

Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel names or (2) song names that are not properly quoted when the user runs IRC scripts....

Affected Products : konversation
Published: Apr. 14, 2005

Modified: Apr. 03, 2025
7.5

HIGH

CVE-2005-1139

Opera 8 Beta 3, when using first-generation vetted digital certificates, displays the Organizational information of an SSL certificate, which is easily spoofed and can facilitate phishing attacks....

Affected Products : opera_browser
Published: Apr. 14, 2005

Modified: Apr. 03, 2025
7.5

HIGH

CVE-2004-1175

fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters....

Affected Products : enterprise_linux debian_linux suse_linux linux_advanced_workstation linux turbolinux_server turbolinux_workstation midnight_commander
Published: Apr. 14, 2005

Modified: Apr. 03, 2025
7.5

HIGH

CVE-2004-1176

Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code....

Affected Products : enterprise_linux debian_linux suse_linux linux_advanced_workstation linux turbolinux_server turbolinux_workstation midnight_commander
Published: Apr. 14, 2005

Modified: Apr. 03, 2025
5.0

MEDIUM

CVE-2004-1009

Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors....

Affected Products : enterprise_linux debian_linux suse_linux linux_advanced_workstation linux turbolinux_server turbolinux_workstation midnight_commander
Published: Apr. 14, 2005

Modified: Apr. 03, 2025
4.6

MEDIUM

CVE-2004-1181

htmlheadline before 21.8 allows local users to overwrite arbitrary files via a symlink attack on temporary files....

Affected Products : htmlheadline
Published: Apr. 14, 2005

Modified: Apr. 03, 2025
2.1

LOW

CVE-2004-0812

Unknown vulnerability in the Linux kernel before 2.4.23, on the AMD AMD64 and Intel EM64T architectures, associated with "setting up TSS limits," allows local users to cause a denial of service (crash) and possibly execute arbitrary code....

Affected Products : linux_kernel enterprise_linux enterprise_linux_desktop
Published: Apr. 14, 2005

Modified: Apr. 03, 2025
5.0

MEDIUM

CVE-2004-1174

direntry.c in Midnight Commander (mc) 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file handles."...

Affected Products : enterprise_linux debian_linux suse_linux linux_advanced_workstation linux turbolinux_server turbolinux_workstation midnight_commander
Published: Apr. 14, 2005

Modified: Apr. 03, 2025
2.1

LOW

CVE-2004-1237

Unknown vulnerability in the system call filtering code in the audit subsystem for Red Hat Enterprise Linux 3 allows local users to cause a denial of service (system crash) via unknown vectors....

Affected Products : linux_kernel enterprise_linux enterprise_linux_desktop suse_linux
Published: Apr. 14, 2005

Modified: Apr. 03, 2025
5.0

MEDIUM

CVE-2005-1136

Simple PHP Blog (sphpBlog) 0.4.0 stores the (1) password.txt and (2) config.txt files under the web document root, which allows remote attackers to obtain sensitive information and crack passwords via a direct request to these files....

Affected Products : sphpblog
Published: Apr. 14, 2005

Modified: Apr. 03, 2025
7.5

HIGH

CVE-2005-1122

Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP GET request containing double-encoded format string specifiers (aka "double ...

Affected Products : monkey
Published: Apr. 14, 2005

Modified: Apr. 03, 2025
7.5

HIGH

CVE-2004-1005

Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact....

Affected Products : enterprise_linux debian_linux suse_linux linux_advanced_workstation linux turbolinux_server turbolinux_workstation midnight_commander
Published: Apr. 14, 2005

Modified: Apr. 03, 2025
7.5

HIGH

CVE-2004-1004

Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact....

Affected Products : enterprise_linux debian_linux suse_linux linux_advanced_workstation linux turbolinux_server turbolinux_workstation midnight_commander
Published: Apr. 14, 2005

Modified: Apr. 03, 2025
5.0

MEDIUM

CVE-2005-0081

MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via an HTTP request with invalid headers....

Affected Products : maxdb
Published: Apr. 14, 2005

Modified: Apr. 03, 2025
5.0

MEDIUM

CVE-2004-1092

Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory....

Affected Products : enterprise_linux debian_linux suse_linux linux_advanced_workstation linux turbolinux_server turbolinux_workstation midnight_commander
Published: Apr. 14, 2005

Modified: Apr. 03, 2025

Showing 20 of 294421 Results

Browse by Apps

Latest CVE Feed

2.1

9.8

4.3

7.5

7.5

7.5

7.5

7.5

7.5

5.0

4.6

2.1

5.0

2.1

5.0

7.5

7.5

7.5

5.0

5.0

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable