Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: February 2005

15 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2005-0101
    35Monitor

    Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code

    HighCVSS 7.5Proof of conceptEPSS 16%

    newspost · newspostFeb 1, 2005

  • CVE-2005-0245
    34Monitor

    Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to

    HighCVSS 7.5Proof of conceptEPSS 14%

    postgresql · postgresqlFeb 1, 2005

  • CVE-2005-0174
    35Monitor

    Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP s

    MediumCVSS 5.0No exploitEPSS 50%

    squid · squidFeb 7, 2005

  • CVE-2005-0175
    32Monitor

    Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.

    MediumCVSS 5.0No exploitEPSS 40%

    squid · squidFeb 7, 2005

  • CVE-2004-0848
    38Monitor

    Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long

    HighCVSS 7.5No exploitEPSS 27%

    microsoft · officeFeb 8, 2005

  • CVE-2005-0233
    36Monitor

    The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain na

    HighCVSS 7.5No exploitEPSS 20%

    mozilla · caminoFeb 8, 2005

  • CVE-2005-0249
    36Monitor

    Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX

    HighCVSS 7.5No exploitEPSS 18%

    symantec · antivirus scan engineFeb 8, 2005

  • CVE-2004-0937
    34Monitor

    Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus

    HighCVSS 7.5Proof of conceptEPSS 14%

    sophos · sophos anti-virusFeb 9, 2005

  • CVE-2004-0941
    43Plan

    Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via mal

    CriticalCVSS 10.0No exploitEPSS 10%

    gd graphics library · gdlibFeb 9, 2005

  • CVE-2004-0942
    38Monitor

    Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MI

    MediumCVSS 5.0Proof of conceptEPSS 58%

    apache · http serverFeb 9, 2005

  • CVE-2004-0963
    50Plan

    Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attackers to cause a denial of service

    CriticalCVSS 10.0No exploitEPSS 32%

    microsoft · wordFeb 9, 2005

  • CVE-2004-0964
    59Plan

    Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary co

    CriticalCVSS 10.0WeaponizedEPSS 62%

    zinf · zinfFeb 9, 2005

  • CVE-2004-0978
    51Plan

    Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online

    CriticalCVSS 10.0No exploitEPSS 38%

    microsoft · internet explorerFeb 9, 2005

  • CVE-2005-0452
    24Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrar

    MediumCVSS 4.3Proof of conceptEPSS 23%

    microsoft · asp.netFeb 16, 2005

  • CVE-2005-0511
    41Plan

    misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary

    HighCVSS 7.5WeaponizedEPSS 35%

    jelsoft · vbulletinFeb 21, 2005