Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: March 2005

9 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2004-0989
    47Plan

    Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrar

    CriticalCVSS 10.0Proof of conceptEPSS 21%

    xmlsoft · libxmlMar 1, 2005

  • CVE-2004-0990
    48Plan

    Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of ser

    CriticalCVSS 10.0Proof of conceptEPSS 28%

    gd graphics library · gdlibMar 1, 2005

  • CVE-2004-1029
    42Plan

    The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly rest

    CriticalCVSS 9.3Proof of conceptEPSS 17%

    sun · jdkMar 1, 2005

  • CVE-2004-1037
    59Plan

    The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string.

    CriticalCVSS 10.0WeaponizedEPSS 61%

    twiki · twikiMar 1, 2005

  • CVE-2005-0688
    34Monitor

    Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via

    MediumCVSS 5.0Proof of conceptEPSS 47%

    microsoft · windows 2003 serverMar 5, 2005

  • CVE-2005-0701
    25Monitor

    Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\\.\\..

    MediumCVSS 5.0Proof of conceptEPSS 18%

    oracle · database serverMar 7, 2005

  • CVE-2005-0509
    22Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbi

    MediumCVSS 4.3No exploitEPSS 15%

    mono · monoMar 14, 2005

  • CVE-2005-0478
    40Plan

    Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary

    MediumCVSS 5.0WeaponizedEPSS 66%

    trackercam · trackercamMar 30, 2005

  • CVE-2005-0484
    33Monitor

    Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code via an FTP transfer

    HighCVSS 7.5No exploitEPSS 10%

    gproftpd · gproftpdMar 30, 2005