# CVEs published 2005-03-09

12 CVEs were published on March 9, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0913](https://cve.now/CVE-2004-0913.md): Unknown vulnerability in ecartis 0.x before 0.129a+1.0.0-snap20020514-1.3 and 1.x before 1.0.0+cvs.20030911-8 allows attackers in the same d (no CVSS)
- [CVE-2004-1754](https://cve.now/CVE-2004-1754.md): The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS ser (no CVSS)
- [CVE-2005-0207](https://cve.now/CVE-2005-0207.md): Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O\_DIRECT. (no CVSS)
- [CVE-2005-0548](https://cve.now/CVE-2005-0548.md): Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2005-0549](https://cve.now/CVE-2005-0549.md): Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2005-0698](https://cve.now/CVE-2005-0698.md): PHP remote file inclusion vulnerability in PHPWebLog 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying th (no CVSS)
- [CVE-2005-0699](https://cve.now/CVE-2005-0699.md): Multiple buffer overflows in the dissect\_a11\_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and ea (no CVSS)
- [CVE-2005-0700](https://cve.now/CVE-2005-0700.md): The export\_index action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly by setting the ATK\_ADM (no CVSS)
- [CVE-2005-0701](https://cve.now/CVE-2005-0701.md): Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\\\\.\\\\.. (no CVSS)
- [CVE-2005-0702](https://cve.now/CVE-2005-0702.md): SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in for (no CVSS)
- [CVE-2005-0703](https://cve.now/CVE-2005-0703.md): Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through (no CVSS)
- [CVE-2005-0706](https://cve.now/CVE-2005-0706.md): Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by caus (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-03-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.