2005 CVEs (page 34)
Page 34 of 47 — CVEs published in 2005, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2005-1482 | | 2005-05-11 | ArticleLive 2005 allows remote attackers to gain privileges by modifying the (1) auth and (2) userId fields in a cookie. | |
CVE-2005-1481 | | 2005-05-11 | Multiple SQL injection vulnerabilities in Aaron Outpost ASP Inline Corporate Calendar allow remote attackers to execute arbitrary SQL commands via the Event_ID… | |
CVE-2005-1480 | | 2005-05-11 | Directory traversal vulnerability in RaidenFTPD before 2.4.2241 allows remote attackers to read arbitrary files via a "..\\" (dot dot backslash) in the urlget… | |
CVE-2005-1479 | | 2005-05-11 | SQL injection vulnerability in jgs_portal.php in JGS-Portal 3.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. | |
CVE-2005-1478 | | 2005-05-11 | Format string vulnerability in dSMTP (dsmtp.exe) in DMail 3.1a allows remote attackers to execute arbitrary code via format string specifiers in the xtellmail… | |
CVE-2005-1263 | | 2005-05-11 | The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute ar… | |
CVE-2005-1262 | | 2005-05-11 | Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed MSN message. | |
CVE-2005-1261 | | 2005-05-11 | Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instant message (IM) with… | |
CVE-2005-1555 | | 2005-05-10 | Cross-site scripting (XSS) vulnerability in the JRun Web Server in ColdFusion MX 7.0 allows remote attackers to inject arbitrary script or HTML via the URL, wh… | |
CVE-2005-0039 | | 2005-05-10 | Certain configurations of IPsec, when using Encapsulating Security Payload (ESP) in tunnel mode, integrity protection at a higher layer, or Authentication Head… | |
CVE-2005-1477 | | 2005-05-09 | The install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as update.mozilla.org or addon.mozilla.org, to execute arbitrary… | |
CVE-2005-1476 | | 2005-05-09 | Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous jav… | |
CVE-2005-1471 | | 2005-05-06 | Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote attackers to execute arbitrary code via crafted chunked-encoding data. | |
CVE-2005-1406 | | 2005-05-06 | The kernel in FreeBSD 4.x to 4.11 and 5.x to 5.4 does not properly clear certain fixed-length buffers when copying variable-length data for use by applications… | |
CVE-2005-1400 | | 2005-05-06 | The i386_get_ldt system call in FreeBSD 4.7 to 4.11 and 5.x to 5.4 allows local users to access sensitive kernel memory via arguments with negative or very lar… | |
CVE-2005-1399 | | 2005-05-06 | FreeBSD 4.6 to 4.11 and 5.x to 5.4 uses insecure default permissions for the /dev/iir device, which allows local users to execute restricted ioctl calls to rea… | |
CVE-2005-1470 | | 2005-05-05 | Multiple unknown vulnerabilities in the (1) TZSP, (2) MGCP, (3) ISUP, (4) SMB, or (5) Bittorrent dissectors in Ethereal before 0.10.11 allow remote attackers t… | |
CVE-2005-1469 | | 2005-05-05 | Unknown vulnerability in the GSM dissector in Ethereal before 0.10.11 allows remote attackers to cause the dissector to access an invalid pointer. | |
CVE-2005-1468 | | 2005-05-05 | Multiple unknown vulnerabilities in the (1) WSP, (2) Q.931, (3) H.245, (4) KINK, (5) MGCP, (6) RPC, (7) SMBMailslot, and (8) SMB NETLOGON dissectors in Etherea… | |
CVE-2005-1467 | | 2005-05-05 | Unknown vulnerability in the NDPS dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service (memory exhaustion) via unknown vec… | |
CVE-2005-1466 | | 2005-05-05 | Unknown vulnerability in the DICOM dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service (large memory allocation) via unkn… | |
CVE-2005-1465 | | 2005-05-05 | Unknown vulnerability in the NCP dissector in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (long loop). | |
CVE-2005-1464 | | 2005-05-05 | Multiple unknown vulnerabilities in the (1) KINK, (2) L2TP, (3) MGCP, (4) EIGRP, (5) DLSw, (6) MEGACO, (7) LMP, and (8) RSVP dissectors in Ethereal before 0.10… | |
CVE-2005-1463 | | 2005-05-05 | Multiple format string vulnerabilities in the (1) DHCP and (2) ANSI A dissectors in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary cod… | |
CVE-2005-1462 | | 2005-05-05 | Double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code. | |
CVE-2005-1461 | | 2005-05-05 | Multiple buffer overflows in the (1) SIP, (2) CMIP, (3) CMP, (4) CMS, (5) CRMF, (6) ESS, (7) OCSP, (8) X.509, (9) ISIS, (10) DISTCC, (11) FCELS, (12) Q.931, (1… | |
CVE-2005-1460 | | 2005-05-05 | Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error) via an invalid protocol tree item len… | |
CVE-2005-1459 | | 2005-05-05 | Multiple unknown vulnerabilities in the (1) WSP, (2) BER, (3) SMB, (4) NDPS, (5) IAX2, (6) RADIUS, (7) TCAP, (8) MRDISC, (9) 802.3 Slow, (10) SMBMailslot, or (… | |
CVE-2005-1458 | | 2005-05-05 | Multiple unknown "other problems" in the KINK dissector in Ethereal before 0.10.11 have unknown impact and attack vectors. | |
CVE-2005-1457 | | 2005-05-05 | Multiple unknown vulnerabilities in the (1) AIM, (2) LDAP, (3) FibreChannel, (4) GSM_MAP, (5) SRVLOC, and (6) NTLMSSP dissectors in Ethereal before 0.10.11 all… | |
CVE-2005-1456 | | 2005-05-05 | Multiple unknown vulnerabilities in the (1) DHCP and (2) Telnet dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (abor… | |
CVE-2005-1453 | | 2005-05-05 | fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (crash) by closing the connection while fetchnews is reading (1)… | |
CVE-2005-0918 | | 2005-05-05 | The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of… | |
CVE-2005-1342 | | 2005-05-04 | The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute ar… | |
CVE-2005-1341 | | 2005-05-04 | Apple Terminal 1.4.4 allows attackers to execute arbitrary commands via terminal escape sequences. | |
CVE-2005-1340 | | 2005-05-04 | The HTTP proxy service in Server Admin for Mac OS X 10.3.9 does not restrict access when it is enabled, which allows remote attackers to use the proxy. | |
CVE-2005-1339 | | 2005-05-04 | lukemftpd in Mac OS X 10.3.9 allows remote authenticated users to escape the chroot environment by logging in with their full name. | |
CVE-2005-1338 | | 2005-05-04 | Mac OS X 10.3.9, when using an LDAP server that does not use ldap_extended_operation, may store initial LDAP passwords for new accounts in plaintext. | |
CVE-2005-1337 | | 2005-05-04 | Apple Help Viewer 2.0.7 and 3.0.0 in Mac OS X 10.3.9 allows remote attackers to read and execute arbitrary scrpts with less restrictive privileges via a help:/… | |
CVE-2005-1336 | | 2005-05-04 | Buffer overflow in the Foundation framework for Mac OS X 10.3.9 allows local users to execute arbitrary code via a long environment variable. | |
CVE-2005-1335 | | 2005-05-04 | Unknown vulnerability in Mac OS X 10.3.9 allows local users to gain privileges via (1) chfn, (2) chpass, and (3) chsh, which "use external helper programs in a… | |
CVE-2005-1333 | | 2005-05-04 | Directory traversal vulnerability in the Bluetooth file and object exchange (OBEX) services in Mac OS X 10.3.9 allows remote attackers to read arbitrary files. | |
CVE-2005-1332 | | 2005-05-04 | Bluetooth-enabled systems in Mac OS X 10.3.9 enables the Bluetooth file exchange service by default, which allows remote attackers to access files without the… | |
CVE-2005-1331 | | 2005-05-04 | The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the ac… | |
CVE-2005-1330 | | 2005-05-04 | AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service (Cocoa application crash) via a malformed TIFF image that causes the NXSeek to use an i… | |
CVE-2005-1194 | | 2005-05-04 | Stack-based buffer overflow in the ieee_putascii function for nasm 0.98 and earlier allows attackers to execute arbitrary code via a crafted asm file, a differ… | |
CVE-2005-0676 | | 2005-05-04 | index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via the search capability. | |
CVE-2005-0594 | | 2005-05-04 | Buffer overflow in the Netinfo Setup Tool (NeST) allows local users to execute arbitrary code. | |
CVE-2005-1826 | | 2005-05-03 | Buffer overflow in HP Radia Notify Daemon 3.1.0.0 (formerly by Novadigm), and other versions including 2.x, 3.x, and 4.x, allows remote attackers to execute ar… | |
CVE-2005-1825 | | 2005-05-03 | Multiple stack-based buffer overflows in the nvd_exec function in HP Radia Notify Daemon 3.1.2.0 (formerly by Novadigm), and other versions including 2.x, 3.x… | |
CVE-2005-1452 | | 2005-05-03 | Serendipity before 0.8 allows Chief users to "hide plugins installed by other users." | |
CVE-2005-1451 | | 2005-05-03 | The media manager in Serendipity before 0.8 allows remote attackers to upload and execute arbitrary (1) .php or (2) .shtml files. | |
CVE-2005-1450 | | 2005-05-03 | Unknown vulnerability in "the function used to validate path-names for uploading media" in Serendipity before 0.8 has unknown impact. | |
CVE-2005-1449 | | 2005-05-03 | Unknown vulnerability in serendipity_config_local.inc.php for Serendipity before 0.8 has unknown impact. | |
CVE-2005-1448 | | 2005-05-03 | Cross-site scripting (XSS) vulnerability in the BBCode plugin for Serendipity before 0.8 allows remote attackers to inject arbitrary web script or HTML via unk… | |
CVE-2005-1447 | | 2005-05-03 | PHP remote file inclusion vulnerability in main.php in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to execute arbitrary PHP code via the p… | |
CVE-2005-1446 | | 2005-05-03 | SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to upload and execute arbitrary files such as PHP scripts via an attachment to a trouble ticke… | |
CVE-2005-1445 | | 2005-05-03 | Multiple directory traversal vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to (1) delete arbitrary files via the id param… | |
CVE-2005-1444 | | 2005-05-03 | Multiple cross-site scripting (XSS) vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to inject arbitrary web script or HTML… | |
CVE-2005-1443 | | 2005-05-03 | Multiple cross-site scripting (XSS) vulnerabilities in index.php for Invision Power Board (IPB) 2.0.3 and 2.1 Alpha 2 allows remote attackers to inject arbitra… | |
CVE-2005-1442 | | 2005-05-03 | Buffer overflow in the Lotus Notes client for Domino 6.5 before 6.5.4 and 6.0 before 6.0.5 allows local users to cause a denial of service (client crash) and p… | |
CVE-2005-1441 | | 2005-05-03 | Format string vulnerability in Lotus Domino 6.0.x before 6.0.5 and 6.5.x before 6.5.4 allows remote attackers to cause a denial of service via the Notes protoc… | |
CVE-2005-1440 | | 2005-05-03 | Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbitrary web script or HTML via (1) variou… | |
CVE-2005-1439 | | 2005-05-03 | Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via .. sequences in the file parameter. | |
CVE-2005-1438 | | 2005-05-03 | PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to execute arbitrary PHP code via the include_dir parameter. | |
CVE-2005-1437 | | 2005-05-03 | Multiple SQL injection vulnerabilities in osTicket allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to admin.php or (2) cat pa… | |
CVE-2005-1436 | | 2005-05-03 | Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter to view.p… | |
CVE-2005-1435 | | 2005-05-03 | Open WebMail (OWM) before 2.51 20050430 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename. | |
CVE-2005-1434 | | 2005-05-03 | Multiple unknown vulnerabilities in OpenView Network Node Manager (OV NNM) 6.2, 6.4, 7.01, and 7.50 allow attackers to cause a denial of service or execute arb… | |
CVE-2005-1433 | | 2005-05-03 | Multiple unknown vulnjerabilities HP OpenView Event Correlation Services (OV ECS) 3.32 and 3.33 allow attackers to cause a denial of service or execute arbitra… | |
CVE-2005-1431 | | 2005-05-03 | The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial of service, possibly related to padding… | |
CVE-2005-1430 | | 2005-05-03 | Mac OS X 10.3.x and earlier uses insecure permissions for a pseudo terminal tty (pty) that is managed by a non-setuid program, which allows local users to read… | |
CVE-2005-1429 | | 2005-05-03 | SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password parameter. | |
CVE-2005-1428 | | 2005-05-03 | edit_image.asp in Uapplication Uphotogallery allows remote attackers to upload arbitrary files. | |
CVE-2005-1427 | | 2005-05-03 | Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request… | |
CVE-2005-1426 | | 2005-05-03 | Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a databas… | |
CVE-2005-1425 | | 2005-05-03 | Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a datab… | |
CVE-2005-1424 | | 2005-05-03 | StumbleInside GoText 1.01 stores sensitive username, mail address,and phone number information in plaintext in the GoText.bin file, which allows local users to… | |
CVE-2005-1423 | | 2005-05-03 | Directory traversal vulnerability in the mail program in 602LAN SUITE 2004.0.05.0413 allows remote attackers to cause a denial of service and determine the pre… | |
CVE-2005-1422 | | 2005-05-03 | Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to conduct administrator operations and cause a denial of service (server or camera shutdow… | |
CVE-2005-1421 | | 2005-05-03 | Directory traversal vulnerability in Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to read arbitrary files via ".." (dot dot) sequences i… | |
CVE-2005-1420 | | 2005-05-03 | Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to determine the full pathname of the server via a request for an invalid page, as demonstr… | |
CVE-2005-1419 | | 2005-05-03 | SQL injection vulnerability in the admin login panel for Ocean12 Mailing List Manager 1.06 allows remote attackers to execute arbitrary SQL commands via the Ad… | |
CVE-2005-1418 | | 2005-05-03 | NetLeaf Limited NotJustBrowsing 1.0.3 stores the View Lock Password in plaintext in the notjustbrowsing.prf file, which allows local users to gain privileges. | |
CVE-2005-1417 | | 2005-05-03 | Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute arbitrary SQL commands via (1) article_p… | |
CVE-2005-1416 | | 2005-05-03 | Directory traversal vulnerability in 04WebServer 1.81 allows remote attackers to read files outside of the web root but within the installation folder. | |
CVE-2005-1415 | | 2005-05-03 | Buffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote authenticated users to execute arbitrary code via a long FTP command. | |
CVE-2005-1414 | | 2005-05-03 | ExoticSoft FilePocket 1.2 stores sensitive proxy information, including proxy passwords, in plaintext in the registry, which allows local users to gain privile… | |
CVE-2005-1413 | | 2005-05-03 | Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the (1) username or (2) p… | |
CVE-2005-1412 | | 2005-05-03 | SQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote attackers to execute arbitrary SQL commands via the AdminPWD param… | |
CVE-2005-1411 | | 2005-05-03 | Cybration ICUII 7.0 stores passwords in plaintext in the world-readable icuii.ini file, which allows local users to gain privileges. | |
CVE-2005-1410 | | 2005-05-03 | The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as… | |
CVE-2005-1409 | | 2005-05-03 | PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions w… | |
CVE-2005-1407 | | 2005-05-03 | Skype for Windows 1.2.0.0 to 1.2.0.46 allows local users to bypass the identity check for an authorized application, then call arbitrary Skype API functions by… | |
CVE-2005-1405 | | 2005-05-03 | HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before 6.5.4 and 6.0.x before 6.0.5 allows attackers to poison the w… | |
CVE-2005-1404 | | 2005-05-03 | MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser parameter to post.php or (2) sender parameter to privmsg.php. | |
CVE-2005-1403 | | 2005-05-03 | Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to inject arbitrary web script or HTML via… | |
CVE-2005-1402 | | 2005-05-03 | Integer signedness error in certain older versions of the NeL library, as used in Mtp-Target 1.2.2 and earlier, and possibly other products, allows remote atta… | |
CVE-2005-1401 | | 2005-05-03 | Format string vulnerability in the client for Mtp-Target 1.2.2 and earlier allows remote attackers to execute arbitrary code via game messages or other text. | |
CVE-2005-1398 | | 2005-05-03 | phpcart.php in PHPCart 3.2 allows remote attackers to change product price information by modifying the (1) price or (2) postage parameters. NOTE: it was late… |