2005 CVEs (page 47)
Page 47 of 48 — CVEs published in 2005, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2005-0111 | | 2005-01-13 | Stack-based buffer overflow in the websql CGI program in MySQL MaxDB 7.5.00 allows remote attackers to execute arbitrary code via a long password parameter. | |
CVE-2005-0069 | | 2005-01-13 | The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files. | |
CVE-2005-0456 | | 2005-01-12 | Opera 7.54 and earlier does not properly validate base64 encoded binary data in a data: (RFC 2397) URL, which causes the URL to be obscured in a download dialo… | |
CVE-2005-0376 | | 2005-01-12 | PHP remote file inclusion vulnerability in SGallery 1.01 allows local and possibly remote attackers to execute arbitrary PHP code by modifying the DOCUMENT_ROO… | |
CVE-2005-0288 | | 2005-01-11 | The change password functionality in Bottomline Webseries Payment Application does not require the old password when users enter a new password, which could al… | |
CVE-2005-0117 | | 2005-01-11 | Buffer overflow in XShisen before 1.36 allows local users to execute arbitrary code via a long GECOS field. | |
CVE-2005-0108 | | 2005-01-11 | Apache mod_auth_radius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to cause a denial of service (crash) via a RADIUS_REPLY_MESSAGE with… | |
CVE-2005-0097 | | 2005-01-11 | The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type 3 message that trigg… | |
CVE-2005-0287 | | 2005-01-10 | Bottomline Webseries Payment Application allows remote attackers to read arbitrary files on the network via a report template with modified ReportPath or Repor… | |
CVE-2005-0284 | | 2005-01-10 | SQL injection vulnerability in addentry.php in Woltlab Burning Book 1.0 Gold, 1.1.1e, and possibly other versions, allows remote attackers to execute arbitrary… | |
CVE-2005-0182 | | 2005-01-06 | The mod_dosevasive module 1.9 and earlier for Apache creates temporary files with predictable filenames, which could allow remote attackers to overwrite arbitr… | |
CVE-2005-0283 | | 2005-01-04 | Directory traversal vulnerability in index.php in QwikiWiki allows remote attackers to read arbitrary files via a .. (dot dot) and a %00 at the end of the file… | |
CVE-2005-0280 | | 2005-01-04 | Format string vulnerability in Soldner Secret Wars 30830 and earlier allows remote attackers to cause a denial of service (server crash) and possibly execute a… | |
CVE-2005-0274 | | 2005-01-03 | Multiple cross-site scripting (XSS) vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to inject arbitrary web script or HTML v… | |
CVE-2005-0271 | | 2005-01-03 | Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to… | |
CVE-2005-0268 | | 2005-01-03 | Direct code injection vulnerability in FlatNuke 2.5.1 allows remote attackers to execute arbitrary PHP code by placing the code into the url_avatar field. | |
CVE-2005-0266 | | 2005-01-01 | Cross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote attackers to inject arbitrary web script or HTML via the (1) return_module… | |
CVE-2005-0441 | | 2004-12-22 | Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users to execute arbitrary… | |
CVE-2005-0068 | | 2004-12-22 | The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for attackers to forge ICMP error mes… | |
CVE-2005-0067 | | 2004-12-22 | The original design of TCP does not require that port numbers be assigned randomly (aka "Port randomization"), which makes it easier for attackers to forge ICM… | |
CVE-2005-0066 | | 2004-12-22 | The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router is within the range… | |
CVE-2005-0373 | | 2004-10-07 | Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any offici… | |
CVE-2005-0192 | | 2004-10-06 | Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to read arbitrary file… | |
CVE-2005-0189 | | 2004-10-06 | Stack-based buffer overflow in the HandleAction function in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to execute arbitrary code via a l… | |
CVE-2005-0188 | | 2004-10-06 | Format string vulnerability in the SetBaseURL function in AtHoc toolbar allows remote attackers to execute arbitrary code via format string specifiers in an in… | |
CVE-2005-0190 | | 2004-09-29 | Directory traversal vulnerability in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to delete arbitrary files via a Real Metadata Packages (… | |
CVE-2005-1247 | | 2004-01-15 | webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an… |