Skip to content
OpenAdvisories

Archive

9 April 2005

Vulnerabilities first published on this day (UTC), newest first.

← March 2005 2005 / April /9 May 2005 →
  1. 11
  2. 2 
  3. 325
  4. 44
  5. 512
  6. 67
  7. 716
  8. 812
  9. 916
  10. 106
  11. 11 
  12. 1244
  13. 1339
  14. 1431
  15. 157
  16. 1643
  17. 17 
  18. 1824
  19. 1919
  20. 20 
  21. 2183
  22. 2214
  23. 23 
  24. 2418
  25. 253
  26. 2633
  27. 2726
  28. 2821
  29. 292
  30. 30 
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2005-0351

    Buffer overflow in (1) termsh, (2) atcronsh, and (3) auditsh in SCO OpenServer 5.0.6 and 5.0.7 might allow local users …

  • Unscored —
    CVE-2005-1023 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x to 7.6 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2005-1025

    The FTP server in AS/400 4.3, when running in IFS mode, allows remote attackers to obtain sensitive information via a s…

  • Unscored —
    CVE-2005-1022

    ColdFusion 6.1 Updater 1 places Java .class files under the web root in the /WEB-INF/cfclasses directory, which allows …

  • Unscored —
    CVE-2005-1019 Public exploit

    Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOM…

  • Unscored —
    CVE-2005-1027 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x through 7.6 allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2005-1031

    RUNCMS 1.1A, and possibly other products based on e-Xoops (exoops), when "Allow custom avatar upload" is enabled, does …

  • Unscored —
    CVE-2005-1028

    PHP-Nuke 6.x through 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) index.php …

  • Unscored —
    CVE-2005-1034

    SurgeFTP 2.2m1 allows remote attackers to cause a denial of service (application hang) via the LEAK command.

  • Unscored —
    CVE-2005-1024

    modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) …

  • Unscored —
    CVE-2005-1021

    Memory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a TACACS+ server, allows …

  • Unscored —
    CVE-2005-1029 Public exploit

    Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2005-1020

    Secure Shell (SSH) 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service (device reload…

  • Unscored —
    CVE-2005-1026 Public exploit

    Multiple SQL injection vulnerabilities in SnailSource phpBB 2.0.x mods allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2005-1033 Public exploit

    CubeCart 2.0.6 allows remote attackers to obtain sensitive information via an invalid (1) language parameter to index.p…

  • Unscored —
    CVE-2005-1030 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary …