Skip to content
OpenAdvisories

Archive

2 May 2005

Vulnerabilities first published on this day (UTC), newest first.

← April 2005 2005 / May /2 June 2005 →
  1. 1 
  2. 229
  3. 353
  4. 416
  5. 520
  6. 64
  7. 7 
  8. 8 
  9. 92
  10. 10360
  11. 1145
  12. 127
  13. 131
  14. 1445
  15. 15 
  16. 1639
  17. 1721
  18. 1827
  19. 1948
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 2446
  25. 2524
  26. 265
  27. 2743
  28. 282
  29. 29 
  30. 30 
  31. 3119
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Unscored —
    CVE-2005-1388

    Cross-site scripting (XSS) vulnerability in SURVIVOR before 0.9.6 allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2005-1369

    The (1) it87 and (2) via686a drivers in I2C for Linux 2.6.x before 2.6.11.8, and 2.6.12 before 2.6.12-rc2, create the s…

  • Unscored —
    CVE-2005-1392

    The SQL install script in phpMyAdmin 2.6.2 is created with world-readable permissions, which allows local users to obta…

  • Unscored —
    CVE-2005-1398 Public exploit

    phpcart.php in PHPCart 3.2 allows remote attackers to change product price information by modifying the (1) price or (2…

  • Unscored —
    CVE-2005-1383 Public exploit EPSS 31%

    The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attack…

  • Unscored —
    CVE-2005-1375 Public exploit

    Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow r…

  • Unscored —
    CVE-2005-1380 Public exploit

    Cross-site scripting (XSS) vulnerability in BEA Admin Console 8.1 allows remote attackers to execute arbitrary web scri…

  • Unscored —
    CVE-2005-1381 Public exploit EPSS 20%

    Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2005-1385

    Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers …

  • Unscored —
    CVE-2005-1378 Public exploit

    SQL injection vulnerability in posting_notes.php in the notes module for phpBB allows remote attackers to execute arbit…

  • Unscored —
    CVE-2005-1384 Public exploit

    Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2005-1396 Public exploit

    Race condition in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier allows local users to write to arbitrary files via a symli…

  • Unscored —
    CVE-2005-1387

    Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in clear…

  • Unscored —
    CVE-2005-1373

    Multiple SQL injection vulnerabilities in index.php in Dream4 Koobi CMS 4.2.3 allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2005-1382 Public exploit

    The webcacheadmin module in Oracle Webcache 9i allows remote attackers to corrupt arbitrary files via a full pathname i…

  • Unscored —
    CVE-2005-1386

    PHP-Nuke 7.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) ipban.php,…

  • Unscored —
    CVE-2005-1372 Public exploit

    nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows lo…

  • Unscored —
    CVE-2005-1376

    Multiple directory traversal vulnerabilities in (1) document.php or (2) insertMyDoc.php in Claroline 1.5.3 through 1.6 …

  • Unscored —
    CVE-2005-1397

    SQL injection vulnerability in search.php for PHP-Calendar before 0.10.3 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2005-1370 Public exploit

    Unknown vulnerability in Radia Management Agent (RMA) in HP OpenView Radia Management Portal (RMP) 1.x and 2.x allows r…

  • Unscored —
    CVE-2005-1391

    Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary …

    pound Debian
  • Unscored —
    CVE-2005-1377

    Multiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dok…

  • Unscored —
    CVE-2005-1379

    The LAM runtime environment package (lam-runtime-7.0.6-2mdk) on Mandrake Linux installs the mpi user without a password…

  • Unscored —
    CVE-2005-1395

    Buffer overflow in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier may allow local users to gain privileges via a long (1) X…

  • Unscored —
    CVE-2005-1371 Public exploit

    BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through t…

  • Unscored —
    CVE-2005-1368

    The key_user_lookup function in security/keys/key.c in Linux kernel 2.6.10 to 2.6.11.8 may allow attackers to cause a d…

  • Unscored —
    CVE-2005-1374 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Do…

  • Unscored —
    CVE-2005-1393

    Multiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute arbitrary code via lo…

  • Unscored —
    CVE-2005-1394 Public exploit

    Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format…