Skip to content
OpenAdvisories

Archive

25 May 2005

Vulnerabilities first published on this day (UTC), newest first.

← April 2005 2005 / May /25 June 2005 →
  1. 1 
  2. 229
  3. 353
  4. 416
  5. 520
  6. 64
  7. 7 
  8. 8 
  9. 92
  10. 10360
  11. 1145
  12. 127
  13. 131
  14. 1445
  15. 15 
  16. 1639
  17. 1721
  18. 1827
  19. 1948
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 2446
  25. 2524
  26. 265
  27. 2743
  28. 282
  29. 29 
  30. 30 
  31. 3119
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2005-1686 Public exploit

    Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a …

    gedit Debian
  • Unscored —
    CVE-2005-1543 Public exploit EPSS 66%

    Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENwo…

  • Unscored —
    CVE-2005-1682

    JavaMail API, as used by Solstice Internet Mail Server POP3 2.0, does not properly validate the message number in the M…

  • Unscored —
    CVE-2005-1252 EPSS 12%

    Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail…

  • Unscored —
    CVE-2005-1684

    Cross-site scripting (XSS) vulnerability in default.asp for episodex guestbook allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2005-1254

    Stack-based buffer overflow in the IMAP server for Ipswitch IMail 8.12 and 8.13, and other versions before IMail Server…

  • Unscored —
    CVE-2005-1151

    qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows…

  • Unscored —
    CVE-2005-1679 Public exploit

    Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary co…

  • Unscored —
    CVE-2005-1675

    Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 instal…

  • Unscored —
    CVE-2005-1751

    Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack …

    mysql-ocaml shtool Debian
  • Unscored —
    CVE-2005-1750

    SQL injection vulnerability in login.asp in ezdwc NewsletterEz 3.0 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2005-1678

    Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does n…

  • Unscored —
    CVE-2005-1683 EPSS 15%

    Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, …

  • Unscored —
    CVE-2005-1685

    episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp.

  • Medium 5.3
    CVE-2005-1688

    Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) …

    wordpress Debian
  • Unscored —
    CVE-2005-1255 Public exploit EPSS 43%

    Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), …

  • Unscored —
    CVE-2005-1249

    The IMAP daemon (IMAPD32.EXE) in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2005-1681 Public exploit

    PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote atta…

  • Unscored —
    CVE-2005-1256 EPSS 59%

    Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS), and o…

  • Unscored —
    CVE-2005-1152

    popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with gr…

  • Unscored —
    CVE-2005-1680

    D-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows remote attackers to b…

  • Unscored —
    CVE-2005-1676

    Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 buil…

  • Unscored —
    CVE-2005-1687

    SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote attackers to execute arbitra…

    wordpress Debian
  • Unscored —
    CVE-2005-1677

    Unknown vulnerability in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace befo…