Skip to content
OpenAdvisories

Archive

June 2005

Vulnerabilities first published in this month (UTC), newest first.

← May 2005 2005 / June July 2005 →
  1. 138
  2. 217
  3. 32
  4. 4 
  5. 5 
  6. 61
  7. 723
  8. 825
  9. 97
  10. 10 
  11. 11 
  12. 121
  13. 131
  14. 1456
  15. 158
  16. 162
  17. 17 
  18. 18 
  19. 19 
  20. 2026
  21. 21163
  22. 2213
  23. 23 
  24. 24 
  25. 25 
  26. 267
  27. 27 
  28. 28220
  29. 2914
  30. 3027
All Critical High Medium Low Exploited only Public exploit

651 results · Feed

  • Unscored —
    CVE-2004-2142

    Unknown vulnerability in the remote tape support (remote.c) in the RMT client for Jorg Schilling sdd 1.28 and 1.31 has …

  • Unscored —
    CVE-2004-2140

    CRLF injection vulnerability in YaBB 1 Gold before 1.3.2 allows remote attackers to modify text file contents via the s…

  • Unscored —
    CVE-2004-2139

    Unknown vulnerability in Adminedit.pl YaBB 1 Gold before 1.3.2 allows attackers to execute arbitrary code via settings.…

  • Unscored —
    CVE-2004-2138

    Cross-site scripting (XSS) vulnerability in AWSguest.php in AllWebScripts MySQLGuest allows remote attackers to inject …

  • Unscored —
    CVE-2004-2143 Public exploit

    SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09) and earlier allows remo…

  • Unscored —
    CVE-2005-1923

    The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attac…

    clamav Debian
  • Unscored —
    CVE-2005-1922

    The MS-Expand file handling in Clam AntiVirus (ClamAV) before 0.86 allows remote attackers to cause a denial of service…

    clamav Debian
  • Unscored —
    CVE-2005-1762

    The ptrace call in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform allows local users to cause a denial of s…

  • Unscored —
    CVE-2005-1932

    Lpanel 1.59 and earlier, and other versions before 1.597, allows remote authenticated users to modify certain critical …

  • Unscored —
    CVE-2005-1765

    syscall in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform, when running in 32-bit compatibility mode, allow…

  • Unscored —
    CVE-2005-1931 Public exploit

    GoodTech SMTP Server 5.14 allows remote attackers to cause a denial of service (application crash) via a RCPT TO comman…

  • Unscored —
    CVE-2005-2092

    BEA Systems WebLogic 8.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protectio…

  • Unscored —
    CVE-2005-2087 Public exploit EPSS 61%

    Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allo…

  • Unscored —
    CVE-2005-2091

    IBM WebSphere 5.1 and WebSphere 5.0 allows remote attackers to poison the web cache, bypass web application firewall pr…

  • Unscored —
    CVE-2005-2089 EPSS 31%

    Microsoft IIS 5.0 and 6.0 allows remote attackers to poison the web cache, bypass web application firewall protection, …

  • Medium —
    CVE-2005-2090 EPSS 26%

    Tomcat Vulnerable to Web Cache Poisoning

    Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Co…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2005-2085 Public exploit

    Buffer overflow in Inframail Advantage Server Edition 6.0 through 6.7 allows remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2005-2068

    FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote attackers to modify certain TCP options via a TCP packet wit…

  • Unscored —
    CVE-2005-2084

    Cross-site scripting (XSS) vulnerability in SearchResults.aspx in Community Forum allows remote attackers to inject arb…

  • Unscored —
    CVE-2005-2082

    im_trbbs.cgi in imTRSET 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters…

  • Unscored —
    CVE-2005-2094

    Sun SunONE web server 6.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protecti…

  • Unscored —
    CVE-2005-2081

    Stack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option i…

    asterisk Debian
  • Unscored —
    CVE-2005-2086 Public exploit EPSS 85%

    PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute…

  • Unscored —
    CVE-2005-2083 Public exploit

    Format string vulnerability in IMAP4 in IA eMailServer Corporate Edition 5.2.2 build 1051 allows remote attackers to ca…

  • Unscored —
    CVE-2005-2019

    ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor (SMP) or Uni Processor (UP) systems with the PREEMPTION …

  • Unscored —
    CVE-2005-2088 EPSS 20%

    The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to…

    apache2 Debian
  • Unscored —
    CVE-2005-2093

    Oracle 9i Application Server (Oracle9iAS) 9.0.2 allows remote attackers to poison the web cache, bypass web application…

  • Unscored —
    CVE-2005-0771 Public exploit EPSS 54%

    VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modif…

  • Unscored —
    CVE-2005-0773 Public exploit EPSS 86%

    Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.…

  • Unscored —
    CVE-2005-2078 Public exploit

    BisonFTP Server V4R1 allows remote authenticated users to cause a denial of service via an invalid command with a long …

  • Unscored —
    CVE-2005-2079

    Heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0 through 10.0 for Windows Servers a…

  • Unscored —
    CVE-2005-2069

    pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent…

    libnss-ldap libpam-ldap Debian
  • Unscored —
    CVE-2005-2074

    Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.0.105 allows remote attackers to inject arbitrary web script o…

  • Unscored —
    CVE-2005-2076

    HP Version Control Repository Manager (VCRM) before 2.1.1.730 does not properly handle the "@" character in a proxy pas…

  • Unscored —
    CVE-2005-2073

    Unknown vulnerability in IBM DB2 8.1.4 through 8.1.9 and 8.2.0 through 8.2.2 allows local users with SELECT privileges …

  • Unscored —
    CVE-2005-2080

    Unknown vulnerability in Remote Agent for Windows Servers (RAWS) in VERITAS Backup Exec 9.0 through 10.0 for Windows, a…

  • Unscored —
    CVE-2005-2072 Public exploit

    The runtime linker (ld.so) in Solaris 8, 9, and 10 trusts the LD_AUDIT environment variable in setuid or setgid program…

  • Unscored —
    CVE-2005-2070

    The ClamAV Mail fILTER (clamav-milter) 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote att…

    clamav Debian
  • Unscored —
    CVE-2005-2071 Public exploit

    traceroute in Sun Solaris 10 on x86 systems allows local users to execute arbitrary code with PRIV_NET_RAWACCESS privil…

  • Unscored —
    CVE-2005-2075 Public exploit

    PHP-Fusion 5.0 and 6.0 stores the database file with a predictable filename under the web document root with insufficie…