Skip to content
OpenAdvisories

Archive

June 2005

Vulnerabilities first published in this month (UTC), newest first.

← May 2005 2005 / June July 2005 →
  1. 138
  2. 217
  3. 32
  4. 4 
  5. 5 
  6. 61
  7. 723
  8. 825
  9. 97
  10. 10 
  11. 11 
  12. 121
  13. 131
  14. 1456
  15. 158
  16. 162
  17. 17 
  18. 18 
  19. 19 
  20. 2026
  21. 21163
  22. 2213
  23. 23 
  24. 24 
  25. 25 
  26. 267
  27. 27 
  28. 28220
  29. 2914
  30. 3027
All Critical High Medium Low Exploited only Public exploit

651 results · Feed

  • Unscored —
    CVE-2005-1973

    Java Web Start in Java 2 Platform Standard Edition (J2SE) 5.0 and 5.0 Update 1 allows applications to assign permission…

  • Unscored —
    CVE-2005-1964

    PHP remote file inclusion vulnerability in utilit.php for Ovidentia Portal allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2005-1962

    Cross-site scripting (XSS) vulnerability in Cerberus Helpdesk 0.97.3 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-1216 EPSS 26%

    Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS c…

  • Unscored —
    CVE-2005-1214 EPSS 13%

    Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising secu…

  • Unscored —
    CVE-2005-1969

    Cross-site scripting (XSS) vulnerability in Pragma Systems Telnetserver 6.0 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2005-1727

    Apple Mac OS X 10.4.x up to 10.4.1 sets insecure world- and group-writable permissions for the (1) system cache folder …

  • Unscored —
    CVE-2005-1956

    File Upload Manager allows remote attackers to upload arbitrary files by modifying the test variable to contain a value…

  • Unscored —
    CVE-2005-1213 Public exploit EPSS 74%

    Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows re…

  • Unscored —
    CVE-2005-1951 Public exploit

    Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow remote attackers to sp…

  • Unscored —
    CVE-2005-1721

    Buffer overflow in the legacy client support for AFP Server for Mac OS X 10.4.1 allows attackers to execute arbitrary c…

  • Unscored —
    CVE-2005-1965

    PHP remote file inclusion vulnerability in siteframe.php for Broadpool Siteframe allows remote attackers to execute arb…

  • Unscored —
    CVE-2005-1961

    Unknown vulnerability in ObjectWeb Consortium C-JDBC before 1.3.1 allows local users to bypass intended access restrict…

  • Unscored —
    CVE-2005-1720

    AFP Server for Mac OS X 10.4.1, when using an ACL enabled volume, does not properly remove an ACL when a file is copied…

  • Unscored —
    CVE-2005-1724

    NFS on Apple Mac OS X 10.4.x up to 10.4.1 does not properly obey the -network or -mask flags for a filesystem and expor…

  • Unscored —
    CVE-2005-1950 Public exploit

    hints.pl in Webhints 1.03 allows remote attackers to execute arbitrary commands via shell metacharacters in the argumen…

  • Unscored —
    CVE-2005-1937

    A regression error in Firefox 1.0.3 and Mozilla 1.7.7 allows remote attackers to inject arbitrary Javascript from one p…

  • Unscored —
    CVE-2005-1936

    Unknown vulnerability in the web server for the ESS/ Network Controller for Xerox Document Centre 240 through 555 runni…

  • Unscored —
    CVE-2005-0151

    Unknown vulnerability in the installation of Adobe License Management Service, as used in Adobe Photoshop CS, Adobe Cre…

  • Unscored —
    CVE-2005-1474

    Dashboard in Apple Mac OS X 10.4.1 allows remote attackers to install widgets via Safari without prompting the user, a …

  • Unscored —
    CVE-2005-1934

    Gaim before 1.3.1 allows remote attackers to cause a denial of service (crash) via a malformed MSN message that leads t…

  • Unscored —
    CVE-2005-1473

    SecurityAgent in Apple Mac OS X 10.4.1 allows attackers with physical access to bypass the locked screensaver and launc…

  • Unscored —
    CVE-2005-1933

    Dashboard in Apple Mac OS X Tiger 10.4 allows attackers to execute arbitrary commands by overriding the behavior of sys…

  • Unscored —
    CVE-2005-1472

    Certain system calls in Apple Mac OS X 10.4.1 do not properly enforce the permissions of certain directories without th…

  • Unscored —
    CVE-2005-1935 EPSS 27%

    Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library (MSASN1.DLL) allows remote attack…

  • Unscored —
    CVE-2005-1899 Public exploit

    Rakkarsoft RakNet network library 2.33 and earlier, when released before 30 May 2005, and as used in multiple products …

  • Unscored —
    CVE-2005-1891

    The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows remote attackers to cause a d…

  • Unscored —
    CVE-2005-1900

    Sawmill before 7.1.6 allows remote attackers to bypass authentication and (1) gain administrative privileges or (2) add…

  • Unscored —
    CVE-2005-1888

    Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web scri…

    mediawiki Debian
  • Unscored —
    CVE-2005-1905 Public exploit

    The klif.sys driver in Kaspersky Labs Anti-Virus 5.0.227, 5.0.228, and 5.0.335 on Windows 2000 allows local users to ga…

  • Unscored —
    CVE-2005-1902

    Directory traversal vulnerability in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users …

  • Unscored —
    CVE-2005-1895 Public exploit

    Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.3 allows remote attackers to inject arbitrary web script or HT…

  • Unscored —
    CVE-2005-1894 Public exploit

    Direct code injection vulnerability in FlatNuke 2.5.3 allows remote attackers to execute arbitrary PHP code by placing …

  • Unscored —
    CVE-2005-1911

    The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives, which all…

    leafnode Debian
  • Unscored —
    CVE-2005-1887

    Unknown vulnerability in the Sun Solaris C library (libc and libproject) in Solaris 10 allows local users to gain privi…

  • Unscored —
    CVE-2005-1907 EPSS 19%

    The ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to c…

  • Unscored —
    CVE-2005-1892

    FlatNuke 2.5.3 allows remote attackers to cause a denial of service or obtain sensitive information via (1) a direct re…

  • Unscored —
    CVE-2005-1908

    Perception LiteWeb allows remote attackers to bypass access controls for files via an extra leading / (slash) or leadin…

  • Unscored —
    CVE-2005-1906

    SQL injection vulnerability in login.asp in livingmailing 1.3 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2005-1910

    SQL injection vulnerability in login.asp for WWWeb Concepts Events System 1.0 allows remote attackers to execute arbitr…