Skip to content
OpenAdvisories

Archive

June 2005

Vulnerabilities first published in this month (UTC), newest first.

← May 2005 2005 / June July 2005 →
  1. 138
  2. 217
  3. 32
  4. 4 
  5. 5 
  6. 61
  7. 723
  8. 825
  9. 97
  10. 10 
  11. 11 
  12. 121
  13. 131
  14. 1456
  15. 158
  16. 162
  17. 17 
  18. 18 
  19. 19 
  20. 2026
  21. 21163
  22. 2213
  23. 23 
  24. 24 
  25. 25 
  26. 267
  27. 27 
  28. 28220
  29. 2914
  30. 3027
All Critical High Medium Low Exploited only Public exploit

651 results · Feed

  • Unscored —
    CVE-2002-1947

    Webmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote attackers to eavesdro…

  • Unscored —
    CVE-2002-1877

    NETGEAR FM114P allows remote attackers to bypass access restrictions for web sites via a URL that uses the IP address i…

  • Unscored —
    CVE-2002-1925

    Tiny Personal Firewall 3.0 through 3.0.6 allows remote attackers to cause a denial of service (crash) by via SYN, UDP, …

  • Unscored —
    CVE-2002-1784

    Unknown vulnerability in inetd in HP Tru64 Unix 4.0f through 5.1a allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2002-1802 Public exploit

    Cross-site scripting (XSS) vulnerability in Xoops 1.0 RC3 allows remote attackers to inject arbitrary web script or HTM…

  • Unscored —
    CVE-2000-1227 EPSS 13%

    Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by …

  • Unscored —
    CVE-2005-0201

    D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows lo…

    dbus Debian
  • Unscored —
    CVE-2005-2060

    Multiple HTTP Response Splitting vulnerabilities in (1) toggleshow.php, (2) togglecats.php, and (3) showprofile.php in …

  • Unscored —
    CVE-2005-2067 Public exploit

    SQL injection vulnerability in article.asp in unknown versions of aspnuke allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2005-2063

    Multiple cross-site scripting (XSS) vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2005-2059

    Multiple cross-site request forgery (CSRF) vulnerabilities in (1) addaddress.php, (2) toggleignore.php, (3) removeignor…

  • Unscored —
    CVE-2005-2056

    The Quantum archive decompressor in Clam AntiVirus (ClamAV) before 0.86.1 allows remote attackers to cause a denial of …

    clamav Debian
  • Unscored —
    CVE-2005-2055

    RealPlayer 8, 10, 10.5 (6.0.12.1040-1069), and Enterprise and RealOne Player v1 and v2 allows remote malicious web serv…

  • Unscored —
    CVE-2005-2061

    Infopop UBB.Threads before 6.5.2 Beta allows remote attackers to include arbitrary files via the language parameter in …

  • Unscored —
    CVE-2005-2062 Public exploit

    Multiple SQL injection vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2005-2054

    Unknown vulnerability in RealPlayer 10 and 10.5 (6.0.12.1040-1069) and RealOne Player v1 and v2 allows remote attackers…

  • Unscored —
    CVE-2005-2057

    Multiple cross-site scripting (XSS) vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to …

  • Unscored —
    CVE-2005-2058 Public exploit

    Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbit…

  • Unscored —
    CVE-2005-2066 Public exploit

    SQL injection vulnerability in comment_post.asp in ASP Nuke 0.80 allows remote attackers to execute arbitrary SQL state…

  • Unscored —
    CVE-2005-2065 Public exploit

    HTTP response splitting vulnerability in language_select.asp in ASP Nuke 0.80 allows remote attackers to spoof web cont…

  • Unscored —
    CVE-2005-2064 Public exploit

    Multiple cross-site scripting vulnerabilities in ASP Nuke 0.80 allow remote attackers to inject arbitrary web script or…

  • Unscored —
    CVE-2005-0772 EPSS 36%

    VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attac…

  • Unscored —
    CVE-2005-1766

    Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other ver…

  • Unscored —
    CVE-2005-1759

    Race condition in shtool 2.0.1 and earlier allows local users to modify or create arbitrary files via a symlink attack …

    mysql-ocaml shtool Debian
  • Unscored —
    CVE-2005-2051

    Buffer overflow in the VERITAS Backup Exec Web Administration Console (BEWAC) 9.0 4367 through 10.0 rev. 5484 allows re…

  • Unscored —
    CVE-2005-2053

    Just another flat file (JAF) CMS before 3.0 Final allows remote attackers to obtain sensitive information via (1) an * …

  • Unscored —
    CVE-2005-2052

    Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 (6.0.12.1040 through 1069), RealOne Player v1 and v…

  • Unscored —
    CVE-2005-2050

    Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key informat…

    tor Debian
  • Unscored —
    CVE-2005-1250 Public exploit EPSS 21%

    SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Profess…

  • Unscored —
    CVE-2005-1266

    Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service (CPU consumption and s…

    spamassassin Debian
  • Unscored —
    CVE-2005-1525

    SQL injection vulnerability in config_settings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary…

    cacti Debian
  • Unscored —
    CVE-2005-1526 Public exploit EPSS 17%

    PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execut…

    cacti Debian
  • Unscored —
    CVE-2005-1524 Public exploit EPSS 16%

    PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote at…

    cacti Debian
  • Unscored —
    CVE-2005-2045

    Multiple SQL injection vulnerabilities in DUware DUportal PRO 3.4.3 allow remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2005-2049 Public exploit

    Multiple SQL injection vulnerabilities in DUware DUclassmate 1.2 allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2005-2048 Public exploit

    Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to ex…

  • Unscored —
    CVE-2005-2042

    Cross-site scripting (XSS) vulnerability in ajax-spell before 1.8 allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2005-2044 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbit…

  • Unscored —
    CVE-2005-2043

    Directory traversal vulnerability in XAMPP before 1.4.14 allows remote attackers to inject arbitrary HTML and PHP code …

  • Unscored —
    CVE-2005-2047

    Multiple SQL injection vulnerabilities in DUware DUpaypal Pro 3.0 allow remote attackers to execute arbitrary SQL comma…