Skip to content
OpenAdvisories

Archive

July 2005

Vulnerabilities first published in this month (UTC), newest first.

← June 2005 2005 / July August 2005 →
  1. 124
  2. 2 
  3. 3 
  4. 4 
  5. 516
  6. 624
  7. 71
  8. 82
  9. 92
  10. 1075
  11. 1122
  12. 1235
  13. 1328
  14. 14176
  15. 151
  16. 161
  17. 1768
  18. 18 
  19. 1958
  20. 208
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 2622
  27. 2722
  28. 283
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

588 results · Feed

  • Unscored —
    CVE-2005-2406

    Opera 8.01 allows remote attackers to conduct cross-site scripting (XSS) attacks or modify which files are uploaded by …

  • Unscored —
    CVE-2005-2407

    A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malic…

  • Unscored —
    CVE-2005-2405

    Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII chara…

  • Unscored —
    CVE-2005-2397 Public exploit

    Cross-site scripting (XSS) vulnerability in guestbook.php in phpBook 1.46 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2005-2388

    Buffer overflow in a certain USB driver, as used on Microsoft Windows, allows attackers to execute arbitrary code.

  • Unscored —
    CVE-2005-2386 Public exploit

    Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ 1.20 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2005-2389

    NDMP server in Veritas NetBackup 5.1 allows attackers to cause a denial of service via a CONFIG message with an out-of-…

  • Unscored —
    CVE-2005-2399

    PHP Surveyor 0.98 allows remote attackers to trigger SQL errors via missing parameters to (1) browse.php, (2) export.ph…

  • Unscored —
    CVE-2005-2393

    Cross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject arbitrary web script or HT…

  • Unscored —
    CVE-2005-2400

    The inc.login.php scripts in PHPFinance 0.3 allows remote attackers to bypass the login and gain privileges.

  • Unscored —
    CVE-2005-2396

    Cross-site scripting (XSS) vulnerability in MediaWiki 1.4.6 and earlier allows remote attackers to inject arbitrary web…

    mediawiki Debian
  • Unscored —
    CVE-2005-2403

    The login protocol in RealChat 3.5.1b does not use authentication, which allows remote attackers to log on as other use…

  • Unscored —
    CVE-2005-2390

    Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtai…

  • Unscored —
    CVE-2005-2402

    Cross-site scripting (XSS) vulnerability in search.php in PHPSiteSearch 1.7.7d allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2005-2385

    Buffer overflow in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Editi…

  • Unscored —
    CVE-2005-2391

    Unknown vulnerability in 3Com OfficeConnect Wireless 11g Access Point before 1.03.12 allows remote attackers to obtain …

  • Unscored —
    CVE-2005-2384

    Directory traversal vulnerability in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/…

  • Unscored —
    CVE-2005-2394

    show_news.php in CuteNews 1.3.6 allows remote attackers to obtain the full path of the server via an invalid archive pa…

  • Unscored —
    CVE-2005-2398

    Multiple SQL injection vulnerabilities in PHP Surveyor 0.98 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2005-2335

    Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service …

    fetchmail Debian
  • Unscored —
    CVE-2005-2395

    Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication scheme available as req…

  • Unscored —
    CVE-2005-2387

    Multiple stack-based buffer overflows in GoodTech SMTP server 5.16 allow remote attackers to execute arbitrary code via…

  • Unscored —
    CVE-2005-2392

    Cross-site scripting (XSS) vulnerability in index.php for CMSimple 2.4 and earlier allows remote attackers to inject ar…

  • Unscored —
    CVE-2005-2401

    PHP-Fusion allows remote attackers to inject arbitrary Cascading Style Sheets (CSS) via the BBCode color tag.

  • Unscored —
    CVE-2005-2404

    SQL injection vulnerability in sendcard.php in Sendcard 3.2.3 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2005-1852

    Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ,…

  • Unscored —
    CVE-2005-1691

    Directory traversal vulnerability in Internet Graphics Server in SAP before 6.40 Patch 11 allows remote attackers to re…

  • Unscored —
    CVE-2005-1920

    The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the…

  • Unscored —
    CVE-2005-1849

    inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file t…

    zlib zsync sash Debian
  • Unscored —
    CVE-2005-2371 EPSS 22%

    Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary…

  • Unscored —
    CVE-2005-2368

    vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands v…

    vim Debian
  • Unscored —
    CVE-2005-2374

    Belkin 54g wireless routers do not properly set an administrative password, which allows remote attackers to gain acces…

  • Unscored —
    CVE-2005-2381

    PHP Surveyor 0.98 allows remote attackers to obtain sensitive information via a direct request to (1) question.php, (2)…

  • Unscored —
    CVE-2005-2370

    Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, all…

  • Unscored —
    CVE-2005-2379

    Multiple cross-site scripting (XSS) vulnerabilities in Oracle Reports 9.0.2 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2005-2372

    Oracle Forms 4.5 through 10g starts form executables from arbitrary directories and executes them as the Oracle or Syst…

  • Unscored —
    CVE-2005-2378

    Directory traversal vulnerability in Oracle Reports allows remote attackers to read arbitrary files via an absolute or …

  • Unscored —
    CVE-2005-2373 Public exploit EPSS 46%

    Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long direct…

  • Unscored —
    CVE-2005-2383 Public exploit

    SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2005-2218

    The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a devic…