Skip to content
OpenAdvisories

Archive

27 July 2005

Vulnerabilities first published on this day (UTC), newest first.

← June 2005 2005 / July /27 August 2005 →
  1. 124
  2. 2 
  3. 3 
  4. 4 
  5. 516
  6. 624
  7. 71
  8. 82
  9. 92
  10. 1075
  11. 1122
  12. 1235
  13. 1328
  14. 14176
  15. 151
  16. 161
  17. 1768
  18. 18 
  19. 1958
  20. 208
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 2622
  27. 2722
  28. 283
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2005-2397 Public exploit

    Cross-site scripting (XSS) vulnerability in guestbook.php in phpBook 1.46 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2005-2388

    Buffer overflow in a certain USB driver, as used on Microsoft Windows, allows attackers to execute arbitrary code.

  • Unscored —
    CVE-2005-2386 Public exploit

    Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ 1.20 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2005-2389

    NDMP server in Veritas NetBackup 5.1 allows attackers to cause a denial of service via a CONFIG message with an out-of-…

  • Unscored —
    CVE-2005-2399

    PHP Surveyor 0.98 allows remote attackers to trigger SQL errors via missing parameters to (1) browse.php, (2) export.ph…

  • Unscored —
    CVE-2005-2393

    Cross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject arbitrary web script or HT…

  • Unscored —
    CVE-2005-2400

    The inc.login.php scripts in PHPFinance 0.3 allows remote attackers to bypass the login and gain privileges.

  • Unscored —
    CVE-2005-2396

    Cross-site scripting (XSS) vulnerability in MediaWiki 1.4.6 and earlier allows remote attackers to inject arbitrary web…

    mediawiki Debian
  • Unscored —
    CVE-2005-2403

    The login protocol in RealChat 3.5.1b does not use authentication, which allows remote attackers to log on as other use…

  • Unscored —
    CVE-2005-2390

    Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtai…

  • Unscored —
    CVE-2005-2402

    Cross-site scripting (XSS) vulnerability in search.php in PHPSiteSearch 1.7.7d allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2005-2385

    Buffer overflow in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Editi…

  • Unscored —
    CVE-2005-2391

    Unknown vulnerability in 3Com OfficeConnect Wireless 11g Access Point before 1.03.12 allows remote attackers to obtain …

  • Unscored —
    CVE-2005-2384

    Directory traversal vulnerability in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/…

  • Unscored —
    CVE-2005-2394

    show_news.php in CuteNews 1.3.6 allows remote attackers to obtain the full path of the server via an invalid archive pa…

  • Unscored —
    CVE-2005-2398

    Multiple SQL injection vulnerabilities in PHP Surveyor 0.98 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2005-2335

    Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to cause a denial of service …

    fetchmail Debian
  • Unscored —
    CVE-2005-2395

    Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication scheme available as req…

  • Unscored —
    CVE-2005-2387

    Multiple stack-based buffer overflows in GoodTech SMTP server 5.16 allow remote attackers to execute arbitrary code via…

  • Unscored —
    CVE-2005-2392

    Cross-site scripting (XSS) vulnerability in index.php for CMSimple 2.4 and earlier allows remote attackers to inject ar…

  • Unscored —
    CVE-2005-2401

    PHP-Fusion allows remote attackers to inject arbitrary Cascading Style Sheets (CSS) via the BBCode color tag.

  • Unscored —
    CVE-2005-2404

    SQL injection vulnerability in sendcard.php in Sendcard 3.2.3 allows remote attackers to execute arbitrary SQL commands…