Archive
July 2005
Vulnerabilities first published in this month (UTC), newest first.
588 results · Feed
-
Unscored —
PHP remote file inclusion vulnerability in gals.php in PhotoGal Photo Gallery 1.5 and earlier allows remote attackers t…
-
Unscored —CVE-2005-2232 Public exploit
Buffer overflow in invscout in IBM AIX 5.1.0 through 5.3.0 might allow local users to execute arbitrary code via a long…
-
Unscored —
Dragonfly Commerce allows remote attackers to change a product price by modifying the x_DragonflyCartProductPrice hidde…
-
Unscored —
Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors.
-
Unscored —CVE-2005-2229 Public exploit
Blog Torrent 0.92 and earlier stores sensitive files under the web document root in the (1) data or (2) torrents direct…
-
Unscored —CVE-2005-2239 Public exploit
oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null (\0) ch…
-
Unscored —
Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 does n…
-
Unscored —
High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on…
-
Unscored —
Multiple SQL injection vulnerabilities in Dragonfly Commerce allows remote attackers to modify SQL statements and possi…
-
Unscored —
Buffer overflow in the diagTasksWebSM command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote a…
-
Unscored —
The aupair service (aupair.exe) in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, …
-
Unscored —
xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user tem…
-
Unscored —CVE-2005-2236 Public exploit
Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users…
-
Unscored —
Buffer overflow in multiple "p" commands in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code …
-
Unscored —
Buffer overflow in the getlvname command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code…
-
Unscored —
Electronic Mail Operator (elmo) 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows loca…
-
Unscored —CVE-2005-2225 EPSS 16%
Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".p…
-
Unscored —CVE-2005-2223 EPSS 51%
Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote a…
-
Unscored —
Web Wiz Forums 7.9 and 8.0 allows remote attackers to view message titles of a hidden forum.
-
Unscored —
Format string vulnerability in the swcons command in IBM AIX 5.3, and possibly other versions, might allow local users …
-
Unscored —CVE-2005-2242 Public exploit
Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows…
-
Unscored —
Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 befo…
-
Unscored —
The dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service (daemon crash) via unknown ve…
-
Unscored —CVE-2005-2210 Public exploit
Stack-based buffer overflow in Internet Download Manager 4.05 allows remote attackers to execute arbitrary code via a l…
-
Unscored —
Capturix ScanShare 1.06 build 50 stores sensitive information such as the password in cleartext in capturixss_cfg.ini, …
-
Unscored —
Multiple unknown vulnerabilities in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, ver…
-
Unscored —
The ReadLog function in kaiseki.cgi in pngren allows remote attackers to execute arbitrary commands via shell metachara…
-
Unscored —
Unknown vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.…
-
Unscored —
Cross-site scripting (XSS) vulnerability in store/login.asp in CartWIZ allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2005-2208 Public exploit
PrivaShare 1.1b allows remote attackers to cause a denial of service (crash) via a malformed message.
-
Unscored —
Cross-site scripting (XSS) vulnerability in Computer Associates (CA) eTrust SiteMinder 5.5, when the "CSSChecking" para…
-
Unscored —
Backup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct unauthorized file operati…
-
Unscored —
SQL injection vulnerability in sql.cls.php in Id Board 1.1.3 allows remote attackers to modify SQL queries, as demonstr…
-
Unscored —
The LCF component (lcfd) in IBM Tivoli Management Framework Endpoint allows remote attackers to cause a denial of servi…
-
Unscored —
login.php in phpWishlist before 0.1.15 allows remote attackers to bypass authentication via a direct request to admin.p…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3…
-
Unscored —
apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain …
-
Unscored —CVE-2005-2150 EPSS 19%
Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing…
-
Unscored —
Backup Manager 0.5.8a creates an archive repository with world readable and writable permissions, which allows attacker…