Skip to content
OpenAdvisories

Archive

July 2005

Vulnerabilities first published in this month (UTC), newest first.

← June 2005 2005 / July August 2005 →
  1. 124
  2. 2 
  3. 3 
  4. 4 
  5. 516
  6. 624
  7. 71
  8. 82
  9. 92
  10. 1075
  11. 1122
  12. 1235
  13. 1328
  14. 14176
  15. 151
  16. 161
  17. 1768
  18. 18 
  19. 1958
  20. 208
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 2622
  27. 2722
  28. 283
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

588 results · Feed

  • Unscored —
    CVE-2004-2168

    BaSoMail 1.24 allows remote attackers to cause a denial of service (CPU consumption) via multiple connections to TCP po…

  • Unscored —
    CVE-2004-2196

    Zanfi CMS lite 1.1 allows remote attackers to obtain the full path of the web server via direct requests without requir…

  • Unscored —
    CVE-2004-2198 Public exploit

    account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users b…

  • Unscored —
    CVE-2004-2189

    SQL injection vulnerability in DMXReady Site Chassis Manager allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2004-2208

    CRLF injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to conduct HTTP respo…

  • Unscored —
    CVE-2004-2199

    Cross-site scripting (XSS) vulnerability in DUware DUclassified 4.0 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2004-2161 Public exploit

    SQL injection vulnerability in file_overview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2004-2175 Public exploit

    Multiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2004-2211

    Cross-site scripting (XSS) vulnerability in AliveSites Forums 2.0 allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2004-2162 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2004-2181 Public exploit

    Multiple SQL injection vulnerabilities in WowBB Forum 1.61 allow remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2004-2206

    SQL injection vulnerability in NatterChat 1.12 allows remote attackers to execute arbitrary SQL commands via unknown ve…

  • Unscored —
    CVE-2004-2176 Public exploit

    The Internet Connection Firewall (ICF) in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which…

  • Unscored —
    CVE-2004-2177

    Cross-site scripting (XSS) vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2004-2204

    Macromedia ColdFusion MX 6.0 and 6.1 application server, when running with the CreateObject function or CFOBJECT tag en…

  • Unscored —
    CVE-2004-2185

    Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.5 allow remote attackers to execute arbitrary scri…

    mediawiki Debian
  • Unscored —
    CVE-2004-2200

    Cross-site scripting (XSS) vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2004-2159

    Multiple buffer overflows in XMLStarlet Command Line XML Toolkit 0.9.3 have unknown impact and attack vectors via (1) x…

    xmlstarlet Debian
  • Unscored —
    CVE-2004-2170 Public exploit

    Directory traversal vulnerability in sample_showcode.html in Caravan 2.00/03d and earlier allows remote attackers to re…

  • Unscored —
    CVE-2004-2156

    Multiple unknown vulnerabilities in Online Recruitment Agency 1.0 have unknown impact and attack vectors.

  • Unscored —
    CVE-2004-2169

    Application Access Server (A-A-S) 1.0.37 and earlier allows remote authenticated users to cause a denial of service (ap…

  • Unscored —
    CVE-2004-2212

    SQL injection vulnerability in forum.asp in AliveSites Forums 2.0 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2005-2191

    Multiple cross-site scripting (XSS) vulnerabilities in Comersus shopping cart allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2005-2181

    Cisco 7940/7960 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY messa…

  • Unscored —
    CVE-2005-2190

    Multiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2005-2179

    PHP remote file inclusion vulnerability in BlogModel.php in Jaws 0.5.2 and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2005-2182

    Grandstream BudgeTone (BT) 100 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in…

  • Unscored —
    CVE-2005-2189

    Lantronix SecureLinx console server running firmware 2.0 and 3.0 stores /etc/ssh under the web document root with insuf…

  • Unscored —
    CVE-2005-2188

    McAfee IntruShield Security Management System obtains the user ID from the URL, which allows remote attackers to guess …

  • Unscored —
    CVE-2005-2178

    probe.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the olddat parameter. NOTE:…

  • Unscored —
    CVE-2005-2177

    Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, all…

    net-snmp Debian
  • Unscored —
    CVE-2005-2185

    eRoom does not set an expiration for Cookies, which allows remote attackers to capture cookies and conduct replay attac…

  • Unscored —
    CVE-2005-2187

    McAfee IntruShield Security Management System allows remote authenticated users to access the "Generate Reports" featur…

  • Unscored —
    CVE-2005-2192 Public exploit

    SimplePHPBlog 0.4.0 stores password hashes in config/password.txt with insufficient access control, which allows remote…

  • Unscored —
    CVE-2005-2183

    class.xmail.php in PhpXmail 0.7 through 1.1 does not properly handle large passwords, which prevents an error message f…

  • Unscored —
    CVE-2005-2180

    gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files pass…

  • Unscored —
    CVE-2005-2193

    SQL injection vulnerability in the user profile edit module in profile.php for PunBB 1.2.5 and earlier allows remote at…

  • Unscored —
    CVE-2005-2186

    Multiple cross-site scripting (XSS) vulnerabilities in McAfee IntruShield Security Management System allow remote authe…

  • Unscored —
    CVE-2005-2184

    eRoom 6.x does not properly restrict files that can be attached, which allows remote attackers to execute arbitrary com…

  • Unscored —
    CVE-2005-2175 Public exploit

    The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save…