Skip to content
OpenAdvisories

Archive

July 2005

Vulnerabilities first published in this month (UTC), newest first.

← June 2005 2005 / July August 2005 →
  1. 124
  2. 2 
  3. 3 
  4. 4 
  5. 516
  6. 624
  7. 71
  8. 82
  9. 92
  10. 1075
  11. 1122
  12. 1235
  13. 1328
  14. 14176
  15. 151
  16. 161
  17. 1768
  18. 18 
  19. 1958
  20. 208
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 2622
  27. 2722
  28. 283
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

588 results · Feed

  • Unscored —
    CVE-2004-2265

    UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact.

    uudeview Debian
  • Unscored —
    CVE-2004-2278

    Unknown cross-site scripting (XSS) vulnerability in the web GUI in vHost before 3.10r1 has unknown impact and attack ve…

  • Unscored —
    CVE-2005-1851

    A certain contributed script for ekg Gadu Gadu client 1.5 and earlier allows attackers to execute shell commands via un…

  • Unscored —
    CVE-2005-1850

    Certain contributed scripts for ekg Gadu Gadu client 1.5 and earlier create temporary files insecurely, with unknown im…

  • Unscored —
    CVE-2005-1530

    Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2005-2196

    The Apple AirPort card uses a default WEP key when not connected to a known or trusted network, which can cause it to a…

  • Unscored —
    CVE-2005-2319

    PHP remote file include vulnerability in Yawp library 1.0.6 and earlier, as used in YaWiki and possibly other products,…

  • Unscored —
    CVE-2005-2312

    management.php in Realnode Emilda 1.2.2 and earlier allows remote attackers to perform actions as other users by modify…

  • Unscored —
    CVE-2005-2304

    Microsoft MSN Messenger 9.0 and Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) via …

  • Unscored —
    CVE-2005-2307 Public exploit EPSS 26%

    netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Co…

  • Unscored —
    CVE-2005-2320

    WebCalendar before 1.0.0 does not properly restrict access to assistant_edit.php, which allows remote attackers to gain…

  • Unscored —
    CVE-2005-2322

    Cross-site scripting (XSS) vulnerability in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, all…

  • Unscored —
    CVE-2005-2325

    Clever Copy 2.0 and 2.0a allows remote attackers to obtain the full path of the web root via a direct request to (1) ti…

  • Unscored —
    CVE-2005-2301

    PowerDNS before 2.9.18, when running with an LDAP backend, does not properly escape LDAP queries, which allows remote a…

    pdns Debian
  • Unscored —
    CVE-2005-2302

    PowerDNS before 2.9.18, when allowing recursion to a restricted range of IP addresses, does not properly handle questio…

    pdns Debian
  • Unscored —
    CVE-2005-2308 Public exploit EPSS 17%

    The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption o…

  • Unscored —
    CVE-2005-2314

    inc.login.php in PHPsFTPd 0.2 through 0.4 allows remote attackers to obtain the administrator's username and password b…

  • Unscored —
    CVE-2005-2326 Public exploit

    Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-2313

    Check Point SecuRemote NG with Application Intelligence R54 allows attackers to obtain credentials and gain privileges …

  • Unscored —
    CVE-2005-2318 Public exploit

    Cross-site scripting (XSS) vulnerability in showerr.asp in DVBBS 7.1 SP2 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2005-2311

    SMS 1.9.2m and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) request1 or (2) …

  • Unscored —
    CVE-2005-2317

    Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLIST_TTL is greater than 0 or MACLIS…

    shorewall Debian
  • Unscored —
    CVE-2005-2323 Public exploit

    Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow…

  • Unscored —
    CVE-2005-2324 Public exploit

    Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-2305 Public exploit

    DG Remote Control Server 1.6.2 allows remote attackers to cause a denial of service (crash or CPU consumption) and poss…

  • Unscored —
    CVE-2005-2299

    Multiple cross-site scripting (XSS) vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers t…

  • Unscored —
    CVE-2005-2297 Public exploit EPSS 74%

    Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to …

  • Unscored —
    CVE-2005-2321

    PHP remote file inclusion vulnerability in CaLogic 1.2.2 allows remote attackers to execute arbitrary code via the CLPA…

  • Unscored —
    CVE-2005-2310 Public exploit EPSS 13%

    Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute ar…

  • Unscored —
    CVE-2005-2309

    Opera 8.01 allows remote attackers to cause a denial of service (CPU consumption) via a crafted JPEG image, as demonstr…

  • Unscored —
    CVE-2005-2300

    Skype 1.1.0.20 and earlier allows local users to overwrite arbitrary files via a symlink attack on the skype_profile.jp…

  • Unscored —
    CVE-2005-2306

    Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes JRun to assign a duplic…

  • Unscored —
    CVE-2005-2298

    BitDefender Engine 1.6.1 and earlier does not properly scan all attachments, which allows remote attackers to bypass vi…

  • Unscored —
    CVE-2004-2251

    The PPTP server in Astaro Security Linux before 4.024 provides information about its version, which makes it easier for…

  • Unscored —
    CVE-2004-2243

    Phorum allows remote attackers to hijack sessions of other users by stealing and replaying the session hash in the phor…

  • Unscored —
    CVE-2004-2253 Public exploit

    Directory traversal vulnerability in user.cgi in SurgeLDAP 1.0g and earlier allows remote attackers to read arbitrary f…

  • Unscored —
    CVE-2004-2222

    Directory traversal vulnerability in index.php in FsPHPGallery before 1.2 allows remote attackers to list arbitrary dir…

  • Unscored —
    CVE-2004-2248

    Unknown vulnerability in RemoteEditor before 0.1.1 has unknown impact and attack vectors, related to "oversize submissi…

  • Unscored —
    CVE-2004-2241

    Cross-site scripting (XSS) vulnerability in Phorum 5.0.11 and earlier allows remote attackers to inject arbitrary HTML …

  • Unscored —
    CVE-2004-2219

    Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javas…