Skip to content
OpenAdvisories

Archive

10 August 2005

Vulnerabilities first published on this day (UTC), newest first.

29 results · Feed

  • Unscored —
    CVE-2005-0058 Public exploit EPSS 46%

    Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Wind…

  • Unscored —
    CVE-2005-1218 Public exploit EPSS 57%

    The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attack…

  • Unscored —
    CVE-2005-1990 Public exploit EPSS 49%

    Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possib…

  • Unscored —

    Unknown vulnerability in Microsoft Windows 2000 Server and Windows Server 2003 domain controllers allows remote authent…

  • Unscored —
    CVE-2005-1983 Public exploit EPSS 93%

    Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1…

  • Unscored —
    CVE-2005-1984 EPSS 55%

    Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2…

  • Unscored —
    CVE-2005-1989 Public exploit EPSS 46%

    Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly…

  • Unscored —
    CVE-2005-1988 Public exploit EPSS 46%

    Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a we…

  • Unscored —

    Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allo…

  • Unscored —
    CVE-2005-2535 Public exploit EPSS 81%

    Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to exec…

  • Unscored —

    Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remot…

  • Unscored —
    CVE-2005-2367 Public exploit

    Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple …

  • Unscored —

    Unknown vulnerability in the (1) AgentX dissector, (2) PER dissector, (3) DOCSIS dissector, (4) SCTP graphs, (5) HTTP d…

  • Unscored —

    Unknown vulnerability several dissectors in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2005-2540 Public exploit

    CRLF injection vulnerability in FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to execute arbitra…

  • Unscored —

    Unknown vulnerability in the (1) GIOP dissector, (2) WBXML, or (3) CAMEL dissector in Ethereal 0.8.20 through 0.10.11 a…

  • Unscored —
    CVE-2005-2539 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FlatNuke 2.5.5 and possibly earlier versions allow remote attack…

  • Unscored —

    Arab Portal 2.0 allows remote attackers to obtain sensitive information via a long (1) username or (2) password, which …

  • Unscored —

    Unknown vulnerability in the (1) SMPP dissector, (2) 802.3 dissector, (3) DHCP, (4) MEGACO dissector, or (5) H1 dissect…

  • Unscored —

    Unknown vulnerability in the BER dissector in Ethereal 0.10.11 allows remote attackers to cause a denial of service (ab…

  • Unscored —

    Unknown vulnerability in the LDAP dissector in Ethereal 0.8.5 through 0.10.11 allows remote attackers to cause a denial…

  • Unscored —
    CVE-2005-2542 Public exploit

    Invision Power Board (IPB) 1.0.3 allows remote attackers to inject arbitrary web script or HTML via an attachment, whic…

  • Unscored —

    PHP remote file inclusion vulnerability in config.php in Comdev eCommerce 3.0 allows remote attackers to execute arbitr…

  • Unscored —

    FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via a direct reque…

  • Unscored —
    CVE-2005-2543 Public exploit

    Directory traversal vulnerability in wce.download.php in Comdev eCommerce 3.0 allows remote attackers to download arbit…

  • Unscored —

    pstotext before 1.8g does not properly use the "-dSAFER" option when calling Ghostscript to extract plain text from Pos…

  • Unscored —

    FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via (1) a null byt…

  • Unscored —

    Unknown vulnerability in the SMB dissector in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a buffer …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in PHPOpenChat 3.0.2 allow remote attackers to inject arbitrary web…