Skip to content
OpenAdvisories

Archive

23 August 2005

Vulnerabilities first published on this day (UTC), newest first.

19 results · Feed

  • Unscored —
    CVE-2005-2675 Public exploit

    Note: the vendor has disputed this issue. Multiple SQL injection vulnerabilities in Land Down Under (LDU) 800 allow rem…

  • Unscored —

    pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrar…

  • Unscored —
    CVE-2005-2665 Public exploit EPSS 15%

    Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attacke…

  • Unscored —
    CVE-2005-2673 Public exploit

    SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers…

  • Unscored —

    Unknown vulnerability in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11…

  • Unscored —

    Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP4, when using entitlements, allows remote attackers to b…

  • Unscored —
    CVE-2005-2678 EPSS 44%

    Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass security checks and conduct…

  • Unscored —
    CVE-2005-2683 Public exploit

    Multiple SQL injection vulnerabilities in PHPKit 1.6.1 allow remote attackers to execute arbitrary SQL commands via the…

  • Unscored —

    Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Ser…

  • Unscored —

    Unspecified vulnerability in the command line processing (CLI) logic in Cisco Intrusion Prevention System 5.0(1) and 5.…

  • Unscored —
    CVE-2005-2674 Public exploit

    Note: the vendor has disputed this issue. Multiple cross-site scripting (XSS) vulnerabilities in Land Down Under (LDU) …

  • Unscored —

    nquser.php in Virtual Edge Netquery 3.11 allows remote attackers to execute arbitrary commands via shell metacharacters…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in displayimage.php in Coppermine Photo Gallery before 1.3.4 allows remote att…

  • Unscored —

    SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys …

  • Unscored —

    aspell_setup.php in the SpellChecker plugin in DTLink AreaEdit before 0.4.3 allows remote attackers to execute arbitrar…

  • Unscored —

    ACNews stores the database in a file under the web document root with a db.inc extension and insufficient access contro…

  • Unscored —

    Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute ar…

  • Unscored —
    CVE-2005-2668 Public exploit EPSS 75%

    Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and …

  • Unscored —

    Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow…