Skip to content
OpenAdvisories

Archive

August 2005

Vulnerabilities first published in this month (UTC), newest first.

← July 2005 2005 / August September 2005 →
  1. 14
  2. 2 
  3. 341
  4. 416
  5. 565
  6. 6 
  7. 78
  8. 82
  9. 9 
  10. 1029
  11. 11 
  12. 128
  13. 13 
  14. 14 
  15. 152
  16. 16132
  17. 1749
  18. 1830
  19. 1936
  20. 2055
  21. 2120
  22. 228
  23. 2319
  24. 2415
  25. 257
  26. 26 
  27. 27 
  28. 28 
  29. 2925
  30. 305
  31. 311
All Critical High Medium Low Exploited only Public exploit

577 results · Feed

  • Unscored —
    CVE-2003-1220

    BEA WebLogic Server proxy plugin for BEA Weblogic Express and Server 6.1 through 8.1 SP 1 allows remote attackers to ca…

  • Unscored —
    CVE-2003-1224

    Weblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the JDBCConnectionPoolRuntimeMBean password…

  • Unscored —
    CVE-2005-1527

    Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attac…

    awstats Debian
  • Unscored —
    CVE-2005-2498

    Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products includ…

  • Unscored —
    CVE-2005-2553

    The find_target function in ptrace32.c in the Linux kernel 2.4.x before 2.4.29 does not properly handle a NULL return v…

  • Unscored —
    CVE-2005-2554

    The web server for Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3) uses insecure permissions for the "Com…

  • Unscored —
    CVE-2005-2551 Public exploit EPSS 55%

    Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of s…

  • Unscored —
    CVE-2005-2550

    Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (cras…

    evolution Debian
  • Unscored —
    CVE-2005-2552

    Unknown vulnerability in HP ProLiant DL585 servers running Integrated Lights Out (ILO) firmware before 1.81 allows atta…

  • Unscored —
    CVE-2005-2547

    security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metac…

  • Unscored —
    CVE-2005-2549

    Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of ser…

    evolution Debian
  • Unscored —
    CVE-2005-2548

    vlan_dev.c in the VLAN code for Linux kernel 2.6.8 allows remote attackers to cause a denial of service (kernel oops fr…

  • Unscored —
    CVE-2005-0058 Public exploit EPSS 46%

    Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Wind…

  • Unscored —
    CVE-2005-1218 Public exploit EPSS 57%

    The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attack…

  • Unscored —
    CVE-2005-1990 Public exploit EPSS 49%

    Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possib…

  • Unscored —
    CVE-2005-1981

    Unknown vulnerability in Microsoft Windows 2000 Server and Windows Server 2003 domain controllers allows remote authent…

  • Unscored —
    CVE-2005-1983 Public exploit EPSS 93%

    Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1…

  • Unscored —
    CVE-2005-1984 EPSS 55%

    Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2…

  • Unscored —
    CVE-2005-1989 Public exploit EPSS 46%

    Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly…

  • Unscored —
    CVE-2005-1988 Public exploit EPSS 46%

    Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a we…

  • Unscored —
    CVE-2005-1982

    Unknown vulnerability in the PKINIT Protocol for Microsoft Windows 2000, Windows XP, and Windows Server 2003 could allo…

  • Unscored —
    CVE-2005-2535 Public exploit EPSS 81%

    Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to exec…

  • Unscored —
    CVE-2005-2541

    Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remot…

    tar Debian
  • Unscored —
    CVE-2005-2367 Public exploit

    Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple …

  • Unscored —
    CVE-2005-2361

    Unknown vulnerability in the (1) AgentX dissector, (2) PER dissector, (3) DOCSIS dissector, (4) SCTP graphs, (5) HTTP d…

  • Unscored —
    CVE-2005-2362

    Unknown vulnerability several dissectors in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2005-2540 Public exploit

    CRLF injection vulnerability in FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2005-2364

    Unknown vulnerability in the (1) GIOP dissector, (2) WBXML, or (3) CAMEL dissector in Ethereal 0.8.20 through 0.10.11 a…

  • Unscored —
    CVE-2005-2539 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FlatNuke 2.5.5 and possibly earlier versions allow remote attack…

  • Unscored —
    CVE-2005-2546

    Arab Portal 2.0 allows remote attackers to obtain sensitive information via a long (1) username or (2) password, which …

  • Unscored —
    CVE-2005-2363

    Unknown vulnerability in the (1) SMPP dissector, (2) 802.3 dissector, (3) DHCP, (4) MEGACO dissector, or (5) H1 dissect…

  • Unscored —
    CVE-2005-2366

    Unknown vulnerability in the BER dissector in Ethereal 0.10.11 allows remote attackers to cause a denial of service (ab…

  • Unscored —
    CVE-2005-2360

    Unknown vulnerability in the LDAP dissector in Ethereal 0.8.5 through 0.10.11 allows remote attackers to cause a denial…

  • Unscored —
    CVE-2005-2542 Public exploit

    Invision Power Board (IPB) 1.0.3 allows remote attackers to inject arbitrary web script or HTML via an attachment, whic…

  • Unscored —
    CVE-2005-2544

    PHP remote file inclusion vulnerability in config.php in Comdev eCommerce 3.0 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2005-2537

    FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via a direct reque…

  • Unscored —
    CVE-2005-2543 Public exploit

    Directory traversal vulnerability in wce.download.php in Comdev eCommerce 3.0 allows remote attackers to download arbit…

  • Unscored —
    CVE-2005-2536

    pstotext before 1.8g does not properly use the "-dSAFER" option when calling Ghostscript to extract plain text from Pos…

  • Unscored —
    CVE-2005-2538

    FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via (1) a null byt…

  • Unscored —
    CVE-2005-2365

    Unknown vulnerability in the SMB dissector in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a buffer …