Skip to content
OpenAdvisories

Archive

August 2005

Vulnerabilities first published in this month (UTC), newest first.

← July 2005 2005 / August September 2005 →
  1. 14
  2. 2 
  3. 341
  4. 416
  5. 565
  6. 6 
  7. 78
  8. 82
  9. 9 
  10. 1029
  11. 11 
  12. 128
  13. 13 
  14. 14 
  15. 152
  16. 16132
  17. 1749
  18. 1830
  19. 1936
  20. 2055
  21. 2120
  22. 228
  23. 2319
  24. 2415
  25. 257
  26. 26 
  27. 27 
  28. 28 
  29. 2925
  30. 305
  31. 311
All Critical High Medium Low Exploited only Public exploit

577 results · Feed

  • Unscored —
    CVE-2005-2431

    The (1) lost password and (2) account pending features in GForge 4.5 do not properly set a limit on the number of e-mai…

  • Unscored —
    CVE-2005-2448

    Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service (inval…

  • Unscored —
    CVE-2005-2434

    Linksys WRT54G router uses the same private key and certificate for every router, which allows remote attackers to snif…

  • Unscored —
    CVE-2005-2439

    SQL injection vulnerability in UseBB 0.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to e…

  • Unscored —
    CVE-2005-2421

    Multiple SQL injection vulnerabilities in index.php and other pages in Beehive Forum allow remote attackers to execute …

  • Unscored —
    CVE-2005-2422

    Cross-site scripting (XSS) vulnerability in index.php in Beehive Forum allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2005-2346

    Buffer overflow in Novell GroupWise 6.5 Client allows remote attackers to execute arbitrary code via a GWVW02xx.INI lan…

  • Unscored —
    CVE-2005-2427

    Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2005-2450

    Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus …

    clamav Debian
  • Unscored —
    CVE-2005-2442

    Cross-Application Scripting (XAS) vulnerability in SPI Dynamics WebInspect 5.0.196 allows remote attackers to inject Ja…

  • Unscored —
    CVE-2005-2428 Public exploit Scanner template EPSS 73%

    Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hi…

  • Unscored —
    CVE-2005-2423

    Beehive Forum allows remote attackers to obtain sensitive information via (1) an invalid final_uri or sort_by parameter…

  • Unscored —
    CVE-2005-2417

    Contrexx before 1.0.5 allows remote attackers to obtain sensitive information via a direct request to /config/version.x…

  • Unscored —
    CVE-2005-2410

    Format string vulnerability in the nm_info_handler function in Network Manager may allow remote attackers to execute ar…

  • Unscored —
    CVE-2005-2411

    Cross-Site Request Forgery (CSRF) vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers …

    tdiary Debian
  • Unscored —
    CVE-2005-2359

    The AES-XCBC-MAC algorithm in IPsec in FreeBSD 5.3 and 5.4, when used for authentication without other encryption, uses…

  • Unscored —
    CVE-2005-2409 Public exploit

    Format string vulnerability in util.c in nbsmtp 0.99 and earlier, while running in debug mode, allows remote attackers …