Skip to content
OpenAdvisories

Archive

August 2005

Vulnerabilities first published in this month (UTC), newest first.

← July 2005 2005 / August September 2005 →
  1. 14
  2. 2 
  3. 341
  4. 416
  5. 565
  6. 6 
  7. 78
  8. 82
  9. 9 
  10. 1029
  11. 11 
  12. 128
  13. 13 
  14. 14 
  15. 152
  16. 16132
  17. 1749
  18. 1830
  19. 1936
  20. 2055
  21. 2120
  22. 228
  23. 2319
  24. 2415
  25. 257
  26. 26 
  27. 27 
  28. 28 
  29. 2925
  30. 305
  31. 311
All Critical High Medium Low Exploited only Public exploit

577 results · Feed

  • Unscored —
    CVE-2005-2611 Public exploit EPSS 87%

    VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup fo…

  • Unscored —
    CVE-2005-2609

    index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to obtain the full server path …

  • Unscored —
    CVE-2005-2602

    Mozilla Thunderbird 1.0 and Firefox 1.0.6 allows remote attackers to obfuscate URIs via a long URI, which causes the ad…

  • Unscored —
    CVE-2005-2597

    AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitr…

  • Unscored —
    CVE-2005-2617

    The syscall32_setup_pages function in syscall32.c for Linux kernel 2.6.12 and later, on the 64-bit x86 platform, does n…

  • Unscored —
    CVE-2005-2610

    Cross-site scripting (XSS) vulnerability in index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remo…

  • Unscored —
    CVE-2005-2594 Public exploit

    Apple Safari 1.3 (132) on Mac OS X 1.3.9 allows remote attackers to cause a denial of service (crash) via certain Javas…

  • Unscored —
    CVE-2005-2593

    Parlano MindAlign 5.0 and later versions uses weak encryption, with unknown impact and attack vectors.

  • Unscored —
    CVE-2005-2614

    Discuz! 4.0 rc4 does not properly restrict types of files that are uploaded to the server, which allows remote attacker…

  • Unscored —
    CVE-2005-2590

    Cross-site scripting (XSS) vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to inject …

  • Unscored —
    CVE-2005-2595

    Cross-site scripting (XSS) vulnerability in Dada Mail before 2.10 Alpha 1 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2005-2601

    SQL injection vulnerability in MidiCart allows remote attackers to execute arbitrary SQL commands via the code_no param…

  • Unscored —
    CVE-2005-2603 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php for My Image Gallery (Mig ) 1.4.1 allows remote attackers to inje…

  • Unscored —
    CVE-2005-2605

    Unknown vulnerability in Lasso Professional Server8.0.4 and 8.0.5 allows attackers to bypass authentication, related to…

  • Unscored —
    CVE-2005-2599

    Hummingbird FTP for Connectivity 10.0 uses weak encryption (trivial encoding) to store the user's password in the FTP p…

  • Unscored —
    CVE-2005-2101

    langen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names, which allows local us…

  • Unscored —
    CVE-2005-2615

    Unknown vulnerability in session.php in EQdkp before 1.3.0 has unknown impact and attack vectors, possibly involving au…

  • Unscored —
    CVE-2005-2608

    SafeHTML before 1.3.5 does not properly filter script in UTF-7 and CSS comments, which allows remote attackers to condu…

  • Unscored —
    CVE-2005-2613

    Unknown vulnerability in CPAINT Ajax Toolkit before 1.3-SP allows attackers to execute arbitrary PHP or ASP code or rea…

  • Unscored —
    CVE-2005-2606

    Unknown vulnerability in the "frontend authentication" in PHlyMail 3.02.00 has unknown impact and attack vectors.

  • Unscored —
    CVE-2005-2612 Public exploit EPSS 39%

    Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP c…

    wordpress Debian
  • Unscored —
    CVE-2005-2591

    Parlano MindAlign 5.0 and later versions allows remote attackers to list valid users via unknown vectors, aka the "User…

  • Unscored —
    CVE-2005-2589

    Unknown vulnerability in Linksys WRT54GS wireless router with firmware 4.50.6, with WPA Personal/TKIP authentication en…

  • Unscored —
    CVE-2005-2604

    index.php for My Image Gallery (Mig ) 1.4.1 allows remote attackers to obtain the web server path via certain currDir a…

  • Unscored —
    CVE-2005-2616 Public exploit EPSS 11%

    Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers to execute arbitrary code via the path…

  • Unscored —
    CVE-2005-2598

    Multiple directory traversal vulnerabilities in Dokeos 1.6 and earlier, and possibly Claroline, allow remote attackers …

  • Unscored —
    CVE-2005-2592

    Unknown vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to bypass authentication via …

  • Unscored —
    CVE-2005-2620

    grpWise.exe for Novell GroupWise client 5.5 through 6.5.2 stores the password in plaintext in memory, which allows atta…

  • Unscored —
    CVE-2003-1230

    The implementation of SYN cookies (syncookies) in FreeBSD 4.5 through 5.0-RELEASE-p3 uses only 32-bit internal keys whe…

  • Unscored —
    CVE-2003-1229

    X509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01, (2) JSSE before 1.0.…

  • Unscored —
    CVE-2004-2329

    Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load bu…

  • Unscored —
    CVE-2004-2311 Public exploit

    Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to create folders or dete…

  • Unscored —
    CVE-2004-2336

    Unknown vulnerability in Novell GroupWise and GroupWise WebAccess 6.0 through 6.5, when running with Apache Web Server …

  • Unscored —
    CVE-2004-2314

    The Telnet listener for Novell iChain Server before 2.2 Field Patch 3b 2.2.116 does not have a password by default, whi…

  • Unscored —
    CVE-2004-2342

    ChatterBox 2.0 allows remote attackers to cause a denial of service (server crash) via a malformed request to the serve…

  • Unscored —
    CVE-2004-2340

    ** UNVERIFIABLE ** SQL injection vulnerability in PunkBuster Screenshot Database (PB-DB) Alpha 6 allows remote attacker…

  • Unscored —
    CVE-2004-2315

    Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via an empty OPTI…

  • Unscored —
    CVE-2004-2316

    Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via a GET request…

  • Unscored —
    CVE-2004-2338

    OpenBSD 3.3 and 3.4 does not properly parse Accept and Deny rules without netmasks on big-endian 64-bit platforms such …

  • Unscored —
    CVE-2004-2358

    Cross-site scripting (XSS) vulnerability in admin_words.php for phpBB 2.0.6c allows remote attackers to inject arbitrar…