Skip to content
OpenAdvisories

Archive

2 September 2005

Vulnerabilities first published on this day (UTC), newest first.

← August 2005 2005 / September /2 October 2005 →
  1. 14
  2. 231
  3. 3 
  4. 4 
  5. 5 
  6. 612
  7. 721
  8. 831
  9. 93
  10. 10 
  11. 11 
  12. 12 
  13. 134
  14. 1432
  15. 155
  16. 1616
  17. 17 
  18. 18 
  19. 1912
  20. 2014
  21. 2132
  22. 2214
  23. 2315
  24. 24 
  25. 25 
  26. 265
  27. 2728
  28. 2818
  29. 29 
  30. 3015
All Critical High Medium Low Exploited only Public exploit

31 results · Feed

  • Unscored —
    CVE-2005-1857

    Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code vi…

    simpleproxy Debian
  • Unscored —
    CVE-2005-1915

    The log4sh_readProperties function in log4sh 1.2.5 and earlier allows local users to overwrite arbitrary files via a sy…

  • Unscored —
    CVE-2005-2793

    PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execu…

    phpldapadmin Debian
  • Unscored —
    CVE-2005-2775 Public exploit

    php_api.php in phpWebNotes 2.0.0 uses the extract function to modify key variables such as $t_path_core, which leads to…

  • Unscored —
    CVE-2005-2784

    SQL injection vulnerability in the login function for the administration login panel in cosmoshop 8.10.78 allows remote…

  • Unscored —
    CVE-2005-2786

    Directory traversal vulnerability in bestmail_edit.cgi in cosmoshop 8.10.78 and earlier allows remote administrators to…

  • Unscored —
    CVE-2005-2787 Public exploit

    comment_delete_cgi.php in Simple PHP Blog allows remote attackers to delete arbitrary files via the comment parameter.

  • Critical 9.8
    CVE-2005-2773 Exploited Public exploit EPSS 75%

    HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metac…

    KEV Mar 25, 2022
  • Unscored —
    CVE-2005-2779

    The iTAN Online-Banking Security System allows remote attackers to obtain TAN numbers via a man-in-the-middle (MITM) at…

  • Unscored —
    CVE-2005-2790

    BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, relies on the client to enfor…

  • Unscored —
    CVE-2005-2781

    The Avatar upload feature in FUD Forum before 2.7.0 does not properly verify uploaded files, which allows remote attack…

  • Unscored —
    CVE-2005-2788 Public exploit

    Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow remote attackers to execute arbit…

  • Unscored —
    CVE-2005-2791 Public exploit

    BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to ca…

  • Unscored —
    CVE-2005-2777 Public exploit EPSS 12%

    Looking Glass 20040427 allows remote attackers to execute arbitrary commands via shell metacharacters in the DNS lookup…

  • Unscored —
    CVE-2005-2780

    Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2005-2778

    SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL st…

  • Unscored —
    CVE-2005-2782 Public exploit

    PHP remote file inclusion vulnerability in al_initialize.php for AutoLinks Pro 2.1 allows remote attackers to execute a…

  • Unscored —
    CVE-2005-2785

    cosmoshop 8.10.78 and earlier stores passwords in plaintext in the database, which allows local users to obtain sensiti…

  • Unscored —
    CVE-2005-2769 Public exploit

    Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attackers to inje…

    courier Debian
  • Unscored —
    CVE-2005-2783 Public exploit

    Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.00.107 and earlier allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2005-2789

    BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to by…

  • Unscored —
    CVE-2005-2792 Public exploit EPSS 12%

    Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitr…

    phpldapadmin Debian
  • Unscored —
    CVE-2005-2767 Public exploit

    Buffer overflow in LeapFTP allows remote attackers to execute arbitrary code via a long Host string in a Site Queue (.l…

  • Unscored —
    CVE-2005-2770

    WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) does not properly handle when t…

  • Unscored —
    CVE-2005-2771

    WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) processes access and deny lists…

  • Unscored —
    CVE-2005-2776

    Multiple cross-site scripting (XSS) vulnerabilities in Looking Glass 20040427 allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2005-2774

    Format string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a denial of service (se…

  • Unscored —
    CVE-2005-2496

    The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses th…

    ntp Debian
  • Unscored —
    CVE-2005-2772 Public exploit EPSS 10%

    Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to …

    gopher Debian
  • Unscored —
    CVE-2005-2766

    Symantec AntiVirus Corporate Edition 9.0.1.x and 9.0.4.x, and possibly other versions, when obtaining updates from an i…

  • Unscored —
    CVE-2005-2768 EPSS 13%

    Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailMonitor, and …