Skip to content
OpenAdvisories

Archive

7 September 2005

Vulnerabilities first published on this day (UTC), newest first.

← August 2005 2005 / September /7 October 2005 →
  1. 14
  2. 231
  3. 3 
  4. 4 
  5. 5 
  6. 612
  7. 721
  8. 831
  9. 93
  10. 10 
  11. 11 
  12. 12 
  13. 134
  14. 1432
  15. 155
  16. 1616
  17. 17 
  18. 18 
  19. 1912
  20. 2014
  21. 2132
  22. 2214
  23. 2315
  24. 24 
  25. 25 
  26. 265
  27. 2728
  28. 2818
  29. 29 
  30. 3015
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Unscored —
    CVE-2005-2794

    store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain abor…

    squid Debian
  • Unscored —
    CVE-2005-2813 Public exploit

    Directory traversal vulnerability in FlatNuke 2.5.6 and possibly earlier allows remote attackers to read arbitrary file…

  • Unscored —
    CVE-2005-2818

    Cross-site scripting (XSS) vulnerability in DownFile 1.3 allows remote attackers to inject arbitrary web script or HTML…

  • Unscored —
    CVE-2005-2837

    Multiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote attackers to execute ar…

  • Unscored —
    CVE-2005-2812 Public exploit

    man2web allows remote attackers to execute arbitrary commands via -P arguments.

  • Unscored —
    CVE-2005-2810

    Multiple stack-based buffer overflows in urban before 1.5.3 allow local users to gain privileges via a long HOME enviro…

  • Unscored —
    CVE-2005-2816

    Cross-site scripting (XSS) vulnerability in Greymatter allows remote attackers to inject arbitrary web script or HTML v…

  • Unscored —
    CVE-2005-2840

    Multiple unknown vulnerabilities in MAXdev MD-Pro 1.0.72 and earlier have unknown impact and unspecified attack vectors…

  • Unscored —
    CVE-2005-2820

    Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or H…

    courier Debian
  • Unscored —
    CVE-2005-2819

    DownFile 1.3 allows remote attackers to gain administrator privileges via a direct request to (1) update.php, (2) del.p…

  • Unscored —
    CVE-2005-2836

    Multiple cross-site scripting (XSS) vulnerabilities in Phorum 5.0.17a and earlier allow remote attackers to inject arbi…

  • Unscored —
    CVE-2005-2808

    frox 0.7.16 and 0.7.17 does not properly parse certain Deny ACLs, which might allow attackers to bypass intended restri…

  • Unscored —
    CVE-2005-2839

    Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.72 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2005-2809

    silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier allows local users to overwrite arbit…

  • Unscored —
    CVE-2005-2817

    Simple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers…

  • Unscored —
    CVE-2005-2796

    The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of…

    squid Debian
  • Unscored —
    CVE-2005-2811

    Untrusted search path vulnerability in Net-SNMP 5.2.1.2 and earlier, on Gentoo Linux, installs certain Perl modules wit…

  • Unscored —
    CVE-2005-2838

    SQL injection vulnerability in login.php in myBloggie 2.1.3-beta and earlier allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2005-2807 Public exploit

    frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, which allow…

  • Unscored —
    CVE-2005-2815

    print.php in FlatNuke 2.5.6 allows remote attackers to obtain sensitive information (path disclosure on error) or cause…

  • Unscored —
    CVE-2005-2814 Public exploit

    Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HT…