Skip to content
OpenAdvisories

Archive

8 September 2005

Vulnerabilities first published on this day (UTC), newest first.

← August 2005 2005 / September /8 October 2005 →
  1. 14
  2. 231
  3. 3 
  4. 4 
  5. 5 
  6. 612
  7. 721
  8. 831
  9. 93
  10. 10 
  11. 11 
  12. 12 
  13. 134
  14. 1432
  15. 155
  16. 1616
  17. 17 
  18. 18 
  19. 1912
  20. 2014
  21. 2132
  22. 2214
  23. 2315
  24. 24 
  25. 25 
  26. 265
  27. 2728
  28. 2818
  29. 29 
  30. 3015
All Critical High Medium Low Exploited only Public exploit

31 results · Feed

  • Unscored —
    CVE-2005-2847 Public exploit EPSS 53%

    img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary comma…

  • Unscored —
    CVE-2005-2866 Public exploit

    Mercora IMRadio 4.0.0.0 stores usernames and passwords in plaintext in the MercoraClient\Profiles registry key, which a…

  • Unscored —
    CVE-2005-2848 Public exploit

    Directory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote…

  • Unscored —
    CVE-2005-2856 Public exploit EPSS 16%

    Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multip…

  • Unscored —
    CVE-2005-2859

    Savant Web Server stores user credentials in plaintext in the Savant\Users registry key, which allows local users to ga…

  • Unscored —
    CVE-2005-2854

    CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers…

  • Unscored —
    CVE-2005-2843

    Helpdesk software Hesk 0.92 does not properly verify usernames and passwords, which allows remote attackers to bypass a…

  • Unscored —
    CVE-2005-2865

    Multiple PHP remote file inclusion vulnerabilities in aMember Pro 2.3.4 allow remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2005-2850 Public exploit

    SlimFTPd 3.17 allows remote attackers to cause a denial of service (crash) via certain (1) USER and (2) PASS commands, …

  • Unscored —
    CVE-2005-2869 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4 allow remote attackers to inject arbitra…

    phpmyadmin Debian
  • Unscored —
    CVE-2005-2867

    SQL injection vulnerability in BlueWhaleCRM allows remote attackers to execute arbitrary SQL commands via the Account I…

  • Unscored —
    CVE-2005-2020

    Directory traversal vulnerability in the web server for 3Com Network Supervisor 5.0.2 allows remote attackers to read a…

  • Unscored —
    CVE-2005-2851

    smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the (1) sm…

    smb4k Debian
  • Unscored —
    CVE-2005-2852 Public exploit EPSS 40%

    Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a de…

  • Unscored —
    CVE-2005-2853

    Multiple cross-site scripting (XSS) vulnerabilities in GuppY 4.5.3a and earlier allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2005-2846 Public exploit

    PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to exec…

  • Unscored —
    CVE-2005-2862

    ADSL Road Runner modem in the Annex A family has a service running on port 224, which allows remote attackers to login …

  • Unscored —
    CVE-2005-2855 Public exploit

    Cross-site scripting (XSS) vulnerability in Unclassified NewsBoard 1.5.3 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2005-2860

    Cross-site scripting (XSS) vulnerability in Nikto 1.35 and earlier allows remote attackers to inject arbitrary web scri…

    nikto Debian
  • Unscored —
    CVE-2005-2844 Public exploit

    Buffer overflow in MMClient.exe in Indiatimes Messenger 6.0 allows remote attackers to cause a denial of service (appli…

  • Unscored —
    CVE-2005-2857 Public exploit

    Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay (spam proxy).

  • Unscored —
    CVE-2005-2849

    Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers …

  • Unscored —
    CVE-2005-2868 Public exploit

    ZipTorrent 1.3.7.3 stores sensitive information in plaintext in the pref.txt file, which allows local users to obtain s…

  • Unscored —
    CVE-2005-2842 Public exploit EPSS 21%

    Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2005-2864

    URBAN 1.5.3_1 allows local users to overwrite arbitrary files via a symlink attack on the (1) high score or (2) save ga…

  • Unscored —
    CVE-2005-2863

    Cross-site scripting (XSS) vulnerability in openwebmail-main.pl in OpenWebMail 2.41 allows remote attackers to inject a…

  • Unscored —
    CVE-2005-2870

    Unknown vulnerability in the net-svc script on Solaris 10 allows remote authenticated users to execute arbitrary code o…

  • Unscored —
    CVE-2005-2845

    Ariba Spend Management System sends the username and password to the server in plaintext in a POST request, which allow…

  • Unscored —
    CVE-2005-2858

    The Fetch.FetchContact.1 ActiveX control (Fetch.dll) for Rediff Bol 7.0 allows remote attackers to read the Windows Add…

  • Unscored —
    CVE-2005-2841 Public exploit EPSS 14%

    Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 a…

  • Unscored —
    CVE-2005-2861

    Cross-site scripting (XSS) vulnerability in N-Stealth Commercial Edition before 5.8.0.38 and Free Edition before 5.8.1.…