Skip to content
OpenAdvisories

Archive

14 September 2005

Vulnerabilities first published on this day (UTC), newest first.

← August 2005 2005 / September /14 October 2005 →
  1. 14
  2. 231
  3. 3 
  4. 4 
  5. 5 
  6. 612
  7. 721
  8. 831
  9. 93
  10. 10 
  11. 11 
  12. 12 
  13. 134
  14. 1432
  15. 155
  16. 1616
  17. 17 
  18. 18 
  19. 1912
  20. 2014
  21. 2132
  22. 2214
  23. 2315
  24. 24 
  25. 25 
  26. 265
  27. 2728
  28. 2818
  29. 29 
  30. 3015
All Critical High Medium Low Exploited only Public exploit

32 results · Feed

  • Unscored —
    CVE-2005-1913

    The Linux kernel 2.6 before 2.6.12.1 allows local users to cause a denial of service (kernel panic) via a non group-lea…

  • Unscored —
    CVE-2005-2884

    Cross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and earlier allows remote attackers…

  • Unscored —
    CVE-2005-2912

    Linksys WRT54G router allows remote attackers to cause a denial of service (CPU consumption and server hang) via an HTT…

  • Unscored —
    CVE-2005-2897

    WEB//NEWS 1.4 allows remote attackers to obtain sensitive information via a direct request to files in the actions dire…

  • Unscored —
    CVE-2005-2898 Public exploit

    NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Us…

  • Unscored —
    CVE-2005-2891

    WebArchiveX.dll 5.5.0.76 installed before September 6th, 2005 is marked safe for scripting by default, which allows rem…

  • Unscored —
    CVE-2005-2914

    ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other version…

  • Unscored —
    CVE-2005-2901

    Multiple Cross-site scripting (XSS) vulnerabilities in CjWeb2Mail 3.0 allow remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-2904 Public exploit

    Zebedee 2.4.1, when "allowed redirection port" is not set, allows remote attackers to cause a denial of service (applic…

  • Unscored —
    CVE-2005-2882

    Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow…

  • Unscored —
    CVE-2005-2490

    Stack-based buffer overflow in the sendmsg function call in the Linux kernel 2.6 before 2.6.13.1 allows local users to …

  • Unscored —
    CVE-2005-2902

    SQL injection vulnerability in class-1 Forum Software 0.24.4 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2005-2888

    Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute ar…

  • Unscored —
    CVE-2005-2887

    MAXdev MD-Pro 1.0.73, and possibly earlier versions, allows remote attackers to obtain sensitive information via a dire…

  • Unscored —
    CVE-2005-2885 Public exploit

    The Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete blacklist to check for da…

  • Unscored —
    CVE-2005-2892 Public exploit

    Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attacke…

  • Unscored —
    CVE-2005-2899

    Multiple cross-site scripting (XSS) vulnerabilities in details.php in CjTagBoard 3.0 allow remote attackers to inject a…

  • Unscored —
    CVE-2005-2894

    Cross-site scripting (XSS) vulnerability in the user registration in PBLang 4.65, and possibly earlier versions, allows…

  • Unscored —
    CVE-2005-2890

    SecureOL VE2 1.05.1008 does not properly restrict public access to physical memory, which allows local users to bypass …

  • Unscored —
    CVE-2005-2903

    Heap-based buffer overflow in NOD32 2.5 with nod32.002 1.033 build 1127, with active scanning enabled, allows remote at…

  • Unscored —
    CVE-2005-2900

    Cross-site scripting (XSS) vulnerability in top.php in CjLinkOut 1.0 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-2881

    phpCommunityCalendar 4.0.3 allows remote attackers to bypass authentication and gain unauthorized access via a direct r…

  • Unscored —
    CVE-2005-2879

    Advansysperu Software USB Lock Auto-Protect (AP) 1.5 uses a weak encryption scheme to encrypt passwords, which allows l…

  • Unscored —
    CVE-2005-2880

    Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attac…

  • Unscored —
    CVE-2005-2886

    Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.73, and possibly earlier versions, allow remot…

  • Unscored —
    CVE-2005-2889

    Check Point NGX R60 does not properly verify packets against the predefined service group "CIFS" rule, which allows rem…

  • Unscored —
    CVE-2005-2893

    Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remot…

  • Unscored —
    CVE-2005-2492

    The raw_sendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service (chang…

  • Unscored —
    CVE-2005-2916

    Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication …

  • Unscored —
    CVE-2005-2895

    setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to obtain sensitive information vi…

  • Unscored —
    CVE-2005-2915

    ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other version…

  • Unscored —
    CVE-2005-2896 Public exploit

    SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_u…