Skip to content
OpenAdvisories

Archive

16 September 2005

Vulnerabilities first published on this day (UTC), newest first.

← August 2005 2005 / September /16 October 2005 →
  1. 14
  2. 231
  3. 3 
  4. 4 
  5. 5 
  6. 612
  7. 721
  8. 831
  9. 93
  10. 10 
  11. 11 
  12. 12 
  13. 134
  14. 1432
  15. 155
  16. 1616
  17. 17 
  18. 18 
  19. 1912
  20. 2014
  21. 2132
  22. 2214
  23. 2315
  24. 24 
  25. 25 
  26. 265
  27. 2728
  28. 2818
  29. 29 
  30. 3015
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2005-2953 Public exploit

    Cross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2005-2952 Public exploit

    Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arb…

  • Unscored —
    CVE-2005-2657

    Unknown vulnerability in common-lisp-controller 4.18 and earlier allows local users to gain privileges by compiling arb…

  • Unscored —
    CVE-2005-2945

    arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitiv…

    arc Debian
  • Unscored —
    CVE-2005-2956 Public exploit

    ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient a…

  • Unscored —
    CVE-2005-2948

    KillProcess 2.20 and earlier allows local users to bypass kill list restrictions by launching multiple processes at the…

  • Unscored —
    CVE-2005-2947

    Buffer overflow in KillProcess 2.20 and earlier allows user-assisted attackers to execute arbitrary code via an exe fil…

  • Unscored —
    CVE-2005-2877 Public exploit EPSS 71%

    The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2005-2944

    The perform_file_save function in GNOME Workstation Command Center (gwcc) 0.9.6 and earlier allows local users to creat…

  • Unscored —
    CVE-2005-2949

    pam_per_user before 0.4 does not verify if the user name changes between authentication attempts and uses the same subr…

  • Unscored —
    CVE-2005-2955

    config.inc.php in ATutor 1.5.1, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file…

  • Unscored —
    CVE-2005-2951 Public exploit

    Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows re…

  • Unscored —
    CVE-2005-2954 Public exploit

    SQL injection vulnerability in password_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2005-2946

    The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographic…

    openssl Debian
  • Unscored —
    CVE-2005-2950

    Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2005-2957

    Stack-based buffer overflow in AVIRA Desktop for Windows 1.00.00.68 with AVPACK32.DLL 6.31.0.3, when archive scanning i…