Archive
September 2005
Vulnerabilities first published in this month (UTC), newest first.
72 results · Clear filters · Feed
-
Unscored —
img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary comma…
-
Unscored —CVE-2005-2866 Public exploit
Mercora IMRadio 4.0.0.0 stores usernames and passwords in plaintext in the MercoraClient\Profiles registry key, which a…
-
Unscored —CVE-2005-2848 Public exploit
Directory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote…
-
Unscored —
Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multip…
-
Unscored —CVE-2005-2850 Public exploit
SlimFTPd 3.17 allows remote attackers to cause a denial of service (crash) via certain (1) USER and (2) PASS commands, …
-
Unscored —CVE-2005-2869 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4 allow remote attackers to inject arbitra…
-
Unscored —
Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a de…
-
Unscored —CVE-2005-2846 Public exploit
PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to exec…
-
Unscored —CVE-2005-2855 Public exploit
Cross-site scripting (XSS) vulnerability in Unclassified NewsBoard 1.5.3 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2005-2844 Public exploit
Buffer overflow in MMClient.exe in Indiatimes Messenger 6.0 allows remote attackers to cause a denial of service (appli…
-
Unscored —CVE-2005-2857 Public exploit
Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay (spam proxy).
-
Unscored —CVE-2005-2868 Public exploit
ZipTorrent 1.3.7.3 stores sensitive information in plaintext in the pref.txt file, which allows local users to obtain s…
-
Unscored —
Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary …
-
Unscored —
Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 a…
-
Unscored —CVE-2005-2813 Public exploit
Directory traversal vulnerability in FlatNuke 2.5.6 and possibly earlier allows remote attackers to read arbitrary file…
-
Unscored —CVE-2005-2812 Public exploit
man2web allows remote attackers to execute arbitrary commands via -P arguments.
-
Unscored —CVE-2005-2807 Public exploit
frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, which allow…
-
Unscored —CVE-2005-2814 Public exploit
Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HT…
-
Unscored —CVE-2005-2800 Public exploit
Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allow…
-
Unscored —CVE-2005-2775 Public exploit
php_api.php in phpWebNotes 2.0.0 uses the extract function to modify key variables such as $t_path_core, which leads to…
-
Unscored —CVE-2005-2787 Public exploit
comment_delete_cgi.php in Simple PHP Blog allows remote attackers to delete arbitrary files via the comment parameter.
-
Critical 9.8
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metac…
KEV Mar 25, 2022 -
Unscored —CVE-2005-2788 Public exploit
Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow remote attackers to execute arbit…
-
Unscored —CVE-2005-2791 Public exploit
BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to ca…
-
Unscored —
Looking Glass 20040427 allows remote attackers to execute arbitrary commands via shell metacharacters in the DNS lookup…
-
Unscored —CVE-2005-2782 Public exploit
PHP remote file inclusion vulnerability in al_initialize.php for AutoLinks Pro 2.1 allows remote attackers to execute a…
-
Unscored —CVE-2005-2769 Public exploit
Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attackers to inje…
-
Unscored —CVE-2005-2783 Public exploit
Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.00.107 and earlier allows remote attackers to inject arbitrary…
-
Unscored —
Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitr…
-
Unscored —CVE-2005-2767 Public exploit
Buffer overflow in LeapFTP allows remote attackers to execute arbitrary code via a long Host string in a Site Queue (.l…
-
Unscored —
Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to …
-
Unscored —CVE-2004-0789 Public exploit
Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Net…