Skip to content
OpenAdvisories

Archive

September 2005

Vulnerabilities first published in this month (UTC), newest first.

← August 2005 2005 / September October 2005 →
  1. 14
  2. 231
  3. 3 
  4. 4 
  5. 5 
  6. 612
  7. 721
  8. 831
  9. 93
  10. 10 
  11. 11 
  12. 12 
  13. 134
  14. 1432
  15. 155
  16. 1616
  17. 17 
  18. 18 
  19. 1912
  20. 2014
  21. 2132
  22. 2214
  23. 2315
  24. 24 
  25. 25 
  26. 265
  27. 2728
  28. 2818
  29. 29 
  30. 3015
All Critical High Medium Low Exploited only Public exploit

312 results · Feed

  • Unscored —
    CVE-2005-3087

    The SecureW2 3.0 TLS implementation uses weak random number generators (rand and srand from system time) during generat…

  • Unscored —
    CVE-2005-3070

    HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users …

    hylafax Debian
  • Unscored —
    CVE-2005-3068

    Unspecified vulnerability in Eric Integrated Development Environment (eric3) before 3.7.2 has unknown impact and attack…

    eric Debian
  • Unscored —
    CVE-2005-3076

    Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error messages via invalid …

  • Unscored —
    CVE-2005-3069

    xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the x…

    hylafax Debian
  • Unscored —
    CVE-2005-3078

    Cross-site scripting (XSS) vulnerability in PunBB before 1.2.8 allows remote attackers to inject arbitrary web script o…

  • Unscored —
    CVE-2005-3085

    Multiple cross-site scripting (XSS) vulnerabilities in rss.php in Riverdark Studios RSS Syndicator module 2.1.7 allow r…

  • Unscored —
    CVE-2005-3083 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 0.10 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2005-3077 Public exploit EPSS 14%

    Microsoft Internet Explorer 5.2.3 for Mac OS allows remote attackers to cause a denial of service (crash) via a web pag…

  • Unscored —
    CVE-2005-3080

    contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary files via the language field with…

  • Unscored —
    CVE-2005-3071

    Unspecified vulnerability in Unix File System (UFS) on Solaris 8 and 9, when logging is enabled, allows local users to …

  • Unscored —
    CVE-2005-3072

    SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to exec…

  • Unscored —
    CVE-2005-3063 Public exploit

    SQL injection vulnerability in MailGust 1.9 allows remote attackers to execute arbitrary SQL commands via the email fie…

  • Unscored —
    CVE-2005-3061

    Multiple stack-based buffer overflows in PowerArchiver 8.10 through 9.5 Beta 4 and Beta 5 allow remote attackers to exe…

  • Unscored —
    CVE-2005-3082

    SQL injection vulnerability in admin.php in SEO-Board 1.0.2 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2005-3064 Public exploit

    MultiTheftAuto 0.5 patch 1 and earlier does not properly verify client privileges when running command 40, which allows…

  • Unscored —
    CVE-2005-3074

    SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute ar…

  • Unscored —
    CVE-2005-3065

    MultiTheftAuto 0.5 patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via a c…

  • Unscored —
    CVE-2005-3081 Public exploit EPSS 77%

    wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE comm…

  • Unscored —
    CVE-2005-3073

    Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has be…

  • Unscored —
    CVE-2005-2710 Public exploit EPSS 13%

    Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via…

  • Unscored —
    CVE-2005-3059

    Multiple unspecified vulnerabilities in Opera 8.50 on Linux and Windows have unknown impact and attack vectors, related…

  • Unscored —
    CVE-2005-3055

    Linux kernel 2.6.8 to 2.6.14-rc2 allows local users to cause a denial of service (kernel OOPS) via a userspace process …

  • Unscored —
    CVE-2005-3054

    fopen_wrappers.c in PHP 4.4.0, and possibly other versions, does not properly restrict access to other directories when…

  • Unscored —
    CVE-2005-3053

    The sys_set_mempolicy function in mempolicy.c in Linux kernel 2.6.x allows local users to cause a denial of service (ke…

  • Unscored —
    CVE-2003-1232 Public exploit

    Emacs 21.2.1 does not prompt or warn the user before executing Lisp code in the local variables section of a text file,…

  • Unscored —
    CVE-2005-3052 Public exploit

    SQL injection vulnerability in module/down.inc.php in jportal 2.3.1 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2005-3046

    SQL injection vulnerability in password.php in PhpMyFaq 1.5.1 allows remote attackers to modify SQL queries and gain ad…

  • Unscored —
    CVE-2005-3050

    PhpMyFaq 1.5.1 allows remote attackers to obtain sensitive information via a LANGCODE parameter that does not exist, wh…

  • Unscored —
    CVE-2005-3048 Public exploit

    Directory traversal vulnerability in index.php in PhpMyFaq 1.5.1 allows remote attackers to read arbitrary files or inc…

  • Unscored —
    CVE-2005-3047

    Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFaq 1.5.1 allow remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-3051

    Stack-based buffer overflow in the ARJ plugin (arj.dll) 3.9.2.0 for 7-Zip 3.13, 4.23, and 4.26 BETA, as used in product…

  • Unscored —
    CVE-2005-3049

    PhpMyFaq 1.5.1 stores data files under the web document root with insufficient access control and predictable filenames…

  • Unscored —
    CVE-2005-3045 Public exploit

    SQL injection vulnerability in search.php in My Little Forum 1.5 and 1.6 beta allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2005-2704

    Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control th…

  • Unscored —
    CVE-2005-2705

    Integer overflow in the JavaScript engine in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 might allow remote at…

  • Unscored —
    CVE-2005-2706

    Firefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute Javascript with chrome privileg…

  • Unscored —
    CVE-2005-2701

    Heap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to execute a…

  • Unscored —
    CVE-2005-2703

    Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP request…

  • Unscored —
    CVE-2005-2707

    Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows without user interface co…