Skip to content
OpenAdvisories

Archive

September 2005

Vulnerabilities first published in this month (UTC), newest first.

← August 2005 2005 / September October 2005 →
  1. 14
  2. 231
  3. 3 
  4. 4 
  5. 5 
  6. 612
  7. 721
  8. 831
  9. 93
  10. 10 
  11. 11 
  12. 12 
  13. 134
  14. 1432
  15. 155
  16. 1616
  17. 17 
  18. 18 
  19. 1912
  20. 2014
  21. 2132
  22. 2214
  23. 2315
  24. 24 
  25. 25 
  26. 265
  27. 2728
  28. 2818
  29. 29 
  30. 3015
All Critical High Medium Low Exploited only Public exploit

312 results · Feed

  • Unscored —
    CVE-2005-2702

    Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service (crash) and p…

  • Unscored —
    CVE-2005-3044

    Multiple vulnerabilities in Linux kernel before 2.6.13.2 allow local users to cause a denial of service (kernel OOPS fr…

  • Unscored —
    CVE-2005-3031

    Buffer overflow in vxFtpSrv 0.9.7 allows remote attackers to execute arbitrary code via a long USER name.

  • Unscored —
    CVE-2005-3040

    Directory traversal vulnerability in the web interface (ISALogin.dll) for TAC Vista 4.0, and possibly other versions be…

  • Unscored —
    CVE-2005-3042

    miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote at…

  • Unscored —
    CVE-2005-3033

    Stack-based buffer overflow in vxWeb 1.1.4 allows remote attackers to cause a denial of service (crash) and possibly ex…

  • Unscored —
    CVE-2005-3038

    Unspecified vulnerability in Hosting Controller 6.1 before Hotfix 2.4 allows remote attackers to list and read contents…

  • Unscored —
    CVE-2005-3039

    SQL injection vulnerability in infopage.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2005-3035

    Compuware DriverStudio Remote Control service (DSRsvc.exe) 2.7 and 3.0 beta 2 allows remote attackers to cause a denial…

  • Unscored —
    CVE-2005-3036

    File Transfer Anywhere 3.01 stores sensitive password information in plaintext in the PASS value in the "File Transfer …

  • Unscored —
    CVE-2005-3037

    Cross-site scripting (XSS) vulnerability in Handy Address Book Server 1.1 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2005-3032

    Buffer overflow in vxTftpSrv 1.7.0 allows remote attackers to cause a denial of service (crash) and possibly execute ar…

  • Unscored —
    CVE-2005-3043 Public exploit

    SQL injection vulnerability in AddItem.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2005-3034

    Compuware DriverStudio Remote Control service (DSRsvc.exe) 2.7 and 3.0 beta 2 allows remote attackers to bypass authent…

  • Unscored —
    CVE-2005-3041

    Unspecified "drag-and-drop vulnerability" in Opera Web Browser before 8.50 on Windows allows "unintentional file upload…

  • Unscored —
    CVE-2005-0138

    rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect fro…

  • Unscored —
    CVE-2005-0139

    Unknown vulnerability in rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not sufficiently restrict access rights…

  • Unscored —
    CVE-2005-3013

    Buffer overflow in liby2util in Yet another Setup Tool (YaST) for SuSE Linux 9.3 allows local users to execute arbitrar…

  • Unscored —
    CVE-2005-3030

    Directory traversal vulnerability in the archive decompression library in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBl…

  • Unscored —
    CVE-2005-3016

    Multiple unspecified vulnerabilities in the WYSIWYG editor in PHP-Nuke before 7.9 Final have unknown impact and attack …

  • Unscored —
    CVE-2005-3014

    Cross-site scripting (XSS) vulnerability in Ensim webplliance allows remote attackers to inject arbitrary web script or…

  • Unscored —
    CVE-2005-3004 Public exploit

    SQL injection vulnerability in Interakt MX Shop 3.2.0 allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2005-3019 Public exploit

    Multiple SQL injection vulnerabilities in vBulletin before 3.0.9 allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2005-3026 Public exploit

    Directory traversal vulnerability in index.php in Alstrasoft Epay Pro 2.0 and earlier allows remote attackers to read a…

  • Unscored —
    CVE-2005-3018 Public exploit

    Apple Safari allows remote attackers to cause a denial of service (application crash) via a crafted data:// URL.

  • Unscored —
    CVE-2005-3009

    Cross-site scripting (XSS) vulnerability in CuteNews allows remote attackers to inject arbitrary web script or HTML via…

  • Unscored —
    CVE-2005-3024

    Multiple SQL injection vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2005-3005 Public exploit

    Helpdesk Software Hesk allows remote attackers to bypass authentication for (1) admin.php and (2) admin_main.php by mod…

  • Unscored —
    CVE-2005-3003

    SQL injection vulnerability in index.php in NooTopList 1.0.0 release 17 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2005-3015

    Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 6.5.2 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2005-3012

    The MasterDataCD::createImage function in masterdatacd.cpp for SimpleCDR-X 1.3.3 creates the .temp temporary directory …

  • Unscored —
    CVE-2005-3017

    PHP file inclusion vulnerability in index.php in Content2Web 1.0.1 allows remote attackers to include arbitrary files v…

  • Unscored —
    CVE-2005-3020 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2005-3007

    Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." (dot), …

  • Unscored —
    CVE-2005-3008

    Tofu 0.2 allows remote attackers to execute arbitrary Python code via crafted pickled objects, which Tofu unpickles and…

  • Unscored —
    CVE-2005-3010 Public exploit

    Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and e…

  • Unscored —
    CVE-2005-3006

    The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, whi…

  • Unscored —
    CVE-2005-3023

    Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to inject arb…

  • Unscored —
    CVE-2005-3025

    Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to inject arb…

  • Unscored —
    CVE-2005-3027

    Sybari Antigen 8.0 SR2 does not properly filter SMTP messages, which allows remote attackers to bypass custom filter ru…