Skip to content
OpenAdvisories

Archive

September 2005

Vulnerabilities first published in this month (UTC), newest first.

← August 2005 2005 / September October 2005 →
  1. 14
  2. 231
  3. 3 
  4. 4 
  5. 5 
  6. 612
  7. 721
  8. 831
  9. 93
  10. 10 
  11. 11 
  12. 12 
  13. 134
  14. 1432
  15. 155
  16. 1616
  17. 17 
  18. 18 
  19. 1912
  20. 2014
  21. 2132
  22. 2214
  23. 2315
  24. 24 
  25. 25 
  26. 265
  27. 2728
  28. 2818
  29. 29 
  30. 3015
All Critical High Medium Low Exploited only Public exploit

312 results · Feed

  • Unscored —
    CVE-2005-2893

    Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remot…

  • Unscored —
    CVE-2005-2492

    The raw_sendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service (chang…

  • Unscored —
    CVE-2005-2916

    Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication …

  • Unscored —
    CVE-2005-2895

    setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to obtain sensitive information vi…

  • Unscored —
    CVE-2005-2915

    ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other version…

  • Unscored —
    CVE-2005-2896 Public exploit

    SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn_u…

  • Unscored —
    CVE-2005-2876

    umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local us…

    util-linux Debian
  • High —
    CVE-2005-2875

    Py2Play Unpickles Untrusted Objects

    Py2Play allows remote attackers to execute arbitrary Python code via pickled objects, which Py2Play unpickles and executes.

    py2play PyPI
  • Unscored —
    CVE-2005-2874

    The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attackers to cau…

    cups Debian
  • Unscored —
    CVE-2005-2878 Public exploit EPSS 15%

    Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to …

    mailutils Debian
  • Unscored —
    CVE-2005-2872

    The ipt_recent kernel module (ipt_recent.c) in Linux kernel before 2.6.12, when running on 64-bit processors such as AM…

  • Unscored —
    CVE-2005-2871 Public exploit EPSS 21%

    Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3…

  • Unscored —
    CVE-2005-2873

    The ipt_recent kernel module (ipt_recent.c) in Linux kernel 2.6.12 and earlier does not properly perform certain time t…

  • Unscored —
    CVE-2005-2847 Public exploit EPSS 53%

    img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary comma…

  • Unscored —
    CVE-2005-2866 Public exploit

    Mercora IMRadio 4.0.0.0 stores usernames and passwords in plaintext in the MercoraClient\Profiles registry key, which a…

  • Unscored —
    CVE-2005-2848 Public exploit

    Directory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote…

  • Unscored —
    CVE-2005-2856 Public exploit EPSS 16%

    Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multip…

  • Unscored —
    CVE-2005-2859

    Savant Web Server stores user credentials in plaintext in the Savant\Users registry key, which allows local users to ga…

  • Unscored —
    CVE-2005-2854

    CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers…

  • Unscored —
    CVE-2005-2843

    Helpdesk software Hesk 0.92 does not properly verify usernames and passwords, which allows remote attackers to bypass a…

  • Unscored —
    CVE-2005-2865

    Multiple PHP remote file inclusion vulnerabilities in aMember Pro 2.3.4 allow remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2005-2850 Public exploit

    SlimFTPd 3.17 allows remote attackers to cause a denial of service (crash) via certain (1) USER and (2) PASS commands, …

  • Unscored —
    CVE-2005-2869 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4 allow remote attackers to inject arbitra…

    phpmyadmin Debian
  • Unscored —
    CVE-2005-2867

    SQL injection vulnerability in BlueWhaleCRM allows remote attackers to execute arbitrary SQL commands via the Account I…

  • Unscored —
    CVE-2005-2020

    Directory traversal vulnerability in the web server for 3Com Network Supervisor 5.0.2 allows remote attackers to read a…

  • Unscored —
    CVE-2005-2851

    smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the (1) sm…

    smb4k Debian
  • Unscored —
    CVE-2005-2852 Public exploit EPSS 40%

    Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a de…

  • Unscored —
    CVE-2005-2853

    Multiple cross-site scripting (XSS) vulnerabilities in GuppY 4.5.3a and earlier allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2005-2846 Public exploit

    PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to exec…

  • Unscored —
    CVE-2005-2862

    ADSL Road Runner modem in the Annex A family has a service running on port 224, which allows remote attackers to login …

  • Unscored —
    CVE-2005-2855 Public exploit

    Cross-site scripting (XSS) vulnerability in Unclassified NewsBoard 1.5.3 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2005-2860

    Cross-site scripting (XSS) vulnerability in Nikto 1.35 and earlier allows remote attackers to inject arbitrary web scri…

    nikto Debian
  • Unscored —
    CVE-2005-2844 Public exploit

    Buffer overflow in MMClient.exe in Indiatimes Messenger 6.0 allows remote attackers to cause a denial of service (appli…

  • Unscored —
    CVE-2005-2857 Public exploit

    Free SMTP Server 2.2 allows remote attackers to use the server as an open mail relay (spam proxy).

  • Unscored —
    CVE-2005-2849

    Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers …

  • Unscored —
    CVE-2005-2868 Public exploit

    ZipTorrent 1.3.7.3 stores sensitive information in plaintext in the pref.txt file, which allows local users to obtain s…

  • Unscored —
    CVE-2005-2842 Public exploit EPSS 21%

    Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2005-2864

    URBAN 1.5.3_1 allows local users to overwrite arbitrary files via a symlink attack on the (1) high score or (2) save ga…

  • Unscored —
    CVE-2005-2863

    Cross-site scripting (XSS) vulnerability in openwebmail-main.pl in OpenWebMail 2.41 allows remote attackers to inject a…

  • Unscored —
    CVE-2005-2870

    Unknown vulnerability in the net-svc script on Solaris 10 allows remote authenticated users to execute arbitrary code o…