Skip to content
OpenAdvisories

Archive

October 2005

Vulnerabilities first published in this month (UTC), newest first.

← September 2005 2005 / October November 2005 →
  1. 1 
  2. 2 
  3. 3 
  4. 411
  5. 525
  6. 621
  7. 74
  8. 8 
  9. 9 
  10. 10 
  11. 1110
  12. 122
  13. 139
  14. 1447
  15. 15 
  16. 16 
  17. 173
  18. 187
  19. 19 
  20. 2022
  21. 215
  22. 22 
  23. 2324
  24. 242
  25. 2580
  26. 262
  27. 2738
  28. 282
  29. 2925
  30. 302
  31. 311
All Critical High Medium Low Exploited only Public exploit

342 results · Feed

  • Unscored —
    CVE-2003-0887

    ez-ipupdate 3.0.11b7 and earlier creates insecure temporary cache files, which allows local users to conduct unauthoriz…

  • Unscored —
    CVE-2005-3315 Public exploit

    Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers …

  • Unscored —
    CVE-2005-3123

    Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted s…

  • Unscored —
    CVE-2005-3371

    Multiple interpretation error in AVG 7 7.0.323 allows remote attackers to bypass virus scanning via a file such as BAT,…

  • Unscored —
    CVE-2005-3364

    Multiple SQL injection vulnerabilities in DboardGear allow remote attackers to execute arbitrary SQL commands via (1) t…

  • Unscored —
    CVE-2005-3368 Public exploit

    Cross-site scripting (XSS) vulnerability in the Search_Enhanced module in PHP-Nuke 7.9 allows remote attackers to injec…

  • Unscored —
    CVE-2005-3382

    Multiple interpretation error in Sophos 3.91 with the 2.28.4 engine allows remote attackers to bypass virus scanning vi…

  • Unscored —
    CVE-2005-3381

    Multiple interpretation error in Ukrainian National Antivirus (UNA) 1.83.2.16 with kernel 265 allows remote attackers t…

  • Unscored —
    CVE-2005-3374

    Multiple interpretation error in F-Prot 3.16c allows remote attackers to bypass virus scanning via a file such as BAT, …

  • Unscored —
    CVE-2005-3366

    PHP file inclusion vulnerability in index.php in PHP iCalendar 2.0a2 through 2.0.1 allows remote attackers to execute a…

  • Unscored —
    CVE-2005-3380

    Multiple interpretation error in Panda Titanium 2005 4.02.01 allows remote attackers to bypass virus scanning via a fil…

  • Unscored —
    CVE-2005-3377

    Multiple interpretation error in (1) McAfee Internet Security Suite 7.1.5 version 9.1.08 with the 4.4.00 engine and (2)…

  • Unscored —
    CVE-2005-3363 Public exploit

    SQL injection vulnerability in Saphp Lesson, possibly saphp Lesson1.1 and saphpLesson2.0, allows remote attackers to ex…

  • Unscored —
    CVE-2005-3385

    SQL injection vulnerability in Techno Dreams Mailing List script allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2005-3386

    SQL injection vulnerability in Techno Dreams Web Directory script allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2005-3372

    Multiple interpretation error in eTrust CA 7.0.1.4 with the 11.9.1 engine allows remote attackers to bypass virus scann…

  • Unscored —
    CVE-2005-3369 Public exploit

    Multiple SQL injection vulnerabilities in the Info-DB module (info_db.php) in Woltlab Burning Board 2.7 and earlier all…

  • Unscored —
    CVE-2005-3383

    SQL injection vulnerability in Techno Dreams Announcement script allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2005-3375

    Multiple interpretation error in Ikarus demo version allows remote attackers to bypass virus scanning via a file such a…

  • Unscored —
    CVE-2005-3376

    Multiple interpretation error in Kaspersky 5.0.372 allows remote attackers to bypass virus scanning via a file such as …

  • Unscored —
    CVE-2005-3379

    Multiple interpretation error in Trend Micro (1) PC-Cillin 2005 12.0.1244 with the 7.510.1002 engine and (2) OfficeScan…

  • Unscored —
    CVE-2005-3373

    Multiple interpretation error in Dr.Web 4.32b allows remote attackers to bypass virus scanning via a file such as BAT, …

  • Unscored —
    CVE-2005-3367

    Cross-site scripting (XSS) vulnerability in journal.php in SparkleBlog 2.1 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2005-3365

    Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2005-3378

    Multiple interpretation error in Norman 5.81 with the 5.83.02 engine allows remote attackers to bypass virus scanning v…

  • Unscored —
    CVE-2005-3370

    Multiple interpretation error in ArcaVir 2005 package 2005-06-21 allows remote attackers to bypass virus scanning via a…

  • Unscored —
    CVE-2005-3384

    SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2005-3361

    Cross-site scripting (XSS) vulnerability in forum/index.php in FlatNuke 2.5.6 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2005-2930

    Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36, as used in products …

    chmlib Debian
  • Unscored —
    CVE-2003-1233

    Pedestal Software Integrity Protection Driver (IPD) 1.3 and earlier allows privileged attackers, such as rootkits, to b…

  • Unscored —
    CVE-2002-2124

    The recvn and sendn functions in nylon 0.2 do not check when the recv function call returns 0, which allows remote atta…

  • Unscored —
    CVE-2005-3319

    The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 final and 4.4 before 4…

  • Unscored —
    CVE-2005-3247

    The SigComp UDVM in Ethereal 0.10.12 allows remote attackers to cause a denial of service (infinite loop) via unknown v…

  • Unscored —
    CVE-2005-3339

    Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors.

  • Unscored —
    CVE-2005-3331

    viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

    mgdiff Debian
  • Unscored —
    CVE-2005-3336

    SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2005-3337

    Multiple cross-site scripting (XSS) vulnerabilities in Mantis before 0.19.3 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2005-3334 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Flyspray 0.9.7 through 0.9.8 (devel) allows remote attackers t…

  • Unscored —
    CVE-2005-3325 Public exploit

    Multiple SQL injection vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.…

  • Unscored —
    CVE-2005-3320 Public exploit

    Cross-site scripting (XSS) vulnerability in SiteTurn Domain Manager Pro allows remote attackers to inject arbitrary web…