Skip to content
OpenAdvisories

Archive

6 October 2005

Vulnerabilities first published on this day (UTC), newest first.

← September 2005 2005 / October /6 November 2005 →
  1. 1 
  2. 2 
  3. 3 
  4. 411
  5. 525
  6. 621
  7. 74
  8. 8 
  9. 9 
  10. 10 
  11. 1110
  12. 122
  13. 139
  14. 1447
  15. 15 
  16. 16 
  17. 173
  18. 187
  19. 19 
  20. 2022
  21. 215
  22. 22 
  23. 2324
  24. 242
  25. 2580
  26. 262
  27. 2738
  28. 282
  29. 2925
  30. 302
  31. 311
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Unscored —
    CVE-2005-3175

    Microsoft Windows 2000 before Update Rollup 1 for SP4 allows a local administrator to unlock a computer even if it has …

  • Unscored —
    CVE-2005-3173

    Microsoft Windows 2000 before Update Rollup 1 for SP4 does not apply group policies if the user logs on using UPN crede…

  • Unscored —
    CVE-2005-3118

    Mason before 1.0.0 does not install the init script after the user uses Mason to configure a firewall, which causes the…

    mason Debian
  • Medium 5.0
    CVE-2005-3170

    The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets…

  • Low —
    CVE-2005-3164

    Apache Tomcat AJP Connector Information Leak

    The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used in Hitachi Cosminexus Application Server and standalone, does not properly handle when a connection is broken before request body data is sent in a POST request, which ca…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2005-3167

    Incomplete blacklist vulnerability in MediaWiki before 1.4.11 does not properly remove certain CSS inputs (HTML inline …

    mediawiki Debian
  • Unscored —
    CVE-2005-3158

    SQL injection vulnerability in messages.php in PHP-Fusion 6.00.106 and 6.00.107 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2005-3160

    Multiple SQL injection vulnerabilities in photogallery.php in PHP-Fusion allow remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2005-3176

    Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services cli…

  • Unscored —
    CVE-2005-3171

    Microsoft Windows 2000 before Update Rollup 1 for SP4 records Event ID 1704 to indicate that Group Policy security sett…

  • Unscored —
    CVE-2005-3161

    Multiple SQL injection vulnerabilities in PHP-Fusion before 6.00.110 allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2005-3172

    The WideCharToMultiByte function in Microsoft Windows 2000 before Update Rollup 1 for SP4 does not properly convert str…

  • Unscored —
    CVE-2005-3163

    Unspecified vulnerability in Polipo 0.9.8 and earlier allows attackers to read files outside of the web root.

  • Unscored —
    CVE-2005-3165

    Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrar…

    mediawiki Debian
  • Unscored —
    CVE-2005-3157 Public exploit

    SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2005-3174

    Microsoft Windows 2000 before Update Rollup 1 for SP4 allows users to log on to the domain, even when their password ha…

  • Unscored —
    CVE-2005-3169

    Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, doe…

  • Unscored —
    CVE-2005-3177

    CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in f…

  • Unscored —
    CVE-2005-3159 Public exploit

    SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2005-3168

    The SECEDIT command on Microsoft Windows 2000 before Update Rollup 1 for SP4, when using a security template to set Acc…

  • Unscored —
    CVE-2005-3166

    Unspecified vulnerability in "edit submission handling" for MediaWiki 1.4.x before 1.4.10 and 1.3.x before 1.3.16 allow…

    mediawiki Debian