Skip to content
OpenAdvisories

Archive

20 October 2005

Vulnerabilities first published on this day (UTC), newest first.

← September 2005 2005 / October /20 November 2005 →
  1. 1 
  2. 2 
  3. 3 
  4. 411
  5. 525
  6. 621
  7. 74
  8. 8 
  9. 9 
  10. 10 
  11. 1110
  12. 122
  13. 139
  14. 1447
  15. 15 
  16. 16 
  17. 173
  18. 187
  19. 19 
  20. 2022
  21. 215
  22. 22 
  23. 2324
  24. 242
  25. 2580
  26. 262
  27. 2738
  28. 282
  29. 2925
  30. 302
  31. 311
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2005-3121

    A rule file in module-assistant before 0.9.10 causes a temporary file to be created insecurely, which allows local user…

    module-assistant Debian
  • Unscored —
    CVE-2005-3275

    The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-…

  • Unscored —
    CVE-2005-3264

    Cross-site scripting (XSS) vulnerability in thread.php for Zeroblog 1.1f and 1.2a allows remote attackers to inject arb…

  • Unscored —
    CVE-2005-3262 Public exploit

    Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via fo…

  • Unscored —
    CVE-2005-3258

    The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial …

  • Unscored —
    CVE-2005-3263

    Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2005-3259 Public exploit

    Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbi…

  • Unscored —
    CVE-2005-3270

    Untrusted search path vulnerability in DiskMountNotify for Symantec Norton AntiVirus 9.0.3 allows local users to gain p…

  • Unscored —
    CVE-2005-3182

    Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2005-3274

    Race condition in ip_vs_conn_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, …

  • Unscored —
    CVE-2005-3272

    Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already…

  • Unscored —
    CVE-2005-3276

    The sys_get_thread_area function in process.c in Linux 2.6 before 2.6.12.4 and 2.6.13 does not clear a data structure b…

  • Unscored —
    CVE-2005-3184

    Buffer overflow vulnerability in the unicode_to_bytes in the Service Location Protocol (srvloc) dissector (packet-srvlo…

  • Unscored —
    CVE-2005-3268

    yiff server (yiff-server) 2.14.2 on Debian GNU/Linux runs as root and does not properly verify ownership of files that …

  • Unscored —
    CVE-2005-3271

    Exec in Linux kernel 2.6 does not properly clear posix-timers in multi-threaded environments, which results in a resour…

  • Unscored —
    CVE-2005-3261

    getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows rem…

  • Unscored —
    CVE-2005-3260

    Multiple cross-site scripting (XSS) vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to…

  • Unscored —
    CVE-2005-3269

    Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5…

  • Unscored —
    CVE-2005-3273

    The rose_rt_ioctl function in rose_route.c for Radionet Open Source Environment (ROSE) in Linux 2.6 kernels before 2.6.…

  • Unscored —
    CVE-2005-2469

    Stack-based buffer overflow in the NMAP Agent for Novell NetMail 3.52C and possibly earlier versions allows local users…

  • Unscored —
    CVE-2005-2971

    Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute…

  • Unscored —
    CVE-2005-2759

    ** SPLIT ** The jlucaller program in LiveUpdate for Symantec Norton AntiVirus 9.0.3 on Macintosh runs setuid when execu…