Archive
October 2005
Vulnerabilities first published in this month (UTC), newest first.
342 results · Feed
-
Unscored —
Multiple buffer overflows in AhnLab V3 AntiVirus V3Pro 2004 before 6.0.0.488, V3Net for Windows Server 6.0 before 6.0.0…
-
Unscored —
Splatt Forum 3.0 to 3.2 allows remote attackers to bypass authentication via unknown vectors.
-
Unscored —CVE-2005-3293 Public exploit
Xerver 4.17 allows remote attackers to (1) obtain source code of scripts via a request with a trailing "." (dot) or (2)…
-
Unscored —CVE-2005-3290 Public exploit
SQL injection vulnerability in Accelerated Mortgage Manager allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Stani's Python Editor (SPE) 0.7.5 is installed with world-writable permissions, which allows local users to gain privil…
-
Unscored —
The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of servi…
-
Unscored —CVE-2005-3285 Public exploit
Cross-site scripting (XSS) vulnerability in comersus_backoffice_searchItemForm.asp in Comersus BackOffice Plus allows r…
-
Unscored —
Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attachin…
-
Unscored —
Multiple integer overflows in OpenWBEM on SuSE Linux 9 allow remote attackers to execute arbitrary code via unknown vec…
-
Unscored —
Integer overflow in the openpsfile function in gsinterf.c for Jan Kybic BitMap Viewer (BMV) 1.2 allows local users to e…
-
Unscored —
Unspecified vulnerability in HP-UX B.11.23 on Itanium platforms allows local users to cause a denial of service due to …
-
Unscored —CVE-2005-3294 Public exploit
Typsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote attackers to cause a denial of service (cr…
-
Unscored —
PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to i…
-
Unscored —
Multiple buffer overflows in OpenWBEM on SuSE Linux 9 allow remote attackers to execute arbitrary code via unknown vect…
-
Unscored —
LSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users to corrupt /etc/passwd …
-
Unscored —
Multiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow user-assisted attackers …
-
Unscored —
The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell meta…
-
Unscored —CVE-2005-2122 EPSS 46%
Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitr…
-
Unscored —CVE-2005-2126 EPSS 14%
The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder …
-
Unscored —CVE-2005-2117 EPSS 38%
Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle ce…
-
Unscored —CVE-2005-2118 EPSS 48%
Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to …
-
Unscored —
A rule file in module-assistant before 0.9.10 causes a temporary file to be created insecurely, which allows local user…
-
Unscored —
The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-…
-
Unscored —
Cross-site scripting (XSS) vulnerability in thread.php for Zeroblog 1.1f and 1.2a allows remote attackers to inject arb…
-
Unscored —CVE-2005-3262 Public exploit
Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via fo…
-
Unscored —
The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial …
-
Unscored —
Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbit…
-
Unscored —CVE-2005-3259 Public exploit
Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbi…
-
Unscored —
Untrusted search path vulnerability in DiskMountNotify for Symantec Norton AntiVirus 9.0.3 allows local users to gain p…
-
Unscored —
Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary …
-
Unscored —
Race condition in ip_vs_conn_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, …
-
Unscored —
Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already…
-
Unscored —
The sys_get_thread_area function in process.c in Linux 2.6 before 2.6.12.4 and 2.6.13 does not clear a data structure b…
-
Unscored —
Buffer overflow vulnerability in the unicode_to_bytes in the Service Location Protocol (srvloc) dissector (packet-srvlo…
-
Unscored —
yiff server (yiff-server) 2.14.2 on Debian GNU/Linux runs as root and does not properly verify ownership of files that …
-
Unscored —
Exec in Linux kernel 2.6 does not properly clear posix-timers in multi-threaded environments, which results in a resour…
-
Unscored —
getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows rem…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to…
-
Unscored —
Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5…
-
Unscored —
The rose_rt_ioctl function in rose_route.c for Radionet Open Source Environment (ROSE) in Linux 2.6 kernels before 2.6.…