Skip to content
OpenAdvisories

Archive

October 2005

Vulnerabilities first published in this month (UTC), newest first.

342 results · Feed

  • Unscored —

    Stack-based buffer overflow in the NMAP Agent for Novell NetMail 3.52C and possibly earlier versions allows local users…

  • Unscored —

    Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute…

  • Unscored —

    ** SPLIT ** The jlucaller program in LiveUpdate for Symantec Norton AntiVirus 9.0.3 on Macintosh runs setuid when execu…

  • Unscored —
    CVE-2005-3257 Public exploit

    The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local…

  • Unscored —

    The CGIwrap program before 3.9 on Debian GNU/Linux uses an incorrect minimum value of 100 for a UID to determine whethe…

  • Unscored —

    The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have add…

  • Unscored —
    CVE-2005-3252 Public exploit EPSS 84%

    Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to exe…

  • Unscored —

    The (1) cgiwrap and (2) php-cgiwrap packages before 3.9 in Debian GNU/Linux provide access to debugging CGIs under the …

  • Unscored —

    pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when convert…

  • Unscored —

    The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SS…

  • Unscored —

    Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include …

  • Unscored —
    CVE-2005-3120 Public exploit EPSS 23%

    Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbi…

  • Unscored —

    Unknown vulnerability in Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors related…

  • Unscored —

    Multiple interpretation error in unspecified versions of McAfee Antivirus allows remote attackers to bypass virus detec…

  • Unscored —

    Planet Technology Corp FGSW2402RS switch with firmware 1.2 has a default password, which allows attackers with physical…

  • Unscored —
    CVE-2005-3208 Public exploit

    Multiple SQL injection vulnerabilities in (1) aeNovo, (2) aeNovoShop and (3) aeNovoWYSI allow remote attackers to execu…

  • Unscored —
    CVE-2005-3204 Public exploit EPSS 21%

    Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script o…

  • Unscored —

    Multiple interpretation error in unspecified versions of Norman Virus Control Antivirus allows remote attackers to bypa…

  • Unscored —

    Multiple interpretation error in unspecified versions of TheHacker allows remote attackers to bypass virus detection vi…

  • Unscored —

    Multiple interpretation error in unspecified versions of BitDefender Antivirus allows remote attackers to bypass virus …

  • Unscored —

    Multiple interpretation error in unspecified versions of Ikarus AntiVirus allows remote attackers to bypass virus detec…

  • Unscored —

    Multiple interpretation error in unspecified versions of ClamAV Antivirus allows remote attackers to bypass virus detec…

  • Unscored —

    Multiple interpretation error in unspecified versions of Kaspersky Antivirus allows remote attackers to bypass virus de…

  • Unscored —

    Multiple unspecified vulnerabilities in Solaris 10 SCTP Socket Option Processing allows local users to cause a denial o…

  • Unscored —

    Multiple buffer overflows in ALZip 6.12 (Korean), 6.1 (International), and 5.52 (English) allow remote attackers to exe…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in iSQL*Plus (iSQLPlus) in Oracle9i Database Server Release 2 9.0.2.4 allows r…

  • Unscored —

    Multiple interpretation error in unspecified versions of Grisoft AVG Antivirus allows remote attackers to bypass virus …

  • Unscored —

    Multiple interpretation error in unspecified versions of Trustix Antivirus allows remote attackers to bypass virus dete…

  • Unscored —
    CVE-2005-3236 Public exploit

    Multiple SQL injection vulnerabilities in Cyphor 0.19 allow remote attackers to execute arbitrary SQL and obtain admini…

  • Unscored —

    Multiple interpretation error in unspecified versions of VBA32 Antivirus allows remote attackers to bypass virus detect…

  • Unscored —

    Multiple interpretation error in unspecified versions of ArcaVir Antivirus allows remote attackers to bypass virus dete…

  • Unscored —

    Stack-based buffer overflow in PWIWrapper.dll for Webroot Desktop Firewall before 1.3.0build52 allows local users to ex…

  • Unscored —
    CVE-2005-3231 EPSS 14%

    Multiple interpretation error in unspecified versions of CAT Quick Heal allows remote attackers to bypass virus detecti…

  • Unscored —
    CVE-2005-3237 Public exploit

    Cross-site scripting (XSS) vulnerability in Cyphor 0.19 allows remote attackers to inject arbitrary web script or HTML …

  • Unscored —

    Multiple interpretation error in unspecified versions of NOD32 Antivirus allows remote attackers to bypass virus detect…

  • Unscored —

    Multiple interpretation error in unspecified versions of Sophos Antivirus allows remote attackers to bypass virus detec…

  • Unscored —
    CVE-2005-3200 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Utopia News Pro (UNP) 1.1.3 and 1.1.4 allow remote attackers to …

  • Unscored —

    Multiple SQL injection vulnerabilities in aradmin.asp for aspReady FAQ allow remote attackers to execute arbitrary SQL …

  • Unscored —

    The manual installation of Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 stores the SYS password in install.lst in plaintex…

  • Unscored —

    Multiple interpretation error in unspecified versions of UNA Antivirus allows remote attackers to bypass virus detectio…