Archive
October 2005
Vulnerabilities first published in this month (UTC), newest first.
342 results · Feed
-
Unscored —
Stack-based buffer overflow in the NMAP Agent for Novell NetMail 3.52C and possibly earlier versions allows local users…
-
Unscored —
Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute…
-
Unscored —
** SPLIT ** The jlucaller program in LiveUpdate for Symantec Norton AntiVirus 9.0.3 on Macintosh runs setuid when execu…
-
Unscored —CVE-2005-3257 Public exploit
The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local…
-
Unscored —
The CGIwrap program before 3.9 on Debian GNU/Linux uses an incorrect minimum value of 100 for a UID to determine whethe…
-
Unscored —
The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have add…
-
Unscored —
Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to exe…
-
Unscored —
The (1) cgiwrap and (2) php-cgiwrap packages before 3.9 in Debian GNU/Linux provide access to debugging CGIs under the …
-
Unscored —
pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when convert…
-
Unscored —
The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SS…
-
Unscored —
Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include …
-
Unscored —
Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbi…
-
Unscored —
Unknown vulnerability in Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors related…
-
Unscored —
Multiple interpretation error in unspecified versions of McAfee Antivirus allows remote attackers to bypass virus detec…
-
Unscored —
Planet Technology Corp FGSW2402RS switch with firmware 1.2 has a default password, which allows attackers with physical…
-
Unscored —CVE-2005-3208 Public exploit
Multiple SQL injection vulnerabilities in (1) aeNovo, (2) aeNovoShop and (3) aeNovoWYSI allow remote attackers to execu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script o…
-
Unscored —
Multiple interpretation error in unspecified versions of Norman Virus Control Antivirus allows remote attackers to bypa…
-
Unscored —
Multiple interpretation error in unspecified versions of TheHacker allows remote attackers to bypass virus detection vi…
-
Unscored —
Multiple interpretation error in unspecified versions of BitDefender Antivirus allows remote attackers to bypass virus …
-
Unscored —
Multiple interpretation error in unspecified versions of Ikarus AntiVirus allows remote attackers to bypass virus detec…
-
Unscored —
Multiple interpretation error in unspecified versions of ClamAV Antivirus allows remote attackers to bypass virus detec…
-
Unscored —
Multiple interpretation error in unspecified versions of Kaspersky Antivirus allows remote attackers to bypass virus de…
-
Unscored —
Multiple unspecified vulnerabilities in Solaris 10 SCTP Socket Option Processing allows local users to cause a denial o…
-
Unscored —
Multiple buffer overflows in ALZip 6.12 (Korean), 6.1 (International), and 5.52 (English) allow remote attackers to exe…
-
Unscored —
Cross-site scripting (XSS) vulnerability in iSQL*Plus (iSQLPlus) in Oracle9i Database Server Release 2 9.0.2.4 allows r…
-
Unscored —
Multiple interpretation error in unspecified versions of Grisoft AVG Antivirus allows remote attackers to bypass virus …
-
Unscored —
Multiple interpretation error in unspecified versions of Trustix Antivirus allows remote attackers to bypass virus dete…
-
Unscored —CVE-2005-3236 Public exploit
Multiple SQL injection vulnerabilities in Cyphor 0.19 allow remote attackers to execute arbitrary SQL and obtain admini…
-
Unscored —
Multiple interpretation error in unspecified versions of VBA32 Antivirus allows remote attackers to bypass virus detect…
-
Unscored —
Multiple interpretation error in unspecified versions of ArcaVir Antivirus allows remote attackers to bypass virus dete…
-
Unscored —
Stack-based buffer overflow in PWIWrapper.dll for Webroot Desktop Firewall before 1.3.0build52 allows local users to ex…
-
Unscored —CVE-2005-3231 EPSS 14%
Multiple interpretation error in unspecified versions of CAT Quick Heal allows remote attackers to bypass virus detecti…
-
Unscored —CVE-2005-3237 Public exploit
Cross-site scripting (XSS) vulnerability in Cyphor 0.19 allows remote attackers to inject arbitrary web script or HTML …
-
Unscored —
Multiple interpretation error in unspecified versions of NOD32 Antivirus allows remote attackers to bypass virus detect…
-
Unscored —
Multiple interpretation error in unspecified versions of Sophos Antivirus allows remote attackers to bypass virus detec…
-
Unscored —CVE-2005-3200 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Utopia News Pro (UNP) 1.1.3 and 1.1.4 allow remote attackers to …
-
Unscored —
Multiple SQL injection vulnerabilities in aradmin.asp for aspReady FAQ allow remote attackers to execute arbitrary SQL …
-
Unscored —
The manual installation of Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 stores the SYS password in install.lst in plaintex…
-
Unscored —
Multiple interpretation error in unspecified versions of UNA Antivirus allows remote attackers to bypass virus detectio…