Skip to content
OpenAdvisories

Archive

October 2005

Vulnerabilities first published in this month (UTC), newest first.

← September 2005 2005 / October November 2005 →
  1. 1 
  2. 2 
  3. 3 
  4. 411
  5. 525
  6. 621
  7. 74
  8. 8 
  9. 9 
  10. 10 
  11. 1110
  12. 122
  13. 139
  14. 1447
  15. 15 
  16. 16 
  17. 173
  18. 187
  19. 19 
  20. 2022
  21. 215
  22. 22 
  23. 2324
  24. 242
  25. 2580
  26. 262
  27. 2738
  28. 282
  29. 2925
  30. 302
  31. 311
All Critical High Medium Low Exploited only Public exploit

342 results · Feed

  • Unscored —
    CVE-2005-3218

    Multiple interpretation error in unspecified versions of Dr.Web Antivirus allows remote attackers to bypass virus detec…

  • Unscored —
    CVE-2005-3198

    Webroot Desktop Firewall before 1.3.0build52 allows local users to disable the firewall, even when password protection …

  • Unscored —
    CVE-2005-3219

    Multiple interpretation error in unspecified versions of Avira Antivirus allows remote attackers to bypass virus detect…

  • Unscored —
    CVE-2005-3207 Public exploit EPSS 20%

    The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS list…

  • Unscored —
    CVE-2005-3201 Public exploit

    SQL injection vulnerability in news.php for Utopia News Pro (UNP) 1.1.3, when magic_quotes_gpc is disabled and register…

  • Unscored —
    CVE-2005-3202 Public exploit EPSS 11%

    Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 allow remote attackers…

  • Unscored —
    CVE-2005-3225

    Multiple interpretation error in unspecified versions of (1) eTrust-Iris and (2) eTrust-Vet Antivirus allows remote att…

  • Unscored —
    CVE-2005-3230

    Multiple interpretation error in unspecified versions of Panda Antivirus allows remote attackers to bypass virus detect…

  • Unscored —
    CVE-2005-3217

    Multiple interpretation error in unspecified versions of Symantec Antivirus allows remote attackers to bypass virus det…

  • Unscored —
    CVE-2005-3206 Public exploit EPSS 22%

    iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2005-3224

    Multiple interpretation error in unspecified versions of AntiVir Antivirus allows remote attackers to bypass virus dete…

  • Unscored —
    CVE-2005-3209

    Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) contr…

  • Unscored —
    CVE-2005-3214

    Multiple interpretation error in unspecified versions of Avast Antivirus allows remote attackers to bypass virus detect…

  • Unscored —
    CVE-2005-3221

    Multiple interpretation error in unspecified versions of Fortinet Antivirus allows remote attackers to bypass virus det…

  • Unscored —
    CVE-2005-3213

    Multiple interpretation error in unspecified versions of F-Prot Antivirus allows remote attackers to bypass virus detec…

  • Unscored —
    CVE-2005-3239

    The OLE2 unpacker in clamd in Clam AntiVirus (ClamAV) 0.87-1 allows remote attackers to cause a denial of service (segm…

    clamav Debian
  • Unscored —
    CVE-2005-3223

    Multiple interpretation error in unspecified versions of Rising Antivirus allows remote attackers to bypass virus detec…

  • Unscored —
    CVE-2005-3235

    Multiple interpretation error in unspecified versions of Proland Protector Plus 2000 Antivirus allows remote attackers …

  • Unscored —
    CVE-2005-2967 Public exploit

    Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 all…

  • Unscored —
    CVE-2005-2661 Public exploit EPSS 12%

    Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows …

    up-imapproxy Debian
  • Unscored —
    CVE-2005-1985 EPSS 37%

    The Client Service for NetWare (CSNW) on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, a…

  • Unscored —
    CVE-2005-1987 EPSS 43%

    Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows…

  • Unscored —
    CVE-2005-3190 Public exploit EPSS 65%

    Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows …

  • Unscored —
    CVE-2005-3185

    Stack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libc…

    curl wget Debian
  • Unscored —
    CVE-2005-2943 Public exploit EPSS 15%

    Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a lo…

  • Unscored —
    CVE-2005-2963

    The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for al…

  • Unscored —
    CVE-2005-2992

    arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a differ…

    arc Debian
  • Unscored —
    CVE-2005-2120 Public exploit EPSS 62%

    Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1…

  • Unscored —
    CVE-2005-2933

    Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-…

    uw-imap Debian
  • Unscored —
    CVE-2005-3183

    The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers to cause a denial of s…

  • Unscored —
    CVE-2005-2715 Public exploit EPSS 60%

    Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Busi…

  • Unscored —
    CVE-2005-1980 Public exploit EPSS 33%

    Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC servi…

  • Unscored —
    CVE-2005-1978 Public exploit EPSS 53%

    COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote atta…

  • Unscored —
    CVE-2005-1979 Public exploit EPSS 33%

    Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC servi…

  • Unscored —
    CVE-2005-3181

    The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses a…

  • Unscored —
    CVE-2005-3179

    drm.c in Linux kernel 2.6.10 to 2.6.13 creates a debug file in sysfs with world-readable and world-writable permissions…

  • Unscored —
    CVE-2005-3119

    Memory leak in the request_key_auth_destroy function in request_key_auth in Linux kernel 2.6.10 up to 2.6.13 allows loc…

  • Unscored —
    CVE-2005-3180

    The Orinoco driver (orinoco.c) in Linux kernel 2.6.13 and earlier does not properly clear memory from a previously used…

  • Unscored —
    CVE-2005-2925 Public exploit

    runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacha…

  • Unscored —
    CVE-2005-2128 EPSS 40%

    QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an …