Skip to content
OpenAdvisories

Archive

October 2005

Vulnerabilities first published in this month (UTC), newest first.

← September 2005 2005 / October November 2005 →
  1. 1 
  2. 2 
  3. 3 
  4. 411
  5. 525
  6. 621
  7. 74
  8. 8 
  9. 9 
  10. 10 
  11. 1110
  12. 122
  13. 139
  14. 1447
  15. 15 
  16. 16 
  17. 173
  18. 187
  19. 19 
  20. 2022
  21. 215
  22. 22 
  23. 2324
  24. 242
  25. 2580
  26. 262
  27. 2738
  28. 282
  29. 2925
  30. 302
  31. 311
All Critical High Medium Low Exploited only Public exploit

342 results · Feed

  • Unscored —
    CVE-2005-3155 Public exploit EPSS 64%

    Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execut…

  • Unscored —
    CVE-2005-3137

    The (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow local users to overwrite arbitrary files via a sy…

  • Unscored —
    CVE-2005-3151

    Buffer overflow in blenderplay in Blender Player 2.37a allows attackers to execute arbitrary code via a long command li…

    blender Debian
  • Unscored —
    CVE-2005-3149

    Uim 0.4.x before 0.4.9.1 and 0.5.0 and earlier does not properly handle the LIBUIM_VANILLA environment variable when a …

    uim Debian
  • Unscored —
    CVE-2005-3152 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.3 allow remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-3144

    httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service via long HTTP headers.

  • Unscored —
    CVE-2005-3153

    login.php in myBloggie 2.1.3 beta and earlier allows remote attackers to bypass a whitelist regular expression and cond…

  • Unscored —
    CVE-2005-2960

    cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used …

  • Unscored —
    CVE-2005-2961 Public exploit

    Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option …

  • Unscored —
    CVE-2005-2758 EPSS 13%

    Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote a…

  • Unscored —
    CVE-2005-2966

    The Python SVG import plugin (diasvg_import.py) for DIA 0.94 and earlier allows user-assisted attackers to execute arbi…

    dia Debian
  • Unscored —
    CVE-2005-3127 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in lucidCMS 1.0.11 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2005-3133 Public exploit

    Multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earl…

  • Unscored —
    CVE-2005-3130 Public exploit

    SQL injection vulnerability in lucidCMS 1.0.11 allows remote attackers to execute arbitrary SQL commands via the login …

  • Unscored —
    CVE-2005-3131 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possib…

  • Unscored —
    CVE-2005-3136

    Directory traversal vulnerability in Virtools Web Player 3.0.0.100 and earlier allows remote attackers to overwrite arb…

  • Unscored —
    CVE-2005-3132

    MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain …

  • Unscored —
    CVE-2005-3129

    Cross-site request forgery (CSRF) vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform una…

  • Unscored —
    CVE-2005-3134

    Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading t…

  • Unscored —
    CVE-2005-3135 Public exploit

    Buffer overflow in Virtools Web Player 3.0.0.100 and earlier allows remote attackers to execute arbitrary code via a lo…

  • Unscored —
    CVE-2005-3128 Public exploit Scanner template

    Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote at…

  • Unscored —
    CVE-2005-2804 Public exploit

    Integer overflow in the registry parsing code in GroupWise 6.5.3, and possibly earlier version, allows remote attackers…