Skip to content
OpenAdvisories

Archive

23 November 2005

Vulnerabilities first published on this day (UTC), newest first.

19 results · Feed

  • Unscored —

    Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX (eix) before 0.5.0_pre2 allows local users to overwri…

  • Unscored —

    Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict a…

  • Unscored —

    The ptrace functionality (ptrace.c) in Linux kernel 2.6 before 2.6.14.2, using CLONE_THREAD, does not use the thread gr…

  • Unscored —

    The auto-reap of child processes in Linux kernel 2.6 before 2.6.15 includes processes with ptrace attached, which leads…

  • Unscored —

    Unspecified vulnerability in in.named in Solaris 9 allows attackers to cause a denial of service via unknown manipulati…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allow remote attackers to…

  • Unscored —

    Multiple buffer overflows in IPUpdate 1.1 might allow attackers to execute arbitrary code via (1) memmcat in the memm m…

  • Unscored —

    Unspecified vulnerability in xterm for HP-UX 11.00, 11.11, and 11.23 allows local users to gain privileges via unknown …

  • Unscored —

    PHP remote file inclusion vulnerability in pollvote.php in PollVote allows remote attackers to include arbitrary files …

  • Unscored —

    Unspecified vulnerability in MyBulletinBoard (MyBB) before 1.0 PR2 Rev 686 allows attackers to cause a denial of servic…

  • Unscored —

    MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allows remote attackers to delete or move private messages (PM) via modified fie…

  • Unscored —
    CVE-2005-3769 Public exploit

    SQL injection vulnerability in files.php in PHP Download Manager 1.1.3 and earlier allows remote attackers to execute a…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.4 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2005-3774 Public exploit EPSS 18%

    Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP pa…

  • Unscored —

    Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used…

  • Unscored —

    Unspecified vulnerability in Joomla! before 1.0.4 has unknown impact and attack vectors, related to "Potential misuse o…

  • Unscored —

    Multiple SQL injection vulnerabilities in Joomla! before 1.0.4 allow remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2005-3770 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PHP-Post (PHPp) 1.0 allow remote attackers to inject arbitrary w…

  • Unscored —

    fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify …