Skip to content

CVEs published in January 2005

147 vulnerabilities, 6 critical, 0 exploited.

gallery project galleryCross-site scripting (XSS) vulnerability in login.php in Gallery 2.0 Alpha allows remote...CVE-2005-02214.3 MediumJanuary 17, 2005
playmidi, mandrakesoft mandrake linux, mandrake linux corporate server +2 moreBuffer overflow in playmidi before 2.4 allows local users to execute arbitrary code.CVE-2005-0020Fix available7.2 HighJanuary 17, 2005
gatosBuffer overflow in the exported_display function in xatitv in gatos before 0.0.5 allows local...CVE-2005-0016Fix available7.2 HighJanuary 17, 2005
minisminis.php in Minis 0.2.1 allows remote attackers to cause a denial of service (infinite loop) via...CVE-2005-02945.0 MediumJanuary 16, 2005
squidThe WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a...CVE-2005-0095Fix availableEPSS 68.8%5.0 MediumJanuary 15, 2005
squidBuffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and...CVE-2005-0094Fix available5.0 MediumJanuary 15, 2005
sgi irixinpview in SGI IRIX allows local users to execute arbitrary commands via the SUN_TTSESSION_CMD...CVE-2005-01137.2 HighJanuary 14, 2005
microsoft ieInternet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning...CVE-2005-01102.6 LowJanuary 14, 2005
midnight commander commander, debian linux, redhat enterprise linux +3 more +5 moreBuffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers...CVE-2004-1176Fix available7.5 HighJanuary 14, 2005
midnight commander commander, debian linux, redhat enterprise linux +3 more +5 morefish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure...CVE-2004-1175Fix available7.5 HighJanuary 14, 2005
midnight commander commander, debian linux, redhat enterprise linux +3 more +5 moredirentry.c in Midnight Commander (mc) 4.5.55 and earlier allows attackers to cause a denial of...CVE-2004-1174Fix available5.0 MediumJanuary 14, 2005
midnight commander commander, debian linux, redhat enterprise linux +3 more +5 moreMidnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service...CVE-2004-1093Fix available5.0 MediumJanuary 14, 2005
midnight commander commander, debian linux, redhat enterprise linux +3 more +5 moreMidnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service...CVE-2004-1092Fix available5.0 MediumJanuary 14, 2005
midnight commander commander, debian linux, redhat enterprise linux +3 more +5 moreMidnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service...CVE-2004-1091Fix available5.0 MediumJanuary 14, 2005
midnight commander commander, debian linux, redhat enterprise linux +3 more +5 moreMidnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service...CVE-2004-1090Fix available5.0 MediumJanuary 14, 2005
midnight commander commander, debian linux, redhat enterprise linux +3 more +5 moreMidnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service ...CVE-2004-1009Fix available5.0 MediumJanuary 14, 2005
midnight commander commander, debian linux, redhat enterprise linux +3 more +5 moreMultiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to...CVE-2004-1005Fix available7.5 HighJanuary 14, 2005
midnight commander commander, debian linux, redhat enterprise linux +3 more +5 moreMultiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote...CVE-2004-1004Fix available7.5 HighJanuary 14, 2005
openbsdThe TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of...CVE-2005-07405.0 MediumJanuary 13, 2005
forumkitCross-site scripting (XSS) vulnerability in f.aspx in forumKIT 1.0 allows remote attackers to...CVE-2005-03814.3 MediumJanuary 13, 2005
mysql maxdbStack-based buffer overflow in the websql CGI program in MySQL MaxDB 7.5.00 allows remote...CVE-2005-01117.5 HighJanuary 13, 2005
vim development group vimThe (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create...CVE-2005-0069Fix available4.6 MediumJanuary 13, 2005
opera browserOpera 7.54 and earlier does not properly validate base64 encoded binary data in a data: (RFC 2397...CVE-2005-04565.0 MediumJanuary 12, 2005
sergey kiselev sgalleryPHP remote file inclusion vulnerability in SGallery 1.01 allows local and possibly remote...CVE-2005-03767.5 HighJanuary 12, 2005
bottomline webseries payment applicationThe change password functionality in Bottomline Webseries Payment Application does not require...CVE-2005-02883.6 LowJanuary 11, 2005
xshisenBuffer overflow in XShisen before 1.36 allows local users to execute arbitrary code via a long...CVE-2005-0117Fix available4.6 MediumJanuary 11, 2005
apache mod auth radiusApache mod_auth_radius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to...CVE-2005-0108Fix available5.0 MediumJanuary 11, 2005
squidThe NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of...CVE-2005-0097Fix availableEPSS 10.6%5.0 MediumJanuary 11, 2005
sco unixware, openserver +1 moreThe NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other...CVE-2004-10395.0 MediumJanuary 11, 2005
mpg123, suse linux +1 moreBuffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via...CVE-2004-0991Fix available7.5 HighJanuary 11, 2005
microsoft windows xp, windows 2003 server +1 moreThe Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the...CVE-2004-0897EPSS 42.8%10.0 HighJanuary 11, 2005
bottomline webseries payment applicationBottomline Webseries Payment Application allows remote attackers to read arbitrary files on the...CVE-2005-02875.0 MediumJanuary 10, 2005
woltlab burning bookSQL injection vulnerability in addentry.php in Woltlab Burning Book 1.0 Gold, 1.1.1e, and...CVE-2005-02847.5 HighJanuary 10, 2005
gnu mailmanmailman Cross-site scripting (XSS) vulnerabilityCVE-2004-1177Fix available4.3 MediumJanuary 10, 2005
mod dosevasive dosevasiveThe mod_dosevasive module 1.9 and earlier for Apache creates temporary files with predictable...CVE-2005-01825.0 MediumJanuary 6, 2005
university of cambridge eximBuffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained...CVE-2005-0022Fix available4.6 MediumJanuary 6, 2005
university of cambridge eximMultiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via ...CVE-2005-0021Public exploitFix available7.2 HighJanuary 6, 2005
namazuCross-site scripting (XSS) vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows...CVE-2004-1318Fix available4.3 MediumJanuary 6, 2005
libtiffInteger overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to...CVE-2004-1183Fix available5.1 MediumJanuary 6, 2005
david barrett qwikiwikiDirectory traversal vulnerability in index.php in QwikiWiki allows remote attackers to read...CVE-2005-0283Public exploit5.0 MediumJanuary 4, 2005
jowood productions soldner secret warsFormat string vulnerability in Soldner Secret Wars 30830 and earlier allows remote attackers to...CVE-2005-0280Public exploit7.5 HighJanuary 4, 2005
photopost php proMultiple cross-site scripting (XSS) vulnerabilities in showgallery.php in PhotoPost before 4.86...CVE-2005-0274Public exploit4.3 MediumJanuary 3, 2005
photopost reviewpost php proMultiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers...CVE-2005-0271Public exploit7.5 HighJanuary 3, 2005
flatnukeDirect code injection vulnerability in FlatNuke 2.5.1 allows remote attackers to execute...CVE-2005-02687.5 HighJanuary 3, 2005
gfi mailessentials, mailsecurity +1 moreA bug in the HTML parser in a certain Microsoft HTML library, as used in various third party...CVE-2004-131210.0 HighJanuary 3, 2005
toshiaki kanosue htmlheadlinehtmlheadline before 21.8 allows local users to overwrite arbitrary files via a symlink attack on...CVE-2004-1181Fix available4.6 MediumJanuary 3, 2005
sugarcrmCross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote attackers to...CVE-2005-02664.3 MediumJanuary 1, 2005