CVEs published in January 2005
147 vulnerabilities, 6 critical, 0 exploited.
- mozilla firefoxFirefox before 1.0 does not properly distinguish between user-generated and synthetic click...2.6 Low
- datarescue idaStack-based buffer overflow in DataRescue Interactive Disassembler (IDA) Pro 4.7 allows attackers...7.5 High
- squirrelmailPHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote...7.5 High
- gnome evolution, debian linux +1 moreInteger overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote...9.8 Critical
- ejoy and hu yong zhconzhcon before 0.2 does not drop privileges before reading a user configuration file, which allows...2.1 Low
- kmint21 software golden ftp serverBuffer overflow in Golden FTP Server Pro (goldenftpd) 2.x allows remote attackers to execute...7.5 High
- isync mrouterBuffer overflow in the (1) -v and (2) -a switches in mRouter in iSync 1.5 in Mac OS X 10.3.7 and...7.2 High
- berlios konversationThe Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as...5.0 Medium
- berlios konversationCertain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands...7.5 High
- berlios konversationThe Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC...7.5 High
- 3com 3crwe454g72The web-based administrative interface for 3Com OfficeConnect Wireless 11g Access Point (AP) 1.00...5.0 Medium
- linux kernel, redhat enterprise linux +1 moreMultiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VM_IO...7.2 High
- ethereal group etherealBuffer overflow in the X11 dissector in Ethereal 0.8.10 through 0.10.8 allows remote attackers to...7.5 High
- gnu enscriptEnscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to...7.5 High
- gnu enscript, redhat fedora core, sgi propack +1 more +3 moreThe EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute...4.6 Medium
- yamtMultiple buffer overflows in YaMT before 0.5_2 allow attackers to execute arbitrary code via the ...7.5 High
- yamtMultiple directory traversal vulnerabilities in YaMT before 0.5_2 allow attackers to overwrite...5.0 Medium
- jsboardDirectory traversal vulnerability in session.php in JSBoard 2.0.9 and earlier allows remote...5.0 Medium
- linux kernelThe coda_pioctl function in the coda functionality (pioctl.c) for Linux kernel 2.6.9 and 2.4.x...2.1 Low
- mysql maxdbThe sapdbwa_GetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21,...5.0 Medium
- mysql maxdbMySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a...5.0 Medium
- linux kernel, avaya converged communications server, intuity audix +12 more +14 moreThe 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not...2.1 Low
- redhat enterprise linux, suse linux, linux kernel +1 more +3 moreUnknown vulnerability in the system call filtering code in the audit subsystem for Red Hat...2.1 Low
- conectiva linux, linux kernel, avaya converged communications server +14 more +16 moreRace condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux...6.2 Medium
- linux kernel, redhat enterprise linux, enterprise linux desktop +2 moreUnknown vulnerability in the Linux kernel before 2.4.23, on the AMD AMD64 and Intel EM64T...2.1 Low
- xtrlockBuffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash...4.6 Medium
- crosswire bible society sworddiatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell...7.5 High
- realnetworks realplayer, realone player +1 moreOff-by-one buffer overflow in the processing of tags in Real Metadata Package (RMP) files in...5.1 Medium
- cisco iosCisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service (ITS),...5.0 Medium
- alexander siegel golddigMultiple buffer overflows in golddig 2.0 and earlier allow local users to execute arbitrary code...4.6 Medium
- No product listedhelvis 1.8h2_1 and earlier allows local users to delete arbitrary files via the elvprsv setuid...2.1 Low
- helvishelvis 1.8h2_1 and earlier allows local users to recover and read the files of other users via...2.1 Low
- helvishelvis 1.8h2_1 and earlier stores recovery files in world readable directories with world...2.1 Low
- squidMemory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote...5.0 Medium
- gnu mailman, ubuntu linux +1 moreThe 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error...5.0 Medium
- tcpThe original design of TCP does not check that the TCP sequence number in an ICMP error message...10.0 High
- apple itunesBuffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long...7.5 High
- dilloFormat string vulnerability in the a_Interface_msg function in Dillo before 0.8.3-r4 allows...7.5 High
- gentoo poppassd pampoppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user...10.0 High
- linux kernel, redhat enterprise linux, enterprise linux desktop +1 more +3 moreRace condition in the page fault handler (fault.c) for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29...6.9 Medium
- xpdfBuffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier...7.5 High
- imagemagick, debian linux, graphicsmagick +1 more +3 moreHeap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions...7.5 High
- oracle mysql, debian linux, mariadb +2 moreThe mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and...4.6 Medium
- oracle database serverSQL injection vulnerability in Oracle Database 9i and 10g allows remote attackers to execute...7.5 High
- awstatsAWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands...7.5 High
- novell groupwise, groupwise webaccess +1 more** DISPUTED ** NOTE: this issue has been disputed by the vendor. The error module in Novell...5.0 Medium
- inca nprotect gameguardnpptnt2.sys in nProtect Gameguard provides unrestricted I/O to any process that calls it, which...4.6 Medium
- php gift registry phpgiftregMultiple SQL injection vulnerabilities in index.php in PHP Gift Registry (phpGiftReg) 1.4.0, and...7.5 High
- netgear fvs318Cross-site scripting (XSS) vulnerability in the log viewer in NETGEAR FVS318 running firmware 2.4...4.3 Medium
- netgear fvs318NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to...7.5 High
- Show moreLoading…