Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
March

CVEs published in March 2005

343 vulnerabilities, 11 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

cpg-nuke cpg dragonfly cmsMultiple cross-site scripting (XSS) vulnerabilities in CPG Dragonfly 9.0.2.0 allow remote...CVE-2005-09144.3 MediumMarch 26, 2005
nukebookmarksmarks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to obtain sensitive...CVE-2005-09005.0 MediumMarch 26, 2005
magicscripts e-store kit-2Cross-site scripting (XSS) vulnerability in downloadform.php in E-Store Kit-2 PayPal Edition...CVE-2005-08984.3 MediumMarch 26, 2005
dream4 koobi cmsSQL injection vulnerability in Dream4 Koobi CMS 4.2.3 allows remote attackers to execute...CVE-2005-0890Public exploit7.5 HighMarch 26, 2005
michael dean double choco latteMultiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0...CVE-2005-08884.3 MediumMarch 26, 2005
invision power services boardCross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote...CVE-2005-0886Public exploit4.3 MediumMarch 26, 2005
xmb forum xmbMultiple cross-site scripting (XSS) vulnerabilities in XMB Forum 1.9.1 allow remote attackers to...CVE-2005-08854.3 MediumMarch 26, 2005
digitalhiveDigitalHive 2.0 allows remote attackers to re-install the product by directly accessing the...CVE-2005-08847.5 HighMarch 26, 2005
birdblogSQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to...CVE-2005-08827.5 HighMarch 26, 2005
vortex portal portalcontent.php in Vortex Portal allows remote attackers to obtain sensitive information via an...CVE-2005-08805.0 MediumMarch 26, 2005
vortex portal portalPHP remote file include vulnerability in (1) content.php and (2) index.php for Vortex Portal...CVE-2005-0879Public exploit7.5 HighMarch 26, 2005
thekelleys dnsmasqDnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that...CVE-2005-0877Fix available7.5 HighMarch 26, 2005
dnsmasqOff-by-one buffer overflow in Dnsmasq before 2.21 may allow attackers to execute arbitrary code...CVE-2005-0876Fix available5.0 MediumMarch 26, 2005
cerulean studios trillianMultiple buffer overflows in the Yahoo plug-in for Trillian 2.0, 3.0, and 3.1 allow remote web...CVE-2005-08755.0 MediumMarch 26, 2005
cerulean studios trillianMultiple buffer overflows in the (1) AIM, (2) MSN, (3) RSS, and other plug-ins for Trillian 2.0...CVE-2005-08745.0 MediumMarch 26, 2005
oracle 10g reports serverMultiple cross-site scripting (XSS) vulnerabilities in test.jsp in Oracle Reports Server 10g (9.0...CVE-2005-0873Public exploitEPSS 11.0%4.3 MediumMarch 26, 2005
phpbb group phpbbCross-site scripting (XSS) vulnerability in calendar_scheduler.php in the Topic Calendar 1.0.1...CVE-2005-0872Public exploit4.3 MediumMarch 26, 2005
phpbb group phpbbcalendar_scheduler.php in Topic Calendar 1.0.1 module for phpBB, when running on a Microsoft IIS...CVE-2005-08715.0 MediumMarch 26, 2005
phpsysinfoMultiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is...CVE-2005-0870Public exploitFix available4.3 MediumMarch 26, 2005
phpsysinfophpSysInfo 2.3 allows remote attackers to obtain sensitive information via a direct request to (1...CVE-2005-0869Fix available5.0 MediumMarch 26, 2005
ibm client access, bosanova launcher400, mochasoft tn5250 +1 more +3 moreAS/400 Telnet 5250 terminal emulation clients, as implemented by (1) IBM client access, (2)...CVE-2005-08687.5 HighMarch 26, 2005
linux kernelInteger overflow in Linux kernel 2.6 allows local users to overwrite kernel memory by writing to...CVE-2005-08677.2 HighMarch 26, 2005
cdrtools cdrecordcdrecord before 4:2.0, when DEBUG is enabled, allows local users to overwrite arbitrary files via...CVE-2005-08662.1 LowMarch 26, 2005
imagemagickHeap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to...CVE-2005-0762Fix available7.5 HighMarch 26, 2005
imagemagickThe TIFF decoder in ImageMagick before 6.0 allows remote attackers to cause a denial of service ...CVE-2005-0760Fix available5.0 MediumMarch 26, 2005
deplateUnknown vulnerabilities in deplate before 0.7.2 have unknown impact, possibly involving elements.rb.CVE-2005-09127.5 HighMarch 24, 2005
dream4 koobi cmsCross-site scripting (XSS) vulnerability in index.php for Dream4 Koobi CMS 4.2.3 allows remote...CVE-2005-0889Public exploit4.3 MediumMarch 24, 2005
michael dean double choco latteEval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to...CVE-2005-0887Public exploit7.5 HighMarch 24, 2005
securecomputing samsung adsl modemSamsung ADSL Modem SMDK8947v1.2 uses default passwords for the (1) root, (2) admin, or (3) user...CVE-2005-08657.5 HighMarch 24, 2005
securecomputing samsung adsl modemThe Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products,...CVE-2005-08645.0 MediumMarch 24, 2005
phpopenchatCross-site scripting (XSS) vulnerability in PHPOpenChat v3.x allows remote attackers to inject...CVE-2005-0863Public exploit4.3 MediumMarch 24, 2005
phpopenchatMultiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote...CVE-2005-0862Public exploitEPSS 10.9%7.5 HighMarch 24, 2005
delegateMultiple buffer overflows in DeleGate before 8.11.1 may allow attackers to cause a denial of...CVE-2005-08617.5 HighMarch 24, 2005
the rusted gate trg newsPHP remote file inclusion vulnerability in TRG News Script 3.0 allows remote attackers to execute...CVE-2005-0860Public exploit7.5 HighMarch 24, 2005
czaries network czarnewsPHP remote file inclusion vulnerability in CzarNews 1.13b allows remote attackers to execute...CVE-2005-0859Public exploitEPSS 11.4%7.5 HighMarch 24, 2005
coolforumMultiple SQL injection vulnerabilities in CoolForum 0.8 and earlier allow remote attackers to...CVE-2005-0858Public exploit7.5 HighMarch 24, 2005
coolforumCross-site scripting (XSS) vulnerability in avatar.php for CoolForum 0.8 and earlier allows...CVE-2005-0857Public exploit4.3 MediumMarch 24, 2005
coolforumCoolForum 0.8.1 beta and earlier allows remote attackers to manipulate SQL commands via certain...CVE-2005-08567.5 HighMarch 24, 2005
coolforumCoolForum 0.8.1 beta and earlier allows remote attackers to obtain sensitive path information via...CVE-2005-085510.0 HighMarch 24, 2005
betaparticle blogbetaparticle blog (bp blog), posisbly before version 4, allows remote attackers to bypass...CVE-2005-0854Public exploit7.5 HighMarch 24, 2005
betaparticle blogbetaparticle blog (bp blog) stores the database under the web root, which allows remote attackers...CVE-2005-0853Public exploit5.0 MediumMarch 24, 2005
No product listedMicrosoft Windows XP SP1 allows local users to cause a denial of service (system crash) via an...CVE-2005-0852Public exploit2.1 LowMarch 24, 2005
filezilla-project filezilla serverFileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers...CVE-2005-08515.0 MediumMarch 24, 2005
filezilla-project filezilla serverFileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a...CVE-2005-08505.0 MediumMarch 24, 2005
funlabs 4x4 off-road adventure iii, revolution, cabelas big game hunter 2004 season +6 more +8 moreMultiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter,...CVE-2005-08495.0 MediumMarch 24, 2005
funlabs 4x4 off-road adventure iii, revolution, cabelas big game hunter 2004 season +6 more +8 moreMultiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter,...CVE-2005-0848Public exploit5.0 MediumMarch 24, 2005
code ocean ocean ftp serverCode Ocean FTP server 1.0 allows remote attackers to cause a denial of service via a large number...CVE-2005-0847Public exploit5.0 MediumMarch 24, 2005
netwin surgemailMultiple cross-site scripting (XSS) vulnerabilities in the email auto-reply message in SurgeMail...CVE-2005-08464.3 MediumMarch 24, 2005
No product listedDirectory traversal vulnerability in the Webmail interface in SurgeMail 2.2g3 allows remote...CVE-2005-08455.0 MediumMarch 24, 2005
nortel contivityNortel VPN client 5.01 stores the cleartext password in the memory of the Extranet.exe process,...CVE-2005-08444.6 MediumMarch 24, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open