Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
April

CVEs published in April 2005

386 vulnerabilities, 15 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

radscripts radbidsDirectory traversal vulnerability in index.php for RadScripts RadBids Gold 2 allows remote...CVE-2005-1073Public exploit5.0 MediumApril 12, 2005
No product listedSQL injection vulnerability in banner.inc.php in JPortal Web Portal 2.3.1 allows remote attackers...CVE-2005-1071Public exploit7.5 HighApril 12, 2005
No product listedUnknown vulnerability in sCssBoard 1.11 and earlier has unknown impact, related to "an exploit on...CVE-2005-106910.0 HighApril 12, 2005
No product listedCross-site scripting (XSS) vulnerability in sCssBoard 1.11 and earlier allows remote attackers to...CVE-2005-10684.3 MediumApril 12, 2005
university of washington pineRace condition in rpdump in Pine 4.62 and earlier allows local users to overwrite arbitrary files...CVE-2005-10661.2 LowApril 12, 2005
novell linux desktoptetex in Novell Linux Desktop 9 allows local users to determine the existence of arbitrary files...CVE-2005-10652.1 LowApril 12, 2005
novell netwareUnknown vulnerability in the TCP/IP functionality (TCPIP.NLM) in Novell Netware 6.x allows remote...CVE-2005-10605.0 MediumApril 12, 2005
linksys wet11Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original...CVE-2005-1059Public exploit2.1 LowApril 12, 2005
cisco iosCisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH...CVE-2005-10587.5 HighApril 12, 2005
cisco iosCisco IOS 12.2T, 12.3 and 12.3T, when using Easy VPN Server XAUTH version 6 authentication,...CVE-2005-10577.5 HighApril 12, 2005
hp openview network node managerUnknown vulnerability in HP OpenView Network Node Manager (NMM) 6.2 through 6.4, and 7.01 through...CVE-2005-10565.0 MediumApril 12, 2005
moderngigabyte modernbillPHP remote file inclusion vulnerability in news.php in ModernBill 4.3.0 and earlier allows remote...CVE-2005-1054Public exploit7.5 HighApril 12, 2005
moderngigabyte modernbillMultiple cross-site scripting (XSS) vulnerabilities in orderwiz.php in ModernBill 4.3.0 and...CVE-2005-1053Public exploit4.3 MediumApril 12, 2005
microsoft outlook, outlook web access +1 moreMicrosoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated...CVE-2005-10525.0 MediumApril 12, 2005
punbbSQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to...CVE-2005-1051Public exploit6.5 MediumApril 12, 2005
postnuke software foundation postnukeThe modload op in the Reviews module for PostNuke 0.760-RC3 allows remote attackers to obtain...CVE-2005-10505.0 MediumApril 12, 2005
postnuke software foundation postnukeMultiple cross-site scripting vulnerabilities in PostNuke 0.760-RC3 allow remote attackers to...CVE-2005-1049Public exploit2.6 LowApril 12, 2005
postnuke software foundation postnukeSQL injection vulnerability in modules.php in PostNuke 0.760 RC3 allows remote attackers to...CVE-2005-10487.5 HighApril 12, 2005
kdeBuffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary...CVE-2005-1046Fix available7.5 HighApril 12, 2005
centrinity firstclass desktop clientOpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the...CVE-2005-10457.5 HighApril 12, 2005
php, apple mac os x, mac os x server +2 more +4 moreexif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory...CVE-2005-10435.0 MediumApril 12, 2005
phpInteger overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow...CVE-2005-10427.5 HighApril 12, 2005
linux kernelThe fib_seq_start function in fib_hash.c in Linux kernel allows local users to cause a denial of...CVE-2005-10412.1 LowApril 12, 2005
ca brightstor arcserve backupBuffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup...CVE-2005-1018Public exploitEPSS 51.8%7.5 HighApril 12, 2005
openofficeThe StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates...CVE-2005-0941Fix available5.1 MediumApril 12, 2005
freebsdMultiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to...CVE-2005-06107.2 HighApril 12, 2005
microsoft msn messengerGIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list...CVE-2005-0562EPSS 23.2%7.5 HighApril 12, 2005
microsoft internet explorerBuffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows...CVE-2005-0555Public exploitEPSS 58.4%7.5 HighApril 12, 2005
axelBuffer overflow in the HTTP redirection capability in conn.c for Axel before 1.0b may allow...CVE-2005-0390Fix available7.5 HighApril 12, 2005
sun solaris, sunos +1 moreMultiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service ...CVE-2004-0791Public exploitEPSS 20.3%5.0 MediumApril 12, 2005
microsoft windows 2000, windows 2003 server, windows 98 +5 more +7 moreMultiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service ...CVE-2004-0790Public exploitEPSS 80.1%5.0 MediumApril 12, 2005
dc\+\+Unknown vulnerability in DC++ before 0.674 allows attackers to append data to arbitrary files.CVE-2005-10895.0 MediumApril 11, 2005
invision power services boardSQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows...CVE-2005-1070Public exploit7.5 HighApril 11, 2005
rsnapshot filesystem snapshot utilityThe copy_symlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of...CVE-2005-1064Fix available4.6 MediumApril 10, 2005
towerblogTowerBlog 0.6 and earlier stores the login data file under the web root, which allows remote...CVE-2005-10557.5 HighApril 10, 2005
novell linux desktopMultiple unknown vulnerabilities in netapplet in Novell Linux Desktop 9 allow local users to gain...CVE-2005-10407.2 HighApril 10, 2005
gnu coreutilsRace condition in Core Utilities (coreutils) 5.2.1, when (1) mkdir, (2) mknod, or (3) mkfifo is...CVE-2005-1039Fix available3.7 LowApril 10, 2005
paul vixie vixie cron, redhat enterprise linux +1 morecrontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron...CVE-2005-1038Fix available2.1 LowApril 10, 2005
ibm aixUnknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to...CVE-2005-103710.0 HighApril 10, 2005
freebsdFreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow...CVE-2005-10367.8 HighApril 10, 2005
azerbaijan development group azdgdatingMultiple SQL injection vulnerabilities in AzDGDatingPlatinum 1.1.0 allows remote attackers to...CVE-2005-1082Public exploit7.5 HighApril 9, 2005
netwin surgeftpSurgeFTP 2.2m1 allows remote attackers to cause a denial of service (application hang) via the...CVE-2005-10345.0 MediumApril 9, 2005
devellion cubecartCubeCart 2.0.6 allows remote attackers to obtain sensitive information via an invalid (1)...CVE-2005-1033Public exploit5.0 MediumApril 9, 2005
e-xoops, runcms +1 moreRUNCMS 1.1A, and possibly other products based on e-Xoops (exoops), when "Allow custom avatar...CVE-2005-10315.0 MediumApril 9, 2005
active web softwares auction houseMultiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote...CVE-2005-1030Public exploit4.3 MediumApril 9, 2005
phpnuke php-nukePHP-Nuke 6.x through 7.6 allows remote attackers to obtain sensitive information via a direct...CVE-2005-10285.0 MediumApril 9, 2005
francisco burzi php-nukeMultiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x through 7.6 allow remote...CVE-2005-1027Public exploit4.3 MediumApril 9, 2005
dlman pro proMultiple SQL injection vulnerabilities in SnailSource phpBB 2.0.x mods allow remote attackers to...CVE-2005-1026Public exploit7.5 HighApril 9, 2005
ibm iseries as 400The FTP server in AS/400 4.3, when running in IFS mode, allows remote attackers to obtain...CVE-2005-10255.0 MediumApril 9, 2005
francisco burzi php-nukemodules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a...CVE-2005-10245.0 MediumApril 9, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open