Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
April

CVEs published in April 2005

386 vulnerabilities, 15 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

yager development gameMultiple buffer overflows in Yager 5.24 and earlier allow remote attackers to execute arbitrary...CVE-2005-1163Public exploitEPSS 12.7%6.4 MediumApril 18, 2005
oneworldstoreMultiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to...CVE-2005-1162Public exploit5.8 MediumApril 18, 2005
oneworldstoreMultiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute...CVE-2005-1161Public exploit7.5 HighApril 18, 2005
mozilla firefox, mozilla +1 moreThe privileged "chrome" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows...CVE-2005-11605.1 MediumApril 18, 2005
mozilla firefox, mozilla +1 moreThe native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and...CVE-2005-11597.5 HighApril 18, 2005
mozilla firefoxMultiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject...CVE-2005-11585.0 MediumApril 18, 2005
mozilla firefox, mozilla, netscape navigator +2 moreFirefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to...CVE-2005-11577.5 HighApril 18, 2005
mozilla firefox, mozilla, netscape navigator +2 moreFirefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to...CVE-2005-11567.5 HighApril 18, 2005
mozilla firefox, mozilla +1 moreThe favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote...CVE-2005-11557.5 HighApril 18, 2005
mozilla firefox, mozilla +1 moreFirefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary...CVE-2005-11547.5 HighApril 18, 2005
mozilla firefox, mozilla +1 moreFirefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote...CVE-2005-11537.5 HighApril 18, 2005
mcafee internet security suiteMcAfee Internet Security Suite 2005 uses insecure default ACLs for installed files, which allows...CVE-2005-11077.2 HighApril 18, 2005
apple safari, omnigroup omniweb, hmdt shiira +2 moreAppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup...CVE-2005-09765.0 MediumApril 18, 2005
cvsBuffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.CVE-2005-0753Fix available7.5 HighApril 18, 2005
mozilla firefoxThe Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute...CVE-2005-07527.5 HighApril 18, 2005
sun java system web serverUnknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier, when running on Windows...CVE-2005-11505.0 MediumApril 16, 2005
calendarscriptcalendar.pl in CalendarScript 3.21 allows remote attackers to obtain sensitive information via...CVE-2005-11485.0 MediumApril 16, 2005
kerio mailserverUnknown vulnerability in WebMail in Kerio MailServer before 6.0.9 allows remote attackers to...CVE-2005-11385.0 MediumApril 16, 2005
alexander palmo simple php blogSimple PHP Blog (sphpBlog) 0.4.0 allows remote attackers to obtain sensitive information via a...CVE-2005-11375.0 MediumApril 16, 2005
alexander palmo simple php blogCross-site scripting (XSS) vulnerability in search.php for Simple PHP Blog (sphpBlog) 0.4.0...CVE-2005-1135Public exploit4.3 MediumApril 16, 2005
ibm iseries as 400The POP3 server in IBM iSeries AS/400 returns different error messages when the user exists or...CVE-2005-11335.0 MediumApril 16, 2005
lg electronics mobile phoneLG U8120 mobile phone allows remote attackers to cause a denial of service (device crash) via a...CVE-2005-11325.0 MediumApril 16, 2005
symantec veritas i3 focalpoint serverUnknown vulnerability in Veritas i3 Focalpoint Server 7.1 and earlier has unknown attack vectors...CVE-2005-113110.0 HighApril 16, 2005
No product listedeGroupWare 1.0.6 and earlier, when an e-mail is composed with an attachment but not sent, will...CVE-2005-11292.1 LowApril 16, 2005
virtual hosting control system hosting control systemMultiple SQL injection vulnerabilities in VHCS 2.4 and earlier allow remote attackers to execute...CVE-2005-11287.5 HighApril 16, 2005
postgreyFormat string vulnerability in the log function in Net::Server 0.87 and earlier, as used in...CVE-2005-1127Fix available5.0 MediumApril 16, 2005
avaya libsafeRace condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows...CVE-2005-1125Public exploit5.1 MediumApril 16, 2005
sun solaris, sunos +1 moreUnknown vulnerability in the libgss Generic Security Services Library in Solaris 7, 8, and 9...CVE-2005-11244.6 MediumApril 16, 2005
monkey-project monkeyMonkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial of service (memory...CVE-2005-11235.0 MediumApril 16, 2005
gentoo linux, igor khasilev oops proxy server +1 moreFormat string vulnerability in the my_xlog function in lib.c for Oops! Proxy Server 1.5.23 and...CVE-2005-1121Fix available5.0 MediumApril 16, 2005
ilohamailMultiple cross-site scripting (XSS) vulnerabilities in IlohaMail 0.8.14 and earlier allow remote...CVE-2005-1120Fix available4.3 MediumApril 16, 2005
todd miller sudoSudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack...CVE-2005-11192.1 LowApril 16, 2005
all4www all4www-homepagecreatorPHP remote file inclusion vulnerability in index.php in All4WWW-Homepagecreator 1.0a allows...CVE-2005-1117Public exploit7.5 HighApril 16, 2005
phpbb group phpbbCross-site scripting (XSS) vulnerability in the Calendar module for phpBB allow remote attackers...CVE-2005-11164.3 MediumApril 16, 2005
phpbb group phpbb, smartor photo album +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow...CVE-2005-11154.3 MediumApril 16, 2005
phpbb group phpbb, smartor photo album +1 moreMultiple SQL injection vulnerabilities in album_search.php in Photo Album 2.0.53 for phpBB allow...CVE-2005-11147.5 HighApril 16, 2005
phpbb group plusMultiple cross-site scripting (XSS) vulnerabilities in PhpBB Plus 1.52 and earlier allow remote...CVE-2005-11134.3 MediumApril 16, 2005
ibm websphere application serverIBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web...CVE-2005-1112Public exploit5.0 MediumApril 16, 2005
gnu cpio, canonical ubuntu linux, debian linux +2 moreRace condition in cpio 2.6 and earlier allows local users to modify permissions of arbitrary...CVE-2005-1111Fix available4.7 MediumApril 16, 2005
sumusStack-based buffer overflow in the RespondeHTTPPendiente function in the HTTP server for SUMUS 0...CVE-2005-1110Public exploit7.5 HighApril 16, 2005
junkbuster internet junkbusterThe filtering of URLs in JunkBuster before 2.0.2-r3 allows remote attackers to cause a denial of...CVE-2005-11097.5 HighApril 16, 2005
junkbuster internet junkbusterThe ij_untrusted_url function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows...CVE-2005-11085.0 MediumApril 16, 2005
inter7 sqwebmailSqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in...CVE-2005-1308Public exploit7.5 HighApril 15, 2005
gocr optical character recognition utilityHeap-based buffer overflow in the readpgm function in pnm.c for GOCR 0.40, when it is not using...CVE-2005-1142Fix available7.5 HighApril 15, 2005
optical character recognition project character recognitionInteger overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library,...CVE-2005-1141Fix available9.8 CriticalApril 15, 2005
mywebland mybloggieCross-site scripting (XSS) vulnerability in myBloggie 2.1.1 allows remote attackers to inject...CVE-2005-11404.3 MediumApril 15, 2005
freebsdThe SIOCGIFCONF ioctl (ifconf function) in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not...CVE-2005-11262.1 LowApril 15, 2005
opera browserOpera 8 Beta 3, when using first-generation vetted digital certificates, displays the...CVE-2005-11397.5 HighApril 14, 2005
sphpblogSimple PHP Blog (sphpBlog) 0.4.0 stores the (1) password.txt and (2) config.txt files under the...CVE-2005-11365.0 MediumApril 14, 2005
monkey-project monkeyFormat string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote...CVE-2005-11227.5 HighApril 14, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open