Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
April

CVEs published in April 2005

386 vulnerabilities, 15 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

knusperleicht shoutbox scriptShoutbox SCRIPT 3.0.2 and earlier allows remote attackers to obtain sensitive information via a...CVE-2005-12207.5 HighApril 22, 2005
apple mac os x, opendarwin darwin kernel, apple mac os x server +2 moreInteger signedness error in the parse_machfile function in the mach-o loader (mach_loader.c) for...CVE-2005-09752.1 LowApril 22, 2005
apple mac os xMac OS X 10.3.9 and earlier allows users to install, create, and execute setuid/setgid scripts,...CVE-2005-09707.6 HighApril 22, 2005
kde, conectiva linux, kde quanta +1 more +3 moreKommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user,...CVE-2005-07547.5 HighApril 22, 2005
nelso software desktop roverDesktop Rover 3.0, and possibly earlier versions, allows remote attackers to cause a denial of...CVE-2005-1204Public exploit5.0 MediumApril 21, 2005
egroupwareMultiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote...CVE-2005-1203Public exploit7.5 HighApril 21, 2005
egroupwareMultiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote...CVE-2005-1202Public exploit6.8 MediumApril 21, 2005
No product listedMultiple directory traversal vulnerabilities in AZ Bulletin board (AZbb) before 1.0.08 allow (1)...CVE-2005-1201Public exploit6.4 MediumApril 21, 2005
azbb az bulletin boardPHP remote file inclusion vulnerability in main_index.php in AZ Bulletin Board (AZbb) 1.0.07a...CVE-2005-1200Public exploit7.5 HighApril 21, 2005
infopop ultimate bulletin boardSQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to execute...CVE-2005-1199Public exploit7.5 HighApril 21, 2005
anaconda partners foundation directoryDirectory traversal vulnerability in apexec.pl for Anaconda Foundation Directory allows remote...CVE-2005-11985.0 MediumApril 21, 2005
oracle database serverSQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in...CVE-2005-11977.5 HighApril 21, 2005
phpbb group phpbbSQL injection vulnerability in kb.php in the Knowledge Base module for phpBB allows remote...CVE-2005-1196Public exploit7.5 HighApril 21, 2005
mplayer, xine xine-lib +1 moreMultiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams...CVE-2005-11957.5 HighApril 21, 2005
logwatch, redhat enterprise linux, linux advanced workstation +2 moreThe secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting...CVE-2005-1061Public exploitFix available5.0 MediumApril 21, 2005
adobe acrobat readerThe Acrobat web control in Adobe Acrobat and Acrobat Reader 7.0 and earlier, when used with...CVE-2005-00355.1 MediumApril 21, 2005
netiq pssecure** DISPUTED ** Directory traversal vulnerability in the third party tool from NetIQ, as used to...CVE-2005-1244Disputed7.5 HighApril 20, 2005
powertech powerlock networksecurityDirectory traversal vulnerability in the third party tool from Powertech, as used to secure the...CVE-2005-12417.5 HighApril 20, 2005
castlehill secure netDirectory traversal vulnerability in the third party tool from Castlehill, as used to secure the...CVE-2005-12407.5 HighApril 20, 2005
php labs profileCross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers...CVE-2005-1233Public exploit4.3 MediumApril 20, 2005
phprojektCross-site scripting (XSS) vulnerability in PHProjekt 4.2 and earlier allows remote attackers to...CVE-2005-12275.1 MediumApril 20, 2005
microsoft windows 2000, windows 98, windows 98se +1 more +3 moreThe Web View DLL (webvw.dll), as used in Windows Explorer on Windows 2000 systems, does not...CVE-2005-1191Public exploitEPSS 17.1%5.0 MediumApril 19, 2005
webcamxp proWebcamXP PRO v2.16.468 and earlier allows remote attackers to cause a denial of service via a...CVE-2005-11905.0 MediumApril 19, 2005
webcamxp proCross-site scripting (XSS) vulnerability in WebcamXP PRO v2.16.468 and earlier allows remote...CVE-2005-11894.3 MediumApril 19, 2005
comersus open technologies cartCross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51...CVE-2005-1188Public exploit4.3 MediumApril 19, 2005
x-ways software technology ag winhexHeap-based buffer overflow in WinHex 12.05 SR-14, and possibly other versions, may allow...CVE-2005-11875.1 MediumApril 19, 2005
musicmatch jukeboxMusicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites...CVE-2005-11866.8 MediumApril 19, 2005
musicmatch jukeboxUnquoted Windows search path vulnerability in Musicmatch Jukebox 10.00.2047 and earlier allows...CVE-2005-11854.6 MediumApril 19, 2005
microsoft windows 2000, windows 2003 server, windows 98se +2 more +4 moreThe TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of...CVE-2005-1184Public exploitEPSS 32.7%5.0 MediumApril 19, 2005
mvnforumCross-site scripting (XSS) vulnerability in mvnForum 1.0 RC4 allows remote attackers to inject...CVE-2005-1183Public exploit4.3 MediumApril 19, 2005
ibm os 400Unknown vulnerability in Incoming Remote Command (iSeries Access for Windows Remote Command...CVE-2005-11825.0 MediumApril 19, 2005
ariadne cms** DISPUTED ** NOTE: this issue has been disputed by the vendor. PHP remote code injection...CVE-2005-1181Public exploitDisputed7.5 HighApril 19, 2005
francisco burzi php-nukeHTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote...CVE-2005-11805.0 MediumApril 19, 2005
xerox workcentre, workcentre 165, workcentre 175 +16 more +18 moreUnknown vulnerability in Xerox MicroServer Web Server for various WorkCentre products including...CVE-2005-11795.0 MediumApril 19, 2005
oracle formsSQL injection vulnerability in Oracle Forms 10g allows remote attackers to execute arbitrary SQL...CVE-2005-11787.5 HighApril 19, 2005
usermin, webmin +1 moreUnknown vulnerability in (1) Webmin and (2) Usermin before 1.200 causes Webmin to change...CVE-2005-117710.0 HighApril 19, 2005
ibm aixRace condition in JFS2 on AIX 5.2 and 5.3, when deleting a file while I/O is still occurring for...CVE-2005-11761.2 LowApril 19, 2005
realnetworks helix player, realone player, realplayer +2 moreHeap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne...CVE-2005-0755Fix available5.1 MediumApril 19, 2005
daniel de rauglaudre genewebgeneweb 4.10 and earlier does not properly check file permissions and content during conversion,...CVE-2005-0391Fix available5.0 MediumApril 19, 2005
roar smith info2wwwCross-site scripting (XSS) vulnerability in info2www before 1.2.2.9 allows remote attackers to...CVE-2004-1341Fix available4.3 MediumApril 19, 2005
pmsoftware simple web serverBuffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary...CVE-2005-1173Public exploit7.5 HighApril 18, 2005
coppermine photo galleryCross-site scripting (XSS) vulnerability in init.inc.php in Coppermine Photo Gallery 1.3.x allows...CVE-2005-11724.3 MediumApril 18, 2005
datenbank module moduleCross-site scripting (XSS) vulnerability in mod.php in the datenbank module for phpBB allows...CVE-2005-1171Public exploit4.3 MediumApril 18, 2005
datenbank module moduleSQL injection vulnerability in mod.php in the datenbank module for phpBB allows remote attackers...CVE-2005-1170Public exploit7.5 HighApril 18, 2005
mafia blogMafia Blog .4 BETA does not properly protect the admin directory, which allows remote attackers...CVE-2005-11697.5 HighApril 18, 2005
musicmatch jukeboxDiagCollectionControl.dll in Musicmatch 10.00.2047 and earlier allows remote attackers to...CVE-2005-11685.0 MediumApril 18, 2005
musicmatch jukeboxMusicmatch 10.00.2047 and earlier store log files in the Program Files directory instead of the...CVE-2005-11672.1 LowApril 18, 2005
dameware development nt utilities, miniremote control +1 moreThe DNTUS26 process in Dameware NT Utilities and the DWRCS process in MiniRemote Control 4.9 and...CVE-2005-11662.1 LowApril 18, 2005
No product listedYager 5.24 and earlier allows remote attackers to cause a denial of service (application crash)...CVE-2005-1165Public exploit5.0 MediumApril 18, 2005
yager development gameYager 5.24 and earlier allows remote attackers to cause a denial of service (application hang)...CVE-2005-1164Public exploit5.0 MediumApril 18, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open