Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
April

CVEs published in April 2005

386 vulnerabilities, 15 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

softwin bitdefender antivirusUnquoted Windows search path vulnerability in BitDefender 8 allows local users to prevent...CVE-2005-12861.2 LowApril 26, 2005
argosoft mail serverThe addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary...CVE-2005-12847.5 HighApril 26, 2005
argosoft mail serverMultiple cross-site scripting (XSS) vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow...CVE-2005-12824.3 MediumApril 26, 2005
ethereal group etherealEthereal 0.10.10 and earlier allows remote attackers to cause a denial of service (infinite loop)...CVE-2005-12815.0 MediumApril 26, 2005
lbl tcpdumpThe rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of...CVE-2005-1280Public exploitFix availableEPSS 10.2%5.0 MediumApril 26, 2005
lbl tcpdumptcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop)...CVE-2005-1279Public exploitFix availableEPSS 18.7%5.0 MediumApril 26, 2005
lbl tcpdumpThe isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote...CVE-2005-1278Public exploitFix availableEPSS 10.8%5.0 MediumApril 26, 2005
mysql maxdbStack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL...CVE-2005-127410.0 HighApril 26, 2005
gentoo rootkit hunterThe (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create...CVE-2005-1270Fix available2.1 LowApril 26, 2005
horde choraCross-site scripting (XSS) vulnerability in Horde Chora module before 1.2.3 allows remote...CVE-2005-13176.8 MediumApril 25, 2005
inserter.cgiCross-site scripting (XSS) vulnerability in the inserter.cgi script allows remote attackers to...CVE-2005-13006.8 MediumApril 25, 2005
No product listedThe inserter.cgi script allows remote attackers to execute arbitrary commands via shell...CVE-2005-129910.0 HighApril 25, 2005
inserter.cgiThe inserter.cgi script allows remote attackers to read arbitrary files via a full pathname in...CVE-2005-12987.5 HighApril 25, 2005
include.cgiCross-site scripting (XSS) vulnerability in the include.cgi script allows remote attackers to...CVE-2005-12976.8 MediumApril 25, 2005
include.cgiinclude.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters...CVE-2005-12967.5 HighApril 25, 2005
include.cgiinclude.cgi script allows remote attackers to read arbitrary files via a full pathname in the...CVE-2005-12957.5 HighApril 25, 2005
imagemagick, graphicsmagick +1 moreHeap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and...CVE-2005-1275Public exploitFix availableEPSS 13.9%5.0 MediumApril 25, 2005
hp hp-uxUnknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP...CVE-2005-11925.0 MediumApril 25, 2005
mysql maxdbMultiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote...CVE-2005-0684Public exploitEPSS 68.5%10.0 HighApril 25, 2005
yappa-ngPHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to...CVE-2005-1312Public exploit7.5 HighApril 24, 2005
citat.plThe citat.pl script allows remote attackers to read arbitrary files via a full pathname in the...CVE-2005-13037.5 HighApril 24, 2005
nokia affixThe affix_sock_register in the Affix Bluetooth Protocol Stack for Linux might allow local users...CVE-2005-1294Public exploit7.2 HighApril 24, 2005
vladislav bogdanov snmppdFormat string vulnerability in the snmppd_log function in snmppd_util.c for snmppd 0.4.5 and...CVE-2005-1246Public exploit10.0 HighApril 24, 2005
mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.4.2, when using HTML Tidy (...CVE-2005-1245Fix available4.3 MediumApril 24, 2005
safestone technologies axcessitDirectory traversal vulnerability in the third party tool from SafeStone, as used to secure the...CVE-2005-12435.0 MediumApril 24, 2005
bsafe global securityDirectory traversal vulnerability in the third party tool from Bsafe, as used to secure the...CVE-2005-12425.0 MediumApril 24, 2005
raz-lee security\+\+\+Directory traversal vulnerability in the third party tool from Raz-Lee, as used to secure the...CVE-2005-12395.0 MediumApril 24, 2005
ibm iseries as 400By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted...CVE-2005-12387.5 HighApril 24, 2005
china-on-site flexphpnewsSQL injection vulnerability in news.php in FlexPHPNews 0.0.3 allows remote attackers to execute...CVE-2005-1237Public exploit7.5 HighApril 24, 2005
duware duportalMultiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote...CVE-2005-1236Public exploit7.5 HighApril 24, 2005
phpbb group phpbb-auctionauction_my_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain...CVE-2005-12355.0 MediumApril 24, 2005
phpbb group phpbb-auctionMultiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute...CVE-2005-12345.0 MediumApril 24, 2005
sun java system web proxy serverBuffer overflow in Sun Java System Web Proxy Server (aka Sun ONE Proxy Server) 3.6 SP6 allows...CVE-2005-12327.5 HighApril 24, 2005
jawsCross-site scripting (XSS) vulnerability in the NewTerm function in GlossaryModel.php in JAWS 0.4...CVE-2005-12314.3 MediumApril 24, 2005
linux kernelLinux kernel 2.6 on Itanium (ia64) architectures allows local users to cause a denial of service...CVE-2005-01372.1 LowApril 24, 2005
linux kernelThe unw_unwind_to_user function in unwind.c on Itanium (ia64) architectures in Linux kernel 2.6...CVE-2005-01352.1 LowApril 24, 2005
eaden mckee bblogSQL injection vulnerability in bBlog 0.7.4 allows remote attackers to execute arbitrary SQL...CVE-2005-13107.5 HighApril 23, 2005
cartwiz asp cartMultiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute...CVE-2005-12917.5 HighApril 23, 2005
bk dev forumMultiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute...CVE-2005-1287Public exploit7.5 HighApril 23, 2005
woltlab burning boardCross-site scripting (XSS) vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier...CVE-2005-1285Public exploit6.8 MediumApril 22, 2005
argosoft mail serverMultiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote...CVE-2005-12837.5 HighApril 22, 2005
magnus lundvall yawcamDirectory traversal vulnerability in Yawcam 0.2.5 allows remote attackers to read arbitrary files...CVE-2005-12305.0 MediumApril 22, 2005
gnu cpioDirectory traversal vulnerability in cpio 2.6 and earlier allows remote attackers to write to...CVE-2005-1229Fix available4.6 MediumApril 22, 2005
gnu gzipDirectory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote...CVE-2005-1228Fix available5.0 MediumApril 22, 2005
coppermine photo galleryCoppermine Photo Gallery 1.3.2 stores passwords in plaintext, which allows remote attackers to...CVE-2005-12267.5 HighApril 22, 2005
coppermine photo gallerySQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute...CVE-2005-12257.5 HighApril 22, 2005
duware duportalMultiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to...CVE-2005-1224Public exploit7.5 HighApril 22, 2005
ocean12 technologies calendar manager proMultiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to...CVE-2005-1223Public exploit7.5 HighApril 22, 2005
netrefcat_for_gen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by...CVE-2005-1222Public exploit7.5 HighApril 22, 2005
ecommerce-carts ecommproSQL injection vulnerability in login.asp for Ecommerce-Carts EcommPro 3.0 allows remote attackers...CVE-2005-12217.5 HighApril 22, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open