CVEs published in May 2005
437 vulnerabilities, 14 critical, 0 exploited.
- apple applescript, mac os x, mac os x server +2 moreThe AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an...5.1 Medium
- apple mac os x, mac os x server +1 moreAppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service (Cocoa application crash)...4.9 Medium
- redhat enterprise linux, enterprise linux desktop, linux advanced workstation +2 moreStack-based buffer overflow in the ieee_putascii function for nasm 0.98 and earlier allows...4.6 Medium
- apple mac os x serverBuffer overflow in the Netinfo Setup Tool (NeST) allows local users to execute arbitrary code.7.2 High
- hp radia clientBuffer overflow in HP Radia Notify Daemon 3.1.0.0 (formerly by Novadigm), and other versions...7.5 High
- hp radia clientMultiple stack-based buffer overflows in the nvd_exec function in HP Radia Notify Daemon 3.1.2.0 ...7.5 High
- s9y serendipitySerendipity before 0.8 allows Chief users to "hide plugins installed by other users."10.0 High
- s9y serendipityThe media manager in Serendipity before 0.8 allows remote attackers to upload and execute...7.5 High
- s9y serendipityUnknown vulnerability in "the function used to validate path-names for uploading media" in...7.5 High
- s9y serendipityUnknown vulnerability in serendipity_config_local.inc.php for Serendipity before 0.8 has unknown...10.0 High
- s9y serendipityCross-site scripting (XSS) vulnerability in the BBCode plugin for Serendipity before 0.8 allows...6.8 Medium
- sitepanelPHP remote file inclusion vulnerability in main.php in SitePanel 2.6.1 and earlier (SitePanel2)...7.5 High
- sitepanelSitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to upload and execute arbitrary...7.5 High
- sitepanelMultiple directory traversal vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2) allows...6.4 Medium
- sitepanelMultiple cross-site scripting (XSS) vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2)...6.8 Medium
- No product listedMultiple cross-site scripting (XSS) vulnerabilities in index.php for Invision Power Board (IPB) 2...6.8 Medium
- ibm lotus notesBuffer overflow in the Lotus Notes client for Domino 6.5 before 6.5.4 and 6.0 before 6.0.5 allows...4.6 Medium
- ibm lotus dominoFormat string vulnerability in Lotus Domino 6.0.x before 6.0.5 and 6.5.x before 6.5.4 allows...5.0 Medium
- codetosell viart shop enterpriseMultiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote...6.8 Medium
- enhancesoft osticketDirectory traversal vulnerability in attachments.php in osTicket allows remote attackers to read...7.5 High
- osticketPHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to...7.5 High
- osticketMultiple SQL injection vulnerabilities in osTicket allow remote attackers to execute arbitrary...7.5 High
- enhancesoft osticketMultiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject...6.8 Medium
- open webmail webmailOpen WebMail (OWM) before 2.51 20050430 allows remote authenticated users to execute arbitrary...7.5 High
- hp openview network node managerMultiple unknown vulnerabilities in OpenView Network Node Manager (OV NNM) 6.2, 6.4, 7.01, and 7...7.5 High
- hp openview event correlation servicesMultiple unknown vulnjerabilities HP OpenView Event Correlation Services (OV ECS) 3.32 and 3.33...4.6 Medium
- gnu gnutlsThe "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote...5.0 Medium
- apple mac os x, mac os x server +1 moreMac OS X 10.3.x and earlier uses insecure permissions for a pseudo terminal tty (pty) that is...3.6 Low
- abczone.it wwwguestbookSQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute...7.5 High
- No product listededit_image.asp in Uapplication Uphotogallery allows remote attackers to upload arbitrary files.7.5 High
- uapplication uphotogalleryUapplication Uphotogallery stores the database under the web document root, which allows remote...7.5 High
- No product listedUapplication Ublog Reload stores sensitive information under the web root with insufficient...5.0 Medium
- uapplication uguestbookUapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient...5.0 Medium
- stumbleinside gotextStumbleInside GoText 1.01 stores sensitive username, mail address,and phone number information in...2.1 Low
- software602 602lan suiteDirectory traversal vulnerability in the mail program in 602LAN SUITE 2004.0.05.0413 allows...6.4 Medium
- No product listedRaysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to conduct administrator...7.5 High
- raysoft video cam serverDirectory traversal vulnerability in Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote...5.0 Medium
- raysoft video cam serverRaysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to determine the full...5.0 Medium
- ocean12 technologies mailing list managerSQL injection vulnerability in the admin login panel for Ocean12 Mailing List Manager 1.06 allows...7.5 High
- netleaf limited notjustbrowsingNetLeaf Limited NotJustBrowsing 1.0.3 stores the View Lock Password in plaintext in the...4.6 Medium
- maxwebportalMultiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote...7.5 High
- soft3304 04webserverDirectory traversal vulnerability in 04WebServer 1.81 allows remote attackers to read files...5.0 Medium
- globalscape secure ftp serverBuffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote authenticated users to...10.0 High
- No product listedExoticSoft FilePocket 1.2 stores sensitive proxy information, including proxy passwords, in...4.6 Medium
- envivosoft envivo cmsMultiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary...7.5 High
- ecomm professional guestbookSQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote...7.5 High
- cybration icuiiCybration ICUII 7.0 stores passwords in plaintext in the world-readable icuii.ini file, which...4.6 Medium
- postgresql, trustix secure linux +1 moreThe tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, ...2.1 Low
- postgresqlPostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion...7.5 High
- skype technologies skypeSkype for Windows 1.2.0.0 to 1.2.0.46 allows local users to bypass the identity check for an...4.6 Medium
- Show moreLoading…