CVEs published in June 2005
265 vulnerabilities, 5 critical, 0 exploited.
- apple mac os xMCX Client for Apple Mac OS X 10.4.x up to 10.4.1 insecurely logs Portable Home Directory...4.6 Medium
- apple mac os x serverApple Mac OS X 10.4.x up to 10.4.1 sets insecure world- and group-writable permissions for the (1...3.7 Low
- apple mac os x serverlaunchd 106 in Apple Mac OS X 10.4.x up to 10.4.1 allows local users to overwrite arbitrary files...2.1 Low
- apple mac os x serverNFS on Apple Mac OS X 10.4.x up to 10.4.1 does not properly obey the -network or -mask flags for...7.5 High
- apple mac os x serverLaunchServices in Apple Mac OS X 10.4.x up to 10.4.1 does not properly mark file extensions and...7.5 High
- linux kernelptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which...2.1 Low
- pragma systems telnetserverCross-site scripting (XSS) vulnerability in Pragma Systems Telnetserver 6.0 allows remote...4.3 Medium
- objectweb consortium c-jdbcUnknown vulnerability in ObjectWeb Consortium C-JDBC before 1.3.1 allows local users to bypass...4.6 Medium
- mortiforoUnknown vulnerability in Mortiforo before 0.9.1 allows users to access private forums via unknown...5.0 Medium
- sun java system web serverUnknown vulnerability in Sun ONE Application Server 6.5 SP1 Maintenance Update 6 and earlier...5.0 Medium
- yapigCross-site scripting (XSS) vulnerability in view.php in YaPiG 0.92b, 0.93u and 0.94u allows...4.3 Medium
- yapigDirectory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0...6.4 Medium
- yapigglobal.php in YaPiG 0.92b allows remote attackers to include arbitrary local files via the...5.0 Medium
- yapigPHP remote file inclusion vulnerability in last_gallery.php in YaPiG 0.93u and 0.94u allows...7.5 High
- lutel lutelwallLutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack...5.5 Medium
- giptables firewallGIPTables Firewall 1.1 and earlier allows local users to overwrite arbitrary files via a symlink...1.2 Low
- cutephp cutenewsDirect code injection vulnerability in CuteNews 1.3.6 and earlier allows remote attackers with...4.4 Medium
- No product listedDirectory traversal vulnerability in Dzip before 2.9 allows remote attackers to create arbitrary...5.0 Medium
- crob ftpMultiple buffer overflows in Crob FTP 3.6.1, and possibly earlier versions, allow remote...7.5 High
- drupalUnknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public...7.5 High
- popperPHP remote file inclusion vulnerability in childwindow.inc.php in Popper 1.41-r2 and earlier...5.0 Medium
- appindex mwchatPHP remote file inclusion vulnerability in start_lobby.php in MWChat 6.x allows remote attackers...7.5 High
- yvesglodt i-manI-Man 0.9, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code...7.5 High
- symantec brightmail antispamSymantec Brightmail AntiSpam before 6.0.2 has a hard-coded database administrator password, which...7.5 High
- vincent hor calendarix advancedMultiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to...7.5 High
- vincent hor calendarix advancedPHP remote file inclusion vulnerability in cal_admintop.php in Calendarix Advanced 1.5 allows...5.0 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to...4.3 Medium
- yapigview.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to obtain sensitive information...5.0 Medium
- yapigupload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for...7.5 High
- everybuddyeverybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack...5.5 Medium
- lpanelCross-site scripting (XSS) vulnerability in view_ticket.php in Lpanel 1.59 and earlier allows...4.3 Medium
- wwweb concepts events systemSQL injection vulnerability in login.asp for WWWeb Concepts Events System 1.0 allows remote...7.5 High
- ibm websphere application serverBuffer overflow in the administrative console in IBM WebSphere Application Server 5.x, when the...7.5 High
- fuseFUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the...2.1 Low
- livingmailingSQL injection vulnerability in login.asp in livingmailing 1.3 allows remote attackers to execute...7.5 High
- No product listedBuffer overflow in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated...2.1 Low
- exhibit engine engineMultiple SQL injection vulnerabilities in list.php in Exhibit Engine (EE) 1.22 allow remote...7.5 High
- phpcmsDirectory traversal vulnerability in class.layout_phpcms.php in phpCMS 1.2.x before 1.2.1pl2...5.0 Medium
- liberum help deskMultiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote...7.5 High
- liberum help deskMultiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3...5.0 Medium
- gnu mailutilsThe sql_escape_string function in auth/sql.c for the mailutils SQL authentication module does not...7.5 High
- fortinet firewallFortinet firewall running FortiOS 2.x contains a hardcoded username with the password set to the...7.5 High
- nextweb \(i\)siteNEXTWEB (i)Site allows remote attackers to cause a denial of service (error 500) via a crafted...5.0 Medium
- nextweb \(i\)siteNEXTWEB (i)Site stores databases under the web document root with insufficient access control,...5.0 Medium
- nextweb \(i\)siteSQL injection vulnerability in login.asp in NEXTWEB (i)Site allows remote attackers to execute...7.5 High
- qualiteam x-cartMultiple cross-site scripting (XSS) vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote...4.3 Medium
- qualiteam x-cartMultiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to...7.5 High
- powerscripts.org powerdownloadPHP remote file inclusion vulnerability in pdl_header.inc.php in PowerDownload 3.0.2 and 3.0.3...7.5 High
- zeroboardzboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP...7.5 High
- nikosoft webmailCross-site scripting (XSS) vulnerability in NikoSoft WebMail before 0.11.0 allows remote...4.3 Medium
- Show moreLoading…