CVEs published in July 2005
272 vulnerabilities, 15 critical, 0 exploited.
- university of minnesota gopher gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local... 7.2 High
- opera browser A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code... 5.1 Medium
- opera browser Opera 8.01 allows remote attackers to conduct cross-site scripting (XSS) attacks or modify which... 4.3 Medium
- opera browser Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly... 5.0 Medium
- sendcard SQL injection vulnerability in sendcard.php in Sendcard 3.2.3 allows remote attackers to execute... 7.5 High
- realchat The login protocol in RealChat 3.5.1b does not use authentication, which allows remote attackers... 5.0 Medium
- phpsitesearch Cross-site scripting (XSS) vulnerability in search.php in PHPSiteSearch 1.7.7d allows remote... 4.3 Medium
- php fusion fusion PHP-Fusion allows remote attackers to inject arbitrary Cascading Style Sheets (CSS) via the... 5.0 Medium
- phpfinance The inc.login.php scripts in PHPFinance 0.3 allows remote attackers to bypass the login and gain... 7.5 High
- php surveyor surveyor PHP Surveyor 0.98 allows remote attackers to trigger SQL errors via missing parameters to (1)... 7.5 High
- php surveyor surveyor Multiple SQL injection vulnerabilities in PHP Surveyor 0.98 allows remote attackers to execute... 7.5 High
- gnu phpbook Cross-site scripting (XSS) vulnerability in guestbook.php in phpBook 1.46 allows remote attackers... 4.3 Medium
- mediawiki Cross-site scripting (XSS) vulnerability in MediaWiki 1.4.6 and earlier allows remote attackers... 4.3 Medium
- mozilla firefox Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication... 5.0 Medium
- cutephp cutenews show_news.php in CuteNews 1.3.6 allows remote attackers to obtain the full path of the server via... 5.0 Medium
- cutephp cutenews Cross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject... 4.3 Medium
- cmsmadesimple cms made simple Cross-site scripting (XSS) vulnerability in index.php for CMSimple 2.4 and earlier allows remote... 4.3 Medium
- 3com 3crwe454g72 Unknown vulnerability in 3Com OfficeConnect Wireless 11g Access Point before 1.03.12 allows... 5.0 Medium
- proftpd project proftpd Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a... 6.4 Medium
- symantec veritas netbackup enterprise server, netbackup server +1 more NDMP server in Veritas NetBackup 5.1 allows attackers to cause a denial of service via a CONFIG... 5.0 Medium
- microsoft windows 2000, windows 2003 server, windows 95 +4 more +6 more Buffer overflow in a certain USB driver, as used on Microsoft Windows, allows attackers to... 7.2 High
- goodtech systems smtp server Multiple stack-based buffer overflows in GoodTech SMTP server 5.16 allow remote attackers to... 7.5 High
- elemental software cartwiz Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ 1.20 allows remote attackers... 4.3 Medium
- alwil avast antivirus Buffer overflow in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus... 7.5 High
- alwil avast antivirus Directory traversal vulnerability in a third-party compression library (UNACEV2.DLL), as used in... 5.0 Medium
- fetchmail Buffer overflow in the POP3 client in Fetchmail before 6.2.5.2 allows remote POP3 servers to... 5.0 Medium
- phpnews SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute... 7.5 High
- oray peanuthull Oray PeanutHull 3.0.1.0 and earlier does not properly drop SYSTEM privileges when launched from... 7.2 High
- php surveyor surveyor PHP Surveyor 0.98 allows remote attackers to obtain sensitive information via a direct request to... 5.0 Medium
- php surveyor surveyor Multiple cross-site scripting vulnerabilities in PHP Surveyor 0.98 allow remote attackers to... 5.0 Medium
- oracle reports Multiple cross-site scripting (XSS) vulnerabilities in Oracle Reports 9.0.2 allow remote... 4.3 Medium
- oracle reports Directory traversal vulnerability in Oracle Reports allows remote attackers to read arbitrary... 5.0 Medium
- mandrakesoft mandrake linux, mandrake linux corporate server +1 more nss_ldap 181 to versions before 213, as used in Mandrake Corporate Server and Mandrake 10.0, and... 5.0 Medium
- codemasters toca race driver Buffer overflow in Race Driver 1.20 and earlier allows remote attackers to cause a denial of... 5.0 Medium
- codemasters toca race driver Format string vulnerability in Race Driver 1.20 and earlier allows remote attackers to cause a... 5.0 Medium
- belkin 54g wireless router Belkin 54g wireless routers do not properly set an administrative password, which allows remote... 7.5 High
- whitsoft development slimftpd Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary... 7.2 High
- oracle forms Oracle Forms 4.5 through 10g starts form executables from arbitrary directories and executes them... 7.2 High
- oracle reports Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers... 5.0 Medium
- ekg, rob flynn gaim +1 more Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0,... 5.0 Medium
- ekg Multiple integer signedness errors in libgadu, as used in ekg before 1.6rc2 and other packages,... 7.5 High
- vim development group vim vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to... 9.3 High
- novell groupwise webaccess Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005... 4.3 Medium
- freebsd The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type... 7.2 High
- kde, debian linux +1 more The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the... 7.5 High
- centericq, ekg, kadu +1 more +3 more Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3... 7.5 High
- sap r 3 Directory traversal vulnerability in Internet Graphics Server in SAP before 6.40 Patch 11 allows... 5.0 Medium
- y.sak Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no... 10.0 High
- seo-board Cross-site scripting (XSS) vulnerability in smilies_popup.php in SEO-Board 1.0 allows remote... 4.3 Medium
- php.warpedweb.net phppageprotect Cross-site scripting (XSS) vulnerability in PHPPageProtect 1.0.0a allows remote attackers to... 4.3 Medium
- Show olderLoading…