CVEs published in July 2005
272 vulnerabilities, 15 critical, 0 exploited.
- No product listedFormat string vulnerability in the swcons command in IBM AIX 5.3, and possibly other versions,...7.2 High
- ibm aixFormat string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions,...7.2 High
- ibm aixBuffer overflow in the diagTasksWebSM command in IBM AIX 5.1, 5.2 and 5.3, might allow local...7.2 High
- No product listedBuffer overflow in the getlvname command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to...7.2 High
- ibm aixBuffer overflow in multiple "p" commands in IBM AIX 5.1, 5.2 and 5.3 might allow local users to...7.2 High
- ibm aixBuffer overflow in invscout in IBM AIX 5.1.0 through 5.3.0 might allow local users to execute...4.6 Medium
- high availability linux project heartbeatHigh Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files...2.1 Low
- elmoElectronic Mail Operator (elmo) 1.3.2-r1 and earlier creates the elmostats temporary file...2.1 Low
- blog torrent torrentBlog Torrent 0.92 and earlier stores sensitive files under the web document root in the (1) data...7.5 High
- bdc enterprises web wiz forumsWeb Wiz Forums 7.9 and 8.0 allows remote attackers to view message titles of a hidden forum.5.0 Medium
- softiacom wmailserverSoftiacom wMailserver 1.0 stores passwords in plaintext in the Darsite\MAILSRV\Admin key, which...7.2 High
- microsoft outlook expressMicrosoft Outlook Express 6.0 leaks the default news server account when a user responds to a ...5.0 Medium
- microsoft msn messenger serviceMicrosoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext...5.0 Medium
- microsoft asp.netaspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of...5.0 Medium
- mailenable professional, standard +1 moreUnknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional...5.0 Medium
- mailenable professionalUnknown vulnerability in the HTTPMail service in MailEnable Professional before 1.6 has unknown...10.0 High
- incredible interactive dragonfly commerce** DISPUTED ** Multiple SQL injection vulnerabilities in Dragonfly Commerce allows remote...7.5 High
- incredible interactive dragonfly commerce** DISPUTED ** Dragonfly Commerce allows remote attackers to change a product price by modifying...5.0 Medium
- hosting controller controllerHosting Controller 6.1 Hotfix 2.1 allows remote authenticated users to perform unauthorized...4.6 Medium
- craig dansie dansie shopping cartDansie Shopping Cart stores the vars.dat file under the web root with insufficient access control...5.0 Medium
- photogal photo galleryPHP remote file inclusion vulnerability in gals.php in PhotoGal Photo Gallery 1.5 and earlier...7.5 High
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1...4.3 Medium
- sgi propackUnknown vulnerability in arshell in the Array Service (arrayd) for SGI ProPack 3 with SP 5 and 6,...7.2 High
- microsoft image color managementBuffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to...7.5 High
- microsoft wordStack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000...7.5 High
- debian apt-setupapt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows...4.6 Medium
- mms ripper ripperBuffer overflow in the mms_interp_header function in mms.c in MMS Ripper before 0.6.4 might allow...7.5 High
- sukria backup managerBackup Manager 0.5.8a creates an archive repository with world readable and writable permissions,...6.4 Medium
- sukria backup managerBackup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct...4.6 Medium
- tonec inc. internet download managerStack-based buffer overflow in Internet Download Manager 4.05 allows remote attackers to execute...7.5 High
- capturix scanshareCapturix ScanShare 1.06 build 50 stores sensitive information such as the password in cleartext...5.5 Medium
- privasharePrivaShare 1.1b allows remote attackers to cause a denial of service (crash) via a malformed...5.0 Medium
- elemental software cartwizCross-site scripting (XSS) vulnerability in store/login.asp in CartWIZ allows remote attackers to...4.3 Medium
- elemental software cartwizMultiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements...7.5 High
- pngrenThe ReadLog function in kaiseki.cgi in pngren allows remote attackers to execute arbitrary...7.5 High
- broadcom etrust siteminderCross-site scripting (XSS) vulnerability in Computer Associates (CA) eTrust SiteMinder 5.5, when...4.3 Medium
- phpwishlistlogin.php in phpWishlist before 0.1.15 allows remote attackers to bypass authentication via a...7.5 High
- xerox workcentre 2128, workcentre 2636, workcentre 3545 +2 moreCross-site scripting (XSS) vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro...4.3 Medium
- xerox workcentre 2128, workcentre 2636, workcentre 3545 +2 moreUnknown vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636,...6.4 Medium
- xerox workcentre 2128, workcentre 2636, workcentre 3545 +2 moreMultiple unknown vulnerabilities in the MicroServer Web Server for Xerox WorkCentre Pro Color...7.5 High
- skrypty ppa galleryPHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6...7.5 High
- spidPHP remote file inclusion vulnerability in lang.php in SPiD before 1.3.1 allows remote attackers...7.5 High
- id board boardSQL injection vulnerability in sql.cls.php in Id Board 1.1.3 allows remote attackers to modify...7.5 High
- ibm tivoli management frameworkThe LCF component (lcfd) in IBM Tivoli Management Framework Endpoint allows remote attackers to...5.0 Medium
- microsoft windows 2000, windows nt +1 moreWindows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL...5.0 Medium
- linux kernelRace condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4...3.7 Low
- phystech dhcpcdThe dhcpcd DHCP client before 1.3.22 allows remote attackers to cause a denial of service (daemon...5.0 Medium
- punbbSQL injection vulnerability in the user profile edit module in profile.php for PunBB 1.2.5 and...7.5 High
- alexander palmo simple php blogSimplePHPBlog 0.4.0 stores password hashes in config/password.txt with insufficient access...5.0 Medium
- comersus open technologies cartMultiple cross-site scripting (XSS) vulnerabilities in Comersus shopping cart allow remote...4.3 Medium
- Show moreLoading…