Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
July

CVEs published in July 2005

272 vulnerabilities, 15 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

moosegalleryPHP remote file inclusion vulnerability in display.php in MooseGallery allows remote attackers to...CVE-2005-23315.0 MediumJuly 20, 2005
oscommerceDirectory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers...CVE-2005-2330Public exploit5.0 MediumJuly 20, 2005
No product listedMRV Communications In-Reach LX-8000S, LX-4000S, and LX-1000S 3.5.0, when using SSH public key...CVE-2005-23294.6 MediumJuly 20, 2005
lafferPHP remote file inclusion vulnerability in im.php in Laffer 0.3.2.6 and 0.3.2.7 allows remote...CVE-2005-23285.0 MediumJuly 20, 2005
e107Cross-site scripting (XSS) vulnerability in e107 0.617 and earlier allows remote attackers to...CVE-2005-2327Public exploit4.3 MediumJuly 20, 2005
zlibinftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash)...CVE-2005-1849Fix available5.0 MediumJuly 20, 2005
clever copy copyCross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to...CVE-2005-2326Public exploit4.3 MediumJuly 19, 2005
clever copy copyClever Copy 2.0 and 2.0a allows remote attackers to obtain the full path of the web root via a...CVE-2005-23255.0 MediumJuly 19, 2005
clever copy copyCross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to...CVE-2005-2324Public exploit4.3 MediumJuly 19, 2005
class-1 forum, clever copy copy +1 moreMultiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with...CVE-2005-2323Public exploit7.5 HighJuly 19, 2005
class-1 forum, clever copy copy +1 moreCross-site scripting (XSS) vulnerability in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with...CVE-2005-23224.3 MediumJuly 19, 2005
calogicPHP remote file inclusion vulnerability in CaLogic 1.2.2 allows remote attackers to execute...CVE-2005-23217.5 HighJuly 19, 2005
webcalendarWebCalendar before 1.0.0 does not properly restrict access to assistant_edit.php, which allows...CVE-2005-2320Fix available7.5 HighJuly 19, 2005
yawpPHP remote file include vulnerability in Yawp library 1.0.6 and earlier, as used in YaWiki and...CVE-2005-23195.0 MediumJuly 19, 2005
dvbbsCross-site scripting (XSS) vulnerability in showerr.asp in DVBBS 7.1 SP2 allows remote attackers...CVE-2005-2318Public exploit4.3 MediumJuly 19, 2005
shorewallShorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLIST_TTL is...CVE-2005-2317Fix available7.5 HighJuly 19, 2005
phpsftpdinc.login.php in PHPsFTPd 0.2 through 0.4 allows remote attackers to obtain the administrator's...CVE-2005-23147.5 HighJuly 19, 2005
No product listedCheck Point SecuRemote NG with Application Intelligence R54 allows attackers to obtain...CVE-2005-23137.2 HighJuly 19, 2005
realnode emildamanagement.php in Realnode Emilda 1.2.2 and earlier allows remote attackers to perform actions as...CVE-2005-23127.5 HighJuly 19, 2005
smsSMS 1.9.2m and earlier allows local users to overwrite arbitrary files via a symlink attack on...CVE-2005-23112.1 LowJuly 19, 2005
nullsoft winampBuffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote...CVE-2005-2310Public exploitEPSS 13.1%9.3 HighJuly 19, 2005
opera browserOpera 8.01 allows remote attackers to cause a denial of service (CPU consumption) via a crafted...CVE-2005-23095.0 MediumJuly 19, 2005
microsoft ieThe JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of...CVE-2005-2308Public exploitEPSS 17.4%7.5 HighJuly 19, 2005
microsoft windows 2000, windows xp +1 morenetman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial...CVE-2005-2307Public exploitEPSS 25.6%5.0 MediumJuly 19, 2005
macromedia coldfusion, jrun +1 moreRace condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes...CVE-2005-23063.7 LowJuly 19, 2005
dg remote control serverDG Remote Control Server 1.6.2 allows remote attackers to cause a denial of service (crash or CPU...CVE-2005-2305Public exploit7.5 HighJuly 19, 2005
microsoft internet explorer, live messenger +1 moreMicrosoft MSN Messenger 9.0 and Internet Explorer 6.0 allows remote attackers to cause a denial...CVE-2005-23045.0 MediumJuly 19, 2005
powerdnsPowerDNS before 2.9.18, when allowing recursion to a restricted range of IP addresses, does not...CVE-2005-2302Fix available2.1 LowJuly 19, 2005
powerdnsPowerDNS before 2.9.18, when running with an LDAP backend, does not properly escape LDAP queries,...CVE-2005-2301Fix available5.0 MediumJuly 19, 2005
skype technologies skypeSkype 1.1.0.20 and earlier allows local users to overwrite arbitrary files via a symlink attack...CVE-2005-23002.1 LowJuly 19, 2005
No product listedMultiple cross-site scripting (XSS) vulnerabilities in Simple Message Board Version 2.0 Beta 1...CVE-2005-22994.3 MediumJuly 19, 2005
softwin bitdefender engineBitDefender Engine 1.6.1 and earlier does not properly scan all attachments, which allows remote...CVE-2005-22985.0 MediumJuly 19, 2005
sybase easerverStack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote...CVE-2005-2297Public exploitEPSS 74.2%4.6 MediumJuly 19, 2005
apple airport cardThe Apple AirPort card uses a default WEP key when not connected to a known or trusted network,...CVE-2005-21962.1 LowJuly 19, 2005
sophos anti-virus, mailmonitor, mailmonitor for notes domino +2 more +4 moreSophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to...CVE-2005-15305.0 MediumJuly 19, 2005
ekgA certain contributed script for ekg Gadu Gadu client 1.5 and earlier allows attackers to execute...CVE-2005-185110.0 HighJuly 18, 2005
ekgCertain contributed scripts for ekg Gadu Gadu client 1.5 and earlier create temporary files...CVE-2005-185010.0 HighJuly 18, 2005
yabbYabbSE 1.5.5c allows remote attackers to obtain sensitive information via a direct request to...CVE-2005-22965.0 MediumJuly 17, 2005
pyrosoft inc netpanzerNetPanzer 0.8 and earlier allows remote attackers to cause a denial of service (infinite loop)...CVE-2005-2295Public exploitFix available5.0 MediumJuly 17, 2005
oracle formsOracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an...CVE-2005-22942.1 LowJuly 17, 2005
oracle forms builderOracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is...CVE-2005-22935.5 MediumJuly 17, 2005
oracle jdeveloperOracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, ...CVE-2005-22922.1 LowJuly 17, 2005
oracle jdeveloperOracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when...CVE-2005-22914.6 MediumJuly 17, 2005
No product listedwps_shop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands...CVE-2005-229010.0 HighJuly 17, 2005
phpcounterPHPCounter 7.2 allows remote attackers to obtain sensitive information via a direct request to...CVE-2005-22895.0 MediumJuly 17, 2005
phpcounterCross-site scripting (XSS) vulnerability in PHPCounter 7.2 allows remote attackers to inject...CVE-2005-22884.3 MediumJuly 17, 2005
softiacom wmailserverSoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to cause a denial of service ...CVE-2005-2287Public exploitEPSS 56.8%5.0 MediumJuly 17, 2005
esi products webeocWebEOC before 6.0.2 does not properly check user authorization, which allows remote attackers to...CVE-2005-228610.0 HighJuly 17, 2005
esi products webeocWebEOC before 6.0.2 stores sensitive information in locations such as URIs, web pages, and...CVE-2005-22855.0 MediumJuly 17, 2005
esi products webeocMultiple SQL injection vulnerabilities in WebEOC before 6.0.2 allow remote attackers to modify...CVE-2005-22847.5 HighJuly 17, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open