Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
August

CVEs published in August 2005

318 vulnerabilities, 15 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

logicampusCross-site scripting (XSS) vulnerability in the Helpdesk in Logicampus before 1.1.1 allows remote...CVE-2005-24854.3 MediumAugust 7, 2005
denora irc stats irc statsBuffer overflow in the rdb_query function for Denora IRC Stats 1.0 might allow attackers to...CVE-2005-24847.5 HighAugust 7, 2005
karrigellEval injection vulnerability in Karrigell before 2.1.8 allows remote attackers to execute...CVE-2005-2483Public exploit7.5 HighAugust 7, 2005
metasploit frameworkThe StateToOptions function in msfweb in Metasploit Framework 2.4 and earlier, when running with...CVE-2005-24825.0 MediumAugust 7, 2005
macromedia coldfusion fuseboxColdFusion Fusebox 4.1.0 allows remote attackers to obtain sensitive information via an invalid...CVE-2005-24815.0 MediumAugust 5, 2005
macromedia coldfusion fuseboxCross-site scripting (XSS) vulnerability in ColdFusion Fusebox 4.1.0 allows remote attackers to...CVE-2005-2480Public exploit4.3 MediumAugust 5, 2005
pablo software solutions quick n easy ftp serverQuick 'n Easy FTP Server 3.0 allows remote attackers to cause a denial of service (application...CVE-2005-2479Public exploit5.0 MediumAugust 5, 2005
silver-scripts silvernewsSQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL...CVE-2005-24787.5 HighAugust 5, 2005
naxtor shopping cartshop_display_products.php in Naxtor Shopping Cart 1.0 allows remote attackers to obtain sensitive...CVE-2005-24775.0 MediumAugust 5, 2005
naxtor shopping cartCross-site scripting (XSS) vulnerability in lost_passowrd.php in Naxtor Shopping Cart 1.0 allows...CVE-2005-2476Public exploit4.3 MediumAugust 5, 2005
info-zip unzipRace condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a...CVE-2005-2475Fix available1.2 LowAugust 5, 2005
churchinfoChurchInfo allows remote attackers to execute obtain sensitive information via the PersonID...CVE-2005-24745.0 MediumAugust 5, 2005
churchinfoMultiple SQL injection vulnerabilities in ChurchInfo allow remote attackers to execute arbitrary...CVE-2005-24737.5 HighAugust 5, 2005
netcplus businessmailMultiple buffer overflows in BusinessMail 4.60.00 allow remote attackers to cause a denial of...CVE-2005-2472Public exploit5.0 MediumAugust 5, 2005
netpbmpstopnm in netpbm does not properly use the "-dSAFER" option when calling Ghostscript to convert...CVE-2005-2471Fix available7.5 HighAugust 5, 2005
mozilla thunderbirdrun-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite...CVE-2005-2353Fix available2.1 LowAugust 5, 2005
suse linux, novell linux desktop, open enterprise server +2 moretraps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack,...CVE-2005-17672.1 LowAugust 5, 2005
suse linux, novell linux desktop, open enterprise server +2 moreLinux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service...CVE-2005-17612.1 LowAugust 5, 2005
ca brightstor arcserve backup, brightstor arcserve backup agent, broadcom brightstor enterprise backup +1 more +3 moreStack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve...CVE-2005-1272Public exploitEPSS 66.1%7.5 HighAugust 5, 2005
apache http server, debian linux, redhat enterprise linux desktop +2 more +4 moreOff-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache...CVE-2005-1268Fix available5.0 MediumAugust 5, 2005
debian linux, linux kernel +1 moreArray index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6...CVE-2005-24565.5 MediumAugust 4, 2005
greasemonkeyGreasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request...CVE-2005-2455Public exploit5.0 MediumAugust 4, 2005
networkactiv web serverCross-site scripting (XSS) vulnerability in NetworkActiv Web Server 1.0, 2.0.0.6, 3.0.1.1, and 3...CVE-2005-2453Public exploit4.3 MediumAugust 4, 2005
libtifflibtiff up to 3.7.0 allows remote attackers to cause a denial of service (application crash) via...CVE-2005-2452Fix available5.0 MediumAugust 3, 2005
cisco ios, ios xr +1 moreCisco IOS 12.0 through 12.4 and IOS XR before 3.2, with IPv6 enabled, allows remote attackers on...CVE-2005-24512.1 LowAugust 3, 2005
clam anti-virus clamavMultiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in...CVE-2005-2450Fix available7.5 HighAugust 3, 2005
sandboxRace condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files...CVE-2005-24491.2 LowAugust 3, 2005
ekgMultiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a...CVE-2005-24485.0 MediumAugust 3, 2005
early impact product cartSQL injection vulnerability in viewPrd.asp in Product Cart 2.6 allows remote attackers to execute...CVE-2005-24457.5 HighAugust 3, 2005
cerulean studios trillian proTrillian Pro 3.1 build 121, when checking Yahoo e-mail, stores the password in plaintext in a...CVE-2005-24442.1 LowAugust 3, 2005
kshoutKshout 2.x and 3.x stores settings.dat under the web document root with insufficient access...CVE-2005-24435.0 MediumAugust 3, 2005
spi dynamics webinspectCross-Application Scripting (XAS) vulnerability in SPI Dynamics WebInspect 5.0.196 allows remote...CVE-2005-24425.0 MediumAugust 3, 2005
vbzoomMultiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject...CVE-2005-2441Public exploit4.3 MediumAugust 3, 2005
thomson netg web skill vantage managerSQL injection vulnerability in login.asp in Thomson Web Skill Vantage Manager allows remote...CVE-2005-24407.5 HighAugust 3, 2005
usebbSQL injection vulnerability in UseBB 0.5.1 and earlier, when magic_quotes_gpc is disabled, allows...CVE-2005-24397.5 HighAugust 3, 2005
No product listedCross-site scripting (XSS) vulnerability in UseBB 0.5.1 and earlier allows remote attackers to...CVE-2005-24384.3 MediumAugust 3, 2005
website baker bakerWebsite Baker Project does not properly verify the file extensions of uploaded files, which...CVE-2005-24375.0 MediumAugust 3, 2005
website baker bakerbrowse.php in Website Baker Project allows remote attackers to obtain sensitive data via (1) a...CVE-2005-24365.0 MediumAugust 3, 2005
website baker bakerCross-site scripting (XSS) vulnerability in browse.php in Website Baker Project allows remote...CVE-2005-24354.3 MediumAugust 3, 2005
linksys wrt54gLinksys WRT54G router uses the same private key and certificate for every router, which allows...CVE-2005-24345.0 MediumAugust 3, 2005
tincan phplistPhpList allows remote attackers to obtain sensitive information via a direct request to (1) about...CVE-2005-24335.0 MediumAugust 3, 2005
tincan phplistSQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the...CVE-2005-2432Public exploit7.5 HighAugust 3, 2005
gforgeThe (1) lost password and (2) account pending features in GForge 4.5 do not properly set a limit...CVE-2005-24315.0 MediumAugust 3, 2005
gforgeMultiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to...CVE-2005-2430Fix available4.3 MediumAugust 3, 2005
mozilla firefoxFirefox, when opening Microsoft Word documents, does not properly set the permissions on shared...CVE-2005-24295.0 MediumAugust 3, 2005
ibm lotus dominoLotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive...CVE-2005-2428Public exploitEPSS 73.0%5.0 MediumAugust 3, 2005
elemental software cartwizCross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ allows remote attackers to...CVE-2005-24274.3 MediumAugust 3, 2005
ftpshell serverFTPshell Server 3.38 allows remote authenticated users to cause a denial of service (application...CVE-2005-2426Public exploit2.1 LowAugust 3, 2005
ares fileshareStack-based buffer overflow in Ares FileShare 1.1 allows remote attackers or local users to...CVE-2005-242510.0 HighAugust 3, 2005
siemens santis 50The management interface for Siemens SANTIS 50 running firmware 4.2.8.0, and possibly other...CVE-2005-24247.5 HighAugust 3, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open