CVEs published in August 2005
318 vulnerabilities, 15 critical, 0 exploited.
- safehtmlSafeHTML before 1.3.5 does not properly filter script in UTF-7 and CSS comments, which allows...4.3 Medium
- phpsimplicity simplicity of uploadPHP file include vulnerability in download.php in PHPSimplicity Simplicity oF Upload before 1.3.1...5.0 Medium
- phlymailUnknown vulnerability in the "frontend authentication" in PHlyMail 3.02.00 has unknown impact and...7.5 High
- omnipilot software lasso professional serverUnknown vulnerability in Lasso Professional Server8.0.4 and 8.0.5 allows attackers to bypass...6.4 Medium
- my image gallery image galleryindex.php for My Image Gallery (Mig ) 1.4.1 allows remote attackers to obtain the web server path...5.0 Medium
- my image gallery image galleryCross-site scripting (XSS) vulnerability in index.php for My Image Gallery (Mig ) 1.4.1 allows...4.3 Medium
- mozilla firefox, thunderbird +1 moreMozilla Thunderbird 1.0 and Firefox 1.0.6 allows remote attackers to obfuscate URIs via a long...2.6 Low
- midicart software php shopping cartSQL injection vulnerability in MidiCart allows remote attackers to execute arbitrary SQL commands...7.5 High
- ilia alshanetsky fudforumFUDForum 2.6.15 with "Tree View" enabled, as used in other products such as phpgroupware and...5.0 Medium
- hummingbird connectivityHummingbird FTP for Connectivity 10.0 uses weak encryption (trivial encoding) to store the user's...7.5 High
- dokeosMultiple directory traversal vulnerabilities in Dokeos 1.6 and earlier, and possibly Claroline,...5.0 Medium
- aol client softwareAOL Client Software 9.0 uses insecure permissions for its installation path, which allows local...7.2 High
- gallery project galleryUser.php in Gallery, as used in Postnuke, allows users with any Admin privileges to gain access...4.6 Medium
- dada mail mailCross-site scripting (XSS) vulnerability in Dada Mail before 2.10 Alpha 1 allows remote attackers...4.3 Medium
- apple safariApple Safari 1.3 (132) on Mac OS X 1.3.9 allows remote attackers to cause a denial of service ...5.0 Medium
- parlano mindalignParlano MindAlign 5.0 and later versions uses weak encryption, with unknown impact and attack...10.0 High
- parlano mindalignUnknown vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to...7.5 High
- parlano mindalignParlano MindAlign 5.0 and later versions allows remote attackers to list valid users via unknown...5.0 Medium
- parlano mindalignCross-site scripting (XSS) vulnerability in Parlano MindAlign 5.0 and later versions allows...4.3 Medium
- linksys wrt54gsUnknown vulnerability in Linksys WRT54GS wireless router with firmware 4.50.6, with WPA Personal...7.5 High
- dvbbsMultiple cross-site scripting (XSS) vulnerabilities in DVBBS 7.1 SP2 and earlier allow remote...4.3 Medium
- kdelangen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names,...5.0 Medium
- phptb topic boardsSQL injection vulnerability in emailvalidate.php in PHPTB Topic Boards 2.0 allows remote...7.5 High
- mentor adslfr4iiMentor ADSL-FR4II router running firmware 2.00.0111 stores the web administration password in...2.1 Low
- mentor adslfr4iiMentor ADSL-FR4II router running firmware 2.00.0111 allows remote attackers to cause a denial of...5.0 Medium
- No product listedThe web administration interface in Mentor ADSL-FR4II router running firmware 2.00.0111 does not...7.2 High
- mentor adslfr4iiMentor ADSL-FR4II router running firmware 2.00.0111 has an undocumented web server running on TCP...7.5 High
- kaspersky lab anti-virusKaspersky Anti-Virus for Unix/Linux File Servers 5.0-5 uses world-writable permissions for the (1...3.6 Low
- grandstream budgetone 101, budgetone 102 +1 moreGrandstream BudgeTone 101 and 102 running firmware 1.0.6.7 and possibly earlier versions, allows...5.0 Medium
- mybulletinboardMultiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch...7.5 High
- nortel contivityNortel Contivity VPN Client V05_01.030, when configuring a certificate to be used as...7.2 High
- wyse wintermWyse Winterm 1125SE running firmware 4.2.09f or 4.4.061f allows remote attackers to cause a...5.0 Medium
- calogicCaLogic 1.22, and possibly earlier versions, allows remote attackers to obtain sensitive...5.0 Medium
- xmb forum xmbSQL injection vulnerability in u2u.inc.php in XMB Forum 1.9.1 allows remote attackers to execute...7.5 High
- xmb forum xmbxmb.php in XMB Forum 1.9.1 extracts and defines all provided variables, which allows remote...5.0 Medium
- mysqlThe mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13,...5.0 Medium
- oracle mysqlMySQL, when running on Windows, allows remote authenticated users with insert privileges on the...8.5 High
- funkboardFunkBoard 0.66CF, and possibly earlier versions, does not properly restrict access to the (1)...6.4 Medium
- funkboardFunkBoard 0.66CF, and possibly earlier versions, allows remote attackers to obtain sensitive...5.0 Medium
- funkboardMultiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly earlier...4.3 Medium
- syscp team syscpEval injection vulnerability in the template engine for SysCP 1.2.10 and earlier allows remote...7.5 High
- syscp team syscpPHP remote file inclusion vulnerability in SysCP 1.2.10 and earlier allows remote attackers to...7.5 High
- openbbMultiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) allow remote attackers to...7.5 High
- gravity board x development team board xGravity Board X (GBX) 1.1 allows remote attackers to obtain sensitive information via (1) a 1 in...5.0 Medium
- gravity board x development team board xDirect static code injection vulnerability in editcss.php in Gravity Board X (GBX) 1.1 allows...7.5 High
- gravity board x development team board xMultiple cross-site scripting (XSS) vulnerabilities in Gravity Board X (GBX) 1.1 allow remote...4.3 Medium
- gravity board x development team board xSQL injection vulnerability in Gravity Board X (GBX) 1.1 allows remote attackers to execute...7.5 High
- myfaqMultiple SQL injection vulnerabilities in MYFAQ 1.0 allow remote attackers to execute arbitrary...7.5 High
- No product listedCross-site scripting (XSS) vulnerability in index.cfm in CFBB 1.1.0 allows remote attackers to...4.3 Medium
- e107doping.php in ePing plugin 1.02 and earlier for e107 portal allows remote attackers to execute...7.5 High
- Show moreLoading…