CVEs published in September 2005
307 vulnerabilities, 8 critical, 1 exploited.
- mpeg-tools mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users... 2.1 Low
- nateon messenger Buffer overflow in the ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows... 7.5 High
- nateon messenger The ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to... 7.5 High
- macromedia breeze The "reset password" feature in Macromedia Breeze 5.0 stores passwords in plaintext in the... 2.1 Low
- linux kernel Race condition in ebtables netfilter module (ebtables.c) in Linux 2.6, when running on an SMP... 2.6 Low
- linux kernel The HFS and HFS+ (hfsplus) modules in Linux 2.6 allow attackers to cause a denial of service ... 2.1 Low
- linux kernel mm/ioremap.c in Linux 2.6 on 64-bit x86 systems allows local users to cause a denial of service... 2.1 Low
- linux kernel fs/exec.c in Linux 2.6, when one thread is tracing another thread that shares the same memory map... 2.1 Low
- debian linux, canonical ubuntu linux, linux kernel +2 more Race condition in Linux 2.6, when threads are sharing memory mapping via CLONE_VM (such as... 4.7 Medium
- linux kernel The mprotect code (mprotect.c) in Linux 2.6 on Itanium IA64 Montecito processors does not... 2.1 Low
- ibm aix Buffer overflow in getconf in IBM AIX 5.2 to 5.3 allows local users to execute arbitrary code via... 7.2 High
- apachetop apachetop 0.12.5 and earlier, when running in debug mode, allows local users to create or append... 2.1 Low
- ntlmaps The post-installation script for ntlmaps before 0.9.9 sets world-readable permissions for the... 2.1 Low
- squid Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle... 5.0 Medium
- debian backupninja The handler code for backupninja 0.8 and earlier creates temporary files with predictable... 2.1 Low
- six apart movable type mt-comments.cgi in Movable Type before 3.2 allows attackers to redirect users to other web sites... 2.6 Low
- six apart movable type Cross-site scripting (XSS) vulnerability in Movable Type before 3.2 allows remote attackers to... 4.3 Medium
- No product listed The administrative interface in Movable Type allows attackers to upload files with arbitrary... 5.0 Medium
- six apart movable type The password reset feature in Movable Type before 3.2 generates different error messages... 5.0 Medium
- astaro security linux Unspecified "PPTP Remote DoS Vulnerability" in Astaro Security Linux 4.027 allows attackers to... 5.0 Medium
- sun solaris, sunos +1 more Unspecified vulnerability in the (1) Xsun and (2) Xprt commands in Solaris 7, 8, 9, and 10 allows... 4.6 Medium
- qualcomm qpopper poppassd in Qualcomm qpopper 4.0.8 allows local users to modify arbitrary files and gain... 4.6 Medium
- avi alkalay contribute.cgi Directory traversal vulnerability in Avi Alkalay contribute.cgi (aka contribute.pl), dated 16 Jun... 5.0 Medium
- avi alkalay nslookup.cgi Avi Alkalay nslookup.cgi program, dated 16 June 2002, allows remote attackers to execute... 7.5 High
- avi alkalay notify Avi Alkalay notify program, dated 19 Aug 2001, allows remote attackers to execute arbitrary... 7.5 High
- avi alkalay man cgi Avi Alkalay man-cgi script allows remote attackers to execute arbitrary code via shell... 7.5 High
- nokia 3210, 7610 +1 more Nokia 7610 and 3210 phones allows attackers to cause a denial of service via certain characters... 5.0 Medium
- image-line software fl studio Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to... 7.5 High
- mantis Cross-site scripting (XSS) vulnerability in Mantis before 1.0.0rc1 allows remote attackers to... 4.3 Medium
- mantis Cross-site scripting (XSS) vulnerability in bug_actiongroup_page.php in Mantis 0.19.0a1 through 1... 4.3 Medium
- mozilla firefox Firefox 1.0.6 allows attackers to cause a denial of service (crash) via a Proxy Auto-Config (PAC)... 2.6 Low
- abisource community abiword Stack-based buffer overflow in AbiWord before 2.2.10 allows attackers to execute arbitrary code... 7.5 High
- securew2 The SecureW2 3.0 TLS implementation uses weak random number generators (rand and srand from... 5.0 Medium
- contentserv Directory traversal vulnerability in admin/about.php in contentServ 3.1 allows remote attackers... 6.4 Medium
- riverdark studios rss syndicator module Multiple cross-site scripting (XSS) vulnerabilities in rss.php in Riverdark Studios RSS... 4.3 Medium
- sony playstation portable Buffer overflow in the TIFF library in the Photo Viewer for Sony PSP 2.0 firmware allows remote... 5.0 Medium
- cmsmadesimple cms made simple Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 0.10 allows remote... 4.3 Medium
- No product listed SQL injection vulnerability in admin.php in SEO-Board 1.0.2 allows remote attackers to execute... 7.5 High
- wzdftpd wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell... 4.6 Medium
- geshi contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary files via... 5.0 Medium
- punbb PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language... 4.6 Medium
- punbb Cross-site scripting (XSS) vulnerability in PunBB before 1.2.8 allows remote attackers to inject... 4.3 Medium
- microsoft ie for macintosh Microsoft Internet Explorer 5.2.3 for Mac OS allows remote attackers to cause a denial of service... 5.0 Medium
- simplog Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error... 7.5 High
- mpc-donkey zengaia SQL injection vulnerability in Zengaia before 0.2 allows remote attackers to execute arbitrary... 7.5 High
- rsyslog rsyslogd SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote... 7.5 High
- interchange development group interchange Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2,... 5.0 Medium
- interchange development group interchange SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows... 7.5 High
- sun solaris, sunos +1 more Unspecified vulnerability in Unix File System (UFS) on Solaris 8 and 9, when logging is enabled,... 2.1 Low
- hylafax HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which... 3.6 Low
- Show olderLoading…