CVEs published in September 2005
307 vulnerabilities, 8 critical, 1 exploited.
- simple machines forumSimple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which...5.0 Medium
- No product listedCross-site scripting (XSS) vulnerability in Greymatter allows remote attackers to inject...4.3 Medium
- flatnukeprint.php in FlatNuke 2.5.6 allows remote attackers to obtain sensitive information (path...6.4 Medium
- flatnukeCross-site scripting (XSS) vulnerability in FlatNuke 2.5.6 allows remote attackers to inject...4.3 Medium
- flatnukeDirectory traversal vulnerability in FlatNuke 2.5.6 and possibly earlier allows remote attackers...5.0 Medium
- man2webman2web allows remote attackers to execute arbitrary commands via -P arguments.7.5 High
- net-snmpUntrusted search path vulnerability in Net-SNMP 5.2.1.2 and earlier, on Gentoo Linux, installs...4.6 Medium
- urbanMultiple stack-based buffer overflows in urban before 1.5.3 allow local users to gain privileges...7.2 High
- silc secure internet live conferencingsilc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier allows local...2.1 Low
- froxfrox 0.7.16 and 0.7.17 does not properly parse certain Deny ACLs, which might allow attackers to...7.5 High
- froxfrox 0.7.18, when running setuid root, does not properly drop privileges when reading a...7.2 High
- squidThe sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote...5.0 Medium
- squidstore.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service ...5.0 Medium
- trevor hogan bnbtclient.cpp in BNBT EasyTracker 7.7r3.2004.10.27 and earlier allows remote attackers to cause a...5.0 Medium
- e107forum_post.php in e107 0.6 allows remote attackers to post to non-existent forums by modifying...5.0 Medium
- hikiCross-site scripting (XSS) vulnerability in Hiki 0.8.1 to 0.8.2 allows remote attackers to inject...4.3 Medium
- linux kernelxattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the...7.5 High
- linux kernelMemory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2...2.1 Low
- openbsd opensshsshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials...5.0 Medium
- openbsd opensshOpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding ("-D...5.0 Medium
- openttdMultiple format string vulnerabilities in OpenTTD before 0.4.0.1 allow remote attackers to cause...7.5 High
- apache http server, canonical ubuntu linux, debian linux +2 moressl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global...10.0 High
- kdekcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack...7.2 High
- hikiCross-site scripting (XSS) vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject...4.3 Medium
- phpldapadmin project phpldapadminPHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows...7.5 High
- phpldapadmin project phpldapadminDirectory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote...5.0 Medium
- bfcommand and control software bfcc, bfvcc +1 moreBFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows...5.0 Medium
- bfcommand and control software bfcc, bfvcc +1 moreBFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, relies...7.5 High
- bfcommand and control software bfcc, bfvcc +1 moreBFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows...7.5 High
- neocrome land down underMultiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow remote...7.5 High
- alexander palmo simple php blogcomment_delete_cgi.php in Simple PHP Blog allows remote attackers to delete arbitrary files via...5.0 Medium
- cosmoshopDirectory traversal vulnerability in bestmail_edit.cgi in cosmoshop 8.10.78 and earlier allows...5.0 Medium
- cosmoshopcosmoshop 8.10.78 and earlier stores passwords in plaintext in the database, which allows local...2.1 Low
- cosmoshopSQL injection vulnerability in the login function for the administration login panel in cosmoshop...7.5 High
- php fusion fusionCross-site scripting (XSS) vulnerability in PHP-Fusion 6.00.107 and earlier allows remote...4.3 Medium
- autolinksPHP remote file inclusion vulnerability in al_initialize.php for AutoLinks Pro 2.1 allows remote...7.5 High
- ilia alshanetsky fudforumThe Avatar upload feature in FUD Forum before 2.7.0 does not properly verify uploaded files,...7.5 High
- neocrome land down underCross-site scripting (XSS) vulnerability in Land Down Under (LDU) allows remote attackers to...4.3 Medium
- No product listedThe iTAN Online-Banking Security System allows remote attackers to obtain TAN numbers via a man...5.0 Medium
- mybulletinboardSQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to...7.5 High
- looking glass glassLooking Glass 20040427 allows remote attackers to execute arbitrary commands via shell...7.5 High
- looking glass glassMultiple cross-site scripting (XSS) vulnerabilities in Looking Glass 20040427 allow remote...4.3 Medium
- phpwebnotesphp_api.php in phpWebNotes 2.0.0 uses the extract function to modify key variables such as ...7.5 High
- lithium software ii modFormat string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a...5.0 Medium
- hewlett packard (hp) openview network node managerHP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary...9.8 Critical
- university of minnesota gopherMultiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote...7.5 High
- f-secure ssh server, wrq reflection for secure it windows server +1 moreWRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) processes...10.0 High
- wrq reflection for secure it windows serverWRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) does not...7.5 High
- inter7 sqwebmailCross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows...4.3 Medium
- sophos anti-virusHeap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus,...7.5 High
- Show moreLoading…