CVEs published in September 2005
307 vulnerabilities, 8 critical, 1 exploited.
- advansysperu software usb lock auto-protectAdvansysperu Software USB Lock Auto-Protect (AP) 1.5 uses a weak encryption scheme to encrypt...2.1 Low
- linux kernel, canonical ubuntu linux, redhat enterprise linux +2 moreThe raw_sendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a...3.6 Low
- linux kernelStack-based buffer overflow in the sendmsg function call in the Linux kernel 2.6 before 2.6.13.1...4.6 Medium
- linux kernelThe Linux kernel 2.6 before 2.6.12.1 allows local users to cause a denial of service (kernel...2.1 Low
- gnu mailutilsFormat string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote...7.5 High
- andries brouwer util-linuxumount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes...7.2 High
- py2playPy2Play Unpickles Untrusted Objects7.5 High
- easy software products cupsThe is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows...5.0 Medium
- linux kernelThe ipt_recent kernel module (ipt_recent.c) in Linux kernel 2.6.12 and earlier does not properly...2.1 Low
- linux kernelThe ipt_recent kernel module (ipt_recent.c) in Linux kernel before 2.6.12, when running on 64-bit...5.0 Medium
- mozilla firefoxBuffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and...7.5 High
- sun solarisUnknown vulnerability in the net-svc script on Solaris 10 allows remote authenticated users to...7.5 High
- phpmyadminMultiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4 allow remote...4.3 Medium
- ziptorrentZipTorrent 1.3.7.3 stores sensitive information in plaintext in the pref.txt file, which allows...2.1 Low
- bluewhalecrmSQL injection vulnerability in BlueWhaleCRM allows remote attackers to execute arbitrary SQL...7.5 High
- No product listedMercora IMRadio 4.0.0.0 stores usernames and passwords in plaintext in the MercoraClient\Profiles...4.6 Medium
- amemberMultiple PHP remote file inclusion vulnerabilities in aMember Pro 2.3.4 allow remote attackers to...7.5 High
- No product listedURBAN 1.5.3_1 allows local users to overwrite arbitrary files via a symlink attack on the (1)...2.1 Low
- open webmail webmailCross-site scripting (XSS) vulnerability in openwebmail-main.pl in OpenWebMail 2.41 allows remote...4.3 Medium
- road runner adsl road runner modemADSL Road Runner modem in the Annex A family has a service running on port 224, which allows...7.5 High
- n-stalker n-stealthCross-site scripting (XSS) vulnerability in N-Stealth Commercial Edition before 5.8.0.38 and Free...4.3 Medium
- niktoCross-site scripting (XSS) vulnerability in Nikto 1.35 and earlier allows remote attackers to...4.3 Medium
- savant webserverSavant Web Server stores user credentials in plaintext in the Savant\Users registry key, which...4.6 Medium
- No product listedThe Fetch.FetchContact.1 ActiveX control (Fetch.dll) for Rediff Bol 7.0 allows remote attackers...5.0 Medium
- softstack free smtp serverFree SMTP Server 2.2 allows remote attackers to use the server as an open mail relay (spam proxy).7.5 High
- winaceStack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6...7.5 High
- unclassified newsboard newsboardCross-site scripting (XSS) vulnerability in Unclassified NewsBoard 1.5.3 allows remote attackers...4.3 Medium
- thesitewizard.com chfeedback.pl feedback form perl scriptCRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1...5.0 Medium
- guppyMultiple cross-site scripting (XSS) vulnerabilities in GuppY 4.5.3a and earlier allow remote...4.3 Medium
- novell netwareUnknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote...5.0 Medium
- smb4ksmb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a...2.1 Low
- whitsoft development slimftpdSlimFTPd 3.17 allows remote attackers to cause a denial of service (crash) via certain (1) USER...5.0 Medium
- barracuda networks spam firewallArgument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17...6.4 Medium
- barracuda networks spam firewallDirectory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16...5.0 Medium
- barracuda networks spam firewallimg.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to...7.5 High
- cmsmadesimple cms made simplePHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows...7.5 High
- ariba spend management solutionsAriba Spend Management System sends the username and password to the server in plaintext in a...5.0 Medium
- indiatimes messenger messengerBuffer overflow in MMClient.exe in Indiatimes Messenger 6.0 allows remote attackers to cause a...7.5 High
- helpdesk software heskHelpdesk software Hesk 0.92 does not properly verify usernames and passwords, which allows remote...7.5 High
- dameware development mini remote control serverBuffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers...7.5 High
- cisco iosBuffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12...7.5 High
- 3com 3c15100dDirectory traversal vulnerability in the web server for 3Com Network Supervisor 5.0.2 allows...5.0 Medium
- maxdev md-proMultiple unknown vulnerabilities in MAXdev MD-Pro 1.0.72 and earlier have unknown impact and...10.0 High
- maxdev md-proMultiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.72 allow remote...4.3 Medium
- mywebland mybloggieSQL injection vulnerability in login.php in myBloggie 2.1.3-beta and earlier allows remote...7.5 High
- plainblack webguiMultiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote...7.5 High
- phorumMultiple cross-site scripting (XSS) vulnerabilities in Phorum 5.0.17a and earlier allow remote...4.3 Medium
- inter7 sqwebmailCross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject...4.3 Medium
- eric fichot downfileDownFile 1.3 allows remote attackers to gain administrator privileges via a direct request to (1)...7.5 High
- eric fichot downfileCross-site scripting (XSS) vulnerability in DownFile 1.3 allows remote attackers to inject...4.3 Medium
- Show moreLoading…