CVEs published in September 2005
307 vulnerabilities, 8 critical, 1 exploited.
- phpoutsourcing noahs classifiedsSQL injection vulnerability in index.php in phpoutsourcing Noah's classifieds allows remote...7.5 High
- avira desktopStack-based buffer overflow in AVIRA Desktop for Windows 1.00.00.68 with AVPACK32.DLL 6.31.0.3,...7.5 High
- adaptive technology resource centre atutorATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document...5.0 Medium
- adaptive technology resource centre atutorconfig.inc.php in ATutor 1.5.1, and possibly earlier versions, uses an incomplete blacklist to...4.6 Medium
- adaptive technology resource centre atutorSQL injection vulnerability in password_reminder.php in ATutor before 1.5.1 pl1 allows remote...7.5 High
- miva merchantCross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote...4.3 Medium
- subscribe me pro me proDirectory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote...5.0 Medium
- azerbaijan development group azdgdatingDirectory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly...7.5 High
- sawmillCross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers...4.3 Medium
- mark d. roth pam per userpam_per_user before 0.4 does not verify if the user name changes between authentication attempts...7.5 High
- No product listedKillProcess 2.20 and earlier allows local users to bypass kill list restrictions by launching...2.1 Low
- killprocessBuffer overflow in KillProcess 2.20 and earlier allows user-assisted attackers to execute...5.1 Medium
- openssl, canonical ubuntu linux +1 moreThe default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead...7.5 High
- arcarc 5.21j and earlier create temporary files with world-readable permissions, which allows local...2.1 Low
- brent ely gnome workstation command centerThe perform_file_save function in GNOME Workstation Command Center (gwcc) 0.9.6 and earlier...4.6 Medium
- twikiThe history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers...7.5 High
- common-lisp-controllerUnknown vulnerability in common-lisp-controller 4.18 and earlier allows local users to gain...4.6 Medium
- microsoft antispywareUnquoted Windows search path vulnerability in Microsoft AntiSpyware might allow local users to...4.6 Medium
- gtkdiskfreeThe open_cmd_tube function in mount.c for gtkdiskfree 1.9.3 and earlier allows local users to...5.0 Medium
- linksys wrt54gBuffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions...7.5 High
- xfree86 project xfree86Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute...5.1 Medium
- softwolves software turquoise superstatBuffer overflow in utility.cpp in Turquoise SuperStat (turqstat) 2.2.4 and earlier might allow...7.5 High
- linksys wrt54gLinksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not...5.0 Medium
- linksys wrt54gezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and...5.0 Medium
- linksys wrt54gezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and...7.5 High
- linksys wrt54gLinksys WRT54G router allows remote attackers to cause a denial of service (CPU consumption and...5.0 Medium
- zebedeeZebedee 2.4.1, when "allowed redirection port" is not set, allows remote attackers to cause a...5.0 Medium
- eset software nod32 antivirusHeap-based buffer overflow in NOD32 2.5 with nod32.002 1.033 build 1127, with active scanning...7.5 High
- No product listedSQL injection vulnerability in class-1 Forum Software 0.24.4 allows remote attackers to execute...7.5 High
- cj desing cjweb2mailMultiple Cross-site scripting (XSS) vulnerabilities in CjWeb2Mail 3.0 allow remote attackers to...4.3 Medium
- cj desing cjlinkoutCross-site scripting (XSS) vulnerability in top.php in CjLinkOut 1.0 allows remote attackers to...4.3 Medium
- cj design tag boardMultiple cross-site scripting (XSS) vulnerabilities in details.php in CjTagBoard 3.0 allow remote...4.3 Medium
- filezilla** DISPUTED ** NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15,...4.6 Medium
- stylemotion web newsWEB//NEWS 1.4 allows remote attackers to obtain sensitive information via a direct request to...5.0 Medium
- stylemotion web newsSQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL...7.5 High
- pblangsetcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to obtain...5.0 Medium
- pblangCross-site scripting (XSS) vulnerability in the user registration in PBLang 4.65, and possibly...4.3 Medium
- pblangDirect static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier...7.5 High
- pblangDirectory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions,...5.0 Medium
- csystems webarchivexWebArchiveX.dll 5.5.0.76 installed before September 6th, 2005 is marked safe for scripting by...6.4 Medium
- secureol ve2SecureOL VE2 1.05.1008 does not properly restrict public access to physical memory, which allows...4.6 Medium
- checkpoint connectra ngxCheck Point NGX R60 does not properly verify packets against the predefined service group "CIFS"...7.5 High
- No product listedMultiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote...7.5 High
- maxdev md-proMAXdev MD-Pro 1.0.73, and possibly earlier versions, allows remote attackers to obtain sensitive...5.0 Medium
- No product listedMultiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.73, and possibly earlier...4.3 Medium
- maxdev md-proThe Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete...7.5 High
- neocrome land down underCross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and earlier...4.3 Medium
- phpcommunitycalendarMultiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3, and possibly...4.3 Medium
- phpcommunitycalendarphpCommunityCalendar 4.0.3 allows remote attackers to bypass authentication and gain unauthorized...7.5 High
- phpcommunitycalendarMultiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier...7.5 High
- Show moreLoading…