CVEs published in September 2005
307 vulnerabilities, 8 critical, 1 exploited.
- jelsoft vbulletinMultiple SQL injection vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to...7.5 High
- jelsoft vbulletinimage.php in vBulletin 3.0.9 and earlier allows remote attackers with access to the administrator...2.1 Low
- jelsoft vbulletinMultiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote...4.3 Medium
- jelsoft vbulletinMultiple SQL injection vulnerabilities in vBulletin before 3.0.9 allow remote attackers to...7.5 High
- apple safariApple Safari allows remote attackers to cause a denial of service (application crash) via a...5.0 Medium
- content2webPHP file inclusion vulnerability in index.php in Content2Web 1.0.1 allows remote attackers to...4.3 Medium
- francisco burzi php-nukeMultiple unspecified vulnerabilities in the WYSIWYG editor in PHP-Nuke before 7.9 Final have...10.0 High
- ibm lotus domino, lotus domino enterprise server +1 moreCross-site scripting (XSS) vulnerability in IBM Lotus Domino 6.5.2 allows remote attackers to...4.3 Medium
- ensim webpplianceCross-site scripting (XSS) vulnerability in Ensim webplliance allows remote attackers to inject...4.3 Medium
- suse linuxBuffer overflow in liby2util in Yet another Setup Tool (YaST) for SuSE Linux 9.3 allows local...4.6 Medium
- simplecdr-xThe MasterDataCD::createImage function in masterdatacd.cpp for SimpleCDR-X 1.3.3 creates the ...2.1 Low
- gnu texinfoThe sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite...1.2 Low
- cutephp cutenewsDirect static code injection vulnerability in the flood protection feature in inc/shows.inc.php...7.5 High
- cutephp cutenewsCross-site scripting (XSS) vulnerability in CuteNews allows remote attackers to inject arbitrary...4.3 Medium
- amar sagoo tofuTofu 0.2 allows remote attackers to execute arbitrary Python code via crafted pickled objects,...7.5 High
- opera browserOpera before 8.50 allows remote attackers to spoof the content type of files via a filename with...2.6 Low
- opera browserThe mail client in Opera before 8.50 opens attached files from the user's cache directory without...5.0 Medium
- helpdesk software heskHelpdesk Software Hesk allows remote attackers to bypass authentication for (1) admin.php and (2)...7.5 High
- interakt mx shopSQL injection vulnerability in Interakt MX Shop 3.2.0 allows remote attackers to execute...7.5 High
- No product listedSQL injection vulnerability in index.php in NooTopList 1.0.0 release 17 allows remote attackers...7.5 High
- openttdMultiple buffer overflows in OpenTTD before 0.4.0.1 allow attackers to cause a denial of service ...7.5 High
- masqmailmasqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a...2.1 Low
- masqmailmasqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail...7.5 High
- sgi irixUnknown vulnerability in rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not sufficiently...7.5 High
- sgi irixrpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous...7.5 High
- xclusive-software mccsMulti-Computer Control System (MCCS) 1.0 allows remote attackers to cause a denial of service via...5.0 Medium
- sun solarisUnspecified vulnerability in the "tl" driver in Solaris 10 allows local users to cause a denial...2.1 Low
- bugada andrea php advanced transfer managerMultiple cross-site scripting (XSS) vulnerabilities in viewers/txt.php in PHP Advanced Transfer...4.3 Medium
- bugada andrea php advanced transfer managerPHP Advanced Transfer Manager 1.30 allows remote attackers to obtain sensitive PHP configuration...5.0 Medium
- bugada andrea php advanced transfer managerPHP Advanced Transfer Manager 1.30 has a default password for the administrator user, which...7.5 High
- bugada andrea php advanced transfer managerMultiple directory traversal vulnerabilities in PHP Advanced Transfer Manager 1.30 allow remote...5.0 Medium
- symantec veritas storage exec, storagecentral +1 moreMultiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS...7.5 High
- baculabacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink...3.6 Low
- ibm rational clearquestUnspecified vulnerability in the web client for IBM Rational ClearQuest 2002.05.00 and 2002.05.20...6.8 Medium
- hp hp-ux, tru64 +1 moreUnspecified vulnerability in the FTP Daemon (ftpd) for HP Tru64 UNIX 4.0F PK8 and other versions...1.7 Low
- ncompressncompress 4.2.4 and earlier allows local users to overwrite arbitrary files via a symlink attack...2.1 Low
- mozilla firefox, mozilla +1 moreFirefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell...7.5 High
- clam anti-virus clamavBuffer overflow in libclamav/upx.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers...7.5 High
- clam anti-virus clamavlibclamav/fsg.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to cause a denial...5.0 Medium
- linecontrol java clientAuthInfo.java in LineContol Java Client (jlc) before 0.8.1 stores sensitive information such as...2.1 Low
- deluxebbMultiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to...7.5 High
- hp laserjet 2430HP LaserJet 2430, and possibly other printers that use Jetdirect controls, stores information...5.0 Medium
- digital scribe scribeSQL injection vulnerability in login.php in Digital Scribe 1.4 allows remote attackers to execute...7.5 High
- ahnlab v3 virusblock 2005, v3net, v3pro 2004 +2 moreThe v3flt2k.sys driver in AhnLab V3Pro 2004 Build 6.0.0.383, V3 VirusBlock 2005 Build 6.0.0.383,...7.5 High
- aewebworks aedatingSQL injection vulnerability in search_result.php in AEwebworks aeDating Script 4.0 and earlier...7.5 High
- data center resources avocentAvocent CCM console server running firmware 2.1 CCM4850 allows remote authenticated attackers to...4.6 Medium
- oracle reportsSQL injection vulnerability in Oracle Reports that use Lexical References allows remote attackers...7.5 High
- compaq compaqhttpserverCross-site scripting (XSS) vulnerability in CompaqHTTPServer 2.1 allows remote attackers to...4.3 Medium
- orionserver orion application serverCross-site scripting (XSS) vulnerability in Orion 1.3.8 and 1.4.5 allows remote attackers to...4.3 Medium
- phpoutsourcing noahs classifiedsCross-site scripting (XSS) vulnerability in index.php in phpoutsourcing Noah's classifieds 1.3...4.3 Medium
- Show moreLoading…