CVEs published in September 2005
307 vulnerabilities, 8 critical, 1 exploited.
- hylafaxxferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a...2.1 Low
- eric integrated development environment integrated development environmentUnspecified vulnerability in Eric Integrated Development Environment (eric3) before 3.7.2 has...10.0 High
- scriptsolutions perldiverCross-site scripting (XSS) vulnerability in perldiver.cgi in PerlDiver 2.x allows remote...4.3 Medium
- scriptsolutions perldiverCross-site scripting (XSS) vulnerability in perldiver.pl in PerlDiver 1.x allows remote attackers...4.3 Medium
- multitheftautoMultiTheftAuto 0.5 patch 1 and earlier allows remote attackers to cause a denial of service ...5.0 Medium
- multitheftautoMultiTheftAuto 0.5 patch 1 and earlier does not properly verify client privileges when running...5.0 Medium
- unu networks mailgustSQL injection vulnerability in MailGust 1.9 allows remote attackers to execute arbitrary SQL...7.5 High
- alstrasoft e-friendsPHP remote file inclusion vulnerability in index.php in AlstraSoft E-Friends 4.0 allows remote...7.5 High
- powerarchiver 2002, 2003, 2004 +1 more +3 moreMultiple stack-based buffer overflows in PowerArchiver 8.10 through 9.5 Beta 4 and Beta 5 allow...7.5 High
- realnetworks realplayer, helix player +1 moreFormat string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to...5.1 Medium
- opera browserMultiple unspecified vulnerabilities in Opera 8.50 on Linux and Windows have unknown impact and...10.0 High
- debian linux, linux kernel +1 moreLinux kernel 2.6.8 to 2.6.14-rc2 allows local users to cause a denial of service (kernel OOPS)...2.1 Low
- phpfopen_wrappers.c in PHP 4.4.0, and possibly other versions, does not properly restrict access to...2.1 Low
- linux kernelThe sys_set_mempolicy function in mempolicy.c in Linux kernel 2.6.x allows local users to cause a...2.1 Low
- No product listedSQL injection vulnerability in module/down.inc.php in jportal 2.3.1 allows remote attackers to...7.5 High
- igor pavlov 7-zipStack-based buffer overflow in the ARJ plugin (arj.dll) 3.9.2.0 for 7-Zip 3.13, 4.23, and 4.26...9.3 High
- phpmyfaqPhpMyFaq 1.5.1 allows remote attackers to obtain sensitive information via a LANGCODE parameter...5.0 Medium
- phpmyfaqPhpMyFaq 1.5.1 stores data files under the web document root with insufficient access control and...5.0 Medium
- phpmyfaqDirectory traversal vulnerability in index.php in PhpMyFaq 1.5.1 allows remote attackers to read...6.4 Medium
- phpmyfaqMultiple cross-site scripting (XSS) vulnerabilities in PhpMyFaq 1.5.1 allow remote attackers to...4.3 Medium
- phpmyfaqSQL injection vulnerability in password.php in PhpMyFaq 1.5.1 allows remote attackers to modify...6.8 Medium
- my little homepage little forumSQL injection vulnerability in search.php in My Little Forum 1.5 and 1.6 beta allows remote...7.5 High
- mozilla firefox, suite +1 moreFirefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows...5.0 Medium
- mozilla firefox, suite +1 moreFirefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute...6.4 Medium
- mozilla firefox, suite +1 moreInteger overflow in the JavaScript engine in Firefox before 1.0.7 and Mozilla Suite before 1.7.12...7.5 High
- mozilla firefox, suite +1 moreFirefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects...5.0 Medium
- mozilla firefox, suite +1 moreFirefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP...5.0 Medium
- mozilla firefox, suite +1 moreFirefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of...7.5 High
- mozilla firefox, suite +1 moreHeap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote...7.5 High
- linux kernelMultiple vulnerabilities in Linux kernel before 2.6.13.2 allow local users to cause a denial of...2.1 Low
- mall23SQL injection vulnerability in AddItem.asp in Mall23 eCommerce allows remote attackers to execute...7.5 High
- usermin, webmin +1 moreminiserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is...7.5 High
- opera browserUnspecified "drag-and-drop vulnerability" in Opera Web Browser before 8.50 on Windows allows ...5.0 Medium
- tac vistaDirectory traversal vulnerability in the web interface (ISALogin.dll) for TAC Vista 4.0, and...5.0 Medium
- mall23SQL injection vulnerability in infopage.asp in Mall23 eCommerce allows remote attackers to...7.5 High
- hosting controller controllerUnspecified vulnerability in Hosting Controller 6.1 before Hotfix 2.4 allows remote attackers to...5.0 Medium
- handy address book serverCross-site scripting (XSS) vulnerability in Handy Address Book Server 1.1 allows remote attackers...4.3 Medium
- ttxn file transfer anywhereFile Transfer Anywhere 3.01 stores sensitive password information in plaintext in the PASS value...4.6 Medium
- compuware driverstudioCompuware DriverStudio Remote Control service (DSRsvc.exe) 2.7 and 3.0 beta 2 allows remote...5.0 Medium
- compuware driverstudioCompuware DriverStudio Remote Control service (DSRsvc.exe) 2.7 and 3.0 beta 2 allows remote...7.5 High
- cambridge computer corporation vxwebStack-based buffer overflow in vxWeb 1.1.4 allows remote attackers to cause a denial of service ...7.5 High
- cambridge computer corporation vxtftpsrvBuffer overflow in vxTftpSrv 1.7.0 allows remote attackers to cause a denial of service (crash)...7.5 High
- cambridge computer corporation vxftpsrvBuffer overflow in vxFtpSrv 0.9.7 allows remote attackers to execute arbitrary code via a long...7.5 High
- ahnlab v3 virusblock 2005, v3net, v3pro 2004 +2 moreDirectory traversal vulnerability in the archive decompression library in AhnLab V3Pro 2004 build...5.0 Medium
- ahnlab v3 virusblock 2005, v3net, v3pro 2004 +2 moreStack-based buffer overflow in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0...7.5 High
- sybari antigenSybari Antigen 8.0 SR2 does not properly filter SMTP messages, which allows remote attackers to...5.0 Medium
- alstrasoft epayDirectory traversal vulnerability in index.php in Alstrasoft Epay Pro 2.0 and earlier allows...5.0 Medium
- jelsoft vbulletinMultiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.7 and earlier allow remote...4.3 Medium
- jelsoft vbulletinMultiple SQL injection vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to...7.5 High
- jelsoft vbulletinMultiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.9 and earlier allow remote...4.3 Medium
- Show moreLoading…