CVEs published in October 2005

284 vulnerabilities, 10 critical, 0 exploited.

• novell zenworks patch management server Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181... CVE-2005-3315 Public exploit 7.5 HighOctober 30, 2005
• techno dreams web directory SQL injection vulnerability in Techno Dreams Web Directory script allows remote attackers to... CVE-2005-3386 7.5 HighOctober 29, 2005
• techno dreams mailing list SQL injection vulnerability in Techno Dreams Mailing List script allows remote attackers to... CVE-2005-3385 7.5 HighOctober 29, 2005
• techno dreams guest book SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute... CVE-2005-3384 7.5 HighOctober 29, 2005
• No product listed SQL injection vulnerability in Techno Dreams Announcement script allows remote attackers to... CVE-2005-3383 7.5 HighOctober 29, 2005
• sophos anti-virus Multiple interpretation error in Sophos 3.91 with the 2.28.4 engine allows remote attackers to... CVE-2005-3382 5.0 MediumOctober 29, 2005
• ukranian national antivirus una Multiple interpretation error in Ukrainian National Antivirus (UNA) 1.83.2.16 with kernel 265... CVE-2005-3381 5.0 MediumOctober 29, 2005
• panda titanium 2005 Multiple interpretation error in Panda Titanium 2005 4.02.01 allows remote attackers to bypass... CVE-2005-3380 5.0 MediumOctober 29, 2005
• trend micro officescan, pc-cillin 2005 +1 more Multiple interpretation error in Trend Micro (1) PC-Cillin 2005 12.0.1244 with the 7.510.1002... CVE-2005-3379 5.1 MediumOctober 29, 2005
• norman virus control Multiple interpretation error in Norman 5.81 with the 5.83.02 engine allows remote attackers to... CVE-2005-3378 5.1 MediumOctober 29, 2005
• mcafee internet security suite Multiple interpretation error in (1) McAfee Internet Security Suite 7.1.5 version 9.1.08 with the... CVE-2005-3377 5.1 MediumOctober 29, 2005
• kaspersky lab anti-virus Multiple interpretation error in Kaspersky 5.0.372 allows remote attackers to bypass virus... CVE-2005-3376 5.1 MediumOctober 29, 2005
• ikarus antivirus Multiple interpretation error in Ikarus demo version allows remote attackers to bypass virus... CVE-2005-3375 5.1 MediumOctober 29, 2005
• frisk software f-prot antivirus Multiple interpretation error in F-Prot 3.16c allows remote attackers to bypass virus scanning... CVE-2005-3374 5.1 MediumOctober 29, 2005
• dr.web antivirus Multiple interpretation error in Dr.Web 4.32b allows remote attackers to bypass virus scanning... CVE-2005-3373 5.1 MediumOctober 29, 2005
• broadcom etrust antivirus Multiple interpretation error in eTrust CA 7.0.1.4 with the 11.9.1 engine allows remote attackers... CVE-2005-3372 5.1 MediumOctober 29, 2005
• grisoft avg antivirus Multiple interpretation error in AVG 7 7.0.323 allows remote attackers to bypass virus scanning... CVE-2005-3371 5.1 MediumOctober 29, 2005
• arcavir 2005 Multiple interpretation error in ArcaVir 2005 package 2005-06-21 allows remote attackers to... CVE-2005-3370 5.1 MediumOctober 29, 2005
• No product listed Multiple SQL injection vulnerabilities in the Info-DB module (info_db.php) in Woltlab Burning... CVE-2005-3369 Public exploit 7.5 HighOctober 29, 2005
• search enhanced enhanced Cross-site scripting (XSS) vulnerability in the Search_Enhanced module in PHP-Nuke 7.9 allows... CVE-2005-3368 Public exploit 4.3 MediumOctober 29, 2005
• sparkleblog Cross-site scripting (XSS) vulnerability in journal.php in SparkleBlog 2.1 allows remote... CVE-2005-3367 4.3 MediumOctober 29, 2005
• php icalendar icalendar PHP file inclusion vulnerability in index.php in PHP iCalendar 2.0a2 through 2.0.1 allows remote... CVE-2005-3366 6.8 MediumOctober 29, 2005
• codeworx technologies dcp-portal Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to... CVE-2005-3365 7.5 HighOctober 29, 2005
• platinum dboardgear Multiple SQL injection vulnerabilities in DboardGear allow remote attackers to execute arbitrary... CVE-2005-3364 7.5 HighOctober 29, 2005
• saphp saphplesson SQL injection vulnerability in Saphp Lesson, possibly saphp Lesson1.1 and saphpLesson2.0, allows... CVE-2005-3363 Public exploit 7.5 HighOctober 29, 2005
• jed wing chm lib Stack-based buffer overflow in the _chm_find_in_PMGL function in chm_lib.c for chmlib before 0.36... CVE-2005-2930 Fix available 5.1 MediumOctober 28, 2005
• flatnuke Cross-site scripting (XSS) vulnerability in forum/index.php in FlatNuke 2.5.6 allows remote... CVE-2005-3361 4.3 MediumOctober 28, 2005
• gnu gnump3d Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.6 allows remote attackers to... CVE-2005-3425 4.3 MediumOctober 28, 2005
• gnu gnump3d Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.5 allows remote attackers to... CVE-2005-3424 4.3 MediumOctober 28, 2005
• gnu gnump3d Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read... CVE-2005-3123 5.0 MediumOctober 28, 2005
• mantis Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and... CVE-2005-3339 7.2 HighOctober 27, 2005
• mantis Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display... CVE-2005-3338 5.0 MediumOctober 27, 2005
• mantis Multiple cross-site scripting (XSS) vulnerabilities in Mantis before 0.19.3 allow remote... CVE-2005-3337 4.3 MediumOctober 27, 2005
• mantis SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute... CVE-2005-3336 7.5 HighOctober 27, 2005
• mantis PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19... CVE-2005-3335 7.5 HighOctober 27, 2005
• flyspray Cross-site scripting (XSS) vulnerability in index.php in Flyspray 0.9.7 through 0.9.8 (devel)... CVE-2005-3334 Public exploitFix available 4.3 MediumOctober 27, 2005
• ebase ebaseweb SQL injection vulnerability in eBASEweb 3.0 allows remote attackers to execute arbitrary SQL... CVE-2005-3333 7.5 HighOctober 27, 2005
• belchior foundry vcard PHP remote file include vulnerability in admin/define.inc.php in Belchior Foundry vCard 2.9... CVE-2005-3332 Public exploit 7.5 HighOctober 27, 2005
• rogers software source mgdiff patch viewer viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on... CVE-2005-3331 Fix available 2.1 LowOctober 27, 2005
• snoopy The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2)... CVE-2005-3330 Public exploit EPSS 17.2% 7.5 HighOctober 27, 2005
• rsa authentication agent for web Cross-site scripting (XSS) vulnerability in RSA Authentication Agent for Web 5.3 and earlier... CVE-2005-3329 Public exploit 4.3 MediumOctober 27, 2005
• punbb PHP remote file inclusion vulnerability in common.php in PunBB 1.1.2 through 1.1.5 allows remote... CVE-2005-3328 7.5 HighOctober 27, 2005
• No product listed Network Appliance Data ONTAP 7.0 and earlier allows iSCSI Initiators to bypass iSCSI... CVE-2005-3327 7.5 HighOctober 27, 2005
• mybulletinboard SQL injection vulnerability in usercp.php in MyBulletinBoard (MyBB) allows remote attackers to... CVE-2005-3326 Public exploit 7.5 HighOctober 27, 2005
• acid analysis console for intrusion databases, secureideas basic analysis and security engine +1 more Multiple SQL injection vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion... CVE-2005-3325 Public exploitFix available 7.5 HighOctober 27, 2005
• appindex mwchat SQL injection vulnerability in chat.php in MWChat 6.8 allows remote attackers to execute... CVE-2005-3324 Public exploit 7.5 HighOctober 27, 2005
• zope, debian linux +1 more docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include... CVE-2005-3323 Fix available 7.5 HighOctober 27, 2005
• squid, suse linux +1 more Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of... CVE-2005-3322 5.0 MediumOctober 27, 2005
• novell suse linux, suse linux +1 more chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by... CVE-2005-3321 4.6 MediumOctober 27, 2005
• siteturn domain manager pro Cross-site scripting (XSS) vulnerability in SiteTurn Domain Manager Pro allows remote attackers... CVE-2005-3320 Public exploit 2.6 LowOctober 27, 2005
• Show olderLoading…