CVEs published in October 2005
284 vulnerabilities, 10 critical, 0 exploited.
- devellion cubecartMultiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.3 allow remote attackers to...4.3 Medium
- blenderBuffer overflow in blenderplay in Blender Player 2.37a allows attackers to execute arbitrary code...7.5 High
- weexFormat string vulnerability in the Log_Flush function in Weex 2.6.1.5, 2.6.1, and possibly other...7.5 High
- uimUim 0.4.x before 0.4.9.1 and 0.5.0 and earlier does not properly handle the LIBUIM_VANILLA...4.6 Medium
- storebackup, suse linux +1 moreStoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are...4.6 Medium
- storebackup, suse linux +1 moreStoreBackup before 1.19 creates the backup root with world-readable permissions, which allows...2.1 Low
- storebackup, suse linux +1 moreStoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files...2.1 Low
- standards based linux instrumentation sblim-sfcbhttpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service ...5.0 Medium
- standards based linux instrumentation sblim-sfcbhttpAdapter.c in sblim-sfcb before 0.9.2 allows remote attackers to cause a denial of service via...5.0 Medium
- 4d webstarUnspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to...5.0 Medium
- kaspersky lab personal security suite, anti-virus, anti-virus personal +1 more +3 moreHeap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal Security Suite...10.0 High
- cerulean studios trillianCerulean Studios Trillian 3.0 allows remote attackers to cause a denial of service (crash) via a...5.0 Medium
- procom netforce 800 firmwareProcom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map ...7.5 High
- mozilla bugzillaBugzilla 2.19.1 through 2.20rc2 and 2.21, with user matching turned on in substring mode, allows...5.0 Medium
- mozilla bugzillaBugzilla 2.18rc1 through 2.18.3, 2.19 through 2.20rc2, and 2.21 allows remote attackers to obtain...5.0 Medium
- diaThe Python SVG import plugin (diasvg_import.py) for DIA 0.94 and earlier allows user-assisted...5.1 Medium
- symantec antivirus scan engine, antivirus scan engine for network attached storage +1 moreInteger signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0...10.0 High
- gnome libvte4, libzvt2 +1 moregnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via...2.1 Low
- arcarc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on...2.1 Low
- mod auth shadow auth shadowThe mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow...7.5 High
- virtools web playerDirectory traversal vulnerability in Virtools Web Player 3.0.0.100 and earlier allows remote...5.0 Medium
- virtools web playerBuffer overflow in Virtools Web Player 3.0.0.100 and earlier allows remote attackers to execute...7.5 High
- citrix metaframeCitrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy...7.5 High
- icewarp web mail, merak mail server +1 moreMultiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5...5.0 Medium
- icewarp web mail, merak mail server +1 moreMERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows...5.0 Medium
- icewarp web mail, merak mail server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web...4.3 Medium
- lucidcmsSQL injection vulnerability in lucidCMS 1.0.11 allows remote attackers to execute arbitrary SQL...7.5 High
- s9y serendipityCross-site request forgery (CSRF) vulnerability in Serendipity 0.8.4 and earlier allows remote...5.1 Medium
- squirrelmail address add pluginCross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for...4.3 Medium
- lucidcmsCross-site scripting (XSS) vulnerability in index.php in lucidCMS 1.0.11 allows remote attackers...4.3 Medium
- novell groupwiseInteger overflow in the registry parsing code in GroupWise 6.5.3, and possibly earlier version,...5.0 Medium
- gnu cfengineThe (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow local users to overwrite...2.1 Low
- prozilla download acceleratorBuffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with...7.5 High
- gnu cfengine, debian linux +1 morecfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on...2.1 Low