CVEs published in October 2005
284 vulnerabilities, 10 critical, 0 exploited.
- hp hp-uxUnspecified vulnerability in HP-UX B.11.23 on Itanium platforms allows local users to cause a...2.1 Low
- typsoft ftp serverTypsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote attackers to cause a...5.0 Medium
- xerverXerver 4.17 allows remote attackers to (1) obtain source code of scripts via a request with a...5.0 Medium
- xeobookMultiple cross-site scripting (XSS) vulnerabilities in Xeobook 0.93 allow remote attackers to...4.3 Medium
- stani stanis python editorStani's Python Editor (SPE) 0.7.5 is installed with world-writable permissions, which allows...4.6 Medium
- accelerated enterprise solutions mortgage managerSQL injection vulnerability in Accelerated Mortgage Manager allows remote attackers to execute...7.5 High
- ibm aixLSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users...2.1 Low
- rockliffe mailsite expressMailsite Express allows remote attackers to upload and execute files with executable extensions...5.0 Medium
- rockliffe mailsite expressIncomplete blacklist vulnerability in Mailsite Express allows remote attackers to upload and...5.0 Medium
- kerio personal firewall, serverfirewall +1 moreThe FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to...2.1 Low
- comersus open technologies backoffice plusCross-site scripting (XSS) vulnerability in comersus_backoffice_searchItemForm.asp in Comersus...4.3 Medium
- ahnlab myv3, v3net, v3pro 2004 +2 moreMultiple buffer overflows in AhnLab V3 AntiVirus V3Pro 2004 before 6.0.0.488, V3Net for Windows...7.5 High
- tiki tikiwiki cms\/groupwareCross-site scripting (XSS) vulnerability in TikiWiki before 1.9.1.1 allows remote attackers to...4.3 Medium
- No product listedSplatt Forum 3.0 to 3.2 allows remote attackers to bypass authentication via unknown vectors.7.5 High
- nukefixesDirectory traversal vulnerability in NukeFixes 3.1 for PHP-Nuke 7.8 allows remote attackers to...5.0 Medium
- parosParos 3.2.5 uses a default password for the "sa" account in the underlying HSQLDB database and...7.5 High
- jan kybic bitmap viewerStack-based buffer overflow in the vgasco_printf function in Jan Kybic BitMap Viewer (BMV) 1.2,...7.2 High
- jan kybic bitmap viewerInteger overflow in the openpsfile function in gsinterf.c for Jan Kybic BitMap Viewer (BMV) 1.2...7.2 High
- abisource community abiwordMultiple stack-based buffer overflows in the RTF import feature in AbiWord before 2.2.11 allow...5.1 Medium
- hp hp-uxThe LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute...10.0 High
- microsoft ie, windows 2000, windows xp +1 more +3 moreThe FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4...2.6 Low
- microsoft windows 2000, windows 2003 server, windows xp +2 moreWindows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote...10.0 High
- microsoft windows 2000, windows 2003 server, windows xp +2 moreWindows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user...5.1 Medium
- microsoft windows 2000, windows explorer, windows 2003 server +1 more +3 moreWeb View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does...5.1 Medium
- linux kernelThe sys_get_thread_area function in process.c in Linux 2.6 before 2.6.12.4 and 2.6.13 does not...2.1 Low
- linux kernelThe NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13...2.6 Low
- debian linux, linux kernel +1 moreRace condition in ip_vs_conn_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when...4.7 Medium
- linux kernelThe rose_rt_ioctl function in rose_route.c for Radionet Open Source Environment (ROSE) in Linux 2...5.0 Medium
- linux kernelLinux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using...5.0 Medium
- linux kernelExec in Linux kernel 2.6 does not properly clear posix-timers in multi-threaded environments,...2.1 Low
- symantec norton antivirusUntrusted search path vulnerability in DiskMountNotify for Symantec Norton AntiVirus 9.0.3 allows...7.2 High
- sun java system directory server, one administration server, one directory server +1 more +3 moreStack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java...7.5 High
- raphael bossek yiff serveryiff server (yiff-server) 2.14.2 on Debian GNU/Linux runs as root and does not properly verify...2.1 Low
- zeroblogCross-site scripting (XSS) vulnerability in thread.php for Zeroblog 1.1f and 1.2a allows remote...4.3 Medium
- rarlab winrarStack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote...7.5 High
- rarlab winrarFormat string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute...7.5 High
- versatilebulletinboardgetversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed...5.0 Medium
- versatilebulletinboardMultiple cross-site scripting (XSS) vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2...4.3 Medium
- versatilebulletinboardMultiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote...7.5 High
- squidThe rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP...5.0 Medium
- ethereal group etherealBuffer overflow vulnerability in the unicode_to_bytes in the Service Location Protocol (srvloc)...10.0 High
- gfi mailsecurityBuffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers...7.5 High
- kde kofficeHeap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows...7.5 High
- symantec norton antivirus** SPLIT ** The jlucaller program in LiveUpdate for Symantec Norton AntiVirus 9.0.3 on Macintosh...7.2 High
- novell netmailStack-based buffer overflow in the NMAP Agent for Novell NetMail 3.52C and possibly earlier...4.6 Medium
- eduard bloch module-assistantA rule file in module-assistant before 0.9.10 causes a temporary file to be created insecurely,...2.1 Low
- linux kernelThe VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, and possibly other versions including...4.6 Medium
- enigmailThe key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID...5.0 Medium
- sourcefire snortStack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows...7.5 High
- netpbmpnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index...7.5 High
- Show moreLoading…