cve.nowby Sazabi

CVEs published May 2, 2005

29 CVEs were published on May 2, 2005: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 29
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 29
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 29

CVE-2005-1368The key_user_lookup function in security/keys/key.c in Linux kernel 2.6.10 to 2.6.11.8 may allow attackers to cause a denial of service…UnratedMay 2, 2005
CVE-2005-1369The (1) it87 and (2) via686a drivers in I2C for Linux 2.6.x before 2.6.11.8, and 2.6.12 before 2.6.12-rc2, create the sysfs "alarms" file…UnratedMay 2, 2005
CVE-2005-1370Unknown vulnerability in Radia Management Agent (RMA) in HP OpenView Radia Management Portal (RMP) 1.x and 2.x allows remote attackers to…UnratedMay 2, 2005
CVE-2005-1371BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through the Help menu, which…UnratedMay 2, 2005
CVE-2005-1372nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain…UnratedMay 2, 2005
CVE-2005-1373Multiple SQL injection vulnerabilities in index.php in Dream4 Koobi CMS 4.2.3 allow remote attackers to execute arbitrary SQL commands via…UnratedMay 2, 2005
CVE-2005-1374Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote…UnratedMay 2, 2005
CVE-2005-1375Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to…UnratedMay 2, 2005
CVE-2005-1376Multiple directory traversal vulnerabilities in (1) document.php or (2) insertMyDoc.php in Claroline 1.5.3 through 1.6 Release Candidate…UnratedMay 2, 2005
CVE-2005-1377Multiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote…UnratedMay 2, 2005
CVE-2005-1378SQL injection vulnerability in posting_notes.php in the notes module for phpBB allows remote attackers to execute arbitrary SQL commands…UnratedMay 2, 2005
CVE-2005-1379The LAM runtime environment package (lam-runtime-7.0.6-2mdk) on Mandrake Linux installs the mpi user without a password, which allows…UnratedMay 2, 2005
CVE-2005-1380Cross-site scripting (XSS) vulnerability in BEA Admin Console 8.1 allows remote attackers to execute arbitrary web script or HTML via the…UnratedMay 2, 2005
CVE-2005-1381Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML…UnratedMay 2, 2005
CVE-2005-1382The webcacheadmin module in Oracle Webcache 9i allows remote attackers to corrupt arbitrary files via a full pathname in the…UnratedMay 2, 2005
CVE-2005-1383The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP…UnratedMay 2, 2005
CVE-2005-1384Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) search…UnratedMay 2, 2005
CVE-2005-1385Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers a NULL pointer…UnratedMay 2, 2005
CVE-2005-1386PHP-Nuke 7.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) ipban.php, (2) db.php, (3)…UnratedMay 2, 2005
CVE-2005-1387Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in cleartext, which allows…UnratedMay 2, 2005
CVE-2005-1388Cross-site scripting (XSS) vulnerability in SURVIVOR before 0.9.6 allows remote attackers to inject arbitrary web script or HTML via…UnratedMay 2, 2005
CVE-2005-1391Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long…UnratedMay 2, 2005
CVE-2005-1392The SQL install script in phpMyAdmin 2.6.2 is created with world-readable permissions, which allows local users to obtain the initial…UnratedMay 2, 2005
CVE-2005-1393Multiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute arbitrary code via long command line…UnratedMay 2, 2005
CVE-2005-1394Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format string specifiers…UnratedMay 2, 2005

Show all 29 entriesShow fewer entries