cve.nowby Sazabi

CVEs published July 12, 2005

35 CVEs were published on July 12, 2005: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 35
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 35
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 35

CVE-2005-0564Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote…UnratedJul 12, 2005
CVE-2005-1219Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with…UnratedJul 12, 2005
CVE-2005-1859Unknown vulnerability in arshell in the Array Service (arrayd) for SGI ProPack 3 with SP 5 and 6, and SGI ProPack 4, allows local users to…UnratedJul 12, 2005
CVE-2005-2215Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject…UnratedJul 12, 2005
CVE-2005-2216PHP remote file inclusion vulnerability in gals.php in PhotoGal Photo Gallery 1.5 and earlier allows remote attackers to execute arbitrary…UnratedJul 12, 2005
CVE-2005-2217Dansie Shopping Cart stores the vars.dat file under the web root with insufficient access control, which might allow remote attackers to…UnratedJul 12, 2005
CVE-2005-2219Hosting Controller 6.1 Hotfix 2.1 allows remote authenticated users to perform unauthorized actions, such as modifying the credit limit…UnratedJul 12, 2005
CVE-2005-2220Dragonfly Commerce allows remote attackers to change a product price by modifying the x_DragonflyCartProductPrice hidden field to (1)…UnratedJul 12, 2005
CVE-2005-2221Multiple SQL injection vulnerabilities in Dragonfly Commerce allows remote attackers to modify SQL statements and possibly execute…UnratedJul 12, 2005
CVE-2005-2222Unknown vulnerability in the HTTPMail service in MailEnable Professional before 1.6 has unknown impact and attack vectors.UnratedJul 12, 2005
CVE-2005-2223Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote attackers to cause a…UnratedJul 12, 2005
CVE-2005-2224aspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service (CPU consumption from infinite loop)…UnratedJul 12, 2005
CVE-2005-2225Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which…UnratedJul 12, 2005
CVE-2005-2226Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a "watched" conversation thread, which could…UnratedJul 12, 2005
CVE-2005-2227Softiacom wMailserver 1.0 stores passwords in plaintext in the Darsite\MAILSRV\Admin key, which allows local users to gain administrator…UnratedJul 12, 2005
CVE-2005-2228Web Wiz Forums 7.9 and 8.0 allows remote attackers to view message titles of a hidden forum.UnratedJul 12, 2005
CVE-2005-2229Blog Torrent 0.92 and earlier stores sensitive files under the web document root in the (1) data or (2) torrents directories with…UnratedJul 12, 2005
CVE-2005-2230Electronic Mail Operator (elmo) 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows local users to…UnratedJul 12, 2005
CVE-2005-2231High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files.UnratedJul 12, 2005
CVE-2005-2232Buffer overflow in invscout in IBM AIX 5.1.0 through 5.3.0 might allow local users to execute arbitrary code via a long command line…UnratedJul 12, 2005
CVE-2005-2233Buffer overflow in multiple "p" commands in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code via long command…UnratedJul 12, 2005
CVE-2005-2234Buffer overflow in the getlvname command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command…UnratedJul 12, 2005
CVE-2005-2235Buffer overflow in the diagTasksWebSM command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long…UnratedJul 12, 2005
CVE-2005-2236Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute…UnratedJul 12, 2005
CVE-2005-2237Format string vulnerability in the swcons command in IBM AIX 5.3, and possibly other versions, might allow local users to execute…UnratedJul 12, 2005

Show all 35 entriesShow fewer entries