cve.nowby Sazabi

CVEs published July 13, 2005

28 CVEs were published on July 13, 2005: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 28
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 28
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 28

CVE-2005-2095options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $_POST variable, which allows remote…UnratedJul 13, 2005
CVE-2005-2248Directory traversal vulnerability in DownloadProtect before 1.0.3 allows remote attackers to read files above the download folder.UnratedJul 13, 2005
CVE-2005-2249Multiple unknown vulnerabilities in Jinzora 2.0.1 have unknown impact and attack vectors, possibly involving a PHP file inclusion…UnratedJul 13, 2005
CVE-2005-2250Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a…UnratedJul 13, 2005
CVE-2005-2251PHP remote file inclusion vulnerability in secure.php in PHPSecurePages (phpSP) 0.28beta and earlier allows remote attackers to execute…UnratedJul 13, 2005
CVE-2005-2252PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie…UnratedJul 13, 2005
CVE-2005-2253SQL injection vulnerability in PhpAuction 2.5 allow remote attackers to modify SQL queries via the category parameter to adsearch.php.UnratedJul 13, 2005
CVE-2005-2254Multiple cross-site scripting (XSS) vulnerabilities in PhpAuction 2.5 allow remote attackers to inject arbitrary web script or HTML via…UnratedJul 13, 2005
CVE-2005-2255Directory traversal vulnerability in PhpAuction 2.5 allows remote attackers to read arbitrary files, include local PHP files, or obtain…UnratedJul 13, 2005
CVE-2005-2256Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f"…UnratedJul 13, 2005
CVE-2005-2257The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by modifying the…UnratedJul 13, 2005
CVE-2005-2258PHP remote file inclusion vulnerability in photolist.inc.php in Squito Gallery 1.33 allows remote attackers to execute arbitrary code via…UnratedJul 13, 2005
CVE-2005-2259The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including (1) USANet Shopping Mall Software, (2)…UnratedJul 13, 2005
CVE-2005-2260The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly distinguish between…UnratedJul 13, 2005
CVE-2005-2261Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when…UnratedJul 13, 2005
CVE-2005-2262Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As…UnratedJul 13, 2005
CVE-2005-2263The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function…UnratedJul 13, 2005
CVE-2005-2264Firefox before 1.0.5 allows remote attackers to steal sensitive information by opening a malicious link in the Firefox sidebar using the…UnratedJul 13, 2005
CVE-2005-2265Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access…UnratedJul 13, 2005
CVE-2005-2266Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other methods in a parent frame, even when the…UnratedJul 13, 2005
CVE-2005-2267Firefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary code by using standalone applications…UnratedJul 13, 2005
CVE-2005-2268Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it…UnratedJul 13, 2005
CVE-2005-2269Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the…UnratedJul 13, 2005
CVE-2005-2270Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to execute arbitrary…UnratedJul 13, 2005
CVE-2005-2271iCab 2.9.8 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof…UnratedJul 13, 2005

Show all 28 entriesShow fewer entries