cve.nowby Sazabi

CVEs published August 3, 2005

41 CVEs were published on August 3, 2005: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 41
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 41
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 41

CVE-2005-1853gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local users to gain privileges.UnratedAug 3, 2005
CVE-2005-2132RPC portmapper (rpcbind) in SCO UnixWare 7.1.1 m5, 7.1.3 mp5, and 7.1.4 mp2 allows remote attackers or local users to cause a denial of…UnratedAug 3, 2005
CVE-2005-2346Buffer overflow in Novell GroupWise 6.5 Client allows remote attackers to execute arbitrary code via a GWVW02xx.INI language file with a…UnratedAug 3, 2005
CVE-2005-2412PHP remote file inclusion vulnerability in block.php in PHP FirstPost allows remote attackers to execute arbitrary PHP code via the…UnratedAug 3, 2005
CVE-2005-2413PHP remote file inclusion vulnerability in apa_phpinclude.inc.php in Atomic Photo Album (APA) allows remote attackers to execute arbitrary…UnratedAug 3, 2005
CVE-2005-2414Race condition in the xpcom library, as used by web browsers such as Firefox, Mozilla, Netscape, and Galeon, allows remote attackers to…UnratedAug 3, 2005
CVE-2005-2415Multiple SQL injection vulnerabilities in Contrexx before 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) value…UnratedAug 3, 2005
CVE-2005-2416Multiple cross-site scripting (XSS) vulnerabilities in Contrexx before 1.0.5 allow remote attackers to inject arbitrary web script or HTML…UnratedAug 3, 2005
CVE-2005-2417Contrexx before 1.0.5 allows remote attackers to obtain sensitive information via a direct request to /config/version.xml.UnratedAug 3, 2005
CVE-2005-2419B-FOCuS Router 312+ allows remote attackers to bypass authentication and gain unauthorized access via a direct request to firmwarecfg.UnratedAug 3, 2005
CVE-2005-2420flsearch.pl in FtpLocate 2.02 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP GET request.UnratedAug 3, 2005
CVE-2005-2421Multiple SQL injection vulnerabilities in index.php and other pages in Beehive Forum allow remote attackers to execute arbitrary SQL…UnratedAug 3, 2005
CVE-2005-2422Cross-site scripting (XSS) vulnerability in index.php in Beehive Forum allows remote attackers to inject arbitrary web script or HTML via…UnratedAug 3, 2005
CVE-2005-2423Beehive Forum allows remote attackers to obtain sensitive information via (1) an invalid final_uri or sort_by parameter to index.php or a…UnratedAug 3, 2005
CVE-2005-2424The management interface for Siemens SANTIS 50 running firmware 4.2.8.0, and possibly other products including Ericsson HN294dp and…UnratedAug 3, 2005
CVE-2005-2425Stack-based buffer overflow in Ares FileShare 1.1 allows remote attackers or local users to execute arbitrary code via a (1) long history…UnratedAug 3, 2005
CVE-2005-2426FTPshell Server 3.38 allows remote authenticated users to cause a denial of service (application crash) by multiple connections and…UnratedAug 3, 2005
CVE-2005-2427Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ allows remote attackers to inject arbitrary web script or HTML via the…UnratedAug 3, 2005
CVE-2005-2428Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields…UnratedAug 3, 2005
CVE-2005-2429Firefox, when opening Microsoft Word documents, does not properly set the permissions on shared sections, which allows remote attackers to…UnratedAug 3, 2005
CVE-2005-2430Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the…UnratedAug 3, 2005
CVE-2005-2431The (1) lost password and (2) account pending features in GForge 4.5 do not properly set a limit on the number of e-mails sent to an…UnratedAug 3, 2005
CVE-2005-2432SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1)…UnratedAug 3, 2005
CVE-2005-2433PhpList allows remote attackers to obtain sensitive information via a direct request to (1) about.php, (2) connect.php, (3)…UnratedAug 3, 2005
CVE-2005-2434Linksys WRT54G router uses the same private key and certificate for every router, which allows remote attackers to sniff the SSL…UnratedAug 3, 2005

Show all 41 entriesShow fewer entries