# CVEs published 2005-09-16

16 CVEs were published on September 16, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2657](https://cve.now/CVE-2005-2657.md): Unknown vulnerability in common-lisp-controller 4.18 and earlier allows local users to gain privileges by compiling arbitrary code in the… (no CVSS)
- [CVE-2005-2877](https://cve.now/CVE-2005-2877.md): The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell… (no CVSS)
- [CVE-2005-2944](https://cve.now/CVE-2005-2944.md): The perform\_file\_save function in GNOME Workstation Command Center (gwcc) 0.9.6 and earlier allows local users to create and overwrite… (no CVSS)
- [CVE-2005-2945](https://cve.now/CVE-2005-2945.md): arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from… (no CVSS)
- [CVE-2005-2946](https://cve.now/CVE-2005-2946.md): The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong… (no CVSS)
- [CVE-2005-2947](https://cve.now/CVE-2005-2947.md): Buffer overflow in KillProcess 2.20 and earlier allows user-assisted attackers to execute arbitrary code via an exe file with a long… (no CVSS)
- [CVE-2005-2948](https://cve.now/CVE-2005-2948.md): KillProcess 2.20 and earlier allows local users to bypass kill list restrictions by launching multiple processes at the same time, which… (no CVSS)
- [CVE-2005-2949](https://cve.now/CVE-2005-2949.md): pam\_per\_user before 0.4 does not verify if the user name changes between authentication attempts and uses the same subrequest handle… (no CVSS)
- [CVE-2005-2950](https://cve.now/CVE-2005-2950.md): Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2005-2951](https://cve.now/CVE-2005-2951.md): Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows remote attackers to… (no CVSS)
- [CVE-2005-2952](https://cve.now/CVE-2005-2952.md): Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2005-2953](https://cve.now/CVE-2005-2953.md): Cross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2005-2954](https://cve.now/CVE-2005-2954.md): SQL injection vulnerability in password\_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2005-2955](https://cve.now/CVE-2005-2955.md): config.inc.php in ATutor 1.5.1, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which… (no CVSS)
- [CVE-2005-2956](https://cve.now/CVE-2005-2956.md): ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient access control and… (no CVSS)
- [CVE-2005-2957](https://cve.now/CVE-2005-2957.md): Stack-based buffer overflow in AVIRA Desktop for Windows 1.00.00.68 with AVPACK32.DLL 6.31.0.3, when archive scanning is enabled, allows… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2005-09-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.