cve.nowby Sazabi

CVEs published September 21, 2005

32 CVEs were published on September 21, 2005: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 32
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 32
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 32

CVE-2005-0138rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect from a system whose…UnratedSep 21, 2005
CVE-2005-0139Unknown vulnerability in rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not sufficiently restrict access rights for read-mostly…UnratedSep 21, 2005
CVE-2005-2662masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not properly sanitized…UnratedSep 21, 2005
CVE-2005-2663masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file.UnratedSep 21, 2005
CVE-2005-2764Multiple buffer overflows in OpenTTD before 0.4.0.1 allow attackers to cause a denial of service (crash) and possibly execute arbitrary…UnratedSep 21, 2005
CVE-2005-3003SQL injection vulnerability in index.php in NooTopList 1.0.0 release 17 allows remote attackers to execute arbitrary SQL commands via the…UnratedSep 21, 2005
CVE-2005-3004SQL injection vulnerability in Interakt MX Shop 3.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) idp, (2)…UnratedSep 21, 2005
CVE-2005-3005Helpdesk Software Hesk allows remote attackers to bypass authentication for (1) admin.php and (2) admin_main.php by modifying the…UnratedSep 21, 2005
CVE-2005-3006The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, which might allow…UnratedSep 21, 2005
CVE-2005-3007Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." (dot), which might allow…UnratedSep 21, 2005
CVE-2005-3008Tofu 0.2 allows remote attackers to execute arbitrary Python code via crafted pickled objects, which Tofu unpickles and executes.UnratedSep 21, 2005
CVE-2005-3009Cross-site scripting (XSS) vulnerability in CuteNews allows remote attackers to inject arbitrary web script or HTML via the mod parameter…UnratedSep 21, 2005
CVE-2005-3010Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and earlier allows…UnratedSep 21, 2005
CVE-2005-3011The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on…UnratedSep 21, 2005
CVE-2005-3012The MasterDataCD::createImage function in masterdatacd.cpp for SimpleCDR-X 1.3.3 creates the .temp temporary directory with insecure…UnratedSep 21, 2005
CVE-2005-3013Buffer overflow in liby2util in Yet another Setup Tool (YaST) for SuSE Linux 9.3 allows local users to execute arbitrary code via a long…UnratedSep 21, 2005
CVE-2005-3014Cross-site scripting (XSS) vulnerability in Ensim webplliance allows remote attackers to inject arbitrary web script or HTML via the Login…UnratedSep 21, 2005
CVE-2005-3015Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 6.5.2 allows remote attackers to inject arbitrary web script or HTML via the…UnratedSep 21, 2005
CVE-2005-3016Multiple unspecified vulnerabilities in the WYSIWYG editor in PHP-Nuke before 7.9 Final have unknown impact and attack vectors.UnratedSep 21, 2005
CVE-2005-3017PHP file inclusion vulnerability in index.php in Content2Web 1.0.1 allows remote attackers to include arbitrary files via the show…UnratedSep 21, 2005
CVE-2005-3018Apple Safari allows remote attackers to cause a denial of service (application crash) via a crafted data:// URL.UnratedSep 21, 2005
CVE-2005-3019Multiple SQL injection vulnerabilities in vBulletin before 3.0.9 allow remote attackers to execute arbitrary SQL commands via the (1)…UnratedSep 21, 2005
CVE-2005-3020Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary web script or…UnratedSep 21, 2005
CVE-2005-3021image.php in vBulletin 3.0.9 and earlier allows remote attackers with access to the administrator panel to upload arbitrary files via the…UnratedSep 21, 2005
CVE-2005-3022Multiple SQL injection vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1)…UnratedSep 21, 2005

Show all 32 entriesShow fewer entries