# CVEs published 2005-04-24

18 CVEs were published on April 24, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-0135](https://cve.now/CVE-2005-0135.md): The unw\_unwind\_to\_user function in unwind.c on Itanium (ia64) architectures in Linux kernel 2.6 allows local users to cause a denial of serv (no CVSS)
- [CVE-2005-0137](https://cve.now/CVE-2005-0137.md): Linux kernel 2.6 on Itanium (ia64) architectures allows local users to cause a denial of service via a "missing Itanium syscall table entry. (no CVSS)
- [CVE-2005-0754](https://cve.now/CVE-2005-0754.md): Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbi (no CVSS)
- [CVE-2005-1231](https://cve.now/CVE-2005-1231.md): Cross-site scripting (XSS) vulnerability in the NewTerm function in GlossaryModel.php in JAWS 0.4 allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2005-1232](https://cve.now/CVE-2005-1232.md): Buffer overflow in Sun Java System Web Proxy Server (aka Sun ONE Proxy Server) 3.6 SP6 allows remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2005-1233](https://cve.now/CVE-2005-1233.md): Cross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2005-1234](https://cve.now/CVE-2005-1234.md): Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the (1) u parameter to (no CVSS)
- [CVE-2005-1235](https://cve.now/CVE-2005-1235.md): auction\_my\_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an invalid mode parame (no CVSS)
- [CVE-2005-1236](https://cve.now/CVE-2005-1236.md): Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2005-1237](https://cve.now/CVE-2005-1237.md): SQL injection vulnerability in news.php in FlexPHPNews 0.0.3 allows remote attackers to execute arbitrary SQL commands via the newsid parame (no CVSS)
- [CVE-2005-1238](https://cve.now/CVE-2005-1238.md): By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or (no CVSS)
- [CVE-2005-1239](https://cve.now/CVE-2005-1239.md): Directory traversal vulnerability in the third party tool from Raz-Lee, as used to secure the iSeries AS/400 FTP server, allows remote attac (no CVSS)
- [CVE-2005-1240](https://cve.now/CVE-2005-1240.md): Directory traversal vulnerability in the third party tool from Castlehill, as used to secure the iSeries AS/400 FTP server, allows remote at (no CVSS)
- [CVE-2005-1241](https://cve.now/CVE-2005-1241.md): Directory traversal vulnerability in the third party tool from Powertech, as used to secure the iSeries AS/400 FTP server, allows remote att (no CVSS)
- [CVE-2005-1242](https://cve.now/CVE-2005-1242.md): Directory traversal vulnerability in the third party tool from Bsafe, as used to secure the iSeries AS/400 FTP server, allows remote attacke (no CVSS)
- [CVE-2005-1243](https://cve.now/CVE-2005-1243.md): Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP server, allows remote att (no CVSS)
- [CVE-2005-1244](https://cve.now/CVE-2005-1244.md): Directory traversal vulnerability in the third party tool from NetIQ, as used to secure the iSeries AS/400 FTP server, allows remote attacke (no CVSS)
- [CVE-2005-1245](https://cve.now/CVE-2005-1245.md): Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.2, when using HTML Tidy ($wgUseTidy), allows remote attackers to inject arb (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-04-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.