CVEs published April 28, 2005
21 CVEs were published on April 28, 2005: 0 critical, 0 high.
- Published
- 21
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 21
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 21
- CVE-2005-1270The (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which
- CVE-2005-1345Squid 2.5.STABLE9 and earlier does not trigger a fatal error when it identifies missing or invalid ACLs in the http_access configuration, wh
- CVE-2005-1346Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0
- CVE-2005-1347** UNVERIFIABLE ** NOTE: this issue describes a problem that can not be independently verified as of 20050421.
- CVE-2005-1348Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute a
- CVE-2005-1349Buffer overflow in Convert-UUlib (Convert::UUlib) before 1.051 allows remote attackers to execute arbitrary code via a malformed parameter t
- CVE-2005-1350The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
- CVE-2005-1351The ad.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
- CVE-2005-1352Cross-site scripting (XSS) vulnerability in the ad.cgi script allows remote attackers to inject arbitrary web script or HTML via the argumen
- CVE-2005-1353The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.
- CVE-2005-1354The forum.pl script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
- CVE-2005-1355includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a similar vulnerability to
- CVE-2005-1356Cross-site scripting (XSS) vulnerability in includer.cgi script in The Includer allows remote attackers to inject arbitrary web script or HT
- CVE-2005-1357text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
- CVE-2005-1358text.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
- CVE-2005-1359Cross-site scripting (XSS) vulnerability in text.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.
- CVE-2005-1360PHP remote file inclusion vulnerability in error.php in GrayCMS 1.1 allows remote attackers to execute arbitrary PHP code by modifying the p
- CVE-2005-1361Multiple SQL injection vulnerabilities in MetaCart e-Shop 8.0 allow remote attackers to execute arbitrary SQL commands via the (1) intProdID
- CVE-2005-1362Multiple SQL injection vulnerabilities in MetaCart 2.0 for Paypal allow remote attackers to execute arbitrary SQL commands via the (1) intPr
- CVE-2005-1363Multiple SQL injection vulnerabilities in MetaCart 2.0 for PayFlow allow remote attackers to execute arbitrary commands via (1) intCatalogID
- CVE-2005-1364Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the (1) username or