# CVEs published 2005-07-26

22 CVEs were published on July 26, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-1691](https://cve.now/CVE-2005-1691.md): Directory traversal vulnerability in Internet Graphics Server in SAP before 6.40 Patch 11 allows remote attackers to read arbitrary files vi (no CVSS)
- [CVE-2005-1849](https://cve.now/CVE-2005-1849.md): inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dy (no CVSS)
- [CVE-2005-1852](https://cve.now/CVE-2005-1852.md): Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other pack (no CVSS)
- [CVE-2005-1920](https://cve.now/CVE-2005-1920.md): The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were (no CVSS)
- [CVE-2005-2218](https://cve.now/CVE-2005-2218.md): The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a device node, which makes h (no CVSS)
- [CVE-2005-2276](https://cve.now/CVE-2005-2276.md): Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2005-2368](https://cve.now/CVE-2005-2368.md): vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacte (no CVSS)
- [CVE-2005-2369](https://cve.now/CVE-2005-2369.md): Multiple integer signedness errors in libgadu, as used in ekg before 1.6rc2 and other packages, may allow remote attackers to cause a denial (no CVSS)
- [CVE-2005-2370](https://cve.now/CVE-2005-2370.md): Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers (no CVSS)
- [CVE-2005-2371](https://cve.now/CVE-2005-2371.md): Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) "..", (no CVSS)
- [CVE-2005-2372](https://cve.now/CVE-2005-2372.md): Oracle Forms 4.5 through 10g starts form executables from arbitrary directories and executes them as the Oracle or System user, which allows (no CVSS)
- [CVE-2005-2373](https://cve.now/CVE-2005-2373.md): Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directory name to (1) LIST, (no CVSS)
- [CVE-2005-2374](https://cve.now/CVE-2005-2374.md): Belkin 54g wireless routers do not properly set an administrative password, which allows remote attackers to gain access via the (1) Telnet (no CVSS)
- [CVE-2005-2375](https://cve.now/CVE-2005-2375.md): Format string vulnerability in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service (application crash) via for (no CVSS)
- [CVE-2005-2376](https://cve.now/CVE-2005-2376.md): Buffer overflow in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service (application crash) via a long (1) nick (no CVSS)
- [CVE-2005-2377](https://cve.now/CVE-2005-2377.md): nss\_ldap 181 to versions before 213, as used in Mandrake Corporate Server and Mandrake 10.0, and other operating systems, does not properly (no CVSS)
- [CVE-2005-2378](https://cve.now/CVE-2005-2378.md): Directory traversal vulnerability in Oracle Reports allows remote attackers to read arbitrary files via an absolute or relative path to the (no CVSS)
- [CVE-2005-2379](https://cve.now/CVE-2005-2379.md): Multiple cross-site scripting (XSS) vulnerabilities in Oracle Reports 9.0.2 allow remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2005-2380](https://cve.now/CVE-2005-2380.md): Multiple cross-site scripting vulnerabilities in PHP Surveyor 0.98 allow remote attackers to inject arbitrary web script or HTML via the (1) (no CVSS)
- [CVE-2005-2381](https://cve.now/CVE-2005-2381.md): PHP Surveyor 0.98 allows remote attackers to obtain sensitive information via a direct request to (1) question.php, (2) survey.php, or (3) g (no CVSS)
- [CVE-2005-2382](https://cve.now/CVE-2005-2382.md): Oray PeanutHull 3.0.1.0 and earlier does not properly drop SYSTEM privileges when launched from the system tray, which allows local users to (no CVSS)
- [CVE-2005-2383](https://cve.now/CVE-2005-2383.md): SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the user parameter in (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-07-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.