# CVEs published 2005-08-24

15 CVEs were published on August 24, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-1842](https://cve.now/CVE-2005-1842.md): VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace (no CVSS)
- [CVE-2005-1843](https://cve.now/CVE-2005-1843.md): VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace (no CVSS)
- [CVE-2005-2531](https://cve.now/CVE-2005-2531.md): OpenVPN before 2.0.1, when running with "verb 0" and without TLS authentication, does not properly flush the OpenSSL error queue when a clie (no CVSS)
- [CVE-2005-2532](https://cve.now/CVE-2005-2532.md): OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be decrypted by the server, which allows remote a (no CVSS)
- [CVE-2005-2533](https://cve.now/CVE-2005-2533.md): OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote authenticated clients to cause a denial of service (me (no CVSS)
- [CVE-2005-2534](https://cve.now/CVE-2005-2534.md): Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote attackers to cause a denial of service (server cra (no CVSS)
- [CVE-2005-2556](https://cve.now/CVE-2005-2556.md): core/database\_api.php in Mantis 0.19.0a1 through 1.0.0a3, with register\_globals enabled, allows remote attackers to connect to internal data (no CVSS)
- [CVE-2005-2685](https://cve.now/CVE-2005-2685.md): SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via a direct request to admin/PhpMyExplorer/editerfichier.php, then (no CVSS)
- [CVE-2005-2686](https://cve.now/CVE-2005-2686.md): Directory traversal vulnerability in SaveWebPortal 3.4 allows remote attackers to include arbitrary files and execute arbitrary local PHP pr (no CVSS)
- [CVE-2005-2687](https://cve.now/CVE-2005-2687.md): PHP remote file inclusion vulnerability in SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via the (1) SITE\_Path par (no CVSS)
- [CVE-2005-2688](https://cve.now/CVE-2005-2688.md): Multiple cross-site scripting (XSS) vulnerabilities in SaveWebPortal 3.4 allow remote attackers to inject arbitrary web script or HTML via a (no CVSS)
- [CVE-2005-2689](https://cve.now/CVE-2005-2689.md): Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.760-RC4b allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2005-2690](https://cve.now/CVE-2005-2690.md): SQL injection vulnerability in the Downloads module in PostNuke 0.760-RC4b allows PostNuke administrators to execute arbitrary SQL commands (no CVSS)
- [CVE-2005-2691](https://cve.now/CVE-2005-2691.md): includes/common.php in RunCMS 1.2 and earlier calls the extract function with EXTR\_OVERWRITE on HTTP POST variables, which allows remote att (no CVSS)
- [CVE-2005-2692](https://cve.now/CVE-2005-2692.md): Multiple SQL injection vulnerabilities in RunCMS 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) addque (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-08-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.