# CVEs published 2005-09-14

32 CVEs were published on September 14, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-1913](https://cve.now/CVE-2005-1913.md): The Linux kernel 2.6 before 2.6.12.1 allows local users to cause a denial of service (kernel panic) via a non group-leader thread executing (no CVSS)
- [CVE-2005-2490](https://cve.now/CVE-2005-2490.md): Stack-based buffer overflow in the sendmsg function call in the Linux kernel 2.6 before 2.6.13.1 allows local users to execute arbitrary cod (no CVSS)
- [CVE-2005-2492](https://cve.now/CVE-2005-2492.md): The raw\_sendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service (change hardware state) or (no CVSS)
- [CVE-2005-2879](https://cve.now/CVE-2005-2879.md): Advansysperu Software USB Lock Auto-Protect (AP) 1.5 uses a weak encryption scheme to encrypt passwords, which allows local users to gain se (no CVSS)
- [CVE-2005-2880](https://cve.now/CVE-2005-2880.md): Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to execute arbit (no CVSS)
- [CVE-2005-2881](https://cve.now/CVE-2005-2881.md): phpCommunityCalendar 4.0.3 allows remote attackers to bypass authentication and gain unauthorized access via a direct request to the admin d (no CVSS)
- [CVE-2005-2882](https://cve.now/CVE-2005-2882.md): Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to (no CVSS)
- [CVE-2005-2884](https://cve.now/CVE-2005-2884.md): Cross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and earlier allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2005-2885](https://cve.now/CVE-2005-2885.md): The Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensio (no CVSS)
- [CVE-2005-2886](https://cve.now/CVE-2005-2886.md): Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.73, and possibly earlier versions, allow remote attackers to inject (no CVSS)
- [CVE-2005-2887](https://cve.now/CVE-2005-2887.md): MAXdev MD-Pro 1.0.73, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to (1) wik (no CVSS)
- [CVE-2005-2888](https://cve.now/CVE-2005-2888.md): Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2005-2889](https://cve.now/CVE-2005-2889.md): Check Point NGX R60 does not properly verify packets against the predefined service group "CIFS" rule, which allows remote attackers to bypa (no CVSS)
- [CVE-2005-2890](https://cve.now/CVE-2005-2890.md): SecureOL VE2 1.05.1008 does not properly restrict public access to physical memory, which allows local users to bypass intended restrictions (no CVSS)
- [CVE-2005-2891](https://cve.now/CVE-2005-2891.md): WebArchiveX.dll 5.5.0.76 installed before September 6th, 2005 is marked safe for scripting by default, which allows remote attackers to read (no CVSS)
- [CVE-2005-2892](https://cve.now/CVE-2005-2892.md): Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to read arbitrary (no CVSS)
- [CVE-2005-2893](https://cve.now/CVE-2005-2893.md): Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to execut (no CVSS)
- [CVE-2005-2894](https://cve.now/CVE-2005-2894.md): Cross-site scripting (XSS) vulnerability in the user registration in PBLang 4.65, and possibly earlier versions, allows remote attackers to (no CVSS)
- [CVE-2005-2895](https://cve.now/CVE-2005-2895.md): setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to obtain sensitive information via a %00 (a null byte) (no CVSS)
- [CVE-2005-2896](https://cve.now/CVE-2005-2896.md): SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the (1) wn\_userpw parameter to st (no CVSS)
- [CVE-2005-2897](https://cve.now/CVE-2005-2897.md): WEB//NEWS 1.4 allows remote attackers to obtain sensitive information via a direct request to files in the actions directory, which reveal t (no CVSS)
- [CVE-2005-2898](https://cve.now/CVE-2005-2898.md): NOTE: this issue has been disputed by the vendor. (no CVSS)
- [CVE-2005-2899](https://cve.now/CVE-2005-2899.md): Multiple cross-site scripting (XSS) vulnerabilities in details.php in CjTagBoard 3.0 allow remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2005-2900](https://cve.now/CVE-2005-2900.md): Cross-site scripting (XSS) vulnerability in top.php in CjLinkOut 1.0 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2005-2901](https://cve.now/CVE-2005-2901.md): Multiple Cross-site scripting (XSS) vulnerabilities in CjWeb2Mail 3.0 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2005-2902](https://cve.now/CVE-2005-2902.md): SQL injection vulnerability in class-1 Forum Software 0.24.4 allows remote attackers to execute arbitrary SQL commands and bypass the file e (no CVSS)
- [CVE-2005-2903](https://cve.now/CVE-2005-2903.md): Heap-based buffer overflow in NOD32 2.5 with nod32.002 1.033 build 1127, with active scanning enabled, allows remote attackers to execute ar (no CVSS)
- [CVE-2005-2904](https://cve.now/CVE-2005-2904.md): Zebedee 2.4.1, when "allowed redirection port" is not set, allows remote attackers to cause a denial of service (application crash) via a ze (no CVSS)
- [CVE-2005-2912](https://cve.now/CVE-2005-2912.md): Linksys WRT54G router allows remote attackers to cause a denial of service (CPU consumption and server hang) via an HTTP POST request with a (no CVSS)
- [CVE-2005-2914](https://cve.now/CVE-2005-2914.md): ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, does not use an au (no CVSS)
- [CVE-2005-2915](https://cve.now/CVE-2005-2915.md): ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, uses weak encrypti (no CVSS)
- [CVE-2005-2916](https://cve.now/CVE-2005-2916.md): Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP P (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-09-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.