CVEs published September 16, 2005
16 CVEs were published on September 16, 2005: 0 critical, 0 high.
- Published
- 16
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 16
- CVE-2005-2657Unknown vulnerability in common-lisp-controller 4.18 and earlier allows local users to gain privileges by compiling arbitrary code in the ca
- CVE-2005-2877The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacha
- CVE-2005-2944The perform_file_save function in GNOME Workstation Command Center (gwcc) 0.9.6 and earlier allows local users to create and overwrite arbit
- CVE-2005-2945arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from fi
- CVE-2005-2946The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm
- CVE-2005-2947Buffer overflow in KillProcess 2.20 and earlier allows user-assisted attackers to execute arbitrary code via an exe file with a long FileDes
- CVE-2005-2948KillProcess 2.20 and earlier allows local users to bypass kill list restrictions by launching multiple processes at the same time, which are
- CVE-2005-2949pam_per_user before 0.4 does not verify if the user name changes between authentication attempts and uses the same subrequest handle, which
- CVE-2005-2950Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via
- CVE-2005-2951Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows remote attackers to exe
- CVE-2005-2952Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a ..
- CVE-2005-2953Cross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary web script or HTML v
- CVE-2005-2954SQL injection vulnerability in password_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbitrary SQL commands vi
- CVE-2005-2955config.inc.php in ATutor 1.5.1, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which al
- CVE-2005-2956ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient access control and pre
- CVE-2005-2957Stack-based buffer overflow in AVIRA Desktop for Windows 1.00.00.68 with AVPACK32.DLL 6.31.0.3, when archive scanning is enabled, allows rem