# CVEs published 2005-09-16

16 CVEs were published on September 16, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2657](https://cve.now/CVE-2005-2657.md): Unknown vulnerability in common-lisp-controller 4.18 and earlier allows local users to gain privileges by compiling arbitrary code in the ca (no CVSS)
- [CVE-2005-2877](https://cve.now/CVE-2005-2877.md): The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacha (no CVSS)
- [CVE-2005-2944](https://cve.now/CVE-2005-2944.md): The perform\_file\_save function in GNOME Workstation Command Center (gwcc) 0.9.6 and earlier allows local users to create and overwrite arbit (no CVSS)
- [CVE-2005-2945](https://cve.now/CVE-2005-2945.md): arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from fi (no CVSS)
- [CVE-2005-2946](https://cve.now/CVE-2005-2946.md): The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm (no CVSS)
- [CVE-2005-2947](https://cve.now/CVE-2005-2947.md): Buffer overflow in KillProcess 2.20 and earlier allows user-assisted attackers to execute arbitrary code via an exe file with a long FileDes (no CVSS)
- [CVE-2005-2948](https://cve.now/CVE-2005-2948.md): KillProcess 2.20 and earlier allows local users to bypass kill list restrictions by launching multiple processes at the same time, which are (no CVSS)
- [CVE-2005-2949](https://cve.now/CVE-2005-2949.md): pam\_per\_user before 0.4 does not verify if the user name changes between authentication attempts and uses the same subrequest handle, which (no CVSS)
- [CVE-2005-2950](https://cve.now/CVE-2005-2950.md): Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2005-2951](https://cve.now/CVE-2005-2951.md): Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows remote attackers to exe (no CVSS)
- [CVE-2005-2952](https://cve.now/CVE-2005-2952.md): Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2005-2953](https://cve.now/CVE-2005-2953.md): Cross-site scripting (XSS) vulnerability in merchant.mvc in MIVA Merchant 5 allows remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2005-2954](https://cve.now/CVE-2005-2954.md): SQL injection vulnerability in password\_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2005-2955](https://cve.now/CVE-2005-2955.md): config.inc.php in ATutor 1.5.1, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which al (no CVSS)
- [CVE-2005-2956](https://cve.now/CVE-2005-2956.md): ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient access control and pre (no CVSS)
- [CVE-2005-2957](https://cve.now/CVE-2005-2957.md): Stack-based buffer overflow in AVIRA Desktop for Windows 1.00.00.68 with AVPACK32.DLL 6.31.0.3, when archive scanning is enabled, allows rem (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-09-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.