# CVEs published 2005-11-02

47 CVEs were published on November 2, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-3467](https://cve.now/CVE-2005-3467.md): Serv-U FTP Server before 6.1.0.4 allows attackers to cause a denial of service (crash) via (1) malformed packets and possibly other unspecif (no CVSS)
- [CVE-2005-3468](https://cve.now/CVE-2005-3468.md): Directory traversal vulnerability in F-Secure Anti-Virus for Microsoft Exchange 6.40 and Internet Gatekeeper 6.40 to 6.42 allows limited rem (no CVSS)
- [CVE-2005-3469](https://cve.now/CVE-2005-3469.md): SQL injection vulnerability in index.php in News2Net 3.0.0.0 allows remote attackers to execute arbitrary SQL commands via the category para (no CVSS)
- [CVE-2005-3470](https://cve.now/CVE-2005-3470.md): SQL injection vulnerability in in the authenticate function in MailWatch for MailScanner 1.0.2 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2005-3471](https://cve.now/CVE-2005-3471.md): Directory traversal vulnerability in the ruleset view for MailWatch for MailScanner 1.0.2 allows remote attackers to access arbitrary files. (no CVSS)
- [CVE-2005-3428](https://cve.now/CVE-2005-3428.md): Cross-site scripting (XSS) vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2005-3429](https://cve.now/CVE-2005-3429.md): Rockliffe MailSite Express before 6.1.22, with the option to save login information enabled, saves user passwords in plaintext in cookies, w (no CVSS)
- [CVE-2005-3430](https://cve.now/CVE-2005-3430.md): Incomplete blacklist vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to upload and execute arbitrary scrip (no CVSS)
- [CVE-2005-3431](https://cve.now/CVE-2005-3431.md): Absolute path traversal vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to read arbitrary files via a full (no CVSS)
- [CVE-2005-3432](https://cve.now/CVE-2005-3432.md): MiniGal 2 (MG2) 0.5.1 allows remote attackers to list password protected images via a request to index.php with the list parameter set to \* (no CVSS)
- [CVE-2005-3433](https://cve.now/CVE-2005-3433.md): Buffer overflow in Mirabilis ICQ 2003a allows user-assisted attackers to execute arbitrary code by convincing a user to enter long strings i (no CVSS)
- [CVE-2005-3434](https://cve.now/CVE-2005-3434.md): Archilles Newsworld before 1.5.0-rc1 stores (1) account.nwd and (2) session.nwd under the web root with insufficient access control, which a (no CVSS)
- [CVE-2005-3435](https://cve.now/CVE-2005-3435.md): admin\_news.php in Archilles Newsworld up to 1.3.0 allows attackers to bypass authentication by obtaining the password hash for another user, (no CVSS)
- [CVE-2005-3436](https://cve.now/CVE-2005-3436.md): Cross-site scripting (XSS) vulnerability in Nuked-Klan 1.7 allows remote attackers to inject arbitrary web script or HTML via the (1) Search (no CVSS)
- [CVE-2005-3437](https://cve.now/CVE-2005-3437.md): Unspecified vulnerability in the PL/SQL component in Oracle Database Server 9i up to 10.1.0.4 has unknown impact and attack vectors, aka Ora (no CVSS)
- [CVE-2005-3438](https://cve.now/CVE-2005-3438.md): Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (no CVSS)
- [CVE-2005-3439](https://cve.now/CVE-2005-3439.md): Multiple unspecified vulnerabilities in Oracle Database Server 10g up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (no CVSS)
- [CVE-2005-3440](https://cve.now/CVE-2005-3440.md): Unspecified vulnerability in Database Scheduler in Oracle Database Server 10g up to 10.1.0.3 has unknown impact and attack vectors, aka Orac (no CVSS)
- [CVE-2005-3441](https://cve.now/CVE-2005-3441.md): Unspecified vulnerability in Intelligent Agent in Oracle Database Server 9i up to 9.0.1.5 has unknown impact and attack vectors, aka Oracle (no CVSS)
- [CVE-2005-3442](https://cve.now/CVE-2005-3442.md): Multiple unspecified vulnerabilities in Oracle Database Server 8i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (no CVSS)
- [CVE-2005-3443](https://cve.now/CVE-2005-3443.md): Unspecified vulnerability in the Spatial component in Oracle Database Server from 9i up to 10.1.0.3 has unknown impact and attack vectors, a (no CVSS)
- [CVE-2005-3444](https://cve.now/CVE-2005-3444.md): Multiple unspecified vulnerabilities in the Programmatic Interface in Oracle Database Server from 8i up to 9.2.0.5 have unknown impact and a (no CVSS)
- [CVE-2005-3445](https://cve.now/CVE-2005-3445.md): Multiple unspecified vulnerabilities in HTTP Server in Oracle Database Server 8i up to 10.1.0.4.2 and Application Server 1.0.2.2 up to 10.1. (no CVSS)
- [CVE-2005-3446](https://cve.now/CVE-2005-3446.md): Unspecified vulnerability in Internet Directory in Oracle Database Server 9i up to 9.2.0.6 and Application Server 9.0.2.3 up to 10.1.2.0 has (no CVSS)
- [CVE-2005-3447](https://cve.now/CVE-2005-3447.md): Unspecified vulnerability in Single Sign-On in Oracle Database Server 10g up to 10.1.0.4.2 and Application Server 9.0.2.3 up to 9.0.4.2 has (no CVSS)
- [CVE-2005-3448](https://cve.now/CVE-2005-3448.md): Unspecified vulnerability in the OC4J Module in Oracle Application Server 9.0 up to 10.1.2.0.2 has unknown impact and attack vectors, as ide (no CVSS)
- [CVE-2005-3449](https://cve.now/CVE-2005-3449.md): Multiple unspecified vulnerabilities in Oracle Application Server 9.0 up to 10.1.2.0 have unknown impact and attack vectors, as identified b (no CVSS)
- [CVE-2005-3450](https://cve.now/CVE-2005-3450.md): Unspecified vulnerability in the HTTP Server in Oracle Application Server 1.0 up to 9.0.2.3 has unknown impact and attack vectors, as identi (no CVSS)
- [CVE-2005-3451](https://cve.now/CVE-2005-3451.md): Unspecified vulnerability in SQL\*ReportWriter in Oracle Application Server 9.0 up to 9.0.2.1 has unknown impact and attack vectors, as ident (no CVSS)
- [CVE-2005-3452](https://cve.now/CVE-2005-3452.md): Unspecified vulnerability in Web Cache in Oracle Application Server 1.0 up to 9.0.4.2 has unknown impact and attack vectors, as identified b (no CVSS)
- [CVE-2005-3453](https://cve.now/CVE-2005-3453.md): Multiple unspecified vulnerabilities in Web Cache in Oracle Application Server 1.0 up to 10.1.2.0 has unknown impact and attack vectors, as (no CVSS)
- [CVE-2005-3454](https://cve.now/CVE-2005-3454.md): Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10g Release 1 version 10.1.1 and 9i Release 2 9.0.4.2 have unknown impact (no CVSS)
- [CVE-2005-3455](https://cve.now/CVE-2005-3455.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5 up to 11.5.10 have unknown impact and attack vectors, (no CVSS)
- [CVE-2005-3456](https://cve.now/CVE-2005-3456.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5 up to 11.5.9 have unknown impact and attack vectors, a (no CVSS)
- [CVE-2005-3457](https://cve.now/CVE-2005-3457.md): Unspecified vulnerability in Oracle E-Business Suite and Applications 11.0 up to 11.5.10 has unknown impact and attack vectors, as identifie (no CVSS)
- [CVE-2005-3458](https://cve.now/CVE-2005-3458.md): Unspecified vulnerability in Oracle E-Business Suite and Applications 11.0 up to 11.5.9 has unknown impact and attack vectors, as identified (no CVSS)
- [CVE-2005-3459](https://cve.now/CVE-2005-3459.md): Unspecified vulnerability in Oracle E-Business Suite and Applications 4.5 up to 4.5.1 has unknown impact and attack vectors, as identified b (no CVSS)
- [CVE-2005-3460](https://cve.now/CVE-2005-3460.md): Unspecified vulnerability in Oracle Agent in Oracle Enterprise Manager 9.0.4.1 up to 10.1.0.4 has unknown impact and attack vectors, as iden (no CVSS)
- [CVE-2005-3461](https://cve.now/CVE-2005-3461.md): Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.42 up to 8.45.17 has unknown impact and attack vectors, as identi (no CVSS)
- [CVE-2005-3462](https://cve.now/CVE-2005-3462.md): Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.02 has unknown impact and attack vectors, as identi (no CVSS)
- [CVE-2005-3463](https://cve.now/CVE-2005-3463.md): Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46.03 has unknown impact and attack vectors, as identi (no CVSS)
- [CVE-2005-3464](https://cve.now/CVE-2005-3464.md): Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.44 up to 8.46 has unknown impact and attack vectors, as identifie (no CVSS)
- [CVE-2005-3465](https://cve.now/CVE-2005-3465.md): Unspecified vulnerability in JDEdwards HTML Server in Oracle EnterpriseOne 8.94 OneWorld XE up to 8.95\_B1, 8.94\_Q1, and SP23\_K1 has unknown (no CVSS)
- [CVE-2005-3466](https://cve.now/CVE-2005-3466.md): Unspecified vulnerability in Enterprise CRM Sales in Oracle 8.81 up to 8.9 has unknown impact and attack vectors, as identified by Oracle Vu (no CVSS)
- [CVE-2005-3409](https://cve.now/CVE-2005-3409.md): OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the (no CVSS)
- [CVE-2005-3426](https://cve.now/CVE-2005-3426.md): Cisco CSS 11500 Content Services Switch (CSS) with SSL termination services allows remote attackers to cause a denial of service (memory cor (no CVSS)
- [CVE-2005-3427](https://cve.now/CVE-2005-3427.md): The Cisco Management Center (MC) for IPS Sensors (IPS MC) 2.1 can omit port field values while generating the Cisco IOS IPS configuration fi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-11-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.