CVEs

342,589 total · page 6588 of 6,852

CVE	Vendor / Product	Risk	CVSS	EPSS	Published	Description
CVE-2005-2786	Cosmoshop Cosmoshop	0.00	—	0.01	Sep 2, 2005	Directory traversal vulnerability in bestmail_edit.cgi in cosmoshop 8.10.78 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter.
CVE-2005-2787	Alexander Palmo Simple PHP Blog	0.04	—	0.06	Sep 2, 2005	comment_delete_cgi.php in Simple PHP Blog allows remote attackers to delete arbitrary files via the comment parameter.
CVE-2005-2788	Neocrome Land Down Under	0.03	—	0.02	Sep 2, 2005	Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to (1) events.php, (2) index.php, or (3) list.php.
CVE-2005-2789	Bfcommand And Control Software Bfcc	0.00	—	0.02	Sep 2, 2005	BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to bypass authentication via (1) an unknown attack vector or (2) a NULL (0x00) as a username.
CVE-2005-2790	Bfcommand And Control Software Bfcc	0.00	—	0.02	Sep 2, 2005	BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, relies on the client to enforce permissions and perform actions such as disconnections, which allows remote attackers to bypass administrative restrictions via a modified client.
CVE-2005-2791	Bfcommand And Control Software Bfcc	0.03	—	0.03	Sep 2, 2005	BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to cause a denial of service (refused new connections) via a series of connections and disconnections without sending the login command.
CVE-2005-2792	Phpldapadmin Project Phpldapadmin	0.04	—	0.12	Sep 2, 2005	Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the custom_welcome_page parameter.
CVE-2005-2793	Phpldapadmin Project Phpldapadmin	0.00	—	0.03	Sep 2, 2005	PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute arbitrary PHP code via the custom_welcome_page parameter.
CVE-2005-1857	Simpleproxy Simpleproxy	0.00	—	0.04	Sep 2, 2005	Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply.
CVE-2005-1915	—	0.00	—	0.00	Sep 2, 2005	The log4sh_readProperties function in log4sh 1.2.5 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable log4sh.$$ filenames.
CVE-2005-2496	NTP NTP	0.00	—	0.00	Sep 2, 2005	The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with different privileges than intended.
CVE-2005-2766	Symantec Norton Antivirus	0.00	—	0.00	Sep 2, 2005	Symantec AntiVirus Corporate Edition 9.0.1.x and 9.0.4.x, and possibly other versions, when obtaining updates from an internal LiveUpdate server, stores sensitive information in cleartext in the Log.Liveupdate log file, which allows attackers to obtain the username and password…
CVE-2005-0403	Red Hat Enterprise Linux Desktop	0.00	—	0.00	Sep 1, 2005	init_dev in tty_io.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not properly clear controlling tty's in multi-threaded applications, which allows local users to cause a denial of service (crash) and possibly gain tty access via unknown attack vectors that…
CVE-2005-2765	Microsoft Windows Firewall	0.00	—	0.01	Sep 1, 2005	The user interface in the Windows Firewall does not properly display certain malformed entries in the Windows Registry, which makes it easier for attackers with administrator privileges to hide activities if the administrator only uses the Windows Firewall interface to monitor…
CVE-2005-2761	PhpGroupWare Phpgroupware	0.00	—	0.01	Aug 31, 2005	Cross-site scripting (XSS) vulnerability in phpGroupWare 0.9.16.000 allows administrators to inject arbitrary web script or HTML by modifying the main screen message.
CVE-2005-2654	Phpldapadmin Project Phpldapadmin	0.00	—	0.02	Aug 30, 2005	phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disable_anon_bind is set, via an HTTP request to login.php with the anonymous_bind parameter set.
CVE-2005-2655	Maildrop Maildrop	0.00	—	0.01	Aug 30, 2005	lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.
CVE-2005-1855	Sukria Backup Manager	0.00	—	0.00	Aug 30, 2005	Backup Manager (backup-manager) before 0.5.8 creates backup files with world-readable default permissions, which allows local users to obtain sensitive information.
CVE-2005-1856	Sukria Backup Manager	0.00	—	0.00	Aug 30, 2005	The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logging, which allows local users to overwrite files via a symlink attack.
CVE-2005-2017	Symantec Norton Antivirus	0.00	—	0.02	Aug 30, 2005	Symantec AntiVirus 9 Corporate Edition allows local users to gain privileges via the "Scan for viruses" option, which launches a help window with raised privileges, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2002-1540.
CVE-2005-2719	Flagship Industries Ventrilo	0.04	—	0.08	Aug 30, 2005	Ventrilo 2.1.2 through 2.3.0 allows remote attackers to cause a denial of service (application crash) via a status packet that contains less data than specified in the packet header sent to UDP port 3784.
CVE-2005-2720	Hauri Livecall	0.00	—	0.04	Aug 30, 2005	Stack-based buffer overflow in the ACE archive decompression library (vrAZace.dll) in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall, when compressed file scanning is enabled, allows remote attackers to execute arbitrary…
CVE-2005-2721	Foojan PHP Weblog	0.03	—	0.02	Aug 30, 2005	Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) admin.php in Foojan PHP Weblog allow remote attackers to inject arbitrary web script or HTML via the Referer field in the HTTP header.
CVE-2005-2722	Foojan PHP Weblog	0.00	—	0.01	Aug 30, 2005	Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct request to /daylinks/index.php or (2) a negative value in the daylinkspage parameter to index.php, which reveal the path in an error message.
CVE-2005-2723	paFileDB paFileDB	0.00	—	0.01	Aug 30, 2005	SQL injection vulnerability in auth.php in PaFileDB 3.1, when authmethod is set to cookies, allows remote attackers to execute arbitrary SQL commands via the username value in the pafiledbcookie cookie.
CVE-2005-2724	Double Precision Incorporated Sqwebmail	0.00	—	0.02	Aug 30, 2005	Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via a file attachment that is processed by the Display feature. NOTE: the severity of this issue has been disputed by the developer.
CVE-2005-2725	QNX Rtos	0.03	—	0.01	Aug 30, 2005	The inputtrap utility in QNX RTOS 6.1.0, 6.3, and possibly earlier versions does not properly check permissions when the -t flag is specified, which allows local users to read arbitrary files.
CVE-2005-2726	Home FTP Server Project Home FTP Server	0.00	—	0.02	Aug 30, 2005	Directory traversal vulnerability in Home Ftp Server 1.0.7 allows remote authenticated users to read arbitrary files via "C:\" (Windows drive letter) sequences in commands such as (1) LIST or (2) RETR.
CVE-2005-2727	Home FTP Server Project Home FTP Server	0.00	—	0.01	Aug 30, 2005	Home Ftp Server 1.0.7 stores sensitive user information and server information in the same directory as the user's home directory, which allows remote authenticated users to obtain sensitive information by obtaining ftpmembers.lst and ftpsettings.lst.
CVE-2005-2728	Apache HTTP Server	0.05	—	0.11	Aug 30, 2005	The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.
CVE-2005-2729	Astaro Security Linux	0.03	—	0.07	Aug 30, 2005	The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows remote attackers to bypass firewall rules and connect to local services.
CVE-2005-2730	Astaro Security Linux	0.00	—	0.02	Aug 30, 2005	The HTTP proxy in Astaro Security Linux 6.0 allows remote attackers to obtain sensitive information via an invalid request, which reveals a Proxy-authorization string in an error message.
CVE-2005-2731	Astaro Security Linux	0.00	—	0.01	Aug 30, 2005	Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated webmin users to read arbitrary files via a .. (dot dot) in the wfe_download parameter to index.fpl.
CVE-2005-2732	AWStats Awstats	0.00	—	0.02	Aug 30, 2005	AWStats 6.4, and possibly earlier versions, allows remote attackers to obtain sensitive information via a file that does not exist in the config parameter, which reveals the path in an error message.
CVE-2005-2733	Alexander Palmo Simple PHP Blog	0.09	—	0.51	Aug 30, 2005	upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote attackers to execute arbitrary code.
CVE-2005-2734	Gallery Project Gallery	0.00	—	0.02	Aug 30, 2005	Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.
CVE-2005-2735	Phpgraphy Phpgraphy	0.00	—	0.02	Aug 30, 2005	Cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.
CVE-2005-2736	Yapig Yapig	0.00	—	0.01	Aug 30, 2005	Cross-site scripting (XSS) vulnerability in YaPig 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.
CVE-2005-2737	Photopost Photopost PHP Pro	0.00	—	0.01	Aug 30, 2005	Cross-site scripting (XSS) vulnerability in PhotoPost PHP Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.
CVE-2005-2716	Nokia Affix	0.00	—	0.03	Aug 29, 2005	The event_pin_code_request function in the btsrv daemon (btsrv.c) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a Bluetooth device name.
CVE-2005-2717	Webcalendar Webcalendar	0.00	—	0.02	Aug 29, 2005	PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP code when opening settings.php, possibly via send_reminders.php or other scripts.
CVE-2005-2718	MPlayer Mplayer	0.00	—	0.03	Aug 29, 2005	Buffer overflow in ad_pcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via crafted PCM audio data, as demonstrated using a video file with an audio header containing a large value in a stream format (strf) chunk.
CVE-2005-2693	Nongnu Cvs	0.00	—	0.00	Aug 26, 2005	cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack.
CVE-2005-2694	Winace Winace	0.03	—	0.04	Aug 26, 2005	Buffer overflow in WinAce 2.6.0.5, and possibly earlier versions, allows remote attackers to execute arbitrary code via a temporary (.tmp) file that contains an entry with a long file name.
CVE-2005-2695	Cisco Systems, Inc. Ciscoworks Management Center For Ids Sensors	0.00	—	0.01	Aug 26, 2005	Unspecified vulnerability in the SSL certificate checking functionality in Cisco CiscoWorks Management Center for IDS Sensors (IDSMC) 2.0 and 2.1, and Monitoring Center for Security (Security Monitor or Secmon) 1.1 through 2.0 and 2.1, allows remote attackers to spoof a Cisco…
CVE-2005-2696	IBM Lotus Notes	0.00	—	0.02	Aug 26, 2005	IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book (NAB), which allows remote attackers to obtain sensitive information via the (1) password digest field in the Administration tab of a Lotus Notes client, (2) "PasswordDigest" and…
CVE-2005-2697	MyBB Mybb	0.03	—	0.01	Aug 26, 2005	SQL injection vulnerability in search.php for MyBulletinBoard (MyBB) 1.00 Release Candidate 1 through 4 allows remote attackers to execute arbitrary SQL commands via the uid parameter. NOTE: this issue might overlap CVE-2005-0282.
CVE-2005-2698	Nelogic Technologies Nephp Publisher	0.00	—	0.01	Aug 26, 2005	Cross-site scripting (XSS) vulnerability in browse.php in Nephp Publisher Enterprise 3.04 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded keywords parameter.
CVE-2005-2699	Phpkit Phpkit	0.00	—	0.00	Aug 26, 2005	Unrestricted file upload vulnerability in admin/admin.php in PHPKit 1.6.1 allows remote authenticated administrators to execute arbitrary PHP code by uploading a .php file to the content/images/ directory using images.php. NOTE: if a PHPKit administrator must already have…
CVE-2005-1842	Adobe Inc. Version Cue	0.03	—	0.01	Aug 24, 2005	VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, creates temporary log files with predictable names, which allows local users to modify arbitrary files via a symlink attack.

CVE-2005-2786Sep 2, 2005
Cosmoshop
Cosmoshop
risk 0.00cvss —epss 0.01
Directory traversal vulnerability in bestmail_edit.cgi in cosmoshop 8.10.78 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter.
CVE-2005-2787Sep 2, 2005
Alexander Palmo
Simple PHP Blog
risk 0.04cvss —epss 0.06
comment_delete_cgi.php in Simple PHP Blog allows remote attackers to delete arbitrary files via the comment parameter.
CVE-2005-2788Sep 2, 2005
Neocrome
Land Down Under
risk 0.03cvss —epss 0.02
Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to (1) events.php, (2) index.php, or (3) list.php.
CVE-2005-2789Sep 2, 2005
Bfcommand And Control Software
Bfcc
risk 0.00cvss —epss 0.02
BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to bypass authentication via (1) an unknown attack vector or (2) a NULL (0x00) as a username.
CVE-2005-2790Sep 2, 2005
Bfcommand And Control Software
Bfcc
risk 0.00cvss —epss 0.02
BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, relies on the client to enforce permissions and perform actions such as disconnections, which allows remote attackers to bypass administrative restrictions via a modified client.
CVE-2005-2791Sep 2, 2005
Bfcommand And Control Software
Bfcc
risk 0.03cvss —epss 0.03
BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to cause a denial of service (refused new connections) via a series of connections and disconnections without sending the login command.
CVE-2005-2792Sep 2, 2005
Phpldapadmin Project
Phpldapadmin
risk 0.04cvss —epss 0.12
Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the custom_welcome_page parameter.
CVE-2005-2793Sep 2, 2005
Phpldapadmin Project
Phpldapadmin
risk 0.00cvss —epss 0.03
PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute arbitrary PHP code via the custom_welcome_page parameter.
CVE-2005-1857Sep 2, 2005
Simpleproxy
Simpleproxy
risk 0.00cvss —epss 0.04
Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply.
CVE-2005-1915Sep 2, 2005
risk 0.00cvss —epss 0.00
The log4sh_readProperties function in log4sh 1.2.5 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable log4sh.$$ filenames.
CVE-2005-2496Sep 2, 2005
NTP
NTP
risk 0.00cvss —epss 0.00
The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with different privileges than intended.
CVE-2005-2766Sep 2, 2005
Symantec
Norton Antivirus
risk 0.00cvss —epss 0.00
Symantec AntiVirus Corporate Edition 9.0.1.x and 9.0.4.x, and possibly other versions, when obtaining updates from an internal LiveUpdate server, stores sensitive information in cleartext in the Log.Liveupdate log file, which allows attackers to obtain the username and password…
CVE-2005-0403Sep 1, 2005
Red Hat
Enterprise Linux Desktop
risk 0.00cvss —epss 0.00
init_dev in tty_io.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not properly clear controlling tty's in multi-threaded applications, which allows local users to cause a denial of service (crash) and possibly gain tty access via unknown attack vectors that…
CVE-2005-2765Sep 1, 2005
Microsoft
Windows Firewall
risk 0.00cvss —epss 0.01
The user interface in the Windows Firewall does not properly display certain malformed entries in the Windows Registry, which makes it easier for attackers with administrator privileges to hide activities if the administrator only uses the Windows Firewall interface to monitor…
CVE-2005-2761Aug 31, 2005
PhpGroupWare
Phpgroupware
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in phpGroupWare 0.9.16.000 allows administrators to inject arbitrary web script or HTML by modifying the main screen message.
CVE-2005-2654Aug 30, 2005
Phpldapadmin Project
Phpldapadmin
risk 0.00cvss —epss 0.02
phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disable_anon_bind is set, via an HTTP request to login.php with the anonymous_bind parameter set.
CVE-2005-2655Aug 30, 2005
Maildrop
Maildrop
risk 0.00cvss —epss 0.01
lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.
CVE-2005-1855Aug 30, 2005
Sukria
Backup Manager
risk 0.00cvss —epss 0.00
Backup Manager (backup-manager) before 0.5.8 creates backup files with world-readable default permissions, which allows local users to obtain sensitive information.
CVE-2005-1856Aug 30, 2005
Sukria
Backup Manager
risk 0.00cvss —epss 0.00
The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logging, which allows local users to overwrite files via a symlink attack.
CVE-2005-2017Aug 30, 2005
Symantec
Norton Antivirus
risk 0.00cvss —epss 0.02
Symantec AntiVirus 9 Corporate Edition allows local users to gain privileges via the "Scan for viruses" option, which launches a help window with raised privileges, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2002-1540.
CVE-2005-2719Aug 30, 2005
Flagship Industries
Ventrilo
risk 0.04cvss —epss 0.08
Ventrilo 2.1.2 through 2.3.0 allows remote attackers to cause a denial of service (application crash) via a status packet that contains less data than specified in the packet header sent to UDP port 3784.
CVE-2005-2720Aug 30, 2005
Hauri
Livecall
risk 0.00cvss —epss 0.04
Stack-based buffer overflow in the ACE archive decompression library (vrAZace.dll) in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall, when compressed file scanning is enabled, allows remote attackers to execute arbitrary…
CVE-2005-2721Aug 30, 2005
Foojan
PHP Weblog
risk 0.03cvss —epss 0.02
Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) admin.php in Foojan PHP Weblog allow remote attackers to inject arbitrary web script or HTML via the Referer field in the HTTP header.
CVE-2005-2722Aug 30, 2005
Foojan
PHP Weblog
risk 0.00cvss —epss 0.01
Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct request to /daylinks/index.php or (2) a negative value in the daylinkspage parameter to index.php, which reveal the path in an error message.
CVE-2005-2723Aug 30, 2005
paFileDB
paFileDB
risk 0.00cvss —epss 0.01
SQL injection vulnerability in auth.php in PaFileDB 3.1, when authmethod is set to cookies, allows remote attackers to execute arbitrary SQL commands via the username value in the pafiledbcookie cookie.
CVE-2005-2724Aug 30, 2005
Double Precision Incorporated
Sqwebmail
risk 0.00cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via a file attachment that is processed by the Display feature. NOTE: the severity of this issue has been disputed by the developer.
CVE-2005-2725Aug 30, 2005
QNX
Rtos
risk 0.03cvss —epss 0.01
The inputtrap utility in QNX RTOS 6.1.0, 6.3, and possibly earlier versions does not properly check permissions when the -t flag is specified, which allows local users to read arbitrary files.
CVE-2005-2726Aug 30, 2005
Home FTP Server Project
Home FTP Server
risk 0.00cvss —epss 0.02
Directory traversal vulnerability in Home Ftp Server 1.0.7 allows remote authenticated users to read arbitrary files via "C:\" (Windows drive letter) sequences in commands such as (1) LIST or (2) RETR.
CVE-2005-2727Aug 30, 2005
Home FTP Server Project
Home FTP Server
risk 0.00cvss —epss 0.01
Home Ftp Server 1.0.7 stores sensitive user information and server information in the same directory as the user's home directory, which allows remote authenticated users to obtain sensitive information by obtaining ftpmembers.lst and ftpsettings.lst.
CVE-2005-2728Aug 30, 2005
Apache
HTTP Server
risk 0.05cvss —epss 0.11
The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.
CVE-2005-2729Aug 30, 2005
Astaro
Security Linux
risk 0.03cvss —epss 0.07
The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows remote attackers to bypass firewall rules and connect to local services.
CVE-2005-2730Aug 30, 2005
Astaro
Security Linux
risk 0.00cvss —epss 0.02
The HTTP proxy in Astaro Security Linux 6.0 allows remote attackers to obtain sensitive information via an invalid request, which reveals a Proxy-authorization string in an error message.
CVE-2005-2731Aug 30, 2005
Astaro
Security Linux
risk 0.00cvss —epss 0.01
Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated webmin users to read arbitrary files via a .. (dot dot) in the wfe_download parameter to index.fpl.
CVE-2005-2732Aug 30, 2005
AWStats
Awstats
risk 0.00cvss —epss 0.02
AWStats 6.4, and possibly earlier versions, allows remote attackers to obtain sensitive information via a file that does not exist in the config parameter, which reveals the path in an error message.
CVE-2005-2733Aug 30, 2005
Alexander Palmo
Simple PHP Blog
risk 0.09cvss —epss 0.51
upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote attackers to execute arbitrary code.
CVE-2005-2734Aug 30, 2005
Gallery Project
Gallery
risk 0.00cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.
CVE-2005-2735Aug 30, 2005
Phpgraphy
Phpgraphy
risk 0.00cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.
CVE-2005-2736Aug 30, 2005
Yapig
Yapig
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in YaPig 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.
CVE-2005-2737Aug 30, 2005
Photopost
Photopost PHP Pro
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in PhotoPost PHP Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.
CVE-2005-2716Aug 29, 2005
Nokia
Affix
risk 0.00cvss —epss 0.03
The event_pin_code_request function in the btsrv daemon (btsrv.c) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a Bluetooth device name.
CVE-2005-2717Aug 29, 2005
Webcalendar
Webcalendar
risk 0.00cvss —epss 0.02
PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP code when opening settings.php, possibly via send_reminders.php or other scripts.
CVE-2005-2718Aug 29, 2005
MPlayer
Mplayer
risk 0.00cvss —epss 0.03
Buffer overflow in ad_pcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via crafted PCM audio data, as demonstrated using a video file with an audio header containing a large value in a stream format (strf) chunk.
CVE-2005-2693Aug 26, 2005
Nongnu
Cvs
risk 0.00cvss —epss 0.00
cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack.
CVE-2005-2694Aug 26, 2005
Winace
Winace
risk 0.03cvss —epss 0.04
Buffer overflow in WinAce 2.6.0.5, and possibly earlier versions, allows remote attackers to execute arbitrary code via a temporary (.tmp) file that contains an entry with a long file name.
CVE-2005-2695Aug 26, 2005
Cisco Systems, Inc.
Ciscoworks Management Center For Ids Sensors
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the SSL certificate checking functionality in Cisco CiscoWorks Management Center for IDS Sensors (IDSMC) 2.0 and 2.1, and Monitoring Center for Security (Security Monitor or Secmon) 1.1 through 2.0 and 2.1, allows remote attackers to spoof a Cisco…
CVE-2005-2696Aug 26, 2005
IBM
Lotus Notes
risk 0.00cvss —epss 0.02
IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book (NAB), which allows remote attackers to obtain sensitive information via the (1) password digest field in the Administration tab of a Lotus Notes client, (2) "PasswordDigest" and…
CVE-2005-2697Aug 26, 2005
MyBB
Mybb
risk 0.03cvss —epss 0.01
SQL injection vulnerability in search.php for MyBulletinBoard (MyBB) 1.00 Release Candidate 1 through 4 allows remote attackers to execute arbitrary SQL commands via the uid parameter. NOTE: this issue might overlap CVE-2005-0282.
CVE-2005-2698Aug 26, 2005
Nelogic Technologies
Nephp Publisher
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in browse.php in Nephp Publisher Enterprise 3.04 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded keywords parameter.
CVE-2005-2699Aug 26, 2005
Phpkit
Phpkit
risk 0.00cvss —epss 0.00
Unrestricted file upload vulnerability in admin/admin.php in PHPKit 1.6.1 allows remote authenticated administrators to execute arbitrary PHP code by uploading a .php file to the content/images/ directory using images.php. NOTE: if a PHPKit administrator must already have…
CVE-2005-1842Aug 24, 2005
Adobe Inc.
Version Cue
risk 0.03cvss —epss 0.01
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, creates temporary log files with predictable names, which allows local users to modify arbitrary files via a symlink attack.