2005 CVE Vulnerabilities

4,770 CVEs published in 2005.

CVE IDSeverityCVSSDescription
CVE-2005-2132——RPC portmapper (rpcbind) in SCO UnixWare 7.1.1 m5, 7.1.3 mp5, and 7.1.4 mp2 allows remote attackers or local users to ca...
CVE-2005-2447——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2370. Reason: This candidate is a duplicate of...
CVE-2005-2445——SQL injection vulnerability in viewPrd.asp in Product Cart 2.6 allows remote attackers to execute arbitrary SQL commands...
CVE-2005-2418——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2403. Reason: This candidate is a duplicate of...
CVE-2005-2444——Trillian Pro 3.1 build 121, when checking Yahoo e-mail, stores the password in plaintext in a world readable file and do...
CVE-2005-2443——Kshout 2.x and 3.x stores settings.dat under the web document root with insufficient access control, which allows remote...
CVE-2005-2432——SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pag...
CVE-2005-2433——PhpList allows remote attackers to obtain sensitive information via a direct request to (1) about.php, (2) connect.php, ...
CVE-2005-2442——Cross-Application Scripting (XAS) vulnerability in SPI Dynamics WebInspect 5.0.196 allows remote attackers to inject Jav...
CVE-2005-2440——SQL injection vulnerability in login.asp in Thomson Web Skill Vantage Manager allows remote attackers to execute arbitra...
CVE-2005-2452——libtiff up to 3.7.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image header wit...
CVE-2005-2346——Buffer overflow in Novell GroupWise 6.5 Client allows remote attackers to execute arbitrary code via a GWVW02xx.INI lang...
CVE-2005-2451——Cisco IOS 12.0 through 12.4 and IOS XR before 3.2, with IPv6 enabled, allows remote attackers on a local network segment...
CVE-2005-2450——Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (...
CVE-2005-2423——Beehive Forum allows remote attackers to obtain sensitive information via (1) an invalid final_uri or sort_by parameter ...
CVE-2005-2449——Race condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files via symlink attack on ...
CVE-2005-2448——Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service (invali...
CVE-2005-2079——Heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0 through 10.0 for Windows Servers al...
CVE-2005-1762——The ptrace call in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform allows local users to cause a denial of se...
CVE-2005-2411——Cross-Site Request Forgery (CSRF) vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers t...
CVE-2005-2406——Opera 8.01 allows remote attackers to conduct cross-site scripting (XSS) attacks or modify which files are uploaded by t...
CVE-2005-2407——A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malici...
CVE-2005-2409——Format string vulnerability in util.c in nbsmtp 0.99 and earlier, while running in debug mode, allows remote attackers t...
CVE-2005-2410——Format string vulnerability in the nm_info_handler function in Network Manager may allow remote attackers to execute arb...
CVE-2005-2405——Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII charac...

Check if your code is affected by 2005 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now