2005 CVE Vulnerabilities

4,770 CVEs published in 2005.

CVE IDSeverityCVSSDescription
CVE-2005-2414Race condition in the xpcom library, as used by web browsers such as Firefox, Mozilla, Netscape, and Galeon, allows remo...
CVE-2005-2418Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2403. Reason: This candidate is a duplicate of...
CVE-2005-2423Beehive Forum allows remote attackers to obtain sensitive information via (1) an invalid final_uri or sort_by parameter ...
CVE-2005-2413PHP remote file inclusion vulnerability in apa_phpinclude.inc.php in Atomic Photo Album (APA) allows remote attackers to...
CVE-2005-2412PHP remote file inclusion vulnerability in block.php in PHP FirstPost allows remote attackers to execute arbitrary PHP c...
CVE-2005-2452libtiff up to 3.7.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image header wit...
CVE-2005-2451Cisco IOS 12.0 through 12.4 and IOS XR before 3.2, with IPv6 enabled, allows remote attackers on a local network segment...
CVE-2005-2450Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (...
CVE-2005-2449Race condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files via symlink attack on ...
CVE-2005-2448Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service (invali...
CVE-2005-2445SQL injection vulnerability in viewPrd.asp in Product Cart 2.6 allows remote attackers to execute arbitrary SQL commands...
CVE-2005-2444Trillian Pro 3.1 build 121, when checking Yahoo e-mail, stores the password in plaintext in a world readable file and do...
CVE-2005-2443Kshout 2.x and 3.x stores settings.dat under the web document root with insufficient access control, which allows remote...
CVE-2005-2424The management interface for Siemens SANTIS 50 running firmware 4.2.8.0, and possibly other products including Ericsson ...
CVE-2005-2442Cross-Application Scripting (XAS) vulnerability in SPI Dynamics WebInspect 5.0.196 allows remote attackers to inject Jav...
CVE-2005-2441Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and ...
CVE-2005-2440SQL injection vulnerability in login.asp in Thomson Web Skill Vantage Manager allows remote attackers to execute arbitra...
CVE-2005-2079Heap-based buffer overflow in the Admin Plus Pack Option for VERITAS Backup Exec 9.0 through 10.0 for Windows Servers al...
CVE-2005-1762The ptrace call in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform allows local users to cause a denial of se...
CVE-2005-2409Format string vulnerability in util.c in nbsmtp 0.99 and earlier, while running in debug mode, allows remote attackers t...
CVE-2005-2410Format string vulnerability in the nm_info_handler function in Network Manager may allow remote attackers to execute arb...
CVE-2005-2411Cross-Site Request Forgery (CSRF) vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers t...
CVE-2005-2407A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malici...
CVE-2005-2406Opera 8.01 allows remote attackers to conduct cross-site scripting (XSS) attacks or modify which files are uploaded by t...
CVE-2005-2405Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII charac...

Check if your code is affected by 2005 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now