2005 CVE Vulnerabilities
4,770 CVEs published in 2005.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2005-1688 | MEDIUM | 5.3 | 1.9% | May 20, 2005 | Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) w... |
| CVE-2005-1675 | — | — | 1.0% | May 20, 2005 | Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 install... |
| CVE-2005-1682 | — | — | 0.7% | May 20, 2005 | JavaMail API, as used by Solstice Internet Mail Server POP3 2.0, does not properly validate the message number in the Mi... |
| CVE-2005-1681 | — | — | 6.6% | May 20, 2005 | PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote attac... |
| CVE-2005-1680 | — | — | 1.5% | May 20, 2005 | D-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows remote attackers to by... |
| CVE-2005-1679 | — | — | 7.4% | May 20, 2005 | Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary cod... |
| CVE-2005-1676 | — | — | 3.0% | May 20, 2005 | Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build... |
| CVE-2005-1677 | — | — | 3.6% | May 20, 2005 | Unknown vulnerability in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace befor... |
| CVE-2005-1678 | — | — | 1.6% | May 20, 2005 | Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does no... |
| CVE-2005-1687 | — | — | 2.3% | May 20, 2005 | SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote attackers to execute arbitrar... |
| CVE-2005-1686 | — | — | 7.7% | May 20, 2005 | Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a b... |
| CVE-2005-1685 | — | — | 1.7% | May 20, 2005 | episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp. |
| CVE-2005-1684 | — | — | 0.9% | May 20, 2005 | Cross-site scripting (XSS) vulnerability in default.asp for episodex guestbook allows remote attackers to inject arbitra... |
| CVE-2005-1683 | — | — | 14.6% | May 20, 2005 | Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, a... |
| CVE-2005-1455 | — | — | 2.5% | May 19, 2005 | Buffer overflow in the sql_escape_func function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote attacke... |
| CVE-2005-1472 | — | — | 0.3% | May 19, 2005 | Certain system calls in Apple Mac OS X 10.4.1 do not properly enforce the permissions of certain directories without the... |
| CVE-2005-1674 | MEDIUM | 6.5 | 2.9% | May 19, 2005 | Cross-Site Request Forgery (CSRF) vulnerability in Help Center Live allows remote attackers to perform actions as the ad... |
| CVE-2005-0392 | — | — | 0.4% | May 19, 2005 | ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands. |
| CVE-2005-0040 | — | — | 1.3% | May 19, 2005 | Multiple cross-site scripting (XSS) vulnerabilities in DotNetNuke before 3.0.12 allow remote attackers to inject arbitra... |
| CVE-2005-1260 | — | — | 6.2% | May 19, 2005 | bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes... |
| CVE-2005-1934 | — | — | 2.4% | May 19, 2005 | Gaim before 1.3.1 allows remote attackers to cause a denial of service (crash) via a malformed MSN message that leads to... |
| CVE-2005-1454 | — | — | 1.8% | May 19, 2005 | SQL injection vulnerability in the radius_xlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote... |
| CVE-2005-1673 | — | — | 1.1% | May 19, 2005 | Multiple SQL injection vulnerabilities in Help Center Live allow remote attackers to execute arbitrary SQL commands via ... |
| CVE-2005-1672 | — | — | 2.7% | May 19, 2005 | Multiple cross-site scripting (XSS) vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web s... |
| CVE-2005-1671 | — | — | 0.4% | May 19, 2005 | The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a sing... |
Check if your code is affected by 2005 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now