2005 CVE Vulnerabilities

4,770 CVEs published in 2005.

CVE IDSeverityCVSSDescription
CVE-2005-1554——SQL injection vulnerability in view_user.php in WowBB 1.6, 1.61, and 1.62 allows remote attackers to execute arbitrary S...
CVE-2005-1553——GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 uses a weak encryption scheme to encrypt passwords, which ...
CVE-2005-1563——Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 displays a different error message depending on whether a product exists ...
CVE-2005-1552——GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0, when set to create JPEG images, does not properly protect...
CVE-2005-1551——Sophos Anti-Virus 3.93 does not check downloaded files for viruses when they have only been written, which creates a rac...
CVE-2005-1550——easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the ...
CVE-2005-1549——Directory traversal vulnerability in easymsgb.pl in Easy Message Board allows remote attackers to read arbitrary files v...
CVE-2005-1547——Heap-based buffer overflow in the demo version of Bakbone Netvault, and possibly other versions, allows remote attackers...
CVE-2005-1577——APG Technology ClassMaster does not properly restrict access to sensitive folders, which allows remote attackers to acce...
CVE-2005-1575——The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to hide the real file typ...
CVE-2005-1574——Windows Media Player 9 and 10, in certain cases, allows content protected by Windows Media Digital Rights Management (WM...
CVE-2005-1584——Cross-site scripting (XSS) vulnerability in index.php for Quick.Forum 2.1.6 allows remote attackers to inject arbitrary ...
CVE-2005-1571——Multiple directory traversal vulnerabilities in ShowOff! 1.5.4 allow remote attackers to read arbitrary files via ".." s...
CVE-2005-1570——forum.asp in bttlxeForum 2.0 allows remote attackers to obtain full path information via a certain hex-encoded argument ...
CVE-2005-1578——EnCase Forensic Edition 4.18a does not support Device Configuration Overlays (DCO), which allows attackers to hide infor...
CVE-2005-0758——zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands ...
CVE-2005-0973——Unknown vulnerability in the setsockopt system call in Mac OS X 10.3.9 and earlier allows local users to cause a denial ...
CVE-2005-1576——The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine th...
CVE-2005-1579——Apple QuickTime Player 7.0 on Mac OS X 10.4 allows remote attackers to obtain sensitive information via a .mov file with...
CVE-2005-0974——Unknown vulnerability in the nfs_mount call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via cra...
CVE-2005-1565——Bugzilla 2.17.1 through 2.18, 2.19.1, and 2.19.2, when a user is prompted to log in while attempting to view a chart, di...
CVE-2005-0971——Stack-based buffer overflow in the semop system call in Mac OS X 10.3.9 and earlier allows local users to gain privilege...
CVE-2005-1564——post_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to "enter bugs into pro...
CVE-2005-1271——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1343. Reason: This candidate is a reservation ...
CVE-2005-1568——topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to obtain sensitive information via an invalid topic param...

Check if your code is affected by 2005 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now