2005 CVE Vulnerabilities

4,770 CVEs published in 2005.

CVE IDSeverityCVSSDescription
CVE-2005-1309Cross-site scripting (XSS) vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML v...
CVE-2005-1305The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
CVE-2005-1304The citat.pl script allows remote attackers to execute arbitrary files via shell metacharacters in the argument.
CVE-2005-1302SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via th...
CVE-2005-1293Multiple SQL injection vulnerabilities in default.asp in StorePortal 2.63 allow remote attackers to execute arbitrary SQ...
CVE-2005-1292Multiple cross-site scripting (XSS) vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web s...
CVE-2005-1290Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.14 and earlier allow remote attackers to inject arbitra...
CVE-2005-1289index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters ...
CVE-2005-1288inc_login_check.asp ACS Blog 0.8 through 1.1.3 allows remote attackers to gain administrator privileges via the "in" val...
CVE-2005-1286Unquoted Windows search path vulnerability in BitDefender 8 allows local users to prevent BitDefender from starting by c...
CVE-2005-1284The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "All...
CVE-2005-1282Multiple cross-site scripting (XSS) vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to inject...
CVE-2005-1280The rsvp_print function in tcpdump 3.9.1 and earlier allows remote attackers to cause a denial of service (infinite loop...
CVE-2005-1279tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a crafted (1) BGP pac...
CVE-2005-1278The isis_print function, as called by isoclns_print, in tcpdump 3.9.1 and earlier allows remote attackers to cause a den...
CVE-2005-1245Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.2, when using HTML Tidy ($wgUseTidy), allows remote att...
CVE-2005-1243Directory traversal vulnerability in the third party tool from SafeStone, as used to secure the iSeries AS/400 FTP serve...
CVE-2005-1242Directory traversal vulnerability in the third party tool from Bsafe, as used to secure the iSeries AS/400 FTP server, a...
CVE-2005-1239Directory traversal vulnerability in the third party tool from Raz-Lee, as used to secure the iSeries AS/400 FTP server,...
CVE-2005-1238By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows ...
CVE-2005-1237SQL injection vulnerability in news.php in FlexPHPNews 0.0.3 allows remote attackers to execute arbitrary SQL commands v...
CVE-2005-1236Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrar...
CVE-2005-1235auction_my_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an...
CVE-2005-1234Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the...
CVE-2005-1232Buffer overflow in Sun Java System Web Proxy Server (aka Sun ONE Proxy Server) 3.6 SP6 allows remote attackers to execut...

Check if your code is affected by 2005 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now