2005 CVE Vulnerabilities

4,770 CVEs published in 2005.

CVE IDSeverityCVSSDescription
CVE-2005-1136——Simple PHP Blog (sphpBlog) 0.4.0 stores the (1) password.txt and (2) config.txt files under the web document root, which...
CVE-2005-0020——Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code.
CVE-2005-1139——Opera 8 Beta 3, when using first-generation vetted digital certificates, displays the Organizational information of an S...
CVE-2005-0016——Buffer overflow in the exported_display function in xatitv in gatos before 0.0.5 allows local users to execute arbitrary...
CVE-2005-0718——Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the ...
CVE-2005-1043——exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an E...
CVE-2005-0082——The sapdbwa_GetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to ...
CVE-2005-1149——SQL injection vulnerability in admin/login.asp in aspclick.it ACNews 1.0 allows remote attackers to execute arbitrary SQ...
CVE-2005-1301——nProtect:Netizen 2005.3.17.1 does not properly verify that the update module is downloaded from an authorized site, whic...
CVE-2005-1134——SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL...
CVE-2005-1077——Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.4.x allow remote attackers to inject arbitrary web script...
CVE-2005-1099——Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is l...
CVE-2005-1103——Sygate Security Agent (SSA) in Sygate Secure Enterprise 3.5 through 4.1 does not prevent the security policy from being ...
CVE-2005-1130——Cross-site scripting (XSS) vulnerability in index.php in Pinnacle Cart allows remote attackers to inject arbitrary web s...
CVE-2005-1143——Cross-site scripting (XSS) vulnerability in index.php in EasyPHPCalendar before 6.2.8 allows remote attackers to inject ...
CVE-2005-1144——popup.php in EasyPHPCalendar before 6.2.8 allows remote attackers to obtain sensitive information via an invalid ev para...
CVE-2005-1145——NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in calendar.pl in CalendarSc...
CVE-2005-1146——NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in the login command in cale...
CVE-2005-0610——Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrar...
CVE-2005-0562——GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary cod...
CVE-2005-0555——Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execut...
CVE-2005-1147——calendar.pl in CalendarScript 3.20 allows remote attackers to obtain sensitive information via invalid (1) calendar or (...
CVE-2005-1078——XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges.
CVE-2005-1071——SQL injection vulnerability in banner.inc.php in JPortal Web Portal 2.3.1 allows remote attackers to execute arbitrary S...
CVE-2005-1070——SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to exec...

Check if your code is affected by 2005 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now