2005 CVE Vulnerabilities
4,770 CVEs published in 2005.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2005-1089 | — | — | 1.1% | Apr 11, 2005 | Unknown vulnerability in DC++ before 0.674 allows attackers to append data to arbitrary files. |
| CVE-2005-1055 | — | — | 1.6% | Apr 10, 2005 | TowerBlog 0.6 and earlier stores the login data file under the web root, which allows remote attackers to obtain the MD5... |
| CVE-2005-1064 | — | — | 0.4% | Apr 10, 2005 | The copy_symlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points... |
| CVE-2005-1082 | — | — | 1.3% | Apr 9, 2005 | Multiple SQL injection vulnerabilities in AzDGDatingPlatinum 1.1.0 allows remote attackers to execute arbitrary SQL comm... |
| CVE-2005-1094 | — | — | 0.7% | Apr 8, 2005 | FTP Now 2.6.14 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local use... |
| CVE-2005-1067 | — | — | 1.2% | Apr 8, 2005 | Vulnerability in Access_user Class before 1.75 allows local users to gain access as other users via the password "new". |
| CVE-2005-1072 | — | — | 0.9% | Apr 8, 2005 | Cross-site scripting (XSS) vulnerability in PunBB before 1.2.5 allows remote attackers to inject arbitrary web script or... |
| CVE-2005-1047 | — | — | 2.1% | Apr 7, 2005 | Meilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, ... |
| CVE-2005-1087 | — | — | 2.3% | Apr 7, 2005 | CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide ... |
| CVE-2005-0351 | — | — | 0.4% | Apr 7, 2005 | Buffer overflow in (1) termsh, (2) atcronsh, and (3) auditsh in SCO OpenServer 5.0.6 and 5.0.7 might allow local users t... |
| CVE-2005-1029 | — | — | 4.3% | Apr 6, 2005 | Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands ... |
| CVE-2005-1096 | — | — | 1.3% | Apr 6, 2005 | SQL injection vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to execute arbitr... |
| CVE-2005-1032 | — | — | — | Apr 6, 2005 | Rejected reason: cart.php in LiteCommerce might allow remote attackers to obtain sensitive information via invalid (1) c... |
| CVE-2005-1035 | — | — | 1.3% | Apr 5, 2005 | Multiple buffer overflows in Pavuk before 0.9.32 have unknown attack vectors and impact. |
| CVE-2005-0749 | — | — | 0.4% | Apr 1, 2005 | The load_elf_library in the Linux kernel before 2.6.11.6 allows local users to cause a denial of service (kernel crash) ... |
| CVE-2005-0957 | — | — | 1.6% | Mar 31, 2005 | Bay Technical Associates RPC-3 Telnet Host 3.05 allows remote attackers to bypass authentication by pressing the escape ... |
| CVE-2005-0480 | — | — | 1.2% | Mar 30, 2005 | Cross-site scripting (XSS) vulnerability in TrackerCam 5.12 and earlier allows remote attackers to inject arbitrary HTML... |
| CVE-2005-0479 | — | — | 3.1% | Mar 30, 2005 | Directory traversal vulnerability in ComGetLogFile.php3 for TrackerCam 5.12 and earlier allows remote attackers to read ... |
| CVE-2005-0478 | — | — | 65.4% | Mar 30, 2005 | Multiple buffer overflows in TrackerCam 5.12 and earlier allow remote attackers to cause a denial of service and possibl... |
| CVE-2005-0477 | — | — | 2.4% | Mar 30, 2005 | Cross-site scripting (XSS) vulnerability in the SML code for Invision Power Board 1.3.1 FINAL allows remote attackers to... |
| CVE-2005-0474 | — | — | 1.4% | Mar 30, 2005 | SQL injection vulnerability in the user_valid_crypt function in user.php in WebCalendar 0.9.45 allows remote attackers t... |
| CVE-2005-0475 | — | — | 1.0% | Mar 30, 2005 | SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary SQ... |
| CVE-2005-0476 | — | — | 1.0% | Mar 30, 2005 | Cross-site scripting (XSS) vulnerability in hpm_guestbook.cgi allows remote attackers to inject arbitrary web script or ... |
| CVE-2005-0943 | — | — | 1.6% | Mar 30, 2005 | Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of ser... |
| CVE-2005-0485 | — | — | 1.8% | Mar 30, 2005 | Cross-site scripting (XSS) vulnerability in comment.php for paNews 2.0b4 for PHP Arena allows remote attackers to inject... |
Check if your code is affected by 2005 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now