2005 CVE Vulnerabilities

4,770 CVEs published in 2005.

CVE IDSeverityCVSSDescription
CVE-2005-4834——IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1.3 allows remote attackers to obtain JSP source code and oth...
CVE-2005-4848——Buffer overflow in the decompression algorithm in Research in Motion BlackBerry Enterprise Server 4.0 SP1 and earlier be...
CVE-2005-4853——The default configuration of the forum package in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, an...
CVE-2005-4840——The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of s...
CVE-2005-4852——The siteaccess URIMatching implementation in eZ publish 3.5 through 3.8 before 20050812 converts all non-alphanumeric ch...
CVE-2005-4849——Apache Derby before 10.1.2.1 exposes the (1) user and (2) password attributes in cleartext via (a) the RDBNAM parameter ...
CVE-2005-4839——PureTLS before 0.9b5 does not clear optional Extensions and Algorithm.Parameters values before parsing, which might trig...
CVE-2005-4833——IBM WebSphere Application Server (WAS) 6.0 before 20050201, when serving pages in an Application WAR or an Extended Docu...
CVE-2005-4827——Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy an...
CVE-2005-4854——eZ publish 3.5 through 3.7 before 20050830 does not use a folder's read permissions to restrict notifications, which all...
CVE-2005-4821——Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbit...
CVE-2005-4746——Multiple buffer overflows in FreeRADIUS 1.0.3 and 1.0.4 allow remote attackers to cause denial of service (crash) via (1...
CVE-2005-4831——viewcvs in ViewCVS 0.9.2 allows remote attackers to set the Content-Type header to arbitrary values via the content-type...
CVE-2005-4814——Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with ...
CVE-2005-4813——Unspecified vulnerability in Report Application Server (Crystalras.exe) before 11.0.0.1370, as used in Business Objects ...
CVE-2005-4812——The SISCO OSI stack for Windows, as used by MMS-EASE 7.10 and earlier, AX-S4 MMS 5.01 and earlier, AX-S4 ICCP 3.0103 and...
CVE-2005-4561——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was assigned in 2005 to an...
CVE-2005-1919——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ...
CVE-2005-0528——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2003-0985. Reason: This candidate is a duplicate of...
CVE-2005-4863——Stack-based buffer overflow in db2fmp in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long par...
CVE-2005-4808——Buffer overflow in reset_vars in config/tc-crx.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils ...
CVE-2005-4867——Stack-based buffer overflow in the SATENCRYPT function in IBM DB2 8.1, when Satellite Administration (SATADMIN) is enabl...
CVE-2005-1528——Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitra...
CVE-2005-4866——Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connect...
CVE-2005-4869——The (1) to_char and (2) to_date function in IBM DB2 8.1 allows local users to cause a denial of service (application cra...

Check if your code is affected by 2005 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now