2005 CVE Vulnerabilities
4,770 CVEs published in 2005.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2005-2813 | — | — | 7.1% | Sep 7, 2005 | Directory traversal vulnerability in FlatNuke 2.5.6 and possibly earlier allows remote attackers to read arbitrary files... |
| CVE-2005-2814 | — | — | 1.7% | Sep 7, 2005 | Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTM... |
| CVE-2005-2494 | — | — | 0.4% | Sep 6, 2005 | kcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack on lock files. |
| CVE-2005-2656 | — | — | 0.3% | Sep 6, 2005 | Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to ... |
| CVE-2005-2700 | — | — | 30.6% | Sep 6, 2005 | ssl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configura... |
| CVE-2005-2763 | — | — | 2.7% | Sep 6, 2005 | Multiple format string vulnerabilities in OpenTTD before 0.4.0.1 allow remote attackers to cause a denial of service (cr... |
| CVE-2005-2805 | — | — | 1.3% | Sep 6, 2005 | forum_post.php in e107 0.6 allows remote attackers to post to non-existent forums by modifying the forum number. |
| CVE-2005-2806 | — | — | 1.7% | Sep 6, 2005 | client.cpp in BNBT EasyTracker 7.7r3.2004.10.27 and earlier allows remote attackers to cause a denial of service (applic... |
| CVE-2005-2336 | — | — | 1.2% | Sep 6, 2005 | Cross-site scripting (XSS) vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject arbitrary web script o... |
| CVE-2005-2803 | — | — | 1.2% | Sep 6, 2005 | Cross-site scripting (XSS) vulnerability in Hiki 0.8.1 to 0.8.2 allows remote attackers to inject arbitrary web script o... |
| CVE-2005-2802 | — | — | — | Sep 6, 2005 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2872, CVE-2005-2873. Reason: this candidate's ... |
| CVE-2005-2801 | HIGH | 7.5 | 3.4% | Sep 6, 2005 | xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the name_index fields when ... |
| CVE-2005-2798 | — | — | 2.3% | Sep 6, 2005 | sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clie... |
| CVE-2005-2797 | — | — | 2.2% | Sep 6, 2005 | OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding ("-D" option) when a listen... |
| CVE-2005-2800 | — | — | 0.8% | Sep 6, 2005 | Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows... |
| CVE-2005-2773 | CRITICAL | 9.8 | 74.1% | Sep 2, 2005 | HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metach... |
| CVE-2005-2770 | — | — | 3.3% | Sep 2, 2005 | WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) does not properly handle when th... |
| CVE-2005-2779 | — | — | 1.3% | Sep 2, 2005 | The iTAN Online-Banking Security System allows remote attackers to obtain TAN numbers via a man-in-the-middle (MITM) att... |
| CVE-2005-2767 | — | — | 6.9% | Sep 2, 2005 | Buffer overflow in LeapFTP allows remote attackers to execute arbitrary code via a long Host string in a Site Queue (.ls... |
| CVE-2005-2768 | — | — | 12.7% | Sep 2, 2005 | Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailMonitor, and o... |
| CVE-2005-2769 | — | — | 2.7% | Sep 2, 2005 | Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attackers to injec... |
| CVE-2005-2771 | — | — | 4.8% | Sep 2, 2005 | WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) processes access and deny lists ... |
| CVE-2005-2772 | — | — | 10.0% | Sep 2, 2005 | Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to e... |
| CVE-2005-2774 | — | — | 2.8% | Sep 2, 2005 | Format string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a denial of service (ser... |
| CVE-2005-2775 | — | — | 2.6% | Sep 2, 2005 | php_api.php in phpWebNotes 2.0.0 uses the extract function to modify key variables such as $t_path_core, which leads to ... |
Check if your code is affected by 2005 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now