Security Vulnerabilities Published In October 2005

2005 : January February March April May June July August September October November December

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2005-3386		Exec Code Sql Bypass	2005-10-30	2016-10-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
SQL injection vulnerability in Techno Dreams Web Directory script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.
2	CVE-2005-3385		Exec Code Sql Bypass	2005-10-30	2016-10-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
SQL injection vulnerability in Techno Dreams Mailing List script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.
3	CVE-2005-3384		Exec Code Sql Bypass	2005-10-30	2016-10-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.
4	CVE-2005-3383		Exec Code Sql Bypass	2005-10-30	2016-10-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
SQL injection vulnerability in Techno Dreams Announcement script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.
5	CVE-2005-3382		Bypass	2005-10-30	2016-10-18	5.0	None	Remote	Low	Not required	None	Partial	None
Multiple interpretation error in Sophos 3.91 with the 2.28.4 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
6	CVE-2005-3381		Bypass	2005-10-30	2016-10-18	5.0	None	Remote	Low	Not required	None	Partial	None
Multiple interpretation error in Ukrainian National Antivirus (UNA) 1.83.2.16 with kernel 265 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
7	CVE-2005-3380		Bypass	2005-10-30	2016-10-18	5.0	None	Remote	Low	Not required	None	Partial	None
Multiple interpretation error in Panda Titanium 2005 4.02.01 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
8	CVE-2005-3379		Bypass	2005-10-30	2018-10-19	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Multiple interpretation error in Trend Micro (1) PC-Cillin 2005 12.0.1244 with the 7.510.1002 engine and (2) OfficeScan 7.0 with the 7.510.1002 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
9	CVE-2005-3378		Bypass	2005-10-30	2016-10-18	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Multiple interpretation error in Norman 5.81 with the 5.83.02 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
10	CVE-2005-3377		Bypass	2005-10-30	2016-10-18	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Multiple interpretation error in (1) McAfee Internet Security Suite 7.1.5 version 9.1.08 with the 4.4.00 engine and (2) McAfee Corporate 8.0.0 patch 10 with the 4400 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
11	CVE-2005-3376		Bypass	2005-10-30	2016-10-18	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Multiple interpretation error in Kaspersky 5.0.372 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
12	CVE-2005-3375		Bypass	2005-10-30	2016-10-18	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Multiple interpretation error in Ikarus demo version allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
13	CVE-2005-3374		Bypass	2005-10-30	2016-10-18	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Multiple interpretation error in F-Prot 3.16c allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
14	CVE-2005-3373		Bypass	2005-10-30	2016-10-18	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Multiple interpretation error in Dr.Web 4.32b allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
15	CVE-2005-3372		Bypass	2005-10-30	2021-04-09	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Multiple interpretation error in eTrust CA 7.0.1.4 with the 11.9.1 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
16	CVE-2005-3371		Bypass	2005-10-30	2016-10-18	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Multiple interpretation error in AVG 7 7.0.323 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
17	CVE-2005-3370		Bypass	2005-10-30	2016-10-18	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Multiple interpretation error in ArcaVir 2005 package 2005-06-21 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
18	CVE-2005-3369		Exec Code Sql	2005-10-30	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple SQL injection vulnerabilities in the Info-DB module (info_db.php) in Woltlab Burning Board 2.7 and earlier allow remote attackers to execute arbitrary SQL commands and possibly upload files via the (1) fileid and (2) subkatid parameters.
19	CVE-2005-3368		XSS	2005-10-30	2017-07-11	4.3	None	Remote	Medium	Not required	None	Partial	None
Cross-site scripting (XSS) vulnerability in the Search_Enhanced module in PHP-Nuke 7.9 allows remote attackers to inject arbitrary web script or HTML via the query parameter.
20	CVE-2005-3367		XSS	2005-10-30	2016-10-18	4.3	None	Remote	Medium	Not required	None	Partial	None
Cross-site scripting (XSS) vulnerability in journal.php in SparkleBlog 2.1 allows remote attackers to inject arbitrary web script or HTML via the name field.
21	CVE-2005-3366		Exec Code XSS File Inclusion	2005-10-30	2017-07-11	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
PHP file inclusion vulnerability in index.php in PHP iCalendar 2.0a2 through 2.0.1 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the phpicalendar cookie. NOTE: this is not a cross-site scripting (XSS) issue as claimed by the original researcher.
22	CVE-2005-3365	89	Exec Code Sql	2005-10-30	2018-10-19	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded characters, via (1) the name parameter in register.php, (2) the email parameter in lostpassword.php, (3) the year parameter in calendar.php, and the (4) cid parameter to index.php. NOTE: the mid parameter for forums.php is already associated with CVE-2005-0454. NOTE: the index.php/cid vector was later reported to affect 6.11.
23	CVE-2005-3364		Exec Code Sql	2005-10-30	2016-10-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple SQL injection vulnerabilities in DboardGear allow remote attackers to execute arbitrary SQL commands via (1) the buddy parameter in buddy.php, (2) the u2uid parameter in u2u.php, and (3) an invalid theme file in the themes action to ctrtools.php.
24	CVE-2005-3363		Exec Code Sql	2005-10-30	2018-10-19	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
SQL injection vulnerability in Saphp Lesson, possibly saphp Lesson1.1 and saphpLesson2.0, allows remote attackers to execute arbitrary SQL commands via the forumid parameter in (1) showcat.php and (2) add.php.
25	CVE-2005-3361		XSS	2005-10-28	2016-10-18	4.3	None	Remote	Medium	Not required	None	Partial	None
Cross-site scripting (XSS) vulnerability in forum/index.php in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the nome parameter in a login operation, a variant of CVE-2005-3306.
26	CVE-2005-3339			2005-10-27	2008-09-05	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors.
27	CVE-2005-3338			2005-10-27	2008-09-05	5.0	None	Remote	Low	Not required	Partial	None	None
Unspecified vulnerability in Mantis before 0.19.3, when using reminders, causes Mantis to display the real email addresses of users.
28	CVE-2005-3337		XSS	2005-10-27	2008-09-05	4.3	None	Remote	Medium	Not required	None	Partial	None
Multiple cross-site scripting (XSS) vulnerabilities in Mantis before 0.19.3 allow remote attackers to inject arbitrary web script or HTML via (1) unknown vectors involving Javascript and (2) mantis/view_all_set.php.
29	CVE-2005-3336		Exec Code Sql	2005-10-27	2011-03-08	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
30	CVE-2005-3335		Exec Code File Inclusion	2005-10-27	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the t_core_path parameter.
31	CVE-2005-3334		XSS	2005-10-27	2017-07-11	4.3	None	Remote	Medium	Not required	None	Partial	None
Cross-site scripting (XSS) vulnerability in index.php in Flyspray 0.9.7 through 0.9.8 (devel) allows remote attackers to inject arbitrary web script or HTML via the (1) PHPSESSID, (2) task, (3) string, (4) type, (5) serv, (6) due, (7) dev, and (8) sort2 parameters.
32	CVE-2005-3333		Exec Code Sql	2005-10-27	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
SQL injection vulnerability in eBASEweb 3.0 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
33	CVE-2005-3332		Exec Code	2005-10-27	2008-09-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
PHP remote file include vulnerability in admin/define.inc.php in Belchior Foundry vCard 2.9 allows remote attackers to execute arbitrary PHP code via the match parameter.
34	CVE-2005-3331			2005-10-27	2017-07-11	2.1	None	Local	Low	Not required	None	Partial	None
viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
35	CVE-2005-3330	20	Exec Code	2005-10-27	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function.
36	CVE-2005-3329		XSS	2005-10-27	2016-10-18	4.3	None	Remote	Medium	Not required	None	Partial	None
Cross-site scripting (XSS) vulnerability in RSA Authentication Agent for Web 5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the image parameter in a GetPic operation.
37	CVE-2005-3328		Exec Code File Inclusion	2005-10-27	2016-10-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
PHP remote file inclusion vulnerability in common.php in PunBB 1.1.2 through 1.1.5 allows remote attackers to execute arbitrary code via the pun_root parameter.
38	CVE-2005-3327		Bypass	2005-10-27	2016-10-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Network Appliance Data ONTAP 7.0 and earlier allows iSCSI Initiators to bypass iSCSI authentication via a modified client that skips the Security (Start) mode, as required by the Login Negotiation protocol, and uses Operational mode without proving identity.
39	CVE-2005-3326		Exec Code Sql	2005-10-27	2008-09-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
SQL injection vulnerability in usercp.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the awayday parameter.
40	CVE-2005-3325	89	Exec Code Sql	2005-10-27	2012-07-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple SQL injection vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 and (2) base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.2, and unspecified other console scripts in these products, allow remote attackers to execute arbitrary SQL commands via the sig[1] parameter and possibly other parameters.
41	CVE-2005-3324		Exec Code Sql	2005-10-27	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
SQL injection vulnerability in chat.php in MWChat 6.8 allows remote attackers to execute arbitrary SQL commands via the username parameter.
42	CVE-2005-3323			2005-10-27	2018-10-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality.
43	CVE-2005-3322		DoS	2005-10-27	2008-09-10	5.0	None	Remote	Low	Not required	None	None	Partial
Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of service (crash) via HTTPs (SSL).
44	CVE-2005-3321			2005-10-27	2018-10-30	4.6	None	Local	Low	Not required	Partial	Partial	Partial
chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by creating a hardlink to a file from a world-writable directory, which can cause the link count to drop to 1 when the file is deleted or replaced, which is then modified by chkstat to use weaker permissions.
45	CVE-2005-3320		XSS	2005-10-27	2008-09-05	2.6	None	Remote	High	Not required	None	Partial	None
Cross-site scripting (XSS) vulnerability in SiteTurn Domain Manager Pro allows remote attackers to inject arbitrary web script or HTML via the err parameter in the panel script.
46	CVE-2005-3319		DoS	2005-10-27	2018-10-30	2.1	None	Local	Low	Not required	None	None	Partial
The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 final and 4.4 before 4.4.1 final allows attackers to cause a denial of service (segmentation fault) via the session.save_path option in a .htaccess file or VirtualHost.
47	CVE-2005-3318		Exec Code Overflow	2005-10-27	2017-07-19	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Buffer overflow in the _chm_decompress_block function in CHM lib (chmlib) before 0.37, as used in products such as KchmViewer, allows attackers to execute arbitrary code, a different vulnerability than CVE-2005-2930.
48	CVE-2005-3317	119	Exec Code Overflow	2005-10-27	2009-03-25	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allow remote attackers to execute arbitrary code via (1) a ZIP archive that contains a file with a long filename, which is not properly handled by (a) zipgenius.exe, (b) zg.exe, (c) zgtips.dll, and (d) contmenu.dll; (2) a long original name in a (a) UUE, (b) XXE, or (c) MIM file, which is not properly handled by zipgenius.exe; or (3) an ACE archive with a file with a long filename, which is not properly handled by unacev2.dll.
49	CVE-2005-3316		+Priv	2005-10-27	2013-07-07	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The installation of ON Symantec Discovery 4.5.x and Symantec Discovery 6.0 creates the (1) DiscoveryWeb and (2) DiscoveryRO database accounts with null passwords, which could allow attackers to gain privileges or prevent Discovery from running by setting another password.
50	CVE-2005-3315		Exec Code Sql	2005-10-30	2011-03-08	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (2) SearchText, (3) StatusFilter, and (4) computerFilter parameters to reports/default.asp.

Total number of vulnerabilities : 283 Page : 1 (This Page)2 3 4 5 6