Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-09-20 | CVE-2005-2968 | Unspecified vulnerability in Mozilla Firefox and Mozilla Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash. | 7.5 |
| 2005-09-20 | CVE-2005-2993 | Remote Denial Of Service vulnerability in HP-UX FTPD Unspecified vulnerability in the FTP Daemon (ftpd) for HP Tru64 UNIX 4.0F PK8 and other versions up to HP Tru64 UNIX 5.1B-3, and HP-UX B.11.00, B.11.04, B.11.11, and B.11.23, allows remote authenticated users to cause a denial of service (hang). | 1.7 |
| 2005-09-20 | CVE-2005-2991 | Local Security vulnerability in ncompress ncompress 4.2.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files using (1) zdiff or (2) zcmp, a different vulnerability than CVE-2004-0970. | 2.1 |
| 2005-09-20 | CVE-2005-2990 | Local Password Disclosure vulnerability in Linecontrol Java Client 0.8 AuthInfo.java in LineContol Java Client (jlc) before 0.8.1 stores sensitive information such as user passwords in log files. | 2.1 |
| 2005-09-20 | CVE-2005-2989 | SQL Injection vulnerability in Deluxebb 1.0/1.05 Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) tid parameter to topic.php, the uid parameter to (2) misc.php or (3) pm.php, or the fid parameter to (3) forums.php or (4) newpost.php. | 7.5 |
| 2005-09-20 | CVE-2005-2988 | Information Disclosure vulnerability in LaserJet 2430 HP LaserJet 2430, and possibly other printers that use Jetdirect controls, stores information about recently printed documents without proper protection, which could allow remote attackers to obtain sensitive information via SNMP. | 5.0 |
| 2005-09-20 | CVE-2005-2987 | SQL Injection vulnerability in Digital Scribe Digital Scribe 1.4 SQL injection vulnerability in login.php in Digital Scribe 1.4 allows remote attackers to execute arbitrary SQL commands via the username parameter. | 7.5 |
| 2005-09-20 | CVE-2005-2986 | SQL Injection vulnerability in Ahnlab V3 Virusblock 2005, V3Net and V3Pro 2004 The v3flt2k.sys driver in AhnLab V3Pro 2004 Build 6.0.0.383, V3 VirusBlock 2005 Build 6.0.0.383, V3Net for Windows Server 6.0 Build 6.0.0.383 does not properly validate the source of the DeviceIoControl commands, which allows remote attackers to gain privileges. | 7.5 |
| 2005-09-20 | CVE-2005-2985 | SQL Injection vulnerability in AEwebworks Aedating 3.2/4.0 SQL injection vulnerability in search_result.php in AEwebworks aeDating Script 4.0 and earlier allows remote attackers to execute arbitrary SQL statements via the Country parameter. | 7.5 |
| 2005-09-20 | CVE-2005-2984 | Unspecified vulnerability in Data Center Resources Avocent Ccm48502.1Firmware Avocent CCM console server running firmware 2.1 CCM4850 allows remote authenticated attackers to bypass port restrictions by connecting to the server via SSH and using the connect command to access the serial port. | 4.6 |