Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-08-12 | CVE-2005-2552 | Remote Access vulnerability in HP Proliant DL585 Server Unauthorized Unknown vulnerability in HP ProLiant DL585 servers running Integrated Lights Out (ILO) firmware before 1.81 allows attackers to access server controls when the server is "powered down." | 7.5 |
| 2005-08-12 | CVE-2005-2551 | Buffer Overflow vulnerability in Novell Edirectory 8.7.3 Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of service (crash) and obtain access to files via unknown vectors. | 7.5 |
| 2005-08-12 | CVE-2005-2550 | Format String vulnerability in GNOME Evolution Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab. | 7.5 |
| 2005-08-12 | CVE-2005-2549 | Format String vulnerability in GNOME Evolution Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) full vCard data, (2) contact data from remote LDAP servers, or (3) task list data from remote servers. | 7.5 |
| 2005-08-12 | CVE-2005-2548 | Resource Management Errors vulnerability in Linux Kernel 2.6.8 vlan_dev.c in the VLAN code for Linux kernel 2.6.8 allows remote attackers to cause a denial of service (kernel oops from null dereference) via certain UDP packets that lead to a function call with the wrong argument, as demonstrated using snmpwalk on snmpd. | 5.0 |
| 2005-08-12 | CVE-2005-2547 | Unspecified vulnerability in Bluez Project Bluez 2.18 security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper. | 7.5 |
| 2005-08-10 | CVE-2005-2546 | Information Disclosure vulnerability in Arab Portal Arab Portal 2.0 Arab Portal 2.0 allows remote attackers to obtain sensitive information via a long (1) username or (2) password, which reveals the path in an error message when the undefined "errmsg" function is called. | 5.0 |
| 2005-08-10 | CVE-2005-2545 | HTML Injection vulnerability in PHPopenchat 3.0.2 Multiple cross-site scripting (XSS) vulnerabilities in PHPOpenChat 3.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) content parameter to profile.php and profile_misc.php, (3) the profile fields in userpage.php, (4) subject or (5) body in mail.php, or (8) disinvited_chatter or (7) invited_chatter parameter to invite.php. network phpopenchat | 4.3 |
| 2005-08-10 | CVE-2005-2544 | Remote File Include vulnerability in Comdev Ecommerce 3.0 PHP remote file inclusion vulnerability in config.php in Comdev eCommerce 3.0 allows remote attackers to execute arbitrary PHP code via the path[docroot] parameter. | 5.0 |
| 2005-08-10 | CVE-2005-2543 | Directory Traversal vulnerability in Comdev Ecommerce 3.0 Directory traversal vulnerability in wce.download.php in Comdev eCommerce 3.0 allows remote attackers to download arbitrary files via a .. | 5.0 |