Vulnerabilities (CVE)

Total 398490 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-0763 1 Midnight Commander 1 Midnight Commander 2026-06-16 4.6 MEDIUM N/A
Buffer overflow in Midnight Commander (mc) 4.5.55 and earlier may allow attackers to execute arbitrary code.
CVE-2005-0762 1 Imagemagick 1 Imagemagick 2026-06-16 7.5 HIGH N/A
Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file.
CVE-2005-0761 2 Imagemagick, Sgi 2 Imagemagick, Propack 2026-06-16 5.0 MEDIUM N/A
Unknown vulnerability in ImageMagick before 6.1.8 allows remote attackers to cause a denial of service (application crash) via a crafted PSD file.
CVE-2005-0760 1 Imagemagick 1 Imagemagick 2026-06-16 5.0 MEDIUM N/A
The TIFF decoder in ImageMagick before 6.0 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file.
CVE-2005-0759 2 Imagemagick, Sgi 2 Imagemagick, Propack 2026-06-16 5.0 MEDIUM N/A
ImageMagick before 6.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image with an invalid tag.
CVE-2005-0758 2 Canonical, Gnu 2 Ubuntu Linux, Gzip 2026-06-16 4.6 MEDIUM N/A
zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.
CVE-2005-0757 1 Redhat 2 Enterprise Linux, Enterprise Linux Desktop 2026-06-16 2.1 LOW N/A
The xattr file system code, as backported in Red Hat Enterprise Linux 3 on 64-bit systems, does not properly handle certain offsets, which allows local users to cause a denial of service (system crash) via certain actions on an ext3 file system with extended attributes enabled.
CVE-2005-0756 1 Linux 1 Linux Kernel 2026-06-16 2.1 LOW N/A
ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of service (kernel crash).
CVE-2005-0755 1 Realnetworks 3 Helix Player, Realone Player, Realplayer 2026-06-16 5.1 MEDIUM N/A
Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file.
CVE-2005-0754 5 Conectiva, Gentoo, Kde and 2 more 6 Linux, Linux, Kde and 3 more 2026-06-16 7.5 HIGH N/A
Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code.
CVE-2005-0753 1 Cvs 1 Cvs 2026-06-16 7.5 HIGH N/A
Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.
CVE-2005-0752 1 Mozilla 1 Firefox 2026-06-16 7.5 HIGH N/A
The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGINSPAGE attribute of an EMBED tag.
CVE-2005-0750 5 Conectiva, Linux, Redhat and 2 more 8 Linux, Linux Kernel, Enterprise Linux and 5 more 2026-06-16 7.2 HIGH N/A
The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or (2) socketpair call with a negative protocol value.
CVE-2005-0749 1 Linux 1 Linux Kernel 2026-06-16 7.2 HIGH N/A
The load_elf_library in the Linux kernel before 2.6.11.6 allows local users to cause a denial of service (kernel crash) via a crafted ELF library or executable, which causes a free of an invalid pointer.
CVE-2005-0748 1 Webinsta 1 Webinsta Mailing Manager 2026-06-16 7.5 HIGH N/A
PHP remote file inclusion vulnerability in initdb.php for WEBInsta Mailing list manager 1.3d allows remote attackers to execute arbitrary PHP code by modifying the absolute_path parameter to reference a URL on a remote web server that contains the code.
CVE-2005-0747 1 Applyyourself 1 I-class 2026-06-16 5.0 MEDIUM N/A
ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing the hidden ID field, as demonstrated using the id parameter to ApplicantDecision.asp.
CVE-2005-0746 1 Novell 1 Ichain 2026-06-16 5.0 MEDIUM N/A
The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command.
CVE-2005-0745 1 Utstarcom 1 Ian-02ex Voip Ata 2026-06-16 4.6 MEDIUM N/A
UTStarcom iAN-02EX VoIP Analog Terminal Adaptor (ATA) allows local users to bypass ATA access restrictions by dialing "*#26845#" and causing a device reset.
CVE-2005-0744 1 Novell 1 Ichain 2026-06-16 10.0 HIGH N/A
The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by (1) sniffing the connection on TCP port 51100 and replaying the authentication information or (2) obtaining and replaying the PCZQX02 authentication cookie from the browser.
CVE-2005-0743 1 Xoops 1 Xoops 2026-06-16 7.5 HIGH N/A
The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbitrary PHP scripts, whose file extensions are not filtered.