Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: June 2005

25 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2005-1790
    40Plan

    Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of servic

    LowCVSS 2.6WeaponizedEPSS 83%

    microsoft · internet explorerJun 1, 2005

  • CVE-2005-1794
    34Monitor

    Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificat

    HighCVSS 7.4Proof of conceptEPSS 18%

    microsoft · remote desktop connectionJun 1, 2005

  • CVE-2005-1812
    59Plan

    Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code

    CriticalCVSS 10.0WeaponizedEPSS 62%

    futuresoft · tftp server 2000Jun 1, 2005

  • CVE-2005-1815
    40Plan

    Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of service and possibly

    MediumCVSS 5.0WeaponizedEPSS 47%

    hummingbird · connectivityJun 1, 2005

  • CVE-2005-1758
    40Plan

    Buffer overflow in the IMAP command continuation function in Novell NetMail 3.52 before 3.52C may allow remote attackers to execute arbitrar

    HighCVSS 7.5WeaponizedEPSS 16%

    novell · netmailJun 8, 2005

  • CVE-2005-1267
    24Monitor

    The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remot

    MediumCVSS 5.0Proof of conceptEPSS 13%

    lbl · tcpdumpJun 10, 2005

  • CVE-2005-1935
    38Monitor

    Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library (MSASN1.DLL) allows remote attackers to execute arbitr

    HighCVSS 7.5No exploitEPSS 26%

    microsoft · windows 2000Jun 13, 2005

  • CVE-2005-0488
    25Monitor

    Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive en

    MediumCVSS 5.0No exploitEPSS 17%

    microsoft · telnet clientJun 14, 2005

  • CVE-2005-0563
    21Monitor

    Cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in Exchange Server 5.5 allows remote attackers to i

    MediumCVSS 4.3No exploitEPSS 14%

    microsoft · exchange serverJun 14, 2005

  • CVE-2005-1205
    30Monitor

    The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive env

    MediumCVSS 5.0No exploitEPSS 33%

    microsoft · windows 2003 serverJun 14, 2005

  • CVE-2005-1206
    48Plan

    Buffer overflow in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows r

    HighCVSS 7.5No exploitEPSS 59%

    microsoft · windows 2000Jun 14, 2005

  • CVE-2005-1208
    54Plan

    Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbit

    CriticalCVSS 10.0No exploitEPSS 47%

    microsoft · windows 2000Jun 14, 2005

  • CVE-2005-1211
    29Monitor

    Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a

    MediumCVSS 5.1No exploitEPSS 28%

    microsoft · internet explorerJun 14, 2005

  • CVE-2005-1212
    37Monitor

    Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark

    HighCVSS 7.5No exploitEPSS 24%

    microsoft · windows 2000Jun 14, 2005

  • CVE-2005-1213
    52Plan

    Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP s

    HighCVSS 7.5WeaponizedEPSS 73%

    microsoft · outlook expressJun 14, 2005

  • CVE-2005-1214
    24Monitor

    Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a mal

    MediumCVSS 5.1No exploitEPSS 12%

    microsoft · windows 2000Jun 14, 2005

  • CVE-2005-1215
    36Monitor

    Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP reques

    HighCVSS 7.5No exploitEPSS 19%

    microsoft · isa serverJun 14, 2005

  • CVE-2005-1216
    38Monitor

    Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA

    HighCVSS 7.5No exploitEPSS 25%

    microsoft · isa serverJun 14, 2005

  • CVE-2005-1306
    34Monitor

    The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascrip

    HighCVSS 7.5Proof of conceptEPSS 14%

    adobe · acrobatJun 15, 2005

  • CVE-2005-0773
    56Plan

    Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allow

    HighCVSS 7.5WeaponizedEPSS 86%

    symantec veritas · backup execJun 18, 2005

  • CVE-2005-1250
    36Monitor

    SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professional 2005 SP1 allows

    HighCVSS 7.5Proof of conceptEPSS 20%

    ipswitch · whatsupJun 22, 2005

  • CVE-2005-1524
    25Monitor

    PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute ar

    MediumCVSS 5.0Proof of conceptEPSS 15%

    the cacti group · cactiJun 22, 2005

  • CVE-2005-1526
    35Monitor

    PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code

    HighCVSS 7.5Proof of conceptEPSS 16%

    the cacti group · cactiJun 22, 2005

  • CVE-2005-0771
    56Plan

    VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by cal

    CriticalCVSS 10.0WeaponizedEPSS 54%

    symantec veritas · backup execJun 23, 2005

  • CVE-2005-0772
    41Plan

    VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a denia

    HighCVSS 7.5No exploitEPSS 35%

    veritas · backup execJun 28, 2005