Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: August 2005

22 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2005-2428
    42Plan

    Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, whi

    MediumCVSS 5.0Proof of conceptEPSS 73%

    ibm · lotus dominoAug 3, 2005

  • CVE-2005-1272
    50Plan

    Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remo

    HighCVSS 7.5WeaponizedEPSS 66%

    broadcom · brightstor enterprise backupAug 5, 2005

  • CVE-2005-0058
    44Plan

    Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000,

    HighCVSS 7.5Proof of conceptEPSS 46%

    microsoft · windows 2000Aug 10, 2005

  • CVE-2005-1218
    37Monitor

    The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial

    MediumCVSS 5.0Proof of conceptEPSS 57%

    microsoft · windows 2000Aug 10, 2005

  • CVE-2005-1983
    68This week

    Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attack

    CriticalCVSS 10.0WeaponizedEPSS 93%

    microsoft · windows 2000Aug 10, 2005

  • CVE-2005-1984
    47Plan

    Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote att

    HighCVSS 7.5No exploitEPSS 55%

    microsoft · windows 2000Aug 10, 2005

  • CVE-2005-1988
    34Monitor

    Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-m

    MediumCVSS 5.1Proof of conceptEPSS 45%

    microsoft · ieAug 10, 2005

  • CVE-2005-1989
    44Plan

    Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when br

    HighCVSS 7.5Proof of conceptEPSS 45%

    microsoft · ieAug 10, 2005

  • CVE-2005-1990
    35Monitor

    Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary

    MediumCVSS 5.1Proof of conceptEPSS 48%

    microsoft · ieAug 10, 2005

  • CVE-2005-2535
    54Plan

    Buffer overflow in the Discovery Service in BrightStor ARCserve Backup 9.0 through 11.1 allows remote attackers to execute arbitrary command

    HighCVSS 7.5WeaponizedEPSS 80%

    broadcom · arcserve backup 2000Aug 10, 2005

  • CVE-2005-2551
    47Plan

    Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of service (crash) and ob

    HighCVSS 7.5WeaponizedEPSS 55%

    novell · edirectoryAug 12, 2005

  • CVE-2005-2103
    44Plan

    Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and

    CriticalCVSS 9.8Proof of conceptEPSS 16%

    gaim project · gaimAug 16, 2005

  • CVE-2005-2470
    34Monitor

    Buffer overflow in a "core application plug-in" for Adobe Reader 5.1 through 7.0.2 and Acrobat 5.0 through 7.0.2 allows attackers to cause a

    HighCVSS 7.5No exploitEPSS 13%

    adobe · acrobatAug 16, 2005

  • CVE-2005-2611
    66This week

    VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Serve

    CriticalCVSS 10.0WeaponizedEPSS 87%

    symantec veritas · backup execAug 17, 2005

  • CVE-2005-2612
    42Plan

    Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_las

    HighCVSS 7.5WeaponizedEPSS 38%

    wordpress · wordpressAug 17, 2005

  • CVE-2005-2616
    33Monitor

    Multiple PHP file include vulnerabilities in ezUpload 2.2 allow remote attackers to execute arbitrary code via the path parameter to (1) ini

    HighCVSS 7.5Proof of conceptEPSS 11%

    ezupload · ezuploadAug 17, 2005

  • CVE-2005-2127
    49Plan

    Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute a

    HighCVSS 7.5Proof of conceptEPSS 63%

    ati · catalyst driverAug 19, 2005

  • CVE-2005-2665
    35Monitor

    Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitra

    HighCVSS 7.5Proof of conceptEPSS 15%

    elm development group · elmAug 23, 2005

  • CVE-2005-2668
    63This week

    Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_

    CriticalCVSS 10.0WeaponizedEPSS 75%

    ca · etrust adminAug 23, 2005

  • CVE-2005-2678
    33Monitor

    Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass security checks and conduct various attacks via

    MediumCVSS 5.0No exploitEPSS 41%

    microsoft · internet information serverAug 23, 2005

  • CVE-2005-2728
    23Monitor

    The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP head

    MediumCVSS 5.0No exploitEPSS 10%

    apache · http serverAug 30, 2005

  • CVE-2005-2733
    45Plan

    upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote atta

    HighCVSS 7.5WeaponizedEPSS 51%

    alexander palmo · simple php blogAug 30, 2005