Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: September 2005

19 records · 1 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2005-2768
    34Monitor

    Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailMonitor, and other products, allow

    HighCVSS 7.5No exploitEPSS 12%

    sophos · sophos anti-virusSep 2, 2005

  • CVE-2005-2772
    33Monitor

    Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to execute arbitrary cod

    HighCVSS 7.5Proof of conceptEPSS 10%

    university of minnesota · gopherSep 2, 2005

  • CVE-2005-2773
    91Now

    HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1)

    CriticalCVSS 9.8KEVWeaponizedEPSS 74%

    hp · openview network node managerSep 2, 2005

  • CVE-2005-2777
    34Monitor

    Looking Glass 20040427 allows remote attackers to execute arbitrary commands via shell metacharacters in the DNS lookup query field.

    HighCVSS 7.5Proof of conceptEPSS 12%

    looking glass · looking glassSep 2, 2005

  • CVE-2005-2792
    24Monitor

    Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a ..

    MediumCVSS 5.0Proof of conceptEPSS 11%

    phpldapadmin project · phpldapadminSep 2, 2005

  • CVE-2005-2700
    49Plan

    ssl_engine_kernel.c in mod_ssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configuration, does not prope

    CriticalCVSS 10.0No exploitEPSS 30%

    apache · http serverSep 6, 2005

  • CVE-2005-2841
    34Monitor

    Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 and 12.3T, and 12.4 an

    HighCVSS 7.5Proof of conceptEPSS 14%

    cisco · iosSep 8, 2005

  • CVE-2005-2842
    36Monitor

    Buffer overflow in dwrcs.exe in DameWare Mini Remote Control before 4.9.0 allows remote attackers to execute arbitrary code via the username

    HighCVSS 7.5Proof of conceptEPSS 21%

    dameware development · mini remote control serverSep 8, 2005

  • CVE-2005-2847
    46Plan

    img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacha

    HighCVSS 7.5WeaponizedEPSS 53%

    barracuda networks · barracuda spam firewallSep 8, 2005

  • CVE-2005-2852
    40Plan

    Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service (ABEN

    MediumCVSS 5.0WeaponizedEPSS 40%

    novell · netwareSep 8, 2005

  • CVE-2005-2856
    35Monitor

    Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including

    HighCVSS 7.5Proof of conceptEPSS 15%

    winace · winaceSep 8, 2005

  • CVE-2005-2871
    36Monitor

    Buffer overflow in the International Domain Name (IDN) support in Mozilla Firefox 1.0.6 and earlier, and Netscape 8.0.3.3 and 7.2, allows re

    HighCVSS 7.5Proof of conceptEPSS 21%

    mozilla · firefoxSep 9, 2005

  • CVE-2005-2878
    34Monitor

    Format string vulnerability in search.c in the imap4d server in GNU Mailutils 0.6 allows remote authenticated users to execute arbitrary cod

    HighCVSS 7.5Proof of conceptEPSS 14%

    gnu · mailutilsSep 13, 2005

  • CVE-2005-2799
    51Plan

    Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execut

    HighCVSS 7.5WeaponizedEPSS 70%

    linksys · wrt54gSep 15, 2005

  • CVE-2005-2877
    51Plan

    The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacha

    HighCVSS 7.5WeaponizedEPSS 70%

    twiki · twikiSep 16, 2005

  • CVE-2005-2968
    33Monitor

    Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the br

    HighCVSS 7.5Proof of conceptEPSS 10%

    mozilla · firefoxSep 20, 2005

  • CVE-2005-2710
    24Monitor

    Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the (1) image handle

    MediumCVSS 5.1Proof of conceptEPSS 13%

    realnetworks · helix playerSep 27, 2005

  • CVE-2005-3077
    24Monitor

    Microsoft Internet Explorer 5.2.3 for Mac OS allows remote attackers to cause a denial of service (crash) via a web page with malformed attr

    MediumCVSS 5.0Proof of conceptEPSS 13%

    microsoft · ie for macintoshSep 27, 2005

  • CVE-2005-3081
    41Plan

    wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE command.

    MediumCVSS 4.6Proof of conceptEPSS 76%

    wzdftpd · wzdftpdSep 27, 2005