Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: October 2005

32 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2005-2758
    44Plan

    Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute a

    CriticalCVSS 10.0No exploitEPSS 13%

    symantec · antivirus scan engineOct 5, 2005

  • CVE-2005-3142
    52Plan

    Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal Security Suite 1.1 allows remote attackers to execute arb

    CriticalCVSS 10.0No exploitEPSS 41%

    kaspersky lab · kaspersky anti-virusOct 5, 2005

  • CVE-2005-3155
    49Plan

    Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code.

    HighCVSS 7.5WeaponizedEPSS 63%

    mailenable · mailenable enterpriseOct 5, 2005

  • CVE-2005-1978
    46Plan

    COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attackers to execute arbi

    HighCVSS 7.5Proof of conceptEPSS 53%

    microsoft · windows 2000Oct 12, 2005

  • CVE-2005-1979
    30Monitor

    Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service exception and exit

    MediumCVSS 5.0Proof of conceptEPSS 32%

    microsoft · windows 2000Oct 12, 2005

  • CVE-2005-1980
    30Monitor

    Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service hang) via a crafte

    MediumCVSS 5.0Proof of conceptEPSS 33%

    microsoft · windows 2000Oct 12, 2005

  • CVE-2005-2119
    31Monitor

    The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of mem

    MediumCVSS 5.0Proof of conceptEPSS 35%

    microsoft · windows 2000Oct 12, 2005

  • CVE-2005-2128
    32Monitor

    QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a craft

    MediumCVSS 5.0No exploitEPSS 40%

    microsoft · windows media playerOct 12, 2005

  • CVE-2005-2715
    58Plan

    Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and

    CriticalCVSS 10.0Proof of conceptEPSS 60%

    symantec veritas · netbackup data and business centerOct 12, 2005

  • CVE-2005-1985
    41Plan

    The Client Service for NetWare (CSNW) on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attacker

    HighCVSS 7.5No exploitEPSS 37%

    microsoft · windows 2000Oct 13, 2005

  • CVE-2005-1987
    43Plan

    Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to

    HighCVSS 7.5No exploitEPSS 43%

    microsoft · exchange serverOct 13, 2005

  • CVE-2005-2120
    45Plan

    Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remo

    MediumCVSS 6.5WeaponizedEPSS 61%

    microsoft · windows 2000Oct 13, 2005

  • CVE-2005-2943
    35Monitor

    Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a long -t command line op

    HighCVSS 7.5Proof of conceptEPSS 15%

    davide libenzi · xmailOct 13, 2005

  • CVE-2005-3190
    49Plan

    Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to e

    HighCVSS 7.5WeaponizedEPSS 64%

    broadcom · igatewayOct 13, 2005

  • CVE-2005-2661
    34Monitor

    Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers t

    HighCVSS 7.5Proof of conceptEPSS 12%

    up-imapproxy · up-imapproxyOct 14, 2005

  • CVE-2005-3202
    30Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 allow remote attackers to inject arbitrary

    MediumCVSS 6.8Proof of conceptEPSS 10%

    oracle · html dbOct 14, 2005

  • CVE-2005-3204
    23Monitor

    Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query

    MediumCVSS 4.3Proof of conceptEPSS 20%

    oracle · application serverOct 14, 2005

  • CVE-2005-3206
    26Monitor

    iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service (TNS listener stop)

    MediumCVSS 5.0Proof of conceptEPSS 21%

    oracle · database serverOct 14, 2005

  • CVE-2005-3207
    26Monitor

    The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS listener stop) via a user

    MediumCVSS 5.0Proof of conceptEPSS 19%

    oracle · formsOct 14, 2005

  • CVE-2005-3231
    24Monitor

    Multiple interpretation error in unspecified versions of CAT Quick Heal allows remote attackers to bypass virus detection via a malicious ex

    MediumCVSS 5.1No exploitEPSS 14%

    cat · quick healOct 14, 2005

  • CVE-2005-3120
    46Plan

    Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certai

    CriticalCVSS 9.8Proof of conceptEPSS 23%

    invisible-island · lynxOct 17, 2005

  • CVE-2005-3252
    55Plan

    Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code v

    HighCVSS 7.5WeaponizedEPSS 83%

    sourcefire · snortOct 18, 2005

  • CVE-2005-2117
    31Monitor

    Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters

    MediumCVSS 5.1No exploitEPSS 37%

    microsoft · windows explorerOct 21, 2005

  • CVE-2005-2118
    34Monitor

    Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary com

    MediumCVSS 5.1No exploitEPSS 47%

    microsoft · windows 2000Oct 21, 2005

  • CVE-2005-2122
    54Plan

    Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a sh

    CriticalCVSS 10.0No exploitEPSS 46%

    microsoft · windows 2000Oct 21, 2005

  • CVE-2005-2126
    14Monitor

    The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" i

    LowCVSS 2.6No exploitEPSS 14%

    microsoft · ieOct 21, 2005

  • CVE-2005-3277
    46Plan

    The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("`" or si

    CriticalCVSS 10.0Proof of conceptEPSS 21%

    hp · hp-uxOct 21, 2005

  • CVE-2005-3299
    25Monitor

    PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files vi

    MediumCVSS 5.0Proof of conceptEPSS 15%

    phpmyadmin · phpmyadminOct 23, 2005

  • CVE-2005-2970
    24Monitor

    Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memor

    MediumCVSS 5.0No exploitEPSS 14%

    apache · http serverOct 25, 2005

  • CVE-2005-3312
    21Monitor

    The HTML rendering engine in Microsoft Internet Explorer 6.0 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML

    MediumCVSS 4.3No exploitEPSS 11%

    microsoft · internet explorerOct 26, 2005

  • CVE-2005-3243
    33Monitor

    Multiple buffer overflows in Ethereal 0.10.12 and earlier might allow remote attackers to execute arbitrary code via unknown vectors in the

    HighCVSS 7.5Proof of conceptEPSS 10%

    ethereal group · etherealOct 27, 2005

  • CVE-2005-3330
    35Monitor

    The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows rem

    HighCVSS 7.5Proof of conceptEPSS 17%

    snoopy · snoopyOct 27, 2005