Archive
November 2005
Vulnerabilities first published in this month (UTC), newest first.
702 results · Feed
-
Unscored —CVE-2005-3911 Public exploit
Multiple SQL injection vulnerabilities in calendar.php in BosDates 4.0 and earlier allow remote attackers to execute ar…
-
Unscored —
merchants/index.php in Post Affiliate Pro 2.0.4 and earlier, with magic_quotes_gpc disabled, allows remote attackers to…
-
Unscored —CVE-2005-3929 Public exploit
Directory traversal vulnerability in the create function in xarMLSXML2PHPBackend.php in Xaraya 1.0 allows remote attack…
-
Unscored —
Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 …
-
Unscored —CVE-2005-3919 Public exploit
Cross-site scripting (XSS) vulnerability in PBLang 4.65 allows remote attackers to inject arbitrary web script or HTML …
-
Unscored —CVE-2005-3918 Public exploit
Multiple SQL injection vulnerabilities in OvBB 0.08a allow remote attackers to execute arbitrary SQL commands via the (…
-
Unscored —CVE-2005-3914 Public exploit
Multiple SQL injection vulnerabilities in AFFcommerce 1.1.4 allow remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2005-3928 Public exploit
Buffer overflow in phgrafx in QNX 6.2.1 and 6.3.0 allows local users to execute arbitrary code via a long command line …
-
Unscored —
The Internet Key Exchange version 1 (IKEv1) implementation in Clavister Client Web allows remote attackers to cause a d…
-
Unscored —
NetObjects Fusion 9 (NOF9) allows remote attackers to obtain sensitive information, including passwords, by downloading…
-
Unscored —CVE-2005-3920 Public exploit
SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the (1) gal …
-
Unscored —CVE-2005-3926 Public exploit
Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when register_globals is disabled, …
-
Unscored —CVE-2005-3924 Public exploit
SQL injection vulnerability in themes/kategorie/index.php in Randshop allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2005-3908 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in GhostScripter Amazon Shop 5.0.0, and other versions before 5.…
-
Unscored —CVE-2005-3927 Public exploit
Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbi…
-
Unscored —
Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitra…
-
Unscored —
Unspecified vulnerability in reflection APIs in Java SDK and JRE 1.3.1_15 and earlier, 1.4.2_08 and earlier, and JDK an…
-
Unscored —CVE-2005-3912 EPSS 14%
Format string vulnerability in miniserv.pl Perl web server in Webmin before 1.250 and Usermin before 1.180, with syslog…
-
Unscored —
Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attack…
-
Unscored —CVE-2005-3925 Public exploit
Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote at…
-
Unscored —CVE-2005-3916 Public exploit
SQL injection vulnerability in memberlist.php in WSN Forum 1.21 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
Multiple unspecified vulnerabilities in reflection APIs in Java SDK and JRE 1.4.2_08 and earlier and JDK and JRE 5.0 Up…
-
Unscored —
SQL injection vulnerability in usersession in CommodityRentals 2.0 Online Rental Business Creator script allows remote …
-
Unscored —CVE-2005-3909 Public exploit
SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 2.0.4 and earlier allows remote attackers to e…
-
Unscored —
Unspecified vulnerability in the domain alias management in Virtual Hosting Control System (VHCS) 2.4.6.2, related to "…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Cisco IOS Web Server for IOS 12.0(2a) allows remote attackers to inject arb…
-
Unscored —CVE-2005-3902 Public exploit
Cross-site scripting (XSS) vulnerability in gui/errordocs/index.php in Virtual Hosting Control System (VHCS) 2.2.0 thro…
-
Unscored —
Macromedia Flash Communication Server MX 1.0 and 1.5 does not sufficiently validate certain RTMP data, which allows att…
-
Unscored —
Macromedia Breeze Communication Server and Breeze Live Server does 5.1 and earlier not sufficiently validate certain RT…
-
Unscored —
Gadu-Gadu 7.20 allows remote attackers to cause a denial of service (crash and configuration loss) via a page with a la…
-
Unscored —
Memory leak in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service via multiple DCC packets with a code…
-
Unscored —
Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3, when AttachmentDownloadType is set to in…
-
Unscored —
Stack-based buffer overflow in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service (crash) via an image…
-
Unscored —
Gadu-Gadu 7.20 allows remote attackers to cause a denial of service via multiple DCC packets with a code of 6 or 7, whi…
-
Unscored —
Gadu-Gadu 7.20 allows remote attackers to eavesdrop on a user via a web page that accesses the EasycallLite.oce ActiveX…
-
Unscored —
Apple Safari 2.0.2 allows remote attackers to cause a denial of service (system slowdown) via a Javascript BODY onload …
-
Unscored —
Gadu-Gadu 7.20 does not properly handle MS-DOS device names in filenames, which allows remote attackers to (1) cause a …
-
Unscored —CVE-2005-3894 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.…
-
Unscored —CVE-2005-3893 Public exploit
Multiple SQL injection vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 t…
-
Unscored —
Mozilla allows remote attackers to cause a denial of service (CPU consumption) via a Javascript BODY onload event that …