Skip to content
OpenAdvisories

Archive

16 November 2005

Vulnerabilities first published on this day (UTC), newest first.

← October 2005 2005 / November /16 December 2005 →
  1. 144
  2. 247
  3. 317
  4. 413
  5. 513
  6. 617
  7. 72
  8. 8 
  9. 91
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16191
  17. 177
  18. 1839
  19. 1911
  20. 2015
  21. 2137
  22. 2252
  23. 2319
  24. 2418
  25. 257
  26. 2635
  27. 2712
  28. 2818
  29. 2961
  30. 3026
All Critical High Medium Low Exploited only Public exploit

191 results · Feed

  • Unscored —
    CVE-2005-3577 Public exploit

    Cross-site scripting vulnerability (XSS) in ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attacke…

  • Unscored —
    CVE-2005-3556 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PHPlist 2.10.1 and earlier allow remote attackers to inject arbi…

  • Unscored —
    CVE-2005-3579 Public exploit

    ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to access arbitrary local files via the q…

  • Unscored —
    CVE-2005-3564

    envd daemon in HP-UX B.11.00 through B.11.11 allows local users to obtain privileges via unknown attack vectors.

  • Unscored —
    CVE-2005-3548

    Directory traversal vulnerability in Task Manager in Invision Power Board (IP.Board) 2.0.1 allows limited remote attack…

  • Unscored —
    CVE-2005-3592

    index.php CuteNews 1.4.0 and earlier allows remote attackers to obtain the path of the installation path of the applica…

  • Unscored —
    CVE-2005-3571 Public exploit

    PHP file inclusion vulnerability in protection.php in CodeGrrl (a) PHPCalendar 1.0, (b) PHPClique 1.0, (c) PHPCurrently…

  • Unscored —
    CVE-2005-3565

    Unknown vulnerability in remshd daemon in HP-UX B.11.00, B.11.11, and B.11.23 while running in "Trusted Mode" allows re…

  • Unscored —
    CVE-2005-3583

    (1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and 1.5.0_05 and possibly…

  • Unscored —
    CVE-2005-3549

    Direct code injection vulnerability in Task Manager in Invision Power Board 2.0.1 allows limited remote attackers to ex…

  • Unscored —
    CVE-2005-3566 Public exploit

    Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute a…

  • Unscored —
    CVE-2005-3588

    SQL injection vulnerability in admin.php in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2005-3574

    PHP file inclusion vulnerability in index.php of iCMS allows remote attackers to include arbitrary files via the page p…

  • Unscored —
    CVE-2005-3554

    Multiple eval injection vulnerabilities in the help function in PHPKIT 1.6.1 R2 and earlier, when register_globals is e…

  • Unscored —
    CVE-2005-3575 Public exploit

    SQL injection vulnerability in show.php in Cyphor 0.19 and earlier allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2005-3582

    ImageMagick before 6.2.4.2-r1 allows local users in the portage group to increase privileges via a shared object in the…

  • Unscored —
    CVE-2005-3587

    Improper boundary checks in petite.c in Clam AntiVirus (ClamAV) before 0.87.1 allows attackers to perform unknown attac…

    clamav Debian
  • Unscored —
    CVE-2005-3596

    SQL injection vulnerability in ASPKnowledgebase allows remote attackers to execute arbitrary SQL commands and bypass au…

  • Unscored —
    CVE-2005-3591 Public exploit EPSS 10%

    Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) a…

  • Unscored —
    CVE-2005-3558 Public exploit

    PHP file inclusion vulnerability in index.php in OSTE 1.0 allows remote attackers to execute arbitrary code via the (1)…

  • Unscored —
    CVE-2005-2659

    Buffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35, as used in products such as KchmViewer, has unknown …

    chmlib Debian
  • Unscored —
    CVE-2003-1280

    Directory traversal vulnerability in cgihtml 1.69 allows remote attackers to overwrite and create arbitrary files via a…

  • Unscored —
    CVE-2003-1247 Public exploit

    Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL …

  • Unscored —
    CVE-2003-1242 Public exploit

    Sage 1.0 b3 allows remote attackers to obtain the root web server path via a URL request for a non-existent module, whi…

  • Unscored —
    CVE-2003-1281

    cgihtml 1.69 allows local users to overwrite arbitrary files via a symlink attack on certain temporary files.

  • Unscored —
    CVE-2003-1259

    Buffer overflow in CuteFTP 4.2 and 5.0 allows remote attackers to cause a denial of service (crash) and possibly execut…

  • Unscored —
    CVE-2003-1253

    PHP remote file inclusion vulnerability in Bookmark4U 1.8.3 allows remote attackers to execute arbitrary PHP code viaa …

  • Unscored —
    CVE-2003-1273

    Winamp 3.0 allows remote attackers to cause a denial of service (crash) via a .b4s file with a playlist name that conta…

  • Unscored —
    CVE-2003-1261

    Buffer overflow in CuteFTP 5.0 and 5.0.1 allows local users to cause a denial of service (crash) by copying a long URL …

  • Unscored —
    CVE-2003-1236 Public exploit EPSS 15%

    Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allows remote attackers to e…

  • Unscored —
    CVE-2003-1255

    add_bookmark.php in Active PHP Bookmarks (APB) 1.1.01 allows remote attackers to add arbitrary bookmarks as other users…

  • Unscored —
    CVE-2003-1266 Public exploit

    The (1) FTP, (2) POP3, (3) SMTP, and (4) NNTP servers in EServer 2.92 through 2.97, and possibly 2.98, allow remote att…

  • Unscored —
    CVE-2003-1241

    Cross-site scripting vulnerability (XSS) in (1) admin_index.php, (2) admin_pass.php, (3) admin_modif.php, and (4) admin…

  • Unscored —
    CVE-2003-1239 Public exploit

    Directory traversal vulnerability in sendphoto.php in WihPhoto 0.86 allows remote attackers to read arbitrary files via…

  • Unscored —
    CVE-2003-1244 Public exploit

    SQL injection vulnerability in page_header.php in phpBB 2.0, 2.0.1 and 2.0.2 allows remote attackers to brute force use…

  • Unscored —
    CVE-2003-1252 Public exploit

    register.php in S8Forum 3.0 allows remote attackers to execute arbitrary PHP commands by creating a user whose name end…

  • Unscored —
    CVE-2003-1238

    Cross-site scripting vulnerability (XSS) in Nuked-Klan 1.3 beta and earlier allows remote attackers to steal authentica…

  • Unscored —
    CVE-2003-1283

    KaZaA Media Desktop (KMD) 2.0 launches advertisements in the Internet Explorer (IE) local security zone, which could al…

  • Unscored —
    CVE-2003-1250

    Efficient Networks 5861 DSL router, when running firmware 5.3.80 configured to block incoming TCP SYN, packets allows r…

  • Unscored —
    CVE-2003-1268

    Multiple SQL injection vulnerabilities in (1) addcustomer.asp, (2) addprod.asp, and (3) process.asp in a.shopKart 2.0.3…