Skip to content
OpenAdvisories

Archive

20 November 2005

Vulnerabilities first published on this day (UTC), newest first.

15 results · Feed

  • Unscored —
    CVE-2005-3695 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attack…

  • Unscored —

    tiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to obtain the installation path via …

  • Unscored —
    CVE-2005-3696 Public exploit

    SQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary SQL commands via the ca…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in tiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote at…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Antville 1.1 allows remote attackers to inject arbitrary web script or HTML…

  • Unscored —
    CVE-2005-2709 Public exploit

    The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (ke…

  • Unscored —

    Multiple SQL injection vulnerabilities in Dynix (formerly known as epixtech) WebPAC allow remote attackers to execute a…

  • Unscored —

    Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via …

  • Unscored —

    Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service (SMTP proxy fa…

  • Unscored —

    Secure Computing Corporation Sidewinder G2 6.1.0.01 might allow remote attackers to cause a denial of service (proxy fa…

  • Unscored —

    Admin Console in Secure Computing Corporation Sidewinder G2 6.1.0.01 exports private keys when exporting firewall certi…

  • Unscored —
    CVE-2005-3346 Public exploit

    Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbi…

  • Unscored —

    Stack-based buffer overflow in the ldif_get_line function in ldif.c of Sylpheed before 2.1.6 allows user-assisted attac…

  • Unscored —

    SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients ("To" addr…

  • Unscored —
    CVE-2005-3694 Public exploit EPSS 12%

    centericq 4.20.0-r3 with "Enable peer-to-peer communications" set allows remote attackers to cause a denial of service …