Skip to content
OpenAdvisories

Archive

22 November 2005

Vulnerabilities first published on this day (UTC), newest first.

← October 2005 2005 / November /22 December 2005 →
  1. 144
  2. 247
  3. 317
  4. 413
  5. 513
  6. 617
  7. 72
  8. 8 
  9. 91
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16191
  17. 177
  18. 1839
  19. 1911
  20. 2015
  21. 2137
  22. 2252
  23. 2319
  24. 2418
  25. 257
  26. 2635
  27. 2712
  28. 2818
  29. 2961
  30. 3026
All Critical High Medium Low Exploited only Public exploit

52 results · Feed

  • Unscored —
    CVE-2005-3763

    Exponent CMS 0.96.3 and later versions includes the full installation path in the base parameter to thumb.php, which al…

  • Unscored —
    CVE-2005-3765

    Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, which allow…

  • Unscored —
    CVE-2005-3760

    Double free vulnerability in the BBOORB module in IBM WebSphere Application Server for z/OS 5.0 allows attackers to cau…

  • Unscored —
    CVE-2005-3764

    The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check the MIME t…

  • Unscored —
    CVE-2005-3766

    Exponent CMS 0.96.3 and later versions stores sensitive user pages under the web document root with insufficient access…

  • Unscored —
    CVE-2005-3762

    SQL injection vulnerability in the navigation module (navigationmodule) in Exponent CMS 0.96.3 and later versions allow…

  • Unscored —
    CVE-2005-3761

    Cross-site scripting (XSS) vulnerability in Exponent CMS 0.96.3 and later versions allows remote attackers to inject ar…

  • Unscored —
    CVE-2005-3767

    Exponent CMS 0.96.3 and later versions does not properly restrict the types of uploaded files, which allows remote atta…

  • Unscored —
    CVE-2005-3755

    Directory traversal vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote …

  • Unscored —
    CVE-2005-3757 Public exploit EPSS 41%

    The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to…

  • Unscored —
    CVE-2005-3758 EPSS 19%

    Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows …

  • Unscored —
    CVE-2005-3759

    Multiple cross-site scripting (XSS) vulnerabilities in Horde before 3.0.7 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2005-3754

    Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows …

  • Unscored —
    CVE-2005-3756

    Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to port scan arbitrary host…

  • Unscored —
    CVE-2005-3751

    HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web app…

    pound Debian
  • Unscored —
    CVE-2005-3752

    Unspecified vulnerability in ldapdiff before 1.1.1 has unknown impact and attack vectors, related to "ldapdiff.conf pat…

  • Unscored —
    CVE-2005-3753

    Linux kernel before after 2.6.12 and before 2.6.13.1 might allow attackers to cause a denial of service (Oops) via cert…

  • Unscored —
    CVE-2005-3750

    Opera before 8.51 on Linux and Unix systems allows remote attackers to execute arbitrary code via shell metacharacters …

  • Medium —
    CVE-2005-3747 Public exploit

    Mortbay Jetty Discloses JSP Source Code

    Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash ("%5C") characters. NOTE: this might be the same issue as CVE-2006-2758.

    org.mortbay.jetty:jetty Maven
  • Unscored —
    CVE-2005-3741

    Almond Classifieds does not properly verify the password, which allows attackers to bypass access restrictions.

  • Unscored —
    CVE-2005-3744

    SQL injection vulnerability in index.php in phpComasy 0.7.5 and earlier allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2005-3739

    Unspecified vulnerability in subheader.php in PHP-Fusion 6.00.206 and earlier allows remote attackers to obtain the ful…

  • Unscored —
    CVE-2005-3740

    Multiple SQL injection vulnerabilities in PHP-Fusion 6.00.206 and earlier allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2005-3738 Public exploit

    globals.php in Mambo Site Server 4.0.14 and earlier, when register_globals is disabled, allows remote attackers to over…

  • Medium —
    CVE-2005-3745 Public exploit EPSS 26%

    Apache Struts Cross-site scripting Vulnerability

    Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an er…

    org.apache.struts:struts-core Maven
  • Unscored —
    CVE-2005-3746 Public exploit

    SQL injection vulnerability in thread.php in APBoard allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2005-3749

    Unspecified "absolute path vulnerabilities" in the diagela command (diagela.sh) in IBM AIX 5.2 and 5.3 have unknown imp…

  • Unscored —
    CVE-2005-3748 Public exploit

    SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote …

  • Unscored —
    CVE-2005-3742 Public exploit

    Cross-site scripting (XSS) vulnerability in popup.php in Advanced Poll 2.0.3 and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2005-3743 Public exploit

    SQL injection vulnerability in results.php in SimplePoll allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2004-2565 Public exploit

    Multiple directory traversal vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Lin…

  • Unscored —
    CVE-2004-2569

    ipmenu 0.0.3 before Debian GNU/Linux ipmenu_0.0.3-5 allows local users to overwrite arbitrary files via a symlink attac…

  • Unscored —
    CVE-2004-2562 Public exploit

    SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises (LBE) Web Helpdesk before 4.0.0.81 allows remo…

  • Unscored —
    CVE-2004-2564 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions…

  • Unscored —
    CVE-2004-2563 Public exploit

    Serena TeamTrack 6.1.1 allows remote attackers to obtain sensitive information such as user names, versions, and databa…

  • Unscored —
    CVE-2004-2560

    DokuWiki before 2004-10-19, when used on a web server that permits execution based on file extension, allows remote att…

  • Unscored —
    CVE-2004-2571

    Multiple buffer overflows in EnderUNIX isoqlog 2.1.1 allow remote attackers to execute arbitrary code via the (1) parse…

    isoqlog Debian
  • Unscored —
    CVE-2004-2570

    Opera before 7.54 allows remote attackers to modify properties and methods of the location object and execute Javascrip…

  • Unscored —
    CVE-2004-2561 Public exploit

    Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute…

  • Unscored —
    CVE-2004-2572

    AMAX Magic Winmail Server 3.6 allows remote attackers to obtain sensitive information by entering (1) invalid character…