Skip to content
OpenAdvisories

Archive

22 November 2005

Vulnerabilities first published on this day (UTC), newest first.

← October 2005 2005 / November /22 December 2005 →
  1. 144
  2. 247
  3. 317
  4. 413
  5. 513
  6. 617
  7. 72
  8. 8 
  9. 91
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16191
  17. 177
  18. 1839
  19. 1911
  20. 2015
  21. 2137
  22. 2252
  23. 2319
  24. 2418
  25. 257
  26. 2635
  27. 2712
  28. 2818
  29. 2961
  30. 3026
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Unscored —
    CVE-2005-3757 Public exploit EPSS 41%

    The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to…

  • Medium —
    CVE-2005-3747 Public exploit

    Mortbay Jetty Discloses JSP Source Code

    Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash ("%5C") characters. NOTE: this might be the same issue as CVE-2006-2758.

    org.mortbay.jetty:jetty Maven
  • Unscored —
    CVE-2005-3738 Public exploit

    globals.php in Mambo Site Server 4.0.14 and earlier, when register_globals is disabled, allows remote attackers to over…

  • Medium —
    CVE-2005-3745 Public exploit EPSS 26%

    Apache Struts Cross-site scripting Vulnerability

    Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an er…

    org.apache.struts:struts-core Maven
  • Unscored —
    CVE-2005-3746 Public exploit

    SQL injection vulnerability in thread.php in APBoard allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2005-3748 Public exploit

    SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote …

  • Unscored —
    CVE-2005-3742 Public exploit

    Cross-site scripting (XSS) vulnerability in popup.php in Advanced Poll 2.0.3 and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2005-3743 Public exploit

    SQL injection vulnerability in results.php in SimplePoll allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2004-2565 Public exploit

    Multiple directory traversal vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Lin…

  • Unscored —
    CVE-2004-2562 Public exploit

    SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises (LBE) Web Helpdesk before 4.0.0.81 allows remo…

  • Unscored —
    CVE-2004-2564 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions…

  • Unscored —
    CVE-2004-2563 Public exploit

    Serena TeamTrack 6.1.1 allows remote attackers to obtain sensitive information such as user names, versions, and databa…

  • Unscored —
    CVE-2004-2561 Public exploit

    Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute…

  • Unscored —
    CVE-2004-2566 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in LiveWorld products, possibly including (1) LiveForum, (2) LiveQ&…

  • Unscored —
    CVE-2003-1286 Public exploit

    HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attac…

  • Unscored —
    CVE-2005-3737 Public exploit EPSS 13%

    Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute…

    inkscape Debian