Skip to content
OpenAdvisories

Archive

29 November 2005

Vulnerabilities first published on this day (UTC), newest first.

23 results · Clear filters · Feed

  • Unscored —
    CVE-2005-3902 Public exploit

    Cross-site scripting (XSS) vulnerability in gui/errordocs/index.php in Virtual Hosting Control System (VHCS) 2.2.0 thro…

  • Unscored —
    CVE-2005-3894 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.…

  • Unscored —
    CVE-2005-3893 Public exploit

    Multiple SQL injection vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 t…

  • Unscored —
    CVE-2005-2124 Public exploit EPSS 56%

    Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server …

  • Unscored —
    CVE-2005-2123 Public exploit EPSS 61%

    Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server…

  • Unscored —
    CVE-2005-3884 Public exploit

    Multiple SQL injection vulnerabilities in the search action in Zainu 2.0 and earlier allow remote attackers to execute …

  • Unscored —
    CVE-2005-3872 Public exploit

    Multiple SQL injection vulnerabilities in Ugroup 2.6.2 and earlier allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2005-3874 Public exploit

    SQL injection vulnerability in netzbr.php in Netzbrett 1.5.1 and earlier allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2005-3860 Public exploit

    PHP remote file inclusion vulnerability in athena.php in Oliver May Athena PHP Website Administration 0.1a allows remot…

  • Unscored —
    CVE-2005-3865 Public exploit

    SQL injection vulnerability in index.php in AllWeb search 3.0 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2005-3879 Public exploit

    Multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier allow remote attackers to …

  • Unscored —
    CVE-2005-3870 Public exploit

    Multiple SQL injection vulnerabilities in edmobbs9r.php in edmoBBS 0.9 and earlier allow remote attackers to execute ar…

  • Unscored —
    CVE-2005-3875 Public exploit

    Multiple SQL injection vulnerabilities in Enterprise Connector 1.0.2 and earlier allow remote attackers to execute arbi…

  • Unscored —
    CVE-2005-3861 Public exploit

    PHP remote file inclusion vulnerability in content.php in phpGreetz 0.99 and earlier allows remote attackers to execute…

  • Unscored —
    CVE-2005-3859 Public exploit

    PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2005-3882 Public exploit

    SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote a…

  • Unscored —
    CVE-2005-3878 Public exploit

    Directory traversal vulnerability in index.php in PHP Doc System 1.5.1 and earlier allows remote attackers to access or…

  • Unscored —
    CVE-2005-3868 Public exploit

    Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2005-3864 Public exploit

    SQL injection vulnerability in index.php in SourceWell 1.1.2 and earlier allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2005-3873 Public exploit

    SQL injection vulnerability in topic.php in ShockBoard 3.0 and 4.0 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2005-3877 Public exploit

    Multiple SQL injection vulnerabilities in Simple Document Management System (SDMS) 2.0-CVS and earlier allow remote att…

  • Unscored —
    CVE-2005-3862 Public exploit EPSS 20%

    Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archi…

  • Unscored —
    CVE-2004-2592 Public exploit

    Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (applic…