Skip to content
OpenAdvisories

Archive

29 November 2005

Vulnerabilities first published on this day (UTC), newest first.

← October 2005 2005 / November /29 December 2005 →
  1. 144
  2. 247
  3. 317
  4. 413
  5. 513
  6. 617
  7. 72
  8. 8 
  9. 91
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16191
  17. 177
  18. 1839
  19. 1911
  20. 2015
  21. 2137
  22. 2252
  23. 2319
  24. 2418
  25. 257
  26. 2635
  27. 2712
  28. 2818
  29. 2961
  30. 3026
All Critical High Medium Low Exploited only Public exploit

61 results · Feed

  • Unscored —
    CVE-2005-3883

    CRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote attackers to inject ar…

  • Unscored —
    CVE-2005-3866

    Cross-site scripting (XSS) vulnerability in SearchFeed Search Engine 1.3.2 and earlier allows remote attackers to injec…

  • Unscored —
    CVE-2005-3873 Public exploit

    SQL injection vulnerability in topic.php in ShockBoard 3.0 and 4.0 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2005-3877 Public exploit

    Multiple SQL injection vulnerabilities in Simple Document Management System (SDMS) 2.0-CVS and earlier allow remote att…

  • Unscored —
    CVE-2005-3862 Public exploit EPSS 20%

    Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archi…

    unalz Debian
  • Unscored —
    CVE-2004-2593

    Buffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple products, allows remot…

  • Unscored —
    CVE-2004-2591

    The data-overwrite capability of ButtUglySoftware CleanCache 2.19 does not properly overwrite data in files, which allo…

  • Unscored —
    CVE-2004-2604

    Cross-site scripting (XSS) vulnerability in index.php in PHProxy allows remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2004-2599

    Multiple buffer overflows in Quake II server before R1Q2, as used in multiple products, allow local users to cause a de…

  • Unscored —
    CVE-2004-2601

    PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) allows remote attackers to read local files a…

  • Unscored —
    CVE-2004-2592 Public exploit

    Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (applic…

  • Unscored —
    CVE-2004-2606

    The Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version 3, with the firewall disabled, allows remote attackers t…

  • Unscored —
    CVE-2004-2603

    Cross-site scripting (XSS) vulnerability in the Search module in UberTec Help Center Live (HCL) allows remote attackers…

  • Unscored —
    CVE-2004-2597

    Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control ru…

  • Unscored —
    CVE-2004-2602

    PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) before 1.2.7 allows remote attackers to execu…

  • Unscored —
    CVE-2004-2598

    Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state…

  • Unscored —
    CVE-2004-2600

    The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shippe…

  • Unscored —
    CVE-2004-2595

    Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows rem…

  • Unscored —
    CVE-2004-2605

    aStats 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on (1) the aStats-Graphic-Signature-G…

  • Unscored —
    CVE-2004-2596

    Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (exhaus…

  • Unscored —
    CVE-2004-2594

    Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows r…