Skip to content
OpenAdvisories

Archive

November 2005

Vulnerabilities first published in this month (UTC), newest first.

218 results · Clear filters · Feed

  • Unscored —
    CVE-2005-3911 Public exploit

    Multiple SQL injection vulnerabilities in calendar.php in BosDates 4.0 and earlier allow remote attackers to execute ar…

  • Unscored —
    CVE-2005-3929 Public exploit

    Directory traversal vulnerability in the create function in xarMLSXML2PHPBackend.php in Xaraya 1.0 allows remote attack…

  • Unscored —
    CVE-2005-3919 Public exploit

    Cross-site scripting (XSS) vulnerability in PBLang 4.65 allows remote attackers to inject arbitrary web script or HTML …

  • Unscored —
    CVE-2005-3918 Public exploit

    Multiple SQL injection vulnerabilities in OvBB 0.08a allow remote attackers to execute arbitrary SQL commands via the (…

  • Unscored —
    CVE-2005-3914 Public exploit

    Multiple SQL injection vulnerabilities in AFFcommerce 1.1.4 allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2005-3928 Public exploit

    Buffer overflow in phgrafx in QNX 6.2.1 and 6.3.0 allows local users to execute arbitrary code via a long command line …

  • Unscored —
    CVE-2005-3920 Public exploit

    SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the (1) gal …

  • Unscored —
    CVE-2005-3926 Public exploit

    Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when register_globals is disabled, …

  • Unscored —
    CVE-2005-3924 Public exploit

    SQL injection vulnerability in themes/kategorie/index.php in Randshop allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2005-3908 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in GhostScripter Amazon Shop 5.0.0, and other versions before 5.…

  • Unscored —
    CVE-2005-3927 Public exploit

    Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbi…

  • Unscored —
    CVE-2005-3925 Public exploit

    Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote at…

  • Unscored —
    CVE-2005-3916 Public exploit

    SQL injection vulnerability in memberlist.php in WSN Forum 1.21 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2005-3909 Public exploit

    SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 2.0.4 and earlier allows remote attackers to e…

  • Unscored —
    CVE-2005-3902 Public exploit

    Cross-site scripting (XSS) vulnerability in gui/errordocs/index.php in Virtual Hosting Control System (VHCS) 2.2.0 thro…

  • Unscored —
    CVE-2005-3894 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.…

  • Unscored —
    CVE-2005-3893 Public exploit

    Multiple SQL injection vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 t…

  • Unscored —
    CVE-2005-2124 Public exploit EPSS 56%

    Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server …

  • Unscored —
    CVE-2005-2123 Public exploit EPSS 61%

    Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server…

  • Unscored —
    CVE-2005-3884 Public exploit

    Multiple SQL injection vulnerabilities in the search action in Zainu 2.0 and earlier allow remote attackers to execute …

  • Unscored —
    CVE-2005-3872 Public exploit

    Multiple SQL injection vulnerabilities in Ugroup 2.6.2 and earlier allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2005-3874 Public exploit

    SQL injection vulnerability in netzbr.php in Netzbrett 1.5.1 and earlier allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2005-3860 Public exploit

    PHP remote file inclusion vulnerability in athena.php in Oliver May Athena PHP Website Administration 0.1a allows remot…

  • Unscored —
    CVE-2005-3865 Public exploit

    SQL injection vulnerability in index.php in AllWeb search 3.0 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2005-3879 Public exploit

    Multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier allow remote attackers to …

  • Unscored —
    CVE-2005-3870 Public exploit

    Multiple SQL injection vulnerabilities in edmobbs9r.php in edmoBBS 0.9 and earlier allow remote attackers to execute ar…

  • Unscored —
    CVE-2005-3875 Public exploit

    Multiple SQL injection vulnerabilities in Enterprise Connector 1.0.2 and earlier allow remote attackers to execute arbi…

  • Unscored —
    CVE-2005-3861 Public exploit

    PHP remote file inclusion vulnerability in content.php in phpGreetz 0.99 and earlier allows remote attackers to execute…

  • Unscored —
    CVE-2005-3859 Public exploit

    PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2005-3882 Public exploit

    SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote a…

  • Unscored —
    CVE-2005-3878 Public exploit

    Directory traversal vulnerability in index.php in PHP Doc System 1.5.1 and earlier allows remote attackers to access or…

  • Unscored —
    CVE-2005-3868 Public exploit

    Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2005-3864 Public exploit

    SQL injection vulnerability in index.php in SourceWell 1.1.2 and earlier allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2005-3873 Public exploit

    SQL injection vulnerability in topic.php in ShockBoard 3.0 and 4.0 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2005-3877 Public exploit

    Multiple SQL injection vulnerabilities in Simple Document Management System (SDMS) 2.0-CVS and earlier allow remote att…

  • Unscored —
    CVE-2005-3862 Public exploit EPSS 20%

    Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archi…

  • Unscored —
    CVE-2004-2592 Public exploit

    Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (applic…

  • Unscored —
    CVE-2004-2573 Public exploit

    PHP remote file inclusion vulnerability in tables_update.inc.php in phpGroupWare 0.9.14.005 and earlier allows remote a…

  • Unscored —
    CVE-2004-2574 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to…

  • Unscored —
    CVE-2005-3857 Public exploit

    The time_out_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of serv…