Skip to content
OpenAdvisories

Archive

November 2005

Vulnerabilities first published in this month (UTC), newest first.

← October 2005 2005 / November December 2005 →
  1. 144
  2. 247
  3. 317
  4. 413
  5. 513
  6. 617
  7. 72
  8. 8 
  9. 91
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16191
  17. 177
  18. 1839
  19. 1911
  20. 2015
  21. 2137
  22. 2252
  23. 2319
  24. 2418
  25. 257
  26. 2635
  27. 2712
  28. 2818
  29. 2961
  30. 3026
All Critical High Medium Low Exploited only Public exploit

218 results · Clear filters · Feed

  • Unscored —
    CVE-2005-3473 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.4.5 and earlier allow remote attackers to inje…

  • Unscored —
    CVE-2005-3475 Public exploit

    Hasbani Web Server (WindWeb) 2.0 allows remote attackers to cause a denial of service (infinite loop) via HTTP crafted …

  • Unscored —
    CVE-2005-3478 Public exploit

    SQL injection vulnerability in index.php in PHPCafe.net Tutorials Manager 1.0 Beta 2 allows remote attackers to execute…

  • Unscored —
    CVE-2005-3469 Public exploit

    SQL injection vulnerability in index.php in News2Net 3.0.0.0 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2005-3432 Public exploit

    MiniGal 2 (MG2) 0.5.1 allows remote attackers to list password protected images via a request to index.php with the lis…

  • Unscored —
    CVE-2005-3423 Public exploit

    Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2005-3422 Public exploit

    Cross-site scripting (XSS) vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2005-3411 Public exploit

    Cross-site scripting (XSS) vulnerability in post.asp in Snitz Forums 2000 3.4.05 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2005-3412 Public exploit

    Cross-site scripting (XSS) vulnerability in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2005-3397 Public exploit

    Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2005-3405 Public exploit

    ATutor 1.4.1 through 1.5.1-pl1 allows remote attackers to execute arbitrary PHP functions via a direct request to forum…

  • Unscored —
    CVE-2005-3408 Public exploit

    SQL injection vulnerability in news.php in gCards version 1.43 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2005-3398 Public exploit EPSS 13%

    The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables th…

  • Unscored —
    CVE-2005-3395 Public exploit

    SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2005-3394 Public exploit

    Multiple SQL injection vulnerabilities in forum.php in oaboard forum 1.0 allow remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2005-3404 Public exploit EPSS 10%

    Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitra…

  • Unscored —
    CVE-2005-3390 Public exploit EPSS 66%

    The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows re…

  • Unscored —
    CVE-2005-3388 Public exploit EPSS 49%

    Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remo…