Skip to content
OpenAdvisories

Archive

December 2005

Vulnerabilities first published in this month (UTC), newest first.

← November 2005 2005 / December January 2006 →
  1. 139
  2. 22
  3. 315
  4. 455
  5. 536
  6. 615
  7. 726
  8. 829
  9. 914
  10. 1011
  11. 1127
  12. 122
  13. 1323
  14. 1449
  15. 1523
  16. 1629
  17. 1744
  18. 183
  19. 191
  20. 2076
  21. 2139
  22. 2246
  23. 2311
  24. 24 
  25. 25 
  26. 26 
  27. 273
  28. 2835
  29. 2923
  30. 305
  31. 31 
All Critical High Medium Low Exploited only Public exploit

681 results · Feed

  • Unscored —
    CVE-2005-4588 Public exploit

    Cross-site scripting (XSS) vulnerability in Koobi 5 allows remote attackers to inject arbitrary web script or HTML via …

  • Unscored —
    CVE-2005-4590

    Spb Kiosk Engine 1.0.0.1 allows local users to bypass restrictions on allowed applications via (1) removable media cont…

  • Unscored —
    CVE-2005-4587

    Juniper NetScreen-Security Manager (NSM) 2004 FP2 and FP3 allow remote attackers to cause a denial of service (crash or…

  • Unscored —
    CVE-2005-4589

    Spb Kiosk Engine 1.0.0.1 stores the administrator's passcode in the registry in plaintext, which allows local users to …

  • Unscored —
    CVE-2005-4586

    Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2005-4581

    Buffer overflow in Electric Sheep 2.6.3 client allows local users to execute arbitrary code via a long window-id parame…

  • Unscored —
    CVE-2005-4571

    Cross-site scripting (XSS) vulnerability in myEZshop Shopping Cart allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2005-4566

    Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E migh…

  • Unscored —
    CVE-2005-4563 Public exploit

    SQL injection vulnerability in main.php in Enterprise Heart Enterprise Connector 1.0.2 allows remote attackers to execu…

  • Unscored —
    CVE-2005-4578

    Multiple SQL injection vulnerabilities in Hitachi Business Logic - Container (BLC) P-2443-9114 01-00 through 02-06 on W…

  • Unscored —
    CVE-2005-4585

    Unspecified vulnerability in the GTP dissector for Ethereal 0.9.1 to 0.10.13 allows remote attackers to cause a denial …

  • Unscored —
    CVE-2005-4564

    The Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow remote atta…

  • Unscored —
    CVE-2005-4576 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the UpdateEngine program in Fatwire UpdateEngine 6.2 and earlier…

  • Unscored —
    CVE-2005-4568

    Multiple format string vulnerabilities in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (aka Build 4.4.00…

  • Unscored —
    CVE-2005-4574 Public exploit

    Cross-site scripting (XSS) vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and earlier allows re…

  • Unscored —
    CVE-2005-4582

    Electric Sheep 2.6.3 does not require authentication or integrity checks from the server to the client, which allows re…

  • Unscored —
    CVE-2005-4567

    Multiple cross-site scripting (XSS) vulnerabilities in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (Bui…

  • Unscored —
    CVE-2005-4579

    Multiple HTTP response splitting vulnerabilities in Hitachi Business Logic - Container (BLC) P-2443-9114 01-00 through …

  • Unscored —
    CVE-2005-4577

    Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Business Logic - Container (BLC) P-2443-9114 01-00 throu…

  • Unscored —
    CVE-2005-4583

    Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 December 2005 allo…

  • Unscored —
    CVE-2005-4580

    Cross-site scripting (XSS) vulnerability in Day Communique 4 allows remote attackers to inject arbitrary web script or …

  • Unscored —
    CVE-2005-4565

    Format string vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.…

  • Unscored —
    CVE-2005-4570

    The Internet Key Exchange version 1 (IKEv1) implementations in Fortinet FortiOS 2.50, 2.80 and 3.0, FortiClient 2.0,; a…

  • Unscored —
    CVE-2005-4573 Public exploit EPSS 12%

    PHP remote file include vulnerability in plog-admin-functions.php in Plogger Beta 2 allows remote attackers to execute …

  • Unscored —
    CVE-2005-4569

    Stack-based buffer overflow in index.fts in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (aka Build 4.4.…

  • Unscored —
    CVE-2005-4575

    PaperThin CommonSpot Content Server 4.5 and earlier allow remote attackers to obtain sensitive information via an inval…

  • Unscored —
    CVE-2005-4584 Public exploit

    BZFlag server 2.0.4 and earlier allows remote attackers to cause a denial of service (application crash) via a callsign…

    bzflag Debian
  • Unscored —
    CVE-2005-4572

    Multiple SQL injection vulnerabilities in myEZshop Shopping Cart allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2005-3345

    rssh 2.0.0 through 2.2.3 allows local users to bypass access restrictions and gain root privileges by using the rssh_ch…

  • Unscored —
    CVE-2005-4560 Public exploit EPSS 86%

    The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbi…

  • Unscored —
    CVE-2005-4546

    search.php in eggblog 2.0 allows remote attackers to obtain the full path via an invalid q parameter, as used by the Ke…

  • Unscored —
    CVE-2005-4545

    Cross-site scripting (XSS) vulnerability in search.asp in NetDirect ShopEngine allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2005-4553 Public exploit

    Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long APPE command. NO…

  • Unscored —
    CVE-2005-4557 Public exploit

    dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 …

  • Unscored —
    CVE-2005-4552

    The (1) slsmgr and (2) slsadmin programs in Sun Solaris PC NetLink 2.0 create temporary files insecurely, which allows …

  • Unscored —
    CVE-2005-4558 Public exploit

    IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not pr…

  • Unscored —
    CVE-2005-4549

    Cross-site scripting (XSS) vulnerability in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote…

  • Unscored —
    CVE-2005-4550 Public exploit

    The PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to obtain th…

  • Unscored —
    CVE-2005-4554 Public exploit

    Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute a…

  • Unscored —
    CVE-2005-4548

    SQL injection vulnerability in the "user area" in RWS Statistics Counter before 2.4.1 allows remote attackers to execut…