Skip to content
OpenAdvisories

Archive

1 December 2005

Vulnerabilities first published on this day (UTC), newest first.

39 results · Feed

  • Unscored —

    Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to…

  • Unscored —
    CVE-2005-3945 EPSS 12%

    The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up us…

  • Unscored —

    Unspecified vulnerability in the Trackback functionality in DotClear 1.2.1 has unknown impact and attack vectors.

  • Unscored —
    CVE-2005-3953 Public exploit

    SQL injection vulnerability in Bedeng PSP 1.1 allows remote attackers to execute arbitrary SQL commands via the cwhere …

  • Unscored —

    nuauth in NuFW 1.0.x before 1.0.16 and 1.1 allows authenticated users to cause a denial of service via malformed packet…

  • Unscored —
    CVE-2005-3935 Public exploit

    SQL injection vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2005-3956 Public exploit

    Multiple SQL injection vulnerabilities in index.php in DMANews 0.904 and 0.910 allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2005-3938 Public exploit

    SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL comma…

  • Unscored —

    PHP file include vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to include arbitrary local files v…

  • Unscored —
    CVE-2005-3939 Public exploit

    Multiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earler allow remote attackers to execute arbitra…

  • Unscored —

    SQL injection vulnerability in survey.php in PHP Labs Survey Wizard allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2005-3930 Public exploit

    SQL injection vulnerability in index.php in N-13 News 1.2 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2005-3934 Public exploit

    Buffer overflow in Symantec pcAnywhere 11.0.1, 11.5.1, and all other 32-bit versions allows remote attackers to cause a…

  • Unscored —
    CVE-2005-3937 Public exploit

    SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute…

  • Unscored —
    CVE-2005-3941 Public exploit

    SQL injection vulnerability in blog.php in Orca Blog 1.3b and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2005-3948 Public exploit

    Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary f…

  • Unscored —
    CVE-2005-3952 Public exploit

    SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the (…

  • Unscored —

    Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2005-3944 Public exploit

    SQL injection vulnerability in survey.php in ilyav Survey System 1.1 and earlier allows remote attackers to execute arb…

  • Unscored —
    CVE-2005-3933 Public exploit

    SQL injection vulnerability in index.php in 88Script's Event Calendar 2.0 and earlier allows remote attackers to execut…

  • Unscored —
    CVE-2005-3931 Public exploit

    SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2005-3932 Public exploit

    SQL injection vulnerability in okiraku.php in O-Kiraku Nikki 1.3 and earlier allows remote attackers to execute arbitra…

  • Unscored —

    export_handler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id p…

  • Unscored —
    CVE-2005-3958 Public exploit

    SQL injection vulnerability in index.php in Entergal MX 2.0 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —

    Kadu 0.4.2 and 0.5.0pre allows remote attackers to cause a denial of service (crash or generated traffic) via a malform…

  • Unscored —
    CVE-2005-3955 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in MagpieRSS 7.1, as used in (a) blogBuddiesv 0.3, (b) Jaws 0.6.2, …

  • Unscored —
    CVE-2005-3959 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FreeWebStat 1.0 rev37 allow remote attackers to inject arbitrary…

  • Unscored —

    Opera 8.50 allows remote attackers to cause a denial of service (crash) via a Java applet with a large string argument …

  • Unscored —
    CVE-2005-3947 Public exploit

    Directory traversal vulnerability in index.php in PHP Upload Center allows remote attackers to read arbitrary files via…

  • Unscored —
    CVE-2005-3940 Public exploit

    SQL injection vulnerability in ringmaker.php in Orca Ringmaker 2.3c and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2005-3942 Public exploit

    SQL injection vulnerability in knowledgebase-control.php in Orca Knowledgebase 2.1b and earlier allows remote attackers…

  • Unscored —
    CVE-2005-3943 Public exploit

    Multiple SQL injection vulnerabilities in ilyav FAQ System 1.1 and earlier allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2005-3954 Public exploit

    Cross-site scripting (XSS) vulnerability in blogBuddies 0.3 allows remote attackers to inject arbitrary web script or H…

  • Unscored —

    Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows remote attackers to cause files to be downloaded to locatio…

  • Unscored —

    Unknown vulnerability in iodbcadmintool in the ODBC Administrator utility in Mac OS X and OS X Server 10.3.9 and 10.4.3…

  • Unscored —

    Unspecified vulnerability in passwordserver in Mac OS X Server 10.3.9 and 10.4.3, when creating an Open Directory maste…

  • Unscored —

    Heap-based buffer overflow in WebKit in Mac OS X and OS X Server 10.3.9 and 10.4.3, as used in applications such as Saf…

  • Unscored —

    System log server in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to spoof syslog messages in l…

  • Unscored —

    Heap-based buffer overflow in CoreFoundation in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to…