Archive
7 December 2005
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
Unscored —
Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2…
-
Unscored —
e107 0.6174 allows remote attackers to redirect users to other web sites via the download parameter in rate.php, which …
-
Unscored —
SQL injection vulnerability in saralblog 1 and earlier allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2005-4047 Public exploit
Cross-site scripting (XSS) vulnerability in kb.asp in IISWorks ASPKnowledgeBase 2.0 allows remote attackers to inject a…
-
Unscored —CVE-2005-4054 Public exploit
SQL injection vulnerability in index.php in PluggedOut Blog 1.9.5 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2005-4049 Public exploit
Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —
SQL injection vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and ear…
-
Unscored —CVE-2005-4055 Public exploit
SQL injection vulnerability in index.php in Cars Portal 1.1 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —
e107 0.6174 allows remote attackers to vote multiple times for a download via repeated requests to rate.php.
-
Unscored —CVE-2005-4053 Public exploit
Cross-site scripting (XSS) vulnerability in coWiki 0.3.4 allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —
Unspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in Sun Java System Messagi…
-
Unscored —CVE-2005-4063 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in NetAuctionHelp 3.0 and earlier allow remote attackers to inject …
-
Unscored —
Cross-site scripting (XSS) vulnerability in CPSearch.asp in XcClassified 3.x allows remote attackers to inject arbitrar…
-
Unscored —CVE-2005-4060 Public exploit
Cross-site scripting (XSS) vulnerability in search.asp in rwAuction Pro 4.0 and 5.0 allows remote attackers to inject a…
-
Unscored —CVE-2005-4065 Public exploit
SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbit…
-
Unscored —
Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCX_FTP.INI, which allows local users…
-
Unscored —CVE-2005-4064 Public exploit
Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PASearch.asp in XcPhotoAlbum 1.x allows remote attackers to inject arbitrar…
-
Unscored —
Buffer overflow in multiple Multi-Tech Systems MultiVOIP devices with firmware before x.08 allows remote attackers to e…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to inject arbitr…
-
Unscored —
SQL injection vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to execute arbitrar…
-
Unscored —
Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functi…
-
Unscored —
Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 …
-
Unscored —CVE-2005-2923 EPSS 11%
The IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to cause…
-
Unscored —
Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for x…