Skip to content
OpenAdvisories

Archive

7 December 2005

Vulnerabilities first published on this day (UTC), newest first.

26 results · Feed

  • Unscored —

    Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2…

  • Unscored —

    e107 0.6174 allows remote attackers to redirect users to other web sites via the download parameter in rate.php, which …

  • Unscored —

    SQL injection vulnerability in saralblog 1 and earlier allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2005-4047 Public exploit

    Cross-site scripting (XSS) vulnerability in kb.asp in IISWorks ASPKnowledgeBase 2.0 allows remote attackers to inject a…

  • Unscored —
    CVE-2005-4054 Public exploit

    SQL injection vulnerability in index.php in PluggedOut Blog 1.9.5 and earlier allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2005-4049 Public exploit

    Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —

    SQL injection vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —

    Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and ear…

  • Unscored —
    CVE-2005-4055 Public exploit

    SQL injection vulnerability in index.php in Cars Portal 1.1 and earlier allows remote attackers to execute arbitrary SQ…

  • Unscored —

    e107 0.6174 allows remote attackers to vote multiple times for a download via repeated requests to rate.php.

  • Unscored —
    CVE-2005-4053 Public exploit

    Cross-site scripting (XSS) vulnerability in coWiki 0.3.4 allows remote attackers to inject arbitrary web script or HTML…

  • Unscored —

    Unspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in Sun Java System Messagi…

  • Unscored —
    CVE-2005-4063 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in NetAuctionHelp 3.0 and earlier allow remote attackers to inject …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in CPSearch.asp in XcClassified 3.x allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2005-4060 Public exploit

    Cross-site scripting (XSS) vulnerability in search.asp in rwAuction Pro 4.0 and 5.0 allows remote attackers to inject a…

  • Unscored —
    CVE-2005-4065 Public exploit

    SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbit…

  • Unscored —

    Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCX_FTP.INI, which allows local users…

  • Unscored —
    CVE-2005-4064 Public exploit

    Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in PASearch.asp in XcPhotoAlbum 1.x allows remote attackers to inject arbitrar…

  • Unscored —

    Buffer overflow in multiple Multi-Tech Systems MultiVOIP devices with firmware before x.08 allows remote attackers to e…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to inject arbitr…

  • Unscored —

    SQL injection vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to execute arbitrar…

  • Unscored —

    Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functi…

  • Unscored —

    Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 …

  • Unscored —
    CVE-2005-2923 EPSS 11%

    The IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to cause…

  • Unscored —

    Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for x…