Skip to content
OpenAdvisories

Archive

8 December 2005

Vulnerabilities first published on this day (UTC), newest first.

← November 2005 2005 / December /8 January 2006 →
  1. 139
  2. 22
  3. 315
  4. 455
  5. 536
  6. 615
  7. 726
  8. 829
  9. 914
  10. 1011
  11. 1127
  12. 122
  13. 1323
  14. 1449
  15. 1523
  16. 1629
  17. 1744
  18. 183
  19. 191
  20. 2076
  21. 2139
  22. 2246
  23. 2311
  24. 24 
  25. 25 
  26. 26 
  27. 273
  28. 2835
  29. 2923
  30. 305
  31. 31 
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Unscored —
    CVE-2005-4090

    Unspecified vulnerability in HP-UX B.11.00 to B.11.23, when IPSEC is running, allows remote attackers to have unknown i…

  • Unscored —
    CVE-2005-4088

    SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2005-4091 Public exploit

    Cross-site scripting (XSS) vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2005-4086 Public exploit

    Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (Sug…

  • Unscored —
    CVE-2005-4094

    connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using t…

  • Unscored —
    CVE-2005-4093 Public exploit

    Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to by…

  • Unscored —
    CVE-2005-4095 Public exploit

    Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attacker…

  • Unscored —
    CVE-2005-4089 EPSS 22%

    Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive i…

  • Unscored —
    CVE-2005-4092

    Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 (3) and earlier …

  • Unscored —
    CVE-2005-4087 Public exploit

    PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management …

  • Unscored —
    CVE-2005-3661

    Dell TrueMobile 2300 Wireless Broadband Router running firmware 3.0.0.8 and 5.1.1.6, and possibly other versions, allow…

  • Unscored —
    CVE-2005-3665

    Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.7.0 allow remote attackers to inject arbitra…

    phpmyadmin Debian
  • Unscored —
    CVE-2005-4079

    The register_globals emulation in phpMyAdmin 2.7.0 rc1 allows remote attackers to exploit other vulnerabilities in phpM…

  • Unscored —
    CVE-2005-4076 Public exploit

    Buffer overflow in Appfluent Technology Database IDS 2.0 allows local users to execute arbitrary code via a long APPFLU…

  • Unscored —
    CVE-2005-4071 Public exploit

    Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execut…

  • Unscored —
    CVE-2005-4084

    xs_edit.php in the phpBB eXtreme Styles module 2.2.1 and earlier allows remote attackers to obtain the installation pat…

  • Unscored —
    CVE-2005-4082

    The dhcp.client program for QNX 4.25 vmware is setuid, possibly by default, which allows local users to modify the NIC …

  • Unscored —
    CVE-2005-4083

    Directory traversal vulnerability in xs_edit.php in the eXtreme Styles phpBB module 2.2.1 and earlier allows remote att…

  • Unscored —
    CVE-2005-4072

    Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2005-4075 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in CF_Nuke 4.6 and earlier allow remote attackers to i…

  • Unscored —
    CVE-2005-4074 Public exploit

    Directory traversal vulnerability in index.cfm in CF_Nuke 4.6 and earlier, when Sandbox Security is disabled, allows re…

  • Unscored —
    CVE-2005-4078

    Multiple cross-site scripting (XSS) vulnerabilities in Ideal BB.NET 1.3 and earlier allow remote attackers to inject ar…

  • Unscored —
    CVE-2005-4080 Public exploit

    Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which allows remote attackers t…

  • Unscored —
    CVE-2005-4081 Public exploit

    Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and po…

  • Unscored —
    CVE-2005-4068

    Unspecified "absolute path vulnerability" in umountall in IBM AIX 5.1 through 5.3 allows local users to cause unknown i…

  • Unscored —
    CVE-2005-4077

    Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer ov…

    curl Debian
  • Unscored —
    CVE-2005-4069

    SunnComm MediaMax DRM 5.0.21.0, as used by Sony BMG, assigns insecure Everyone/Full Control permissions to the "SunnCom…

  • Unscored —
    CVE-2005-4073 Public exploit

    SQL injection vulnerability in view_archive.cfm in CFMagic Magic List Pro 2.5 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2005-3192

    Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) t…

    poppler cups xpdf libextractor Debian