Skip to content
OpenAdvisories

Archive

9 December 2005

Vulnerabilities first published on this day (UTC), newest first.

← November 2005 2005 / December /9 January 2006 →
  1. 139
  2. 22
  3. 315
  4. 455
  5. 536
  6. 615
  7. 726
  8. 829
  9. 914
  10. 1011
  11. 1127
  12. 122
  13. 1323
  14. 1449
  15. 1523
  16. 1629
  17. 1744
  18. 183
  19. 191
  20. 2076
  21. 2139
  22. 2246
  23. 2311
  24. 24 
  25. 25 
  26. 26 
  27. 273
  28. 2835
  29. 2923
  30. 305
  31. 31 
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Medium —
    CVE-2004-2650

    Apache James Denial of Service

    Spooler in Apache Foundation James 2.2.0 allows local users to cause a denial of service (memory consumption) by triggering various error conditions in the retrieve function, which prevents a lock from being released and causes a memory leak.

    org.apache.james:james-server Maven
  • Unscored —
    CVE-2005-4138

    Multiple cross-site scripting (XSS) vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to inject arb…

  • Unscored —
    CVE-2005-4137

    SQL injection vulnerability in viewinvoice.php in DRZES HMS 3.2 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2005-4140 Public exploit

    SQL injection vulnerability in admin/login/index.php in Website Baker 2.6.0 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2005-4141 Public exploit

    Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via the (1…

  • Unscored —
    CVE-2005-4135 Public exploit

    Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attacker…

  • Unscored —
    CVE-2005-4139 Public exploit

    Multiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2005-4136 Public exploit

    Cross-site scripting (XSS) vulnerability in login.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2005-4133

    Sun Update Connection in Sun Solaris 10, when configured to use a web proxy, allows local users to obtain the proxy aut…

  • Unscored —
    CVE-2005-4134 Public exploit EPSS 13%

    Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of se…

  • Unscored —
    CVE-2005-4131 Public exploit EPSS 31%

    Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, all…

  • Unscored —
    CVE-2005-4130

    ** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 200512…

  • Unscored —
    CVE-2005-4126

    ** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 200512…

  • Unscored —
    CVE-2005-4132

    Unspecified "security leak" vulnerability in Contenido before 4.6.4, when register_globals is on and allow_url_fopen is…