Skip to content
OpenAdvisories

Archive

10 December 2005

Vulnerabilities first published on this day (UTC), newest first.

11 results · Feed

  • Unscored —
    CVE-2005-4143 Public exploit

    SQL injection vulnerability in Lyris ListManager 5.0 through 8.9a allows remote attackers to execute arbitrary SQL comm…

  • Unscored —

    Lyris ListManager before 8.9b allows remote attackers to obtain sensitive information via a request to the TCLHTTPd sta…

  • Unscored —

    The Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and earlier does not clea…

  • Unscored —

    The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitrary .tml …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the portal login page in Computer Associates CleverPath 4.7 allows remote a…

  • Unscored —

    Lyris ListManager 8.8 through 8.9b allows remote attackers to obtain sensitive information by causing errors in TML scr…

  • Unscored —

    Lyris ListManager 8.5, and possibly other versions before 8.8, includes sensitive information in the env hidden variabl…

  • Unscored —

    The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line wrap feat…

  • Unscored —

    Lyris ListManager 5.0 through 8.9a allows remote attackers to add "ORDER BY" columns to SQL queries via unusual whitesp…

  • Unscored —
    CVE-2005-4145 Public exploit EPSS 44%

    The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with…

  • Unscored —

    Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0…