Skip to content
OpenAdvisories

Archive

13 December 2005

Vulnerabilities first published on this day (UTC), newest first.

23 results · Feed

  • Unscored —
    CVE-2005-3352 EPSS 74%

    Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.…

  • Unscored —
    CVE-2005-4196 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attack…

  • Unscored —
    CVE-2005-4208 Public exploit

    Directory traversal vulnerability in Flatnuke 2.5.6 allows remote attackers to access arbitrary files via a .. (dot dot…

  • Unscored —
    CVE-2005-4194 Public exploit

    Buffer overflow in MediaServerList.exe in Sights 'n Sounds Streaming Media Server 2.0.3.a allows remote attackers to ca…

  • Unscored —

    Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0 have unknown impact and attack vectors, a dif…

  • Unscored —

    Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) before 1.0 allow remote attackers to execute arbitrary…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in templates/tasklists/tasklists.inc in Horde Nag Task List Manager…

  • Unscored —

    LogiSphere 0.9.9j does not restrict the number of messages that can be sent, which allows remote attackers to cause a d…

  • Unscored —

    Directory traversal vulnerability in My Album Online 1.0 allows remote attackers to access arbitrary files via ".../" (…

  • Unscored —
    CVE-2005-4195 Public exploit

    Multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to execut…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework before 3.0.8 allow remote authentica…

  • Unscored —

    Opera before 8.51, when running on Windows with Input Method Editor (IME) installed, allows remote attackers to cause a…

  • Unscored —
    CVE-2005-4202 Public exploit

    Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via …

  • Medium 6.1
    CVE-2005-4206 Public exploit

    Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allo…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in templates/notepads/notepads.inc in Horde Mnemo Note Manager H3 b…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in LogiSphere 0.9.9j allows remote attackers to inject arbitrary Javascript vi…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in UseBB before 0.7 allows remote attackers to inject arbitrary web script or …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith H3 before 2.0.6 allow remote authenticated users…

  • Unscored —
    CVE-2005-4198 Public exploit

    SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2005-4197 Public exploit EPSS 12%

    tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a par…

  • Unscored —
    CVE-2005-4207 Public exploit

    SQL injection vulnerability in BTGrup Admin WebController Script allows remote attackers to execute SQL commands via th…

  • Unscored —
    CVE-2005-4209 Public exploit

    WorldClient webmail in Alt-N MDaemon 8.1.3 allows remote attackers to prevent arbitrary users from accessing their inbo…

  • Unscored —
    CVE-2005-4205 Public exploit

    Cross-site scripting (XSS) vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to inj…