Archive
14 December 2005
Vulnerabilities first published on this day (UTC), newest first.
49 results · Feed
-
Unscored —
Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 and possibly earlier versions, when running wi…
-
Unscored —
Multiple heap-based buffer overflows in (1) isaNVWRequest.dll and (2) relay.dll in Trend Micro ServerProtect Management…
-
Unscored —
Directory traversal vulnerability in the Crystal Report component (rptserver.asp) in Trend Micro ServerProtect Manageme…
-
Unscored —
The installation of Trend Micro PC-Cillin Internet Security 2005 12.00 build 1244, and probably previous versions, uses…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote attackers to injec…
-
Unscored —CVE-2005-3358 Public exploit
Linux kernel before 2.6.15 allows local users to cause a denial of service (panic) via a set_mempolicy call with a 0 bi…
-
Unscored —
Multiple "potential" SQL injection vulnerabilities in DCP-Portal 6.1.1 might allow remote attackers to execute arbitrar…
-
Unscored —CVE-2005-4212 Public exploit
Directory traversal vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary lo…
-
Unscored —CVE-2005-4218 Public exploit
SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in guestbook.cgi in Lars Ellingsen Guestserver 4.13 and earlier all…
-
Unscored —CVE-2005-4213 Public exploit
SQL injection vulnerability in mod.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —
setting.php in Innovative CMS (ICMS, formerly Imoel-CMS) contains username and password information in cleartext, which…
-
Unscored —
Cross-site scripting (XSS) vulnerability in knowledgebase.php in WHMCompleteSolution 2.1 and earlier allows remote atta…
-
Unscored —CVE-2005-4251 Public exploit
Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2005-4250 Public exploit
Directory traversal vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to read arbitrary files via …
-
Unscored —
Multiple "potential" SQL injection vulnerabilities in myBloggie 2.1.3 beta might allow remote attackers to execute arbi…
-
Unscored —CVE-2005-4233 Public exploit
SQL injection vulnerability in advertiser_statistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to ex…
-
Unscored —
Multiple "potential" SQL injection vulnerabilities in e107 0.7 might allow remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2005-4247 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Plogger Beta 2 and earlier allows remote attackers to inject a…
-
Unscored —CVE-2005-4211 Public exploit
PHP remote file inclusion vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to execute arb…
-
Unscored —CVE-2005-4246 Public exploit
SQL injection vulnerability in Plogger Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —
Multiple "potential" SQL injection vulnerabilities in Utopia News Pro (UNP) 1.1.4 might allow remote attackers to execu…
-
Unscored —CVE-2005-4228 Public exploit
Multiple SQL injection vulnerabilities in PhpWebGallery 1.5.1 and earlier allow remote attackers to execute arbitrary S…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.php in CKGOLD allows remote attackers to inject arbitrary web script…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Link Up Gold 2.5 and earlier allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2005-4221 Public exploit
SQL injection vulnerability in link.php in Arab Portal System 2 Beta 2 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2005-4216 Public exploit
The Administration Service (FMSAdmin.exe) in Macromedia Flash Media Server 2.0 r1145 allows remote attackers to cause a…
-
Unscored —CVE-2005-4238 Public exploit
Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attacker…
-
Unscored —CVE-2005-4244 Public exploit
SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2005-4234 Public exploit
SQL injection vulnerability in gallery.php in EncapsGallery 1.0.0 and earlier allows remote attackers to execute arbitr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2005-4245 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to in…
-
Unscored —CVE-2005-4239 Public exploit
Cross-site scripting (XSS) vulnerability in Search/DisplayResults.php in PHP JackKnife 2.21 and earlier allows remote a…
-
Unscored —
phpCOIN 1.2.2 allows remote attackers to obtain the installation path via a direct request to config.php, which leaks t…
-
Unscored —
Perl in Apple Mac OS X Server 10.3.9 does not properly drop privileges when using the "$<" variable to set uid, which a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MySQL Auction 3.0 and earlier allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2005-4226 Public exploit
Multiple "potential" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute …
-
Unscored —
Motorola SB5100E Cable Modem allows remote attackers to cause a denial of service (device crash) via an IP packet with …
-
Unscored —CVE-2005-4232 Public exploit
SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2005-4229 Public exploit
Cross-site scripting (XSS) vulnerability in auction.pl in EveryAuction 1.53 and earlier allows remote attackers to inje…