Skip to content
OpenAdvisories

Archive

14 December 2005

Vulnerabilities first published on this day (UTC), newest first.

24 results · Clear filters · Feed

  • Unscored —
    CVE-2005-3358 Public exploit

    Linux kernel before 2.6.15 allows local users to cause a denial of service (panic) via a set_mempolicy call with a 0 bi…

  • Unscored —
    CVE-2005-4212 Public exploit

    Directory traversal vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary lo…

  • Unscored —
    CVE-2005-4218 Public exploit

    SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2005-4213 Public exploit

    SQL injection vulnerability in mod.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2005-4251 Public exploit

    Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2005-4250 Public exploit

    Directory traversal vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to read arbitrary files via …

  • Unscored —
    CVE-2005-4233 Public exploit

    SQL injection vulnerability in advertiser_statistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to ex…

  • Unscored —
    CVE-2005-4247 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Plogger Beta 2 and earlier allows remote attackers to inject a…

  • Unscored —
    CVE-2005-4211 Public exploit

    PHP remote file inclusion vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to execute arb…

  • Unscored —
    CVE-2005-4246 Public exploit

    SQL injection vulnerability in Plogger Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2005-4228 Public exploit

    Multiple SQL injection vulnerabilities in PhpWebGallery 1.5.1 and earlier allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2005-4221 Public exploit

    SQL injection vulnerability in link.php in Arab Portal System 2 Beta 2 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2005-4216 Public exploit

    The Administration Service (FMSAdmin.exe) in Macromedia Flash Media Server 2.0 r1145 allows remote attackers to cause a…

  • Unscored —
    CVE-2005-4238 Public exploit

    Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attacker…

  • Unscored —
    CVE-2005-4244 Public exploit

    SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2005-4234 Public exploit

    SQL injection vulnerability in gallery.php in EncapsGallery 1.0.0 and earlier allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2005-4245 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to in…

  • Unscored —
    CVE-2005-4239 Public exploit

    Cross-site scripting (XSS) vulnerability in Search/DisplayResults.php in PHP JackKnife 2.21 and earlier allows remote a…

  • Unscored —
    CVE-2005-4226 Public exploit

    Multiple "potential" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute …

  • Unscored —
    CVE-2005-4232 Public exploit

    SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2005-4229 Public exploit

    Cross-site scripting (XSS) vulnerability in auction.pl in EveryAuction 1.53 and earlier allows remote attackers to inje…

  • Unscored —
    CVE-2005-4241 Public exploit

    Cross-site scripting (XSS) vulnerability in the category page in VCD-db 0.98 and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2005-4240 Public exploit

    SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2005-2827 Public exploit

    The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify ke…