Skip to content
OpenAdvisories

Archive

15 December 2005

Vulnerabilities first published on this day (UTC), newest first.

23 results · Feed

  • Unscored —

    Unspecified vulnerability in Business Objects WebIntelligence 6.5x allows remote attackers to cause a denial of service…

  • Unscored —

    Multiple unspecified vulnerabilities in (1) getShell and (2) getCommand in IBM AIX 5.3 allow local users to append to a…

  • Unscored —

    Multiple buffer overflows in IBM AIX 5.1, 5.2, and 5.3 allow remote attackers to execute arbitrary code via (1) muxatmd…

  • Unscored —

    Buffer overflow in the malloc debug system in IBM AIX 5.3 allows local users to execute arbitrary code.

  • Unscored —

    mshtml.dll in Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers to cause a denial of se…

  • Unscored —
    CVE-2005-4270 Public exploit

    Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an …

  • Unscored —

    Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a deni…

  • Unscored —

    Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in getdox.php in Torrential 1.2 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2005-4259 Public exploit

    Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the (1…

  • Unscored —

    WorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a randomly generated se…

  • Unscored —
    CVE-2005-4256 Public exploit

    Cross-site scripting (XSS) vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitra…

  • Unscored —

    Unspecified vulnerability in Positive Software Corporation CP+ (cpplus) before 2.5.5 allows attackers to have unknown i…

  • Unscored —
    CVE-2005-4243 Public exploit

    Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2005-4255 Public exploit

    Cross-site scripting (XSS) vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in QuickPayPro 3.1 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2005-4260 Public exploit

    Interpretation conflict in includes/mainfile.php in PHP-Nuke 7.9 and later allows remote attackers to perform cross-sit…

  • Unscored —
    CVE-2005-4254 Public exploit

    SQL injection vulnerability in view_Results.php in DreamLevels DreamPoll 3.0 final allows remote attackers to execute a…

  • Unscored —
    CVE-2005-4262 Public exploit

    Cross-site scripting (XSS) vulnerability in the News module in Envolution allows remote attackers to inject arbitrary w…

  • Unscored —

    Linksys WRT54GS and BEFW11S4 allows remote attackers to cause a denial of service (device crash) via an IP packet with …

  • Unscored —
    CVE-2005-4263 Public exploit

    SQL injection vulnerability in the News module in Envolution allows remote attackers to execute arbitrary SQL commands …

  • Unscored —

    ADP Forum 2.0 through 2.0.3 stores sensitive information in plaintext files under the web document root with insufficie…

  • Unscored —

    Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitr…