Skip to content
OpenAdvisories

Archive

16 December 2005

Vulnerabilities first published on this day (UTC), newest first.

← November 2005 2005 / December /16 January 2006 →
  1. 139
  2. 22
  3. 315
  4. 455
  5. 536
  6. 615
  7. 726
  8. 829
  9. 914
  10. 1011
  11. 1127
  12. 122
  13. 1323
  14. 1449
  15. 1523
  16. 1629
  17. 1744
  18. 183
  19. 191
  20. 2076
  21. 2139
  22. 2246
  23. 2311
  24. 24 
  25. 25 
  26. 26 
  27. 273
  28. 2835
  29. 2923
  30. 305
  31. 31 
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Unscored —
    CVE-2005-4300

    Format string vulnerability in the lire_pop function in pop.c in libremail 1.1.0 and earlier, with compiled with the de…

  • Unscored —
    CVE-2005-4297

    Cross-site scripting (XSS) vulnerability in bbBoard 2.56 and earlier allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-4301

    Cross-site scripting (XSS) vulnerability in phpXplorer 0.9.12 and earlier allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2005-4299 Public exploit

    Cross-site scripting (XSS) vulnerability in atl.cgi in Atlant Pro 4.02 and earlier allows remote attackers to inject ar…

  • Unscored —
    CVE-2005-4298 Public exploit

    Cross-site scripting (XSS) vulnerability in atl.cgi in AtlantForum 4.02 and earlier allows remote attackers to inject a…

  • Unscored —
    CVE-2005-3652 EPSS 16%

    Heap-based buffer overflow in Citrix Program Neighborhood client 9.0 and earlier allows remote attackers to execute arb…

  • Unscored —
    CVE-2005-4279

    Untrusted search path vulnerability in Qt-UnixODBC before 3.3.4-r1 on Gentoo Linux allows local users in the portage gr…

  • Unscored —
    CVE-2005-4289 Public exploit

    Cross-site scripting (XSS) vulnerability in EDCstore.pl in eDatCat 0.3 allows remote attackers to inject arbitrary web …

  • Low —
    CVE-2005-4294

    Alkacon OpenCms XSS via username during login

    Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the username in the login page.

    org.opencms:opencms-core Maven
  • Unscored —
    CVE-2005-4291 Public exploit

    Cross-site scripting (XSS) vulnerability in cart.cgi in ECTOOLS Onlineshop 1.0 and earlier allows remote attackers to i…

  • Unscored —
    CVE-2005-4290 Public exploit

    Cross-site scripting (XSS) vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject ar…

  • Unscored —
    CVE-2005-4286

    Unspecified vulnerability in PhpLogCon before 1.2.2 allows remote attackers to use arbitrary profiles via unknown vecto…

  • Unscored —
    CVE-2005-4296 Public exploit

    AppServ Open Project 2.5.3 allows remote attackers to cause a denial of service via a large HTTP request.

  • Unscored —
    CVE-2005-4292

    Cross-site scripting (XSS) vulnerability in CommerceSQL 1.0 and earlier allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2005-4276 Public exploit

    Westell Versalink 327W allows remote attackers to cause a denial of service (device crash) via an IP packet with the sa…

  • Unscored —
    CVE-2005-4280

    Untrusted search path vulnerability in CMake before 2.2.0-r1 on Gentoo Linux allows local users in the portage group to…

  • Unscored —
    CVE-2005-4288 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in MarmaraWeb E-commerce allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2005-4283

    Cross-site scripting (XSS) vulnerability in The CITY Shop 1.3 and earlier allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2005-4277

    Cross-site scripting (XSS) vulnerability in index.php in toendaCMS before 0.7 Beta allows remote attackers to inject ar…

  • Unscored —
    CVE-2005-4281

    Cross-site scripting (XSS) vulnerability in Zaygo HostingCart 2.0 and earlier allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2005-4287 Public exploit

    PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via th…

  • Unscored —
    CVE-2005-4282

    Cross-site scripting (XSS) vulnerability in Zaygo DomainCart 2.0 and earlier allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2005-4295

    Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.x allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2005-4285 Public exploit

    Cross-site scripting (XSS) vulnerability in pdestore.cgi in Dick Copits PDEstore 1.8 and earlier allows remote attacker…

  • Unscored —
    CVE-2005-4275 Public exploit

    Scientific Atlanta DPX2100 Cable Modem allows remote attackers to cause a denial of service (device crash) via an IP pa…

  • Unscored —
    CVE-2005-4284

    Cross-site scripting (XSS) vulnerability in StaticStore Search Engine 1.189A and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2005-4278

    Untrusted search path vulnerability in Perl before 5.8.7-r1 on Gentoo Linux allows local users in the portage group to …

  • Unscored —
    CVE-2005-4293 Public exploit

    Cross-site scripting (XSS) vulnerability in cp-app.cgi in ClickCartPro (CCP) 5.1 and earlier allows remote attackers to…

  • Unscored —
    CVE-2005-3253

    Wireless Access Points (AP) for (1) Avaya AP-3 through AP-6 2.5 to 2.5.4, and AP-7/AP-8 2.5 and other versions before 3…