Archive
17 December 2005
Vulnerabilities first published on this day (UTC), newest first.
44 results · Feed
-
Unscored —
Adobe (formerly Macromedia) ColdFusion MX 7.0 does not honor when the CFOBJECT /CreateObject(Java) setting is disabled,…
-
Unscored —
Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary …
-
Unscored —
ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exce…
-
Unscored —
Adobe (formerly Macromedia) ColdFusion MX 7.0 exposes the password hash of the Administrator in an API call, which allo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424…
-
Unscored —
announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other ver…
-
Unscored —
Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allo…
-
Unscored —
The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other vers…
-
Unscored —
The iBCS2 system call translator for statfs in NetBSD 1.5 through 1.5.3 and FreeBSD 4 up to 4.8-RELEASE-p2 and 5 up to …
-
Unscored —
ProjectForum 4.7.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted pageid parame…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ProjectForum 4.7.0 and earlier allows remote attackers to inject arbitrary …
-
Unscored —CVE-2005-4319 Public exploit
Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arb…
-
Unscored —CVE-2005-4316 Public exploit
HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" t…
-
Unscored —CVE-2005-4331 Public exploit
SQL injection vulnerability in merchant.ihtml in iHTML Merchant Version 2 Pro allows remote attackers to execute arbitr…
-
Unscored —CVE-2005-4317 Public exploit
Limbo CMS 1.0.4.2 and earlier, with register_globals off, does not protect the $_SERVER variable from external modifica…
-
Unscored —
Hitachi Groupmax Mail SMTP 06-50 through 06-52-/A and 07-00 through 07-20 allows remote attackers to cause a denial of …
-
Unscored —
Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and c…
-
Unscored —
Unspecified vulnerability in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Por…
-
Unscored —CVE-2005-4334 Public exploit
SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the H_ID par…
-
Unscored —CVE-2005-4329 Public exploit
SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attack…
-
Unscored —CVE-2005-4333 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attacke…
-
Unscored —
Multiple unspecified vulnerabilities in Driverse before 0.56b have unknown impact and attack vectors, related to (1) a …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, …
-
Unscored —CVE-2005-4318 Public exploit
SQL injection vulnerability in index.php in Limbo CMS 1.0.4.2 and earlier, with register_globals off, allows remote att…
-
Unscored —CVE-2005-4328 Public exploit
Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to …
-
Unscored —
Limbo CMS 1.0.4.2 and earlier allows remote attackers to obtain the installation path of the application via a direct r…
-
Unscored —
The Internet Key Exchange version 1 (IKEv1) implementation in Apani Networks EpiForce 1.9 and earlier running IPSec, al…
-
Unscored —
The web interface for American Power Conversion (APC) PowerChute Network Shutdown performs all communication in clearte…
-
Unscored —CVE-2005-4330 Public exploit
SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2005-4327 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject …
-
Unscored —
SQL injection vulnerability in the search function in Plexum PLEXCART X3 allows remote attackers to execute arbitrary S…
-
Unscored —
SQL injection vulnerability in ezUpload Pro 2.2 and earlier allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2005-4303 Public exploit
SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2005-4314 Public exploit
Cross-site scripting (XSS) vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers …
-
Unscored —CVE-2005-4307 Public exploit
Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web …
-
Unscored —
index.php in ezUpload Pro 2.2 and earlier allows remote attackers to include files via the mode parameter.
-
Unscored —
SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds 5.02 allows remote attackers to execute arbit…
-
Unscored —CVE-2005-4311 Public exploit
Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attacker…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbit…
-
Unscored —
SQL injection vulnerability in index.php in AlmondSoft Almond Personals 4.05 allows remote attackers to execute arbitra…