Skip to content
OpenAdvisories

Archive

20 December 2005

Vulnerabilities first published on this day (UTC), newest first.

← November 2005 2005 / December /20 January 2006 →
  1. 139
  2. 22
  3. 315
  4. 455
  5. 536
  6. 615
  7. 726
  8. 829
  9. 914
  10. 1011
  11. 1127
  12. 122
  13. 1323
  14. 1449
  15. 1523
  16. 1629
  17. 1744
  18. 183
  19. 191
  20. 2076
  21. 2139
  22. 2246
  23. 2311
  24. 24 
  25. 25 
  26. 26 
  27. 273
  28. 2835
  29. 2923
  30. 305
  31. 31 
All Critical High Medium Low Exploited only Public exploit

76 results · Feed

  • Unscored —
    CVE-2005-4428

    Cross-site scripting (XSS) vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2005-4427 Public exploit

    Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2005-4424

    Directory traversal vulnerability in PHPKIT 1.6.1 R2 and earlier might allow remote authenticated users to execute arbi…

  • Unscored —
    CVE-2005-4422

    Unrestricted file upload vulnerability in toendaCMS before 0.6.2 Stable allows remote authenticated administrators to e…

  • Unscored —
    CVE-2005-4417 Public exploit

    The default configuration of Widcomm Bluetooth for Windows (BTW) 4.0.1.1500 and earlier, as installed on Belkin Bluetoo…

  • Unscored —
    CVE-2005-4390 Public exploit

    SQL injection vulnerability in index.php in ContentServ 3.1 and earlier allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2005-4416 Public exploit

    SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2005-4415 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in TML CMS 0.5 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-4398

    NOTE: the vendor has disputed this issue. Cross-site scripting (XSS) vulnerability in lemoon 2.0 and earlier allows rem…

  • Unscored —
    CVE-2005-4423 Public exploit

    Unrestricted file upload vulnerability in PHPFM before 0.2.3 allows remote authenticated users to execute arbitrary cod…

  • Unscored —
    CVE-2005-4396

    Cross-site scripting (XSS) vulnerability in admin/Default.asp in iCMS allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2005-4426

    Interpretation conflict in YaBB before 2.1 allows remote authenticated users to inject arbitrary web script or HTML via…

  • Unscored —
    CVE-2005-4407

    Cross-site scripting (XSS) vulnerability in index.cfm in Mercury CMS 4.0 and earlier allows remote attackers to inject …

  • Unscored —
    CVE-2005-4402 Public exploit

    Buffer overflow in MailEnable Professional 1.71 and earlier, and Enterprise 1.1 and earlier, allows remote authenticate…

  • Unscored —
    CVE-2005-4400 Public exploit

    Cross-site scripting (XSS) vulnerability in downloads/portal_ent in Liferay Portal Enterprise 3.6.1 and earlier allows …

  • Unscored —
    CVE-2005-4403 Public exploit

    SQL injection vulnerability in index.php in Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2005-4411 Public exploit EPSS 65%

    Buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via a long req…

  • Unscored —
    CVE-2005-4410

    Cross-site scripting (XSS) vulnerability in NQcontent 3 allows remote attackers to inject arbitrary web script or HTML …

  • Unscored —
    CVE-2005-4405

    redqueen.cgi in Red Queen 1.02 and earlier allows remote attackers to obtain the full server path via invalid (1) yello…

  • Unscored —
    CVE-2005-4401

    Cross-site scripting (XSS) vulnerability in Lutece 1.2.3 and earlier allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-4413

    Multiple cross-site scripting (XSS) vulnerabilities in sample scripts in IBM WebSphere Application Server 6 allow remot…

  • Unscored —
    CVE-2005-4399 Public exploit

    Cross-site scripting (XSS) vulnerability in search/index.php in Libertas Enterprise CMS 3.0 and earlier allows remote a…

  • Unscored —
    CVE-2005-4409

    Cross-site scripting (XSS) vulnerability in MMBase 1.7.4 and earlier allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-4414

    Unspecified vulnerability in Teamwork 3 before alpha 1.7 has unknown impact and attack vectors, related to "a menu secu…

  • Unscored —
    CVE-2005-4408 Public exploit

    Multiple SQL injection vulnerabilities in Miraserver 1.0 RC4 and earlier allow remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2005-4394

    Cross-site scripting (XSS) vulnerability in EPiX 3.1.2 and earlier allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2005-4425

    Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2005-4392

    SQL injection vulnerability in printer_friendly.cfm in e-publish CMS 2.0 and earlier allows remote attackers to execute…

  • Unscored —
    CVE-2005-4395

    Cross-site scripting (XSS) vulnerability in FarCry 3.0 and earlier allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2005-4412

    Citrix Program Neighborhood client before 9.150 caches the user password in plaintext in the GUI while asterisks are us…

  • Unscored —
    CVE-2005-4397

    SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute arbitrary SQL commands via the Eve…

  • Unscored —
    CVE-2005-4404

    SQL injection vulnerability in default.asp in Media2 CMS Shop 18.x allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2005-4420

    Cross-site scripting (XSS) vulnerability in Honeycomb Archive Enterprise 3.0 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2005-4393

    Cross-site scripting (XSS) vulnerability in show.cfm in e-publish CMS 2.0 and earlier allows remote attackers to inject…

  • Unscored —
    CVE-2005-4391

    Cross-site scripting (XSS) vulnerability in damoon allows remote attackers to inject arbitrary web script or HTML via u…

  • Unscored —
    CVE-2005-4419 Public exploit

    Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0…

  • Unscored —
    CVE-2005-4421

    Dev-Editor 3.0 allows remote attackers to access any directory outside the web root whose name is a substring of the we…

  • Unscored —
    CVE-2005-4406

    SQL injection vulnerability in index.cfm in Mercury CMS 4.0 and earlier allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2005-4381 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Caravel CMS 3.0 Beta 1 and earlier allow remote attackers to inj…

  • Unscored —
    CVE-2005-4371 Public exploit

    Acidcat 2.1.13 and earlier stores the database under the web root with insufficient access control, which allows remote…