Skip to content
OpenAdvisories

Archive

20 December 2005

Vulnerabilities first published on this day (UTC), newest first.

26 results · Clear filters · Feed

  • Unscored —
    CVE-2005-4427 Public exploit

    Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2005-4417 Public exploit

    The default configuration of Widcomm Bluetooth for Windows (BTW) 4.0.1.1500 and earlier, as installed on Belkin Bluetoo…

  • Unscored —
    CVE-2005-4390 Public exploit

    SQL injection vulnerability in index.php in ContentServ 3.1 and earlier allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2005-4416 Public exploit

    SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2005-4415 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in TML CMS 0.5 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-4423 Public exploit

    Unrestricted file upload vulnerability in PHPFM before 0.2.3 allows remote authenticated users to execute arbitrary cod…

  • Unscored —
    CVE-2005-4402 Public exploit

    Buffer overflow in MailEnable Professional 1.71 and earlier, and Enterprise 1.1 and earlier, allows remote authenticate…

  • Unscored —
    CVE-2005-4400 Public exploit

    Cross-site scripting (XSS) vulnerability in downloads/portal_ent in Liferay Portal Enterprise 3.6.1 and earlier allows …

  • Unscored —
    CVE-2005-4403 Public exploit

    SQL injection vulnerability in index.php in Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2005-4411 Public exploit EPSS 65%

    Buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via a long req…

  • Unscored —
    CVE-2005-4399 Public exploit

    Cross-site scripting (XSS) vulnerability in search/index.php in Libertas Enterprise CMS 3.0 and earlier allows remote a…

  • Unscored —
    CVE-2005-4408 Public exploit

    Multiple SQL injection vulnerabilities in Miraserver 1.0 RC4 and earlier allow remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2005-4419 Public exploit

    Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0…

  • Unscored —
    CVE-2005-4381 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Caravel CMS 3.0 Beta 1 and earlier allow remote attackers to inj…

  • Unscored —
    CVE-2005-4371 Public exploit

    Acidcat 2.1.13 and earlier stores the database under the web root with insufficient access control, which allows remote…

  • Unscored —
    CVE-2005-4380 Public exploit

    Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2005-4370 Public exploit

    SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2005-4378 Public exploit

    SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2005-4385 Public exploit Scanner template

    Cross-site scripting (XSS) vulnerability in search.htm in Cofax 2.0 RC3 and earlier allows remote attackers to inject a…

  • Unscored —
    CVE-2005-4375 Public exploit

    Cross-site scripting (XSS) vulnerability in Amaxus 3 and earlier allows remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2005-4374 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbit…

  • Unscored —
    CVE-2005-4360 Public exploit EPSS 87%

    The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attack…

  • Unscored —
    CVE-2005-4361 Public exploit

    Cross-site scripting (XSS) vulnerability in search.html in Magnolia Content Management Suite 2.1 allows remote attacker…

  • Unscored —
    CVE-2005-4364 Public exploit

    Cross-site scripting (XSS) vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote atta…

  • Unscored —
    CVE-2005-4365 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2005-4363 Public exploit

    Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbit…