Skip to content
OpenAdvisories

Archive

21 December 2005

Vulnerabilities first published on this day (UTC), newest first.

← November 2005 2005 / December /21 January 2006 →
  1. 139
  2. 22
  3. 315
  4. 455
  5. 536
  6. 615
  7. 726
  8. 829
  9. 914
  10. 1011
  11. 1127
  12. 122
  13. 1323
  14. 1449
  15. 1523
  16. 1629
  17. 1744
  18. 183
  19. 191
  20. 2076
  21. 2139
  22. 2246
  23. 2311
  24. 24 
  25. 25 
  26. 26 
  27. 273
  28. 2835
  29. 2923
  30. 305
  31. 31 
All Critical High Medium Low Exploited only Public exploit

39 results · Feed

  • Unscored —
    CVE-2005-4462 Public exploit

    PHP remote file include vulnerability in usermods.php in Tolva PHP website system 0.1.0 allows remote attackers to exec…

  • Unscored —
    CVE-2005-4463

    WordPress before 1.5.2 allows remote attackers to obtain sensitive information via a direct request to (1) wp-includes/…

    wordpress Debian
  • Unscored —
    CVE-2005-4461 Public exploit

    SQL injection vulnerability in index.php in Beehive Forum 0.6.2 and earlier allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2005-4459 EPSS 14%

    Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Ser…

  • Unscored —
    CVE-2005-4460 Public exploit

    Cross-site scripting (XSS) vulnerability in Beehive Forum 0.6.2 and earlier allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2005-4453

    UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges…

  • Unscored —
    CVE-2005-4454 Public exploit

    Validate-before-filter vulnerability in cleanhtml.pl 1.129 in LiveJournal CVS before Dec 7 2005, when the cleancss opti…

  • Unscored —
    CVE-2005-4456 Public exploit

    Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attacke…

  • Unscored —
    CVE-2005-4455

    cleanhtml.pl 1.129 in LiveJournal CVS before Dec 13 2005 allows remote attackers to inject scripting languages via the …

  • Unscored —
    CVE-2005-4457

    MailEnable Enterprise 1.1 before patch ME-10009 allows remote attackers to cause a denial of service (crash) and possib…

  • Unscored —
    CVE-2005-4451

    Unspecified vulnerability in Software Distributor in HP-UX B.11.11 allows remote attackers to gain access via unspecifi…

  • Unscored —
    CVE-2005-4267 Public exploit EPSS 67%

    Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP…

  • Unscored —
    CVE-2005-4450

    Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.7.0 allows remote attackers to perform unauthorized act…

  • Unscored —
    CVE-2005-4452

    Information Call Center stores the CallCenterData.mdb database under the web root with insufficient access control, whi…

  • Unscored —
    CVE-2005-4449 Public exploit

    verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the fi…

  • Unscored —
    CVE-2005-4458

    Group.pm in Metadot Portal Server 6.4.4 and earlier does not properly reset the $IS_OWNER, $IS_ADMIN, and $IS_MANAGER g…

  • Unscored —
    CVE-2005-4448

    FlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and the hashed password r…

  • Unscored —
    CVE-2005-3657

    The ActiveX control in MCINSCTL.DLL for McAfee VirusScan Security Center does not use the IObjectSafetySiteLock API to …

  • Unscored —
    CVE-2005-4440

    The 802.1q VLAN protocol allows remote attackers to bypass network segmentation and spoof VLAN traffic via a message wi…

  • Unscored —
    CVE-2005-4447

    SQL injection vulnerability in articles\articles_funcs.php in phpCOIN 1.2.2 allows remote attackers to modify SQL synta…

  • Unscored —
    CVE-2005-4446

    Cross-site scripting (XSS) vulnerability in index.asp in ASPBite 8.x allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-4444

    Stack-based buffer overflow in the trace message functionality in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allow re…

  • Unscored —
    CVE-2005-4441

    The PVLAN protocol allows remote attackers to bypass network segmentation and spoof PVLAN traffic via a PVLAN message w…

  • Unscored —
    CVE-2005-4443

    Untrusted search path vulnerability in Gauche before 0.8.6-r1 on Gentoo Linux allows local users in the portage group t…

  • Unscored —
    CVE-2005-4442

    Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage grou…

  • Unscored —
    CVE-2005-4445

    Off-by-one error in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allows remote attackers to execute arbitrary code via …

  • Unscored —
    CVE-2002-2208

    Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, a…

  • Unscored —
    CVE-2005-4433

    Cross-site scripting (XSS) vulnerability in search.php in Esselbach Storyteller CMS 1.8 allows remote attackers to inje…

  • Unscored —
    CVE-2005-4437

    MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS 11.3…

  • Unscored —
    CVE-2005-4438

    Heap-based buffer overflow in Dec2Rar.dll 3.2.14.3, as distributed in the Symantec Antivirus Library and used by variou…

  • Unscored —
    CVE-2005-4436

    Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS after 12.3(2), 12.3(3)B, and 12.3(2…

  • Unscored —
    CVE-2005-4439

    Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service (application crash) and …

  • Unscored —
    CVE-2005-4435 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php AbleDesign D-Man 3.x allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2005-4434

    Cross-site scripting (XSS) vulnerability in AbleDesign ReSearch 2.x allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2005-4348

    fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denia…

    fetchmail Debian
  • Unscored —
    CVE-2005-4429 Public exploit

    SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) sort…

  • Unscored —
    CVE-2005-4431

    SQL injection vulnerability in WowBB 1.65 allows remote attackers to execute arbitrary SQL commands via the q parameter…

  • Unscored —
    CVE-2005-4430 Public exploit

    SQL injection vulnerability in LogicBill 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2005-4432 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in PlaySMS 0.8 allows remote attackers to inject arbitrary web sc…