Skip to content
OpenAdvisories

Archive

22 December 2005

Vulnerabilities first published on this day (UTC), newest first.

← November 2005 2005 / December /22 January 2006 →
  1. 139
  2. 22
  3. 315
  4. 455
  5. 536
  6. 615
  7. 726
  8. 829
  9. 914
  10. 1011
  11. 1127
  12. 122
  13. 1323
  14. 1449
  15. 1523
  16. 1629
  17. 1744
  18. 183
  19. 191
  20. 2076
  21. 2139
  22. 2246
  23. 2311
  24. 24 
  25. 25 
  26. 26 
  27. 273
  28. 2835
  29. 2923
  30. 305
  31. 31 
All Critical High Medium Low Exploited only Public exploit

46 results · Feed

  • Unscored —
    CVE-2005-4504 Public exploit EPSS 12%

    The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safa…

  • Unscored —
    CVE-2005-3537

    A "missing request validation" error in phpBB 2 before 2.0.18 allows remote attackers to edit private messages of other…

  • Unscored —
    CVE-2005-3536

    SQL injection vulnerability in phpBB 2 before 2.0.18 allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2005-3660

    Linux kernel 2.4 and 2.6 allows attackers to cause a denial of service (memory exhaustion and panic) by creating a larg…

    linux Debian
  • Unscored —
    CVE-2005-4500 Public exploit

    SQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) show …

  • Unscored —
    CVE-2005-4501

    MediaWiki before 1.5.4 uses a hard-coded "internal placeholder string", which allows remote attackers to bypass protect…

    mediawiki Debian
  • Unscored —
    CVE-2005-4503 Public exploit

    httprint v202, and possibly other versions before v301, allows remote attackers to cause a denial of service (crash) vi…

  • Unscored —
    CVE-2005-4502 Public exploit

    Cross-site scripting (XSS) vulnerability in httprint v202, and possibly other versions before v301, allows remote attac…

  • Unscored —
    CVE-2005-3534

    Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote atta…

    nbd Debian
  • Unscored —
    CVE-2005-4488 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.tpl in Redakto WCMS 3.2 and earlier allow remote attackers…

  • Unscored —
    CVE-2005-4480

    Cross-site scripting (XSS) vulnerability in Plexcor CMS 4.0 and earlier allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2005-4477 Public exploit

    Cross-site scripting (XSS) vulnerability in papaya CMS 4.0.4 and earlier allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2005-4475

    Cross-site scripting (XSS) vulnerability in OpenCms 6.0.3 and earlier allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2005-4496 Public exploit

    Cross-site scripting (XSS) vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arb…

  • Unscored —
    CVE-2005-4491 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Sitekit CMS 6.6 and earlier allow remote attackers to inject arb…

  • Unscored —
    CVE-2005-4498

    Cross-site scripting (XSS) vulnerability in Text-e 1.6.4 and earlier allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-4479 Public exploit

    SQL injection vulnerability in article.php in phpSlash 0.8.1 and earlier allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2005-4499

    The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure …

  • Unscored —
    CVE-2005-4495

    SQL injection vulnerability in index.cfm in SpireMedia mx7 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2005-4485 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbi…

  • Unscored —
    CVE-2005-4484 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in IntranetApp 3.3 and earlier allow remote attackers to inject arb…

  • Unscored —
    CVE-2005-4486 Public exploit

    SQL injection vulnerability in Quantum Art QP7.Enterprise (formerly Q-Publishing) allows remote attackers to execute ar…

  • Unscored —
    CVE-2005-4497 Public exploit

    Cross-site scripting (XSS) vulnerability in Tangora Portal CMS 4.0 and earlier allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2005-4478 Public exploit

    Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2005-4493

    Cross-site scripting (XSS) vulnerability in SpearTek 6.0 and earlier allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-4481

    Cross-site scripting (XSS) vulnerability in Polopoly 9 and earlier allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2005-4482 Public exploit

    Cross-site scripting (XSS) vulnerability in login.asp in PortalApp 3.3 and earlier allows remote attackers to inject ar…

  • Unscored —
    CVE-2005-4490 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2005-4492

    Cross-site scripting (XSS) vulnerability in Starphire SiteSage 5.0.18 and earlier allows remote attackers to inject arb…

  • Unscored —
    CVE-2005-4483 Public exploit

    Cross-site scripting (XSS) vulnerability in login.asp in SiteEnable 3.3 and earlier allows remote attackers to inject a…

  • Unscored —
    CVE-2005-4476 Public exploit

    Cross-site scripting (XSS) vulnerability in store/search/results.html in OpenEdit 4.0 and earlier allows remote attacke…

  • Unscored —
    CVE-2005-4489 Public exploit

    Cross-site scripting (XSS) vulnerability in Scoop 1.1 RC1 and earlier allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2005-4487

    Cross-site scripting (XSS) vulnerability in RAMSite R|1 CMS 1.0 and earlier allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2005-4494

    Cross-site scripting (XSS) vulnerability in SPIP 1.8.2 and earlier allows remote attackers to inject arbitrary web scri…

    spip Debian
  • Unscored —
    CVE-2005-3631

    udev does not properly set permissions on certain files in /dev/input, which allows local users to obtain sensitive dat…

  • Unscored —
    CVE-2005-4474

    Buffer overflow in the "Add to archive" command in WinRAR 3.51 allows user-assisted attackers to cause a denial of serv…

  • Unscored —
    CVE-2005-4465

    The Internet Key Exchange version 1 (IKEv1) implementation in NEC UNIVERGE IX1000, IX2000, and IX3000 allows remote att…

  • Unscored —
    CVE-2005-4467 Public exploit

    Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read…

  • Unscored —
    CVE-2005-4464

    Ingate Firewall before 4.3.4 and SIParator before 4.3.4 allows remote attackers to cause a denial of service (kernel de…

  • Unscored —
    CVE-2005-4469

    Multiple direct static code injection vulnerabilities in PHPGedView 3.3.7 and earlier allow remote attackers to execute…