Archive
December 2005
Vulnerabilities first published in this month (UTC), newest first.
260 results · Clear filters · Feed
-
Unscored —CVE-2005-4588 Public exploit
Cross-site scripting (XSS) vulnerability in Koobi 5 allows remote attackers to inject arbitrary web script or HTML via …
-
Unscored —CVE-2005-4563 Public exploit
SQL injection vulnerability in main.php in Enterprise Heart Enterprise Connector 1.0.2 allows remote attackers to execu…
-
Unscored —CVE-2005-4576 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the UpdateEngine program in Fatwire UpdateEngine 6.2 and earlier…
-
Unscored —CVE-2005-4574 Public exploit
Cross-site scripting (XSS) vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and earlier allows re…
-
Unscored —
PHP remote file include vulnerability in plog-admin-functions.php in Plogger Beta 2 allows remote attackers to execute …
-
Unscored —CVE-2005-4584 Public exploit
BZFlag server 2.0.4 and earlier allows remote attackers to cause a denial of service (application crash) via a callsign…
-
Unscored —
The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbi…
-
Unscored —CVE-2005-4553 Public exploit
Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long APPE command. NO…
-
Unscored —CVE-2005-4557 Public exploit
dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 …
-
Unscored —CVE-2005-4558 Public exploit
IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not pr…
-
Unscored —CVE-2005-4550 Public exploit
The PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to obtain th…
-
Unscored —CVE-2005-4554 Public exploit
Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2005-4559 Public exploit
mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0…
-
Unscored —CVE-2005-4555 Public exploit
Cross-site scripting (XSS) vulnerability in add.php in DEV web management system 1.5 and earlier allows remote attacker…
-
Unscored —
PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail …
-
Unscored —CVE-2005-4517 Public exploit
SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2005-4527 Public exploit
Multiple SQL injection vulnerabilities in Direct News 4.9 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2005-4516 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to i…
-
Unscored —CVE-2005-4510 Public exploit
Directory traversal vulnerability in server.np in NetPublish Server 7 allows remote attackers to read arbitrary files v…
-
Unscored —CVE-2005-4505 Public exploit
Unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5) might a…
-
Unscored —
The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safa…
-
Unscored —CVE-2005-4500 Public exploit
SQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) show …
-
Unscored —CVE-2005-4503 Public exploit
httprint v202, and possibly other versions before v301, allows remote attackers to cause a denial of service (crash) vi…
-
Unscored —CVE-2005-4502 Public exploit
Cross-site scripting (XSS) vulnerability in httprint v202, and possibly other versions before v301, allows remote attac…
-
Unscored —CVE-2005-4488 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.tpl in Redakto WCMS 3.2 and earlier allow remote attackers…
-
Unscored —CVE-2005-4477 Public exploit
Cross-site scripting (XSS) vulnerability in papaya CMS 4.0.4 and earlier allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2005-4496 Public exploit
Cross-site scripting (XSS) vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arb…
-
Unscored —CVE-2005-4491 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Sitekit CMS 6.6 and earlier allow remote attackers to inject arb…
-
Unscored —CVE-2005-4479 Public exploit
SQL injection vulnerability in article.php in phpSlash 0.8.1 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2005-4485 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbi…
-
Unscored —CVE-2005-4484 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in IntranetApp 3.3 and earlier allow remote attackers to inject arb…
-
Unscored —CVE-2005-4486 Public exploit
SQL injection vulnerability in Quantum Art QP7.Enterprise (formerly Q-Publishing) allows remote attackers to execute ar…
-
Unscored —CVE-2005-4497 Public exploit
Cross-site scripting (XSS) vulnerability in Tangora Portal CMS 4.0 and earlier allows remote attackers to inject arbitr…
-
Unscored —CVE-2005-4478 Public exploit
Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2005-4482 Public exploit
Cross-site scripting (XSS) vulnerability in login.asp in PortalApp 3.3 and earlier allows remote attackers to inject ar…
-
Unscored —CVE-2005-4490 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrar…
-
Unscored —CVE-2005-4483 Public exploit
Cross-site scripting (XSS) vulnerability in login.asp in SiteEnable 3.3 and earlier allows remote attackers to inject a…
-
Unscored —CVE-2005-4476 Public exploit
Cross-site scripting (XSS) vulnerability in store/search/results.html in OpenEdit 4.0 and earlier allows remote attacke…
-
Unscored —CVE-2005-4489 Public exploit
Cross-site scripting (XSS) vulnerability in Scoop 1.1 RC1 and earlier allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2005-4467 Public exploit
Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read…