Skip to content
OpenAdvisories

Archive

December 2005

Vulnerabilities first published in this month (UTC), newest first.

260 results · Clear filters · Feed

  • Unscored —
    CVE-2005-4319 Public exploit

    Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arb…

  • Unscored —
    CVE-2005-4316 Public exploit

    HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" t…

  • Unscored —
    CVE-2005-4331 Public exploit

    SQL injection vulnerability in merchant.ihtml in iHTML Merchant Version 2 Pro allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2005-4317 Public exploit

    Limbo CMS 1.0.4.2 and earlier, with register_globals off, does not protect the $_SERVER variable from external modifica…

  • Unscored —
    CVE-2005-4334 Public exploit

    SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the H_ID par…

  • Unscored —
    CVE-2005-4329 Public exploit

    SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attack…

  • Unscored —
    CVE-2005-4333 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attacke…

  • Unscored —
    CVE-2005-4318 Public exploit

    SQL injection vulnerability in index.php in Limbo CMS 1.0.4.2 and earlier, with register_globals off, allows remote att…

  • Unscored —
    CVE-2005-4328 Public exploit

    Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to …

  • Unscored —
    CVE-2005-4330 Public exploit

    SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2005-4327 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject …

  • Unscored —
    CVE-2005-4303 Public exploit

    SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2005-4314 Public exploit

    Cross-site scripting (XSS) vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers …

  • Unscored —
    CVE-2005-4307 Public exploit

    Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2005-4311 Public exploit

    Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attacker…

  • Unscored —
    CVE-2005-4306 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arb…

  • Unscored —
    CVE-2005-4302 Public exploit

    Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to include arbit…

  • Unscored —
    CVE-2005-4299 Public exploit

    Cross-site scripting (XSS) vulnerability in atl.cgi in Atlant Pro 4.02 and earlier allows remote attackers to inject ar…

  • Unscored —
    CVE-2005-4298 Public exploit

    Cross-site scripting (XSS) vulnerability in atl.cgi in AtlantForum 4.02 and earlier allows remote attackers to inject a…

  • Unscored —
    CVE-2005-4289 Public exploit

    Cross-site scripting (XSS) vulnerability in EDCstore.pl in eDatCat 0.3 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2005-4291 Public exploit

    Cross-site scripting (XSS) vulnerability in cart.cgi in ECTOOLS Onlineshop 1.0 and earlier allows remote attackers to i…

  • Unscored —
    CVE-2005-4290 Public exploit

    Cross-site scripting (XSS) vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject ar…

  • Unscored —
    CVE-2005-4296 Public exploit

    AppServ Open Project 2.5.3 allows remote attackers to cause a denial of service via a large HTTP request.

  • Unscored —
    CVE-2005-4276 Public exploit

    Westell Versalink 327W allows remote attackers to cause a denial of service (device crash) via an IP packet with the sa…

  • Unscored —
    CVE-2005-4288 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in MarmaraWeb E-commerce allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2005-4287 Public exploit

    PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via th…

  • Unscored —
    CVE-2005-4285 Public exploit

    Cross-site scripting (XSS) vulnerability in pdestore.cgi in Dick Copits PDEstore 1.8 and earlier allows remote attacker…

  • Unscored —
    CVE-2005-4275 Public exploit

    Scientific Atlanta DPX2100 Cable Modem allows remote attackers to cause a denial of service (device crash) via an IP pa…

  • Unscored —
    CVE-2005-4293 Public exploit

    Cross-site scripting (XSS) vulnerability in cp-app.cgi in ClickCartPro (CCP) 5.1 and earlier allows remote attackers to…

  • Unscored —
    CVE-2005-4270 Public exploit

    Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an …

  • Unscored —
    CVE-2005-4259 Public exploit

    Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the (1…

  • Unscored —
    CVE-2005-4256 Public exploit

    Cross-site scripting (XSS) vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2005-4243 Public exploit

    Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2005-4255 Public exploit

    Cross-site scripting (XSS) vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2005-4260 Public exploit

    Interpretation conflict in includes/mainfile.php in PHP-Nuke 7.9 and later allows remote attackers to perform cross-sit…

  • Unscored —
    CVE-2005-4254 Public exploit

    SQL injection vulnerability in view_Results.php in DreamLevels DreamPoll 3.0 final allows remote attackers to execute a…

  • Unscored —
    CVE-2005-4262 Public exploit

    Cross-site scripting (XSS) vulnerability in the News module in Envolution allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2005-4263 Public exploit

    SQL injection vulnerability in the News module in Envolution allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2005-3358 Public exploit

    Linux kernel before 2.6.15 allows local users to cause a denial of service (panic) via a set_mempolicy call with a 0 bi…

  • Unscored —
    CVE-2005-4212 Public exploit

    Directory traversal vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary lo…