Archive
December 2005
Vulnerabilities first published in this month (UTC), newest first.
260 results · Clear filters · Feed
-
Unscored —CVE-2005-4319 Public exploit
Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arb…
-
Unscored —CVE-2005-4316 Public exploit
HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" t…
-
Unscored —CVE-2005-4331 Public exploit
SQL injection vulnerability in merchant.ihtml in iHTML Merchant Version 2 Pro allows remote attackers to execute arbitr…
-
Unscored —CVE-2005-4317 Public exploit
Limbo CMS 1.0.4.2 and earlier, with register_globals off, does not protect the $_SERVER variable from external modifica…
-
Unscored —CVE-2005-4334 Public exploit
SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the H_ID par…
-
Unscored —CVE-2005-4329 Public exploit
SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attack…
-
Unscored —CVE-2005-4333 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attacke…
-
Unscored —CVE-2005-4318 Public exploit
SQL injection vulnerability in index.php in Limbo CMS 1.0.4.2 and earlier, with register_globals off, allows remote att…
-
Unscored —CVE-2005-4328 Public exploit
Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to …
-
Unscored —CVE-2005-4330 Public exploit
SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2005-4327 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject …
-
Unscored —CVE-2005-4303 Public exploit
SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2005-4314 Public exploit
Cross-site scripting (XSS) vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers …
-
Unscored —CVE-2005-4307 Public exploit
Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2005-4311 Public exploit
Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attacker…
-
Unscored —CVE-2005-4306 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arb…
-
Unscored —CVE-2005-4302 Public exploit
Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to include arbit…
-
Unscored —CVE-2005-4299 Public exploit
Cross-site scripting (XSS) vulnerability in atl.cgi in Atlant Pro 4.02 and earlier allows remote attackers to inject ar…
-
Unscored —CVE-2005-4298 Public exploit
Cross-site scripting (XSS) vulnerability in atl.cgi in AtlantForum 4.02 and earlier allows remote attackers to inject a…
-
Unscored —CVE-2005-4289 Public exploit
Cross-site scripting (XSS) vulnerability in EDCstore.pl in eDatCat 0.3 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2005-4291 Public exploit
Cross-site scripting (XSS) vulnerability in cart.cgi in ECTOOLS Onlineshop 1.0 and earlier allows remote attackers to i…
-
Unscored —CVE-2005-4290 Public exploit
Cross-site scripting (XSS) vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject ar…
-
Unscored —CVE-2005-4296 Public exploit
AppServ Open Project 2.5.3 allows remote attackers to cause a denial of service via a large HTTP request.
-
Unscored —CVE-2005-4276 Public exploit
Westell Versalink 327W allows remote attackers to cause a denial of service (device crash) via an IP packet with the sa…
-
Unscored —CVE-2005-4288 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in MarmaraWeb E-commerce allows remote attackers to inject arbitr…
-
Unscored —CVE-2005-4287 Public exploit
PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via th…
-
Unscored —CVE-2005-4285 Public exploit
Cross-site scripting (XSS) vulnerability in pdestore.cgi in Dick Copits PDEstore 1.8 and earlier allows remote attacker…
-
Unscored —CVE-2005-4275 Public exploit
Scientific Atlanta DPX2100 Cable Modem allows remote attackers to cause a denial of service (device crash) via an IP pa…
-
Unscored —CVE-2005-4293 Public exploit
Cross-site scripting (XSS) vulnerability in cp-app.cgi in ClickCartPro (CCP) 5.1 and earlier allows remote attackers to…
-
Unscored —CVE-2005-4270 Public exploit
Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an …
-
Unscored —CVE-2005-4259 Public exploit
Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the (1…
-
Unscored —CVE-2005-4256 Public exploit
Cross-site scripting (XSS) vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitra…
-
Unscored —CVE-2005-4243 Public exploit
Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2005-4255 Public exploit
Cross-site scripting (XSS) vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2005-4260 Public exploit
Interpretation conflict in includes/mainfile.php in PHP-Nuke 7.9 and later allows remote attackers to perform cross-sit…
-
Unscored —CVE-2005-4254 Public exploit
SQL injection vulnerability in view_Results.php in DreamLevels DreamPoll 3.0 final allows remote attackers to execute a…
-
Unscored —CVE-2005-4262 Public exploit
Cross-site scripting (XSS) vulnerability in the News module in Envolution allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2005-4263 Public exploit
SQL injection vulnerability in the News module in Envolution allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2005-3358 Public exploit
Linux kernel before 2.6.15 allows local users to cause a denial of service (panic) via a set_mempolicy call with a 0 bi…
-
Unscored —CVE-2005-4212 Public exploit
Directory traversal vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary lo…