Archive
December 2005
Vulnerabilities first published in this month (UTC), newest first.
681 results · Feed
-
Unscored —CVE-2005-4228 Public exploit
Multiple SQL injection vulnerabilities in PhpWebGallery 1.5.1 and earlier allow remote attackers to execute arbitrary S…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.php in CKGOLD allows remote attackers to inject arbitrary web script…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Link Up Gold 2.5 and earlier allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2005-4221 Public exploit
SQL injection vulnerability in link.php in Arab Portal System 2 Beta 2 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2005-4216 Public exploit
The Administration Service (FMSAdmin.exe) in Macromedia Flash Media Server 2.0 r1145 allows remote attackers to cause a…
-
Unscored —CVE-2005-4238 Public exploit
Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attacker…
-
Unscored —CVE-2005-4244 Public exploit
SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2005-4234 Public exploit
SQL injection vulnerability in gallery.php in EncapsGallery 1.0.0 and earlier allows remote attackers to execute arbitr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2005-4245 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to in…
-
Unscored —CVE-2005-4239 Public exploit
Cross-site scripting (XSS) vulnerability in Search/DisplayResults.php in PHP JackKnife 2.21 and earlier allows remote a…
-
Unscored —
phpCOIN 1.2.2 allows remote attackers to obtain the installation path via a direct request to config.php, which leaks t…
-
Unscored —
Perl in Apple Mac OS X Server 10.3.9 does not properly drop privileges when using the "$<" variable to set uid, which a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MySQL Auction 3.0 and earlier allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2005-4226 Public exploit
Multiple "potential" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute …
-
Unscored —
Motorola SB5100E Cable Modem allows remote attackers to cause a denial of service (device crash) via an IP packet with …
-
Unscored —CVE-2005-4232 Public exploit
SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2005-4229 Public exploit
Cross-site scripting (XSS) vulnerability in auction.pl in EveryAuction 1.53 and earlier allows remote attackers to inje…
-
Unscored —
SQL injection vulnerability in poll.php in Link Up Gold 2.5 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —
Netgear RP114, and possibly other versions and devices, allows remote attackers to cause a denial of service via a SYN …
-
Unscored —CVE-2005-4241 Public exploit
Cross-site scripting (XSS) vulnerability in the category page in VCD-db 0.98 and earlier allows remote attackers to inj…
-
Unscored —CVE-2005-4240 Public exploit
SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —
Buffer overflow in uidadmin in SCO Unixware 7.1.3 and 7.1.4 allows local users to execute arbitrary code via a -S (sche…
-
Unscored —CVE-2005-2829 EPSS 19%
Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitra…
-
Unscored —CVE-2005-2831 EPSS 30%
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) a…
-
Unscored —CVE-2005-2830 EPSS 35%
Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, send…
-
Unscored —CVE-2005-2827 Public exploit
The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify ke…
-
Unscored —CVE-2005-3352 EPSS 74%
Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.…
-
Unscored —CVE-2005-4196 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attack…
-
Unscored —CVE-2005-4208 Public exploit
Directory traversal vulnerability in Flatnuke 2.5.6 allows remote attackers to access arbitrary files via a .. (dot dot…
-
Unscored —CVE-2005-4194 Public exploit
Buffer overflow in MediaServerList.exe in Sights 'n Sounds Streaming Media Server 2.0.3.a allows remote attackers to ca…
-
Unscored —
Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0 have unknown impact and attack vectors, a dif…
-
Unscored —
Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) before 1.0 allow remote attackers to execute arbitrary…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in templates/tasklists/tasklists.inc in Horde Nag Task List Manager…
-
Unscored —
LogiSphere 0.9.9j does not restrict the number of messages that can be sent, which allows remote attackers to cause a d…
-
Unscored —
Directory traversal vulnerability in My Album Online 1.0 allows remote attackers to access arbitrary files via ".../" (…
-
Unscored —CVE-2005-4195 Public exploit
Multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to execut…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework before 3.0.8 allow remote authentica…
-
Unscored —
Opera before 8.51, when running on Windows with Input Method Editor (IME) installed, allows remote attackers to cause a…
-
Unscored —CVE-2005-4202 Public exploit
Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via …