Skip to content
OpenAdvisories

Archive

December 2005

Vulnerabilities first published in this month (UTC), newest first.

← November 2005 2005 / December January 2006 →
  1. 139
  2. 22
  3. 315
  4. 455
  5. 536
  6. 615
  7. 726
  8. 829
  9. 914
  10. 1011
  11. 1127
  12. 122
  13. 1323
  14. 1449
  15. 1523
  16. 1629
  17. 1744
  18. 183
  19. 191
  20. 2076
  21. 2139
  22. 2246
  23. 2311
  24. 24 
  25. 25 
  26. 26 
  27. 273
  28. 2835
  29. 2923
  30. 305
  31. 31 
All Critical High Medium Low Exploited only Public exploit

681 results · Feed

  • Unscored —
    CVE-2005-4381 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Caravel CMS 3.0 Beta 1 and earlier allow remote attackers to inj…

  • Unscored —
    CVE-2005-4371 Public exploit

    Acidcat 2.1.13 and earlier stores the database under the web root with insufficient access control, which allows remote…

  • Unscored —
    CVE-2005-4382

    SQL injection vulnerability in CitySoft Community Enterprise 4.x allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2005-4380 Public exploit

    Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2005-4368

    roundcube webmail Alpha, with a default high verbose level ($rcmail_config['debug_level'] = 1), allows remote attackers…

  • Unscored —
    CVE-2005-4370 Public exploit

    SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2005-4378 Public exploit

    SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2005-4372

    Cross-site scripting (XSS) vulnerability in account.html in Adaptive Website Framework (AWF) 2.10 and earlier allows re…

  • Unscored —
    CVE-2005-4377

    Cross-site scripting (XSS) vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject…

  • Unscored —
    CVE-2005-4385 Public exploit Scanner template

    Cross-site scripting (XSS) vulnerability in search.htm in Cofax 2.0 RC3 and earlier allows remote attackers to inject a…

  • Unscored —
    CVE-2005-4384

    CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid (1) fuse…

  • Unscored —
    CVE-2005-4373

    Adaptive Website Framework (AWF) 2.10 and earlier allows remote attackers to obtain the full path of the application vi…

  • Unscored —
    CVE-2005-4386

    Cross-site scripting (XSS) vulnerability in Colony CMS 2.75 and earlier allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2005-4379

    Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to inject ar…

  • Unscored —
    CVE-2005-4376

    Directory traversal vulnerability in Amaxus 3 and earlier allows remote attackers to access arbitrary files via ".." se…

  • Unscored —
    CVE-2005-4369

    Cross-site scripting (XSS) vulnerability in Acuity CMS 2.6.2 allows remote attackers to inject arbitrary web script or …

  • Unscored —
    CVE-2005-4375 Public exploit

    Cross-site scripting (XSS) vulnerability in Amaxus 3 and earlier allows remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2005-4374 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbit…

  • Unscored —
    CVE-2005-4383

    Cross-site scripting (XSS) vulnerability in index.cfm in CitySoft Community Enterprise 4.x allows remote attackers to i…

  • Unscored —
    CVE-2005-4388

    Cross-site scripting (XSS) vulnerability in search.cfm in CONTENS 3.0 and earlier allows remote attackers to inject arb…

  • Unscored —
    CVE-2005-4387

    Cross-site scripting (XSS) vulnerability in home.php in contenite 0.11 and earlier allows remote attackers to inject ar…

  • Unscored —
    CVE-2005-4389

    search.cfm in CONTENS 3.0 and earlier allows remote attackers to obtain the full server path via invalid (1) submit.y, …

  • Unscored —
    CVE-2005-4359

    SQL injection vulnerability in includes/core.inc.php in ODFaq 2.1.0 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2005-4358

    admin/admin_disallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path via a direct request w…

  • Unscored —
    CVE-2005-4360 Public exploit EPSS 87%

    The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attack…

  • Unscored —
    CVE-2005-4361 Public exploit

    Cross-site scripting (XSS) vulnerability in search.html in Magnolia Content Management Suite 2.1 allows remote attacker…

  • Unscored —
    CVE-2005-4364 Public exploit

    Cross-site scripting (XSS) vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote atta…

  • Unscored —
    CVE-2005-4365 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2005-4355

    Multiple cross-site scripting (XSS) vulnerabilities in UStore allow remote attackers to inject arbitrary web script or …

  • Unscored —
    CVE-2005-4357

    Cross-site scripting (XSS) vulnerability in phpBB 2.0.18, when "Allowed HTML tags" is enabled, allows remote attackers …

  • Unscored —
    CVE-2005-4354

    Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to …

  • Unscored —
    CVE-2005-4363 Public exploit

    Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2005-4362

    SQL injection vulnerability in page.php in Komodo CMS 2.1 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2005-4356

    SQL injection vulnerability in UStore allows remote attackers to execute arbitrary SQL commands via the (1) username an…

  • Unscored —
    CVE-2005-4367

    Cross-site scripting (XSS) vulnerability in register_domain.php in DRZES HMS 3.2 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2005-4366

    Multiple SQL injection vulnerabilities in DRZES HMS 3.2 allow remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2005-4353

    SQL injection vulnerability in index.php in toendaCMS 0.6.2.1, when configured to use a SQL database, allows remote att…

  • Unscored —
    CVE-2005-4350

    Unspecified vulnerability in WBEM Services A.01.x before A.01.05.12 and A.02.x before A.02.00.08 on HP-UX B.11.00 throu…

  • Medium 6.3
    CVE-2005-4349

    SQL injection vulnerability in server_privileges.php in phpMyAdmin 2.7.0 allows remote authenticated users to execute a…

    phpmyadmin Debian
  • Unscored —
    CVE-2004-2652 Public exploit EPSS 11%

    The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verb…