Archive
December 2005
Vulnerabilities first published in this month (UTC), newest first.
681 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbit…
-
Unscored —
SQL injection vulnerability in index.php in AlmondSoft Almond Personals 4.05 allows remote attackers to execute arbitra…
-
Unscored —
index.php in ezDatabase 2.1.2 and earlier allows remote attackers to obtain sensitive information via an invalid cat_id…
-
Unscored —
SSH Tectia Server 5.0.0 (A, F, and T), when allowing host-based authentication only, allows users to log in with the wr…
-
Unscored —CVE-2005-4306 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arb…
-
Unscored —CVE-2005-4302 Public exploit
Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to include arbit…
-
Unscored —
Format string vulnerability in the lire_pop function in pop.c in libremail 1.1.0 and earlier, with compiled with the de…
-
Unscored —
Cross-site scripting (XSS) vulnerability in bbBoard 2.56 and earlier allows remote attackers to inject arbitrary web sc…
-
Unscored —
Cross-site scripting (XSS) vulnerability in phpXplorer 0.9.12 and earlier allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2005-4299 Public exploit
Cross-site scripting (XSS) vulnerability in atl.cgi in Atlant Pro 4.02 and earlier allows remote attackers to inject ar…
-
Unscored —CVE-2005-4298 Public exploit
Cross-site scripting (XSS) vulnerability in atl.cgi in AtlantForum 4.02 and earlier allows remote attackers to inject a…
-
Unscored —CVE-2005-3652 EPSS 16%
Heap-based buffer overflow in Citrix Program Neighborhood client 9.0 and earlier allows remote attackers to execute arb…
-
Unscored —
Untrusted search path vulnerability in Qt-UnixODBC before 3.3.4-r1 on Gentoo Linux allows local users in the portage gr…
-
Unscored —CVE-2005-4289 Public exploit
Cross-site scripting (XSS) vulnerability in EDCstore.pl in eDatCat 0.3 allows remote attackers to inject arbitrary web …
-
Low —
Alkacon OpenCms XSS via username during login
Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the username in the login page.
-
Unscored —CVE-2005-4291 Public exploit
Cross-site scripting (XSS) vulnerability in cart.cgi in ECTOOLS Onlineshop 1.0 and earlier allows remote attackers to i…
-
Unscored —CVE-2005-4290 Public exploit
Cross-site scripting (XSS) vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject ar…
-
Unscored —
Unspecified vulnerability in PhpLogCon before 1.2.2 allows remote attackers to use arbitrary profiles via unknown vecto…
-
Unscored —CVE-2005-4296 Public exploit
AppServ Open Project 2.5.3 allows remote attackers to cause a denial of service via a large HTTP request.
-
Unscored —
Cross-site scripting (XSS) vulnerability in CommerceSQL 1.0 and earlier allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2005-4276 Public exploit
Westell Versalink 327W allows remote attackers to cause a denial of service (device crash) via an IP packet with the sa…
-
Unscored —
Untrusted search path vulnerability in CMake before 2.2.0-r1 on Gentoo Linux allows local users in the portage group to…
-
Unscored —CVE-2005-4288 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in MarmaraWeb E-commerce allows remote attackers to inject arbitr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in The CITY Shop 1.3 and earlier allows remote attackers to inject arbitrary w…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in toendaCMS before 0.7 Beta allows remote attackers to inject ar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Zaygo HostingCart 2.0 and earlier allows remote attackers to inject arbitra…
-
Unscored —CVE-2005-4287 Public exploit
PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via th…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Zaygo DomainCart 2.0 and earlier allows remote attackers to inject arbitrar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.x allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2005-4285 Public exploit
Cross-site scripting (XSS) vulnerability in pdestore.cgi in Dick Copits PDEstore 1.8 and earlier allows remote attacker…
-
Unscored —CVE-2005-4275 Public exploit
Scientific Atlanta DPX2100 Cable Modem allows remote attackers to cause a denial of service (device crash) via an IP pa…
-
Unscored —
Cross-site scripting (XSS) vulnerability in StaticStore Search Engine 1.189A and earlier allows remote attackers to inj…
-
Unscored —
Untrusted search path vulnerability in Perl before 5.8.7-r1 on Gentoo Linux allows local users in the portage group to …
-
Unscored —CVE-2005-4293 Public exploit
Cross-site scripting (XSS) vulnerability in cp-app.cgi in ClickCartPro (CCP) 5.1 and earlier allows remote attackers to…
-
Unscored —
Wireless Access Points (AP) for (1) Avaya AP-3 through AP-6 2.5 to 2.5.4, and AP-7/AP-8 2.5 and other versions before 3…
-
Unscored —
Unspecified vulnerability in Business Objects WebIntelligence 6.5x allows remote attackers to cause a denial of service…
-
Unscored —
Multiple unspecified vulnerabilities in (1) getShell and (2) getCommand in IBM AIX 5.3 allow local users to append to a…
-
Unscored —
Multiple buffer overflows in IBM AIX 5.1, 5.2, and 5.3 allow remote attackers to execute arbitrary code via (1) muxatmd…
-
Unscored —
Buffer overflow in the malloc debug system in IBM AIX 5.3 allows local users to execute arbitrary code.
-
Unscored —
mshtml.dll in Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers to cause a denial of se…