CVEs published in November 2005
502 vulnerabilities, 46 critical, 0 exploited.
- mirabilis icqBuffer overflow in Mirabilis ICQ 2003a allows user-assisted attackers to execute arbitrary code...5.1 Medium
- thomas rybak minigal 2MiniGal 2 (MG2) 0.5.1 allows remote attackers to list password protected images via a request to...5.0 Medium
- rockliffe mailsite expressAbsolute path traversal vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote...5.0 Medium
- rockliffe mailsite expressIncomplete blacklist vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote...7.5 High
- rockliffe mailsite expressRockliffe MailSite Express before 6.1.22, with the option to save login information enabled,...4.3 Medium
- rockliffe mailsite expressCross-site scripting (XSS) vulnerability in Rockliffe MailSite Express before 6.1.22 allows...4.3 Medium
- phpmyadminMultiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl4 allow remote...4.3 Medium
- cisco ciscoworks management center for ips sensorsThe Cisco Management Center (MC) for IPS Sensors (IPS MC) 2.1 can omit port field values while...2.1 Low
- cisco content services switch 11500Cisco CSS 11500 Content Services Switch (CSS) with SSL termination services allows remote...5.0 Medium
- openvpn, openvpn access server +1 moreOpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of...5.0 Medium
- subdreamerMultiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute...7.5 High
- 10-4 aps asp fast forumCross-site scripting (XSS) vulnerability in error.asp in ASP Fast Forum allows remote attackers...4.3 Medium
- hyper estraier estraierestcmd in Hyper Estraier 1.0.1 on Windows systems allows remote attackers to read unauthorized...5.0 Medium
- phpbb group phpbbusercp_register.php in phpBB 2.0.17 allows remote attackers to modify regular expressions and...7.5 High
- phpbb group phpbbSQL injection vulnerability in usercp_register.php in phpBB 2.0.17 allows remote attackers to...7.5 High
- phpbb group phpbbMultiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.17 and earlier allow remote...4.3 Medium
- phpbb group phpbbphpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote...7.5 High
- phpbb group phpbbphpBB 2.0.17 and earlier, when register_globals is enabled and the session_start function has not...7.5 High
- phpbb group phpbbphpBB 2.0.17 and earlier allows remote attackers to bypass protection mechanisms that deregister...7.5 High
- eyeos project eyeoseyeOS 0.8.4 stores usrinfo.xml under the web document root with insufficient access control,...7.5 High
- eyeos project eyeosCross-site scripting (XSS) vulnerability in desktop.php in eyeOS 0.8.4 allows remote attackers to...4.3 Medium
- elite forum forumCross-site scripting (XSS) vulnerability in Elite Forum 1.0.0.0 allows remote attackers to inject...4.3 Medium
- snitz communications forums 2000Cross-site scripting (XSS) vulnerability in post.asp in Snitz Forums 2000 3.4.05 allows remote...4.3 Medium
- greg neustaetter gcardsSQL injection vulnerability in news.php in gCards version 1.43 allows remote attackers to execute...7.5 High
- butterfat phpespSQL injection vulnerability in phpESP 1.7.5 and earlier allows remote attackers to execute...7.5 High
- butterfat phpespCross-site scripting (XSS) vulnerability in phpESP 1.7.5 and earlier allows remote attackers to...4.3 Medium
- No product listedATutor 1.4.1 through 1.5.1-pl1 allows remote attackers to execute arbitrary PHP functions via a...7.5 High
- adaptive technology resource centre atutorMultiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote...7.5 High
- adaptive technology resource centre atutorMultiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow...4.3 Medium
- mozilla thunderbirdThe SMTP client in Mozilla Thunderbird 1.0.5 BETA, 1.0.7, and possibly other versions, does not...2.6 Low
- thehackerMultiple interpretation error in TheHacker 5.8.4.128 allows remote attackers to bypass virus...5.0 Medium
- fortinetMultiple interpretation error in Fortinet 2.48.0.0 allows remote attackers to bypass virus...5.0 Medium
- cat quick healMultiple interpretation error in CAT-QuickHeal 8.0 allows remote attackers to bypass virus...5.0 Medium
- sun solaris, sunos +1 moreThe default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8...4.3 Medium
- comersus open technologies backoffice lite, backoffice plus +1 moreCross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject...4.3 Medium
- ibm aixBuffer overflow in the chcons (chcon) command in IBM AIX 5.2 and 5.3, when DEBUG MALLOC is...7.5 High
- invision power services gallerySQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute...7.5 High
- oaboardMultiple SQL injection vulnerabilities in forum.php in oaboard forum 1.0 allow remote attackers...7.5 High
- openvpn, openvpn access server +1 moreFormat string vulnerability in the foreign_option function in options.c for OpenVPN 2.0.x allows...7.5 High
- phpUnspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2,...7.5 High
- phpMultiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and...7.5 High
- ethereal group etherealThe IRC protocol dissector in Ethereal 0.10.13 allows remote attackers to cause a denial of...5.0 Medium
- apple mac os x, mac os x server +1 moreAn unspecified kernel interface in Mac OS X 10.4.2 and earlier does not properly clear memory...2.1 Low
- apple mac os x, mac os x server +1 morememberd in Mac OS X 10.4 up to 10.4.2, in certain situations, does not quickly synchronize access...2.1 Low
- apple mac os x serverSoftware Update in Mac OS X 10.4.2, when the user marks all updates to be ignored, exits without...2.1 Low
- apple mac os x, mac os x server +1 moreUnspecified vulnerability in the Finder Get Info window for Mac OS X 10.4 up to 10.4.2 causes...2.1 Low
- apple mac os x, mac os x server +1 moreKeychain Access in Mac OS X 10.4.2 and earlier keeps a password visible even if a keychain times...2.1 Low
- phpThe RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals...7.5 High
- phpThe parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one...5.0 Medium
- phpCross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x...4.3 Medium
- Show moreLoading…