Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
November

CVEs published in November 2005

502 vulnerabilities, 46 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

hordeThe default installation of Horde 3.0.4 contains an administrative account with a blank password,...CVE-2005-3344Fix available10.0 HighNovember 7, 2005
jed wing chm libBuffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35, as used in products such as...CVE-2005-2659Fix available10.0 HighNovember 7, 2005
adventnet manageengine netflow analyzerCross-site scripting (XSS) vulnerability in index.jsp in ManageEngine Netflow Analyzer 4.0.2...CVE-2005-3522Public exploit4.3 MediumNovember 6, 2005
e107SQL injection vulnerability in resetcore.php in e107 0.617 through 0.6173 allows remote attackers...CVE-2005-35217.5 HighNovember 6, 2005
mysourceMultiple cross-site scripting (XSS) vulnerabilities in MySource 2.14.0 allow remote attackers to...CVE-2005-3520Public exploit4.3 MediumNovember 6, 2005
mysourceMultiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute...CVE-2005-3519Public exploit7.5 HighNovember 6, 2005
punbbSQL injection vulnerability in search.php in PunBB 1.2.7 and 1.2.8 allows remote attackers to...CVE-2005-3518Public exploit7.5 HighNovember 6, 2005
chipmunk scripts guestbookChipmunk Scripts Guestbook allows remote attackers to obtain the installation path of the script...CVE-2005-35175.0 MediumNovember 6, 2005
chipmunk scripts directoryCross-site scripting (XSS) vulnerability in recommend.php in Chipmunk Directory script allows...CVE-2005-3516Public exploit4.3 MediumNovember 6, 2005
chipmunk scripts topsitesCross-site scripting (XSS) vulnerability in recommend.php in Chipmunk Topsites script allows...CVE-2005-3515Public exploit4.3 MediumNovember 6, 2005
chipmunk scripts forumMultiple cross-site scripting (XSS) vulnerabilities in Chipmunk Forum script allow remote...CVE-2005-3514Public exploit4.3 MediumNovember 6, 2005
vubbindex.php in VUBB alpha rc1 allows remote attackers to obtain the installation path of the...CVE-2005-35135.0 MediumNovember 6, 2005
vubbCross-site scripting (XSS) vulnerability in index.php in VUBB alpha rc1 allows remote attackers...CVE-2005-3512Public exploit4.3 MediumNovember 6, 2005
spymac web osMultiple cross-site scripting (XSS) vulnerabilities in Spymac Web OS 4.0 allow remote attackers...CVE-2005-35114.3 MediumNovember 6, 2005
apache tomcatApache Tomcat Vulnerable to Denial of Service (DoS) via Simultaneous RequestsCVE-2005-3510Fix available5.0 MediumNovember 6, 2005
jportal web portalMultiple SQL injection vulnerabilities in JPortal allow remote attackers to execute arbitrary SQL...CVE-2005-3509Public exploit7.5 HighNovember 6, 2005
galerieSQL injection vulnerability in showGallery.php in Gallery (Galerie) 2.4 allows remote attackers...CVE-2005-3508Public exploit7.5 HighNovember 6, 2005
cutephp cutenewsDirectory traversal vulnerability in CuteNews 1.4.1 allows remote attackers to include arbitrary...CVE-2005-3507Public exploitEPSS 12.4%5.0 MediumNovember 6, 2005
sambar serverCross-site scripting (XSS) vulnerability in proxy.asp in Sambar Server 6.3 BETA 2 and possibly...CVE-2005-35064.3 MediumNovember 5, 2005
cpanelCross-site scripting (XSS) vulnerability in the Entropy Chat script in cPanel 10.2.0-R82 and 10.6...CVE-2005-35054.3 MediumNovember 5, 2005
ibm aixBuffer overflow in swcons in IBM AIX 5.2, when debug malloc is enabled, allows remote attackers...CVE-2005-35047.5 HighNovember 5, 2005
pwdutilschfn in pwdutils 3.0.4 and earlier on SuSE Linux, and possibly other operating systems, does not...CVE-2005-3503Public exploit7.2 HighNovember 5, 2005
cerberus helpdeskattachment_send.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets...CVE-2005-35025.0 MediumNovember 5, 2005
apple quicktimeApple QuickTime before 7.0.3 allows user-assisted attackers to overwrite memory and execute...CVE-2005-27565.1 MediumNovember 5, 2005
apple quicktimeApple QuickTime Player before 7.0.3 allows user-assisted attackers to cause a denial of service ...CVE-2005-27552.6 LowNovember 5, 2005
apple quicktimeInteger overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute...CVE-2005-27545.1 MediumNovember 5, 2005
apple quicktimeInteger overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute...CVE-2005-27535.1 MediumNovember 5, 2005
macromedia flash playerMacromedia Flash 6 and 7 (Flash.ocx) allows remote attackers to execute arbitrary code via a SWF...CVE-2005-26285.1 MediumNovember 5, 2005
frisk software f-prot antivirusFrisk F-Prot Antivirus allows remote attackers to bypass protection via a ZIP file with a version...CVE-2005-34997.5 HighNovember 4, 2005
ibm websphere application serverIBM WebSphere Application Server 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before...CVE-2005-3498EPSS 11.2%4.3 MediumNovember 4, 2005
phphandicapper php handicapper** DISPUTED ** SQL injection vulnerability in process_signup.php in PHP Handicapper allows...CVE-2005-3497Disputed7.5 HighNovember 4, 2005
php handicapper handicapperCross-site scripting (XSS) vulnerability in PHP Handicapper allows remote attackers to inject...CVE-2005-34964.3 MediumNovember 4, 2005
ar-blogAr-blog 5.2 and earlier allows remote attackers to bypass authentication by modifying cookies.CVE-2005-34957.5 HighNovember 4, 2005
ar-blogCross-site scripting (XSS) vulnerability in Ar-blog 5.2 and earlier allows remote attackers to...CVE-2005-34944.3 MediumNovember 4, 2005
afsl games battle carryBattle Carry .005 and earlier allows remote attackers to cause a denial of service (inaccessible...CVE-2005-3493Public exploit5.0 MediumNovember 4, 2005
johannes f. kuhlmann flatfragFlatFrag 0.3 and earlier allows remote attackers to cause a denial of service (crash) by sending...CVE-2005-3492Public exploit5.0 MediumNovember 4, 2005
johannes f. kuhlmann flatfragMultiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow...CVE-2005-3491Public exploit7.5 HighNovember 4, 2005
asus video security onlineDirectory traversal vulnerability in the web server in Asus Video Security 3.5.0.0 and earlier...CVE-2005-34905.0 MediumNovember 4, 2005
asus video security onlineBuffer overflow in Asus Video Security 3.5.0.0 and earlier, when using authorization, allows...CVE-2005-3489Public exploit7.5 HighNovember 4, 2005
libungiflibungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary...CVE-2005-3350Fix available7.5 HighNovember 4, 2005
acme labs thttpdsyslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink...CVE-2005-3124Fix available2.1 LowNovember 4, 2005
libungiflibungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF...CVE-2005-2974Fix available2.6 LowNovember 4, 2005
scorched 3d 3dScorched 3D 39.1 (bf) and earlier allows remote attackers to cause a denial of service (long loop...CVE-2005-3488Public exploitFix availableEPSS 10.1%7.8 HighNovember 3, 2005
scorched 3d 3dMultiple buffer overflows in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute...CVE-2005-3487Public exploitFix available7.5 HighNovember 3, 2005
scorched 3d 3dMultiple format string vulnerabilities in Scorched 3D 39.1 (bf) and earlier allow remote...CVE-2005-3486Public exploitFix availableEPSS 11.5%7.5 HighNovember 3, 2005
glider collectn killBuffer overflow in Glider Collect'n kill 1.0.0.0 allows remote attackers to execute arbitrary...CVE-2005-3485Public exploit7.5 HighNovember 3, 2005
nero neronetDirectory traversal vulnerability in NeroNET 1.2.0.2 and earlier allows remote attackers to read...CVE-2005-34845.0 MediumNovember 3, 2005
graphon go-globalBuffer overflow in GO-Global for Windows 3.1.0.3270 and earlier allows remote attackers to...CVE-2005-3483Public exploit7.5 HighNovember 3, 2005
cisco aironet ap1131, aironet ap1200, aironet ap1240 +2 moreCisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point...CVE-2005-34825.0 MediumNovember 3, 2005
cisco iosCisco IOS 12.0 to 12.4 might allow remote attackers to execute arbitrary code via a heap-based...CVE-2005-34819.3 HighNovember 3, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open