Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
November

CVEs published in November 2005

502 vulnerabilities, 46 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

macromedia flash playerMacromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so...CVE-2005-3591Public exploitEPSS 10.4%7.5 HighNovember 16, 2005
filezilla server terminalBuffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial...CVE-2005-3589Public exploitEPSS 52.9%7.8 HighNovember 16, 2005
advanced guestbook guestbookSQL injection vulnerability in admin.php in Advanced Guestbook 2.2 allows remote attackers to...CVE-2005-35887.5 HighNovember 16, 2005
clam anti-virus clamavImproper boundary checks in petite.c in Clam AntiVirus (ClamAV) before 0.87.1 allows attackers to...CVE-2005-3587Fix available10.0 HighNovember 16, 2005
mambocontent.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation...CVE-2005-35865.0 MediumNovember 16, 2005
phpwebthingsSQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute...CVE-2005-35857.5 HighNovember 16, 2005
phpwebthingsCross-site scripting (XSS) vulnerability in forum.php in PhpWebThings 1.4.4 allows remote...CVE-2005-3584Public exploit4.3 MediumNovember 16, 2005
sun jre, sdk +1 more(1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and...CVE-2005-35837.8 HighNovember 16, 2005
imagemagickImageMagick before 6.2.4.2-r1 allows local users in the portage group to increase privileges via...CVE-2005-35827.2 HighNovember 16, 2005
gdalGDAL before 1.3.0-r1 allows local users in the portage group to increase privileges via a shared...CVE-2005-35817.2 HighNovember 16, 2005
qdbmQDBM before 1.8.33-r2 allows local users in the portage group to increase privileges via a shared...CVE-2005-35807.2 HighNovember 16, 2005
walla telesite telesitets.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to access arbitrary...CVE-2005-3579Public exploit5.0 MediumNovember 16, 2005
walla telesite telesiteSQL injection vulnerability in ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows...CVE-2005-3578Public exploit7.5 HighNovember 16, 2005
walla telesite telesiteCross-site scripting vulnerability (XSS) in ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier...CVE-2005-3577Public exploit4.3 MediumNovember 16, 2005
walla telesite telesitets.exe in Walla TeleSite 3.0 and earlier allows remote attackers to access privileged information...CVE-2005-3576Public exploit5.0 MediumNovember 16, 2005
cynox cyphorSQL injection vulnerability in show.php in Cyphor 0.19 and earlier allows remote attackers to...CVE-2005-3575Public exploit7.5 HighNovember 16, 2005
icms content management systems icmsPHP file inclusion vulnerability in index.php of iCMS allows remote attackers to include...CVE-2005-35745.0 MediumNovember 16, 2005
gnu mailmanScrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of...CVE-2005-35735.0 MediumNovember 16, 2005
peelSQL injection vulnerability in index.php in Peel 2.6 through 2.7 allows remote attackers to...CVE-2005-35727.5 HighNovember 16, 2005
codegrrl phpcalendar, phpclique, phpcurrently +2 more +4 morePHP file inclusion vulnerability in protection.php in CodeGrrl (a) PHPCalendar 1.0, (b) PHPClique...CVE-2005-3571Public exploit5.0 MediumNovember 16, 2005
hordeUnspecified cross-site scripting (XSS) vulnerability in Horde before 2.2.9 allows remote...CVE-2005-3570Fix available4.3 MediumNovember 16, 2005
ibm db2 content managerINSO service in IBM DB2 Content Manager before 8.2 Fix Pack 10 on AIX allows attackers to cause a...CVE-2005-35695.0 MediumNovember 16, 2005
ibm db2 content managerdb2fmp process in IBM DB2 Content Manager before 8.2 Fix Pack 10 allows local users to cause a...CVE-2005-35682.1 LowNovember 16, 2005
ibm tivoli directory serverslapd daemon in IBM Tivoli Directory Server (ITDS) 5.2.0 and 6.0.0 binds using SASL EXTERNAL,...CVE-2005-35675.8 MediumNovember 16, 2005
symantec veritas cluster server, sanpoint control quickstart, storage foundation +1 more +3 moreBuffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows...CVE-2005-3566Public exploit4.3 MediumNovember 16, 2005
hp hp-uxUnknown vulnerability in remshd daemon in HP-UX B.11.00, B.11.11, and B.11.23 while running in ...CVE-2005-35657.5 HighNovember 16, 2005
hp hp-uxenvd daemon in HP-UX B.11.00 through B.11.11 allows local users to obtain privileges via unknown...CVE-2005-35647.2 HighNovember 16, 2005
zonelabs zonealarm, zonealarm anti-spyware, zonealarm antivirus +1 more +3 moreZone Labs (1) ZoneAlarm Pro 6.0, (2) ZoneAlarm Internet Security Suite 6.0, (3) ZoneAlarm Anti...CVE-2005-3560Public exploitEPSS 15.5%7.5 HighNovember 16, 2005
digium asteriskDirectory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows...CVE-2005-3559Public exploitFix availableEPSS 20.2%5.0 MediumNovember 16, 2005
ostePHP file inclusion vulnerability in index.php in OSTE 1.0 allows remote attackers to execute...CVE-2005-3558Public exploit7.5 HighNovember 16, 2005
tincan phplistDirectory traversal vulnerability in admin/defaults.php in PHPlist 2.10.1 and earlier allows...CVE-2005-35575.0 MediumNovember 16, 2005
tincan phplistMultiple cross-site scripting (XSS) vulnerabilities in PHPlist 2.10.1 and earlier allow remote...CVE-2005-3556Public exploit4.3 MediumNovember 16, 2005
tincan phplistMultiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier allow authenticated remote...CVE-2005-3555Public exploit6.5 MediumNovember 16, 2005
phpkitMultiple eval injection vulnerabilities in the help function in PHPKIT 1.6.1 R2 and earlier, when...CVE-2005-35545.1 MediumNovember 16, 2005
phpkitMultiple SQL injection vulnerabilities in include.php in PHPKIT 1.6.1 R2 and earlier allow remote...CVE-2005-35537.5 HighNovember 16, 2005
phpkitMultiple cross-site scripting (XSS) vulnerabilities in PHPKIT 1.6.1 R2 and earlier allow remote...CVE-2005-35524.3 MediumNovember 16, 2005
toenda software development toendacmstoendaCMS before 0.6.2 stores user account and session data in the web root directory, which...CVE-2005-35515.0 MediumNovember 16, 2005
toenda software development toendacmsDirectory traversal vulnerability in admin.php in toendaCMS before 0.6.2 allows remote attackers...CVE-2005-3550Public exploit5.0 MediumNovember 16, 2005
invision power services boardDirect code injection vulnerability in Task Manager in Invision Power Board 2.0.1 allows limited...CVE-2005-35496.5 MediumNovember 16, 2005
invision power services boardDirectory traversal vulnerability in Task Manager in Invision Power Board (IP.Board) 2.0.1 allows...CVE-2005-35484.0 MediumNovember 16, 2005
invision power services boardCross-site scripting (XSS) vulnerability in Invision Power Board 2.1 allows remote attackers to...CVE-2005-3547Public exploit4.3 MediumNovember 16, 2005
f-secure anti-virus, internet gatekeeper +1 moresuid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before 2.15.484 and (2) Anti-Virus...CVE-2005-3546Public exploit7.2 HighNovember 16, 2005
ibproarcadeSQL injection vulnerability in index.php of the report module in ibProArcade 2.5.2 and earlier...CVE-2005-3545Public exploit7.5 HighNovember 16, 2005
xmb forum xmbCross-site scripting (XSS) vulnerability in u2u.php in XMB 1.9.3 allows remote attackers to...CVE-2005-3544Public exploit4.3 MediumNovember 16, 2005
phorumSQL injection vulnerability in search.php in Phorum 5.0.0alpha through 5.0.20, when...CVE-2005-35436.8 MediumNovember 16, 2005
phpsysinfoHTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in...CVE-2005-3348Fix available4.3 MediumNovember 15, 2005
phpgroupwareMultiple directory traversal vulnerabilities in index.php in phpSysInfo 2.4 and earlier, as used...CVE-2005-3347Fix available6.8 MediumNovember 15, 2005
linux kernelRace condition in do_coredump in signal.c in Linux kernel 2.6 allows local users to cause a...CVE-2005-35274.0 MediumNovember 9, 2005
linux-ftpd-sslBuffer overflow in the SSL-ready version of linux-ftpd (linux-ftpd-ssl) 0.17 allows remote...CVE-2005-3524Public exploitFix availableEPSS 21.5%10.0 HighNovember 7, 2005
gpsdriveFormat string vulnerability in friendsd2 in GpsDrive allows remote attackers to execute arbitrary...CVE-2005-3523Public exploitFix available7.5 HighNovember 7, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open