Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
November

CVEs published in November 2005

502 vulnerabilities, 46 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

revize cms cmsIdetix Software Systems Revize CMS allows remote attackers to obtain sensitive information via...CVE-2005-37295.0 MediumNovember 21, 2005
revize cms cmsIdetix Software Systems Revize CMS stores conf/revize.xml under the web document root with...CVE-2005-3728Public exploit5.0 MediumNovember 21, 2005
revize cms cmsSQL injection vulnerability in debug/query_results.jsp in Idetix Software Systems Revize CMS...CVE-2005-3727Public exploit7.5 HighNovember 21, 2005
interspire articlelive nxSQL injection vulnerability in Interspire ArticleLive NX 0.3 allows remote attackers to execute...CVE-2005-37267.5 HighNovember 21, 2005
zyxel prestige 2000w v.1voip wi-fi phoneZyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 uses hardcoded IP addresses for its DNS servers,...CVE-2005-37256.4 MediumNovember 21, 2005
zyxel p2000w version 1 voip wifi phone, prestige 2000w v.1voip wi-fi phone +1 moreZyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 allows remote attackers to obtain sensitive...CVE-2005-37246.4 MediumNovember 21, 2005
hitachi ip5000 voip wifi phoneHitachi IP5000 VOIP WIFI Phone 1.5.6 does not allow the user to disable access to (1) SNMP or (2)...CVE-2005-37237.5 HighNovember 21, 2005
hitachi ip5000 voip wifi phoneThe SNMP v1/v2c daemon in Hitachi IP5000 VOIP WIFI Phone 1.5.6 allows remote attackers to gain...CVE-2005-37227.5 HighNovember 21, 2005
hitachi ip5000 voip wifi phoneThe default configuration of the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not...CVE-2005-37215.0 MediumNovember 21, 2005
hitachi ip5000 voip wifi phoneThe default index page in the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 lists sensitive...CVE-2005-37205.0 MediumNovember 21, 2005
hitachi ip5000 voip wifi phoneHitachi IP5000 VOIP WIFI Phone 1.5.6 has a hard-coded administrator password of "0000", which...CVE-2005-37194.6 MediumNovember 21, 2005
utstarcom f1000 voip wifi phoneUTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 does not allow...CVE-2005-37187.5 HighNovember 21, 2005
utstarcom f1000 voip wifi phoneThe telnet daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND...CVE-2005-37177.5 HighNovember 21, 2005
utstarcom f1000 wi-fi firmwareThe SNMP daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2...CVE-2005-37167.5 HighNovember 21, 2005
senao si-680h wireless voip phoneSenao SI-680H Wireless VoIP Phone Firmware 0.03.0839 leaves the VxWorks debugger UDP port 17185...CVE-2005-37157.5 HighNovember 21, 2005
opera browserOpera Web Browser 8.50 and 8.0 through 8.0.2 allows remote attackers to spoof the URL in the...CVE-2005-36995.0 MediumNovember 21, 2005
php easy download easy downloadPHP Easy Download allows remote attackers to bypass authentication via edit.php.CVE-2005-36987.5 HighNovember 21, 2005
uresk links linksUnspecified vulnerability in the administration interface in Uresk Links 2.0 Lite allows remote...CVE-2005-36977.5 HighNovember 21, 2005
netpbmMultiple buffer overflows in pnmtopng in netpbm 10.0 and earlier allow attackers to execute...CVE-2005-3632Fix available4.6 MediumNovember 21, 2005
arki-dbSQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary...CVE-2005-3696Public exploit7.5 HighNovember 20, 2005
litespeed technologies web serverCross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1...CVE-2005-3695Public exploit4.3 MediumNovember 20, 2005
antvilleCross-site scripting (XSS) vulnerability in Antville 1.1 allows remote attackers to inject...CVE-2005-35304.3 MediumNovember 20, 2005
tiki tikiwiki cms\/groupwaretiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to obtain the...CVE-2005-35295.0 MediumNovember 20, 2005
tiki tikiwiki cms\/groupwareCross-site scripting (XSS) vulnerability in tiki-view_forum_thread.php in TikiWiki 1.9.0 through...CVE-2005-35284.3 MediumNovember 20, 2005
linux kernelThe sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a...CVE-2005-2709Public exploit4.6 MediumNovember 20, 2005
sylpheedStack-based buffer overflow in the ldif_get_line function in ldif.c of Sylpheed before 2.1.6...CVE-2005-3354Fix available5.1 MediumNovember 20, 2005
apache spamassassinSpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of...CVE-2005-3351Fix available5.0 MediumNovember 20, 2005
oshBuffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows...CVE-2005-3346Public exploit7.2 HighNovember 20, 2005
centericqcentericq 4.20.0-r3 with "Enable peer-to-peer communications" set allows remote attackers to...CVE-2005-3694Public exploitFix availableEPSS 12.0%7.8 HighNovember 20, 2005
sunncomm mediamax axwebremovectrlThe AxWebRemoveCtrl ActiveX control for uninstalling the SunnComm MediaMax DRM allows remote...CVE-2005-36939.3 HighNovember 19, 2005
amax information technologies magic winmail serverCross-site scripting (XSS) vulnerability in AMAX Magic Winmail Server 4.2 (build 0824) and...CVE-2005-36924.3 MediumNovember 19, 2005
No product listedDirectory traversal vulnerability in the IMAP service (meimaps.exe) of MailEnable Professional 1...CVE-2005-36915.0 MediumNovember 19, 2005
mailenable enterprise, professional +1 moreStack-based buffer overflow in the IMAP service (meimaps.exe) of MailEnable Professional 1.6 and...CVE-2005-36907.5 HighNovember 19, 2005
xmb forum xmbpost.php in XMB 1.9.2 allows remote attackers to obtain the installation path via an invalid fid...CVE-2005-36895.0 MediumNovember 19, 2005
xmb forum xmbCross-site scripting (XSS) vulnerability in members.php in XMB 1.9.3 and earlier allows remote...CVE-2005-36884.3 MediumNovember 19, 2005
No product listedcancel_account.php in WHM AutoPilot 2.5.30 and earlier allows remote attackers to cancel requests...CVE-2005-36875.0 MediumNovember 19, 2005
newsboard unclassified newsboardSQL injection vulnerability in search.inc.php in Unclassified NewsBoard before 1.5.3 Patch 4...CVE-2005-3686Public exploit7.5 HighNovember 19, 2005
virtual programming vp-aspCross-site scripting (XSS) vulnerability in shopadmin.asp in VP-ASP Shopping Cart 5.50 allows...CVE-2005-3685Public exploit4.3 MediumNovember 19, 2005
freeftpdMultiple buffer overflows in freeFTPd 1.0.8, without logging enabled, allow remote authenticated...CVE-2005-3684Public exploitEPSS 13.7%7.5 HighNovember 19, 2005
freeftpdStack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote...CVE-2005-3683Public exploitEPSS 71.5%7.5 HighNovember 19, 2005
wizz forum forumMultiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute...CVE-2005-3682Public exploit7.5 HighNovember 18, 2005
xoops wf-downloadsSQL injection vulnerability in viewcat.php in XOOPS WF-Downloads module 2.05 allows remote...CVE-2005-3681Public exploit7.5 HighNovember 18, 2005
xoopsDirectory traversal vulnerability in editor_registry.php in XOOPS 2.2.3 allows remote attackers...CVE-2005-36806.4 MediumNovember 18, 2005
activecampaign 1-2-all broadcast emailSQL injection vulnerability in admin/index.php in ActiveCampaign 1-2-All Broadcast Email allows...CVE-2005-3679Public exploit7.5 HighNovember 18, 2005
google talkGoogle Talk before 1.0.0.76, with email notification enabled, allows remote attackers to cause a...CVE-2005-36785.0 MediumNovember 18, 2005
realnetworks realplayerBuffer overflow in RealNetworks RealPlayer 10 and 10.5 allows remote attackers to execute...CVE-2005-36777.5 HighNovember 18, 2005
phpwebthingsSQL injection vulnerability in download.php in PhpWebThings 1.4.4 allows remote attackers to...CVE-2005-3676Public exploit7.5 HighNovember 18, 2005
tcpThe Transmission Control Protocol (TCP) allows remote attackers to cause a denial of service ...CVE-2005-36757.8 HighNovember 18, 2005
phpThe exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to...CVE-2005-33535.0 MediumNovember 18, 2005
realnetworks realone player, realplayer +1 moreHeap-based buffer overflow in DUNZIP32.DLL for RealPlayer 8, 10, and 10.5 and RealOne Player 1...CVE-2005-26305.1 MediumNovember 18, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open