Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
November

CVEs published in November 2005

502 vulnerabilities, 46 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

mybulletinboardMyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allows remote attackers to delete or move private messages...CVE-2005-37775.0 MediumNovember 23, 2005
mybulletinboardMultiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.0 PR2 Rev 686...CVE-2005-37764.3 MediumNovember 23, 2005
pollvotePHP remote file inclusion vulnerability in pollvote.php in PollVote allows remote attackers to...CVE-2005-37757.5 HighNovember 23, 2005
cisco pixCisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new...CVE-2005-3774Public exploitEPSS 18.2%5.0 MediumNovember 23, 2005
joomlaUnspecified vulnerability in Joomla! before 1.0.4 has unknown impact and attack vectors, related...CVE-2005-377310.0 HighNovember 23, 2005
joomlaMultiple SQL injection vulnerabilities in Joomla! before 1.0.4 allow remote attackers to execute...CVE-2005-37727.5 HighNovember 23, 2005
joomlaMultiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.4 allow remote...CVE-2005-37714.3 MediumNovember 23, 2005
phppostMultiple cross-site scripting (XSS) vulnerabilities in PHP-Post (PHPp) 1.0 allow remote attackers...CVE-2005-3770Public exploit4.3 MediumNovember 23, 2005
php download manager download managerSQL injection vulnerability in files.php in PHP Download Manager 1.1.3 and earlier allows remote...CVE-2005-3769Public exploit7.5 HighNovember 23, 2005
symantec enterprise firewall, firewall vpn appliance 100, firewall vpn appliance 200 +7 more +9 moreBuffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic...CVE-2005-37687.5 HighNovember 23, 2005
miklos szeredi fusefusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc...CVE-2005-3531Fix available2.1 LowNovember 23, 2005
exponentExponent CMS 0.96.3 and later versions does not properly restrict the types of uploaded files,...CVE-2005-37675.0 MediumNovember 22, 2005
exponentExponent CMS 0.96.3 and later versions stores sensitive user pages under the web document root...CVE-2005-37665.0 MediumNovember 22, 2005
exponentExponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute...CVE-2005-37657.5 HighNovember 22, 2005
exponentThe image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not...CVE-2005-376410.0 HighNovember 22, 2005
exponentExponent CMS 0.96.3 and later versions includes the full installation path in the base parameter...CVE-2005-37635.0 MediumNovember 22, 2005
exponentSQL injection vulnerability in the navigation module (navigationmodule) in Exponent CMS 0.96.3...CVE-2005-37627.5 HighNovember 22, 2005
exponentCross-site scripting (XSS) vulnerability in Exponent CMS 0.96.3 and later versions allows remote...CVE-2005-37614.3 MediumNovember 22, 2005
ibm websphere application serverDouble free vulnerability in the BBOORB module in IBM WebSphere Application Server for z/OS 5.0...CVE-2005-37607.8 HighNovember 22, 2005
hordeMultiple cross-site scripting (XSS) vulnerabilities in Horde before 3.0.7 allow remote attackers...CVE-2005-3759Fix available5.8 MediumNovember 22, 2005
google mini search appliance, search appliance +1 moreCross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google...CVE-2005-3758EPSS 19.1%4.3 MediumNovember 22, 2005
google mini search appliance, search appliance +1 moreThe Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance,...CVE-2005-3757Public exploitEPSS 41.2%7.5 HighNovember 22, 2005
google mini search appliance, search appliance +1 moreGoogle Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to...CVE-2005-37565.0 MediumNovember 22, 2005
google mini search appliance, search appliance +1 moreDirectory traversal vulnerability in Google Mini Search Appliance, and possibly Google Search...CVE-2005-37555.0 MediumNovember 22, 2005
google mini search appliance, search appliance +1 moreCross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google...CVE-2005-37544.3 MediumNovember 22, 2005
linux kernelLinux kernel before after 2.6.12 and before 2.6.13.1 might allow attackers to cause a denial of...CVE-2005-37537.8 HighNovember 22, 2005
ldapdiffUnspecified vulnerability in ldapdiff before 1.1.1 has unknown impact and attack vectors, related...CVE-2005-375210.0 HighNovember 22, 2005
apsis poundHTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web...CVE-2005-3751Fix available4.3 MediumNovember 22, 2005
opera browserOpera before 8.51 on Linux and Unix systems allows remote attackers to execute arbitrary code via...CVE-2005-37507.5 HighNovember 22, 2005
ibm aixUnspecified "absolute path vulnerabilities" in the diagela command (diagela.sh) in IBM AIX 5.2...CVE-2005-37497.2 HighNovember 22, 2005
tru-zone nukeetSQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier...CVE-2005-3748Public exploit7.5 HighNovember 22, 2005
mortbay jettyMortbay Jetty Discloses JSP Source CodeCVE-2005-3747Public exploitFix available5.0 MediumNovember 22, 2005
apboardSQL injection vulnerability in thread.php in APBoard allows remote attackers to execute arbitrary...CVE-2005-3746Public exploit7.5 HighNovember 22, 2005
apache strutsApache Struts Cross-site scripting VulnerabilityCVE-2005-3745Public exploitEPSS 25.7%4.3 MediumNovember 22, 2005
phpcomasySQL injection vulnerability in index.php in phpComasy 0.7.5 and earlier allows remote attackers...CVE-2005-37447.5 HighNovember 22, 2005
simplepollSQL injection vulnerability in results.php in SimplePoll allows remote attackers to execute...CVE-2005-3743Public exploit7.5 HighNovember 22, 2005
advanced poll pollCross-site scripting (XSS) vulnerability in popup.php in Advanced Poll 2.0.3 and earlier allows...CVE-2005-3742Public exploit4.3 MediumNovember 22, 2005
almondsoft almond classifiedsAlmond Classifieds does not properly verify the password, which allows attackers to bypass access...CVE-2005-37417.5 HighNovember 22, 2005
php fusion fusionMultiple SQL injection vulnerabilities in PHP-Fusion 6.00.206 and earlier allow remote attackers...CVE-2005-37407.5 HighNovember 22, 2005
No product listedUnspecified vulnerability in subheader.php in PHP-Fusion 6.00.206 and earlier allows remote...CVE-2005-37395.0 MediumNovember 22, 2005
mambo site serverglobals.php in Mambo Site Server 4.0.14 and earlier, when register_globals is disabled, allows...CVE-2005-3738Public exploit2.6 LowNovember 22, 2005
inkscapeBuffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow...CVE-2005-3737Public exploitFix availableEPSS 13.4%5.1 MediumNovember 22, 2005
coastal data management e-quick cartMultiple cross-site scripting (XSS) vulnerabilities in e-Quick Cart allow remote attackers to...CVE-2005-37364.3 MediumNovember 22, 2005
coastal data management e-quick cartMultiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute...CVE-2005-37357.5 HighNovember 22, 2005
phpmyfaqCross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier...CVE-2005-37344.3 MediumNovember 22, 2005
juniper junos e, junos j, junos m +5 more +7 moreThe Internet Key Exchange version 1 (IKEv1) implementation in Juniper JUNOS and JUNOSe software...CVE-2005-37337.5 HighNovember 21, 2005
msearch unicode msearchCross-site scripting (XSS) vulnerability in the Unicode version of msearch (unicode-msearch) 1.51...CVE-2005-23394.3 MediumNovember 21, 2005
ipsec-toolsThe Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec...CVE-2005-3732Fix available7.8 HighNovember 21, 2005
yasslUnspecified vulnerability in yaSSL before 1.0.6 has unknown impact and attack vectors, related to...CVE-2005-373110.0 HighNovember 21, 2005
revize cms cmsMultiple cross-site scripting (XSS) vulnerabilities in HTTPTranslatorServlet in Idetix Software...CVE-2005-3730Public exploit4.3 MediumNovember 21, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open