CVEs published in November 2005
502 vulnerabilities, 46 critical, 0 exploited.
- activecampaign knowledgebuilderindex.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to cause a...7.8 High
- activecampaign knowledgebuilderSQL injection vulnerability in index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier...7.5 High
- agileco agilebillSQL injection vulnerability in product_cat in AgileBill 1.4.92 and earlier allows remote...7.5 High
- ezy helpdesk ezyhelpdeskMultiple SQL injection vulnerabilities in Ezyhelpdesk 1.0 allow remote attackers to execute...7.5 High
- comdev vote casterSQL injection vulnerability in index.php in Comdev Vote Caster 3.1 and earlier allows remote...7.5 High
- vtiger crmThe uploads module in vTiger CRM 4.2 and earlier allows remote attackers to upload arbitrary...5.0 Medium
- vtiger crmThe Users module in vTiger CRM 4.2 and earlier allows remote attackers to execute arbitrary PHP...7.5 High
- vtiger crmMultiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to...7.5 High
- vtiger crmCross-site scripting (XSS) vulnerability in vTiger CRM 4.2 and earlier allows remote attackers to...4.3 Medium
- vtiger crmMultiple directory traversal vulnerabilities in index.php in vTiger CRM 4.2 and earlier allow...6.4 Medium
- vtiger crmMultiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to...7.5 High
- vtiger crmMultiple cross-site scripting (XSS) vulnerabilities in vTiger CRM 4.2 and earlier allow remote...4.3 Medium
- softbizscripts web hosting directory scriptMultiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow...7.5 High
- zoneo-soft freeforumMultiple SQL injection vulnerabilities in forum.php in freeForum 1.1 and earlier and earlier...7.5 High
- greywyvern orca forumSQL injection vulnerability in forum.php in Orca Forum 4.3b and earlier allows remote attackers...7.5 High
- orbitscripts smartppc proMultiple cross-site scripting (XSS) vulnerabilities in SmartPPC Pro allow remote attackers to...4.3 Medium
- mailenable enterprise, professional +1 moreIMAP service (meimaps.exe) of MailEnable Professional 1.7 and Enterprise 1.1 allows remote...4.0 Medium
- freeftpdfreeFTPd 1.0.10 allows remote authenticated users to cause a denial of service (null dereference...6.8 Medium
- amax information technologies magic winmail serverDirectory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824)...5.0 Medium
- linux kernelip_conntrack_proto_icmp.c in ctnetlink in Linux kernel 2.6.14 up to 2.6.14.3 allows attackers to...7.8 High
- linux kernelThe nfattr_to_tcp function in ip_conntrack_proto_tcp.c in ctnetlink in Linux kernel 2.6.14 up to...7.8 High
- linux kernelInteger overflow in the invalidate_inode_pages2_range function in mm/truncate.c in Linux kernel 2...4.9 Medium
- linux kernelMemory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows...4.9 Medium
- linux kernelThe IPv6 flow label handling code (ip6_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6...6.6 Medium
- linux kernelA locking problem in POSIX timer cleanup handling on exit in Linux kernel 2.6.10 to 2.6.14, when...4.9 Medium
- cisco 7920 wireless ip phoneCisco IP Phone (VoIP) 7920 1.0(8) listens to UDP port 17185 to support a VxWorks debugger, which...6.4 Medium
- cisco unified wireless ip phone 7920 firmwareCisco IP Phone (VoIP) 7920 1.0(8) contains certain hard-coded ("fixed") public and private SNMP...7.5 High
- belkin f5d7230-4, f5d7232-4 +1 moreBelkin F5D7232-4 and F5D7230-4 wireless routers with firmware 4.03.03 and 4.05.03, when a...5.1 Medium
- counterpane passwordsafeCounterPane PasswordSafe 1.x and 2.x allows local users to test possible encryption keys against...4.6 Medium
- No product listedMacromedia Contribute Publishing Server (CPS) before 1.11 uses a weak algorithm to encrypt user...5.0 Medium
- phpbb group phpbbphpBB 2.0.18 allows remote attackers to obtain sensitive information via a large SQL query, which...5.0 Medium
- alstrasoft template sellerSQL injection vulnerability in admin/index.php in AlstraSoft Template Seller Pro 3.25 allows...7.5 High
- alstrasoft template sellerPHP remote file inclusion vulnerability in payment_paypal.php in AlstraSoft Template Seller Pro 3...7.5 High
- alstrasoft affiliate network proDirect static code injection vulnerability in admin_options_manage.php in AlstraSoft Affiliate...7.5 High
- alstrasoft affiliate network proMultiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow...4.3 Medium
- alstrasoft affiliate network proAlstraSoft Affiliate Network Pro 7.2 allows remote attackers to obtain sensitive information via...5.0 Medium
- alstrasoft affiliate network proMultiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote...7.5 High
- francisco burzi php-nukeMultiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other...7.5 High
- phpadsnew, phppgads +1 moreHTTP response splitting vulnerability in phpAdsNew and phpPgAds 2.0.6 and earlier allows remote...5.0 Medium
- No product listedMultiple cross-site scripting (XSS) vulnerabilities in act_newsletter.php in phpwcms 1.2.5 allow...4.3 Medium
- phpwcmsMultiple directory traversal vulnerabilities in phpwcms 1.2.5 allow remote attackers to read...5.0 Medium
- cisco adaptive security appliance softwareRace condition in Cisco Adaptive Security Appliance (ASA) 7.0(0), 7.0(2), and 7.0(4), when...5.4 Medium
- novell zenworks, zenworks desktops, zenworks servers +2 moreNovell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop...4.6 Medium
- gentoo linux eixSecond-order symlink vulnerability in eix-sync.in in Ebuild IndeX (eix) before 0.5.0_pre2 allows...5.0 Medium
- linux kernelThe auto-reap of child processes in Linux kernel 2.6 before 2.6.15 includes processes with ptrace...4.9 Medium
- linux kernelThe ptrace functionality (ptrace.c) in Linux kernel 2.6 before 2.6.14.2, using CLONE_THREAD, does...4.9 Medium
- sun solaris, sunos +1 moreUnspecified vulnerability in in.named in Solaris 9 allows attackers to cause a denial of service...5.0 Medium
- ipupdateMultiple buffer overflows in IPUpdate 1.1 might allow attackers to execute arbitrary code via (1)...7.5 High
- hp hp-uxUnspecified vulnerability in xterm for HP-UX 11.00, 11.11, and 11.23 allows local users to gain...7.2 High
- No product listedUnspecified vulnerability in MyBulletinBoard (MyBB) before 1.0 PR2 Rev 686 allows attackers to...5.0 Medium
- Show moreLoading…