CVEs published in December 2005
1,010 vulnerabilities, 37 critical, 0 exploited.
- ignite realtime openfire Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in... 4.3 Medium
- ignite realtime openfire Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in... 4.3 Medium
- typo3 TYPO3 Reveals Sensitive Information via Direct Request to `misc/phpcheck/` 7.5 High
- mozilla The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP TRACE method, which allows remote... 4.3 Medium
- cups Multiple stack-based buffer overflows in the phpcups PHP module for CUPS 1.1.23rc1 might allow... 7.5 High
- pcre Perl-Compatible Regular Expression (PCRE) library before 6.2 does not properly count the number... 4.3 Medium
- ibm db2 Certain XML functions in IBM DB2 8.1 run with the privileges of DB2 instead of the logged-in user... 4.3 Medium
- ibm db2 Stack-based buffer overflows in the (1) xmlvarcharfromfile, (2) xmlclobfromfile, (3)... 4.3 Medium
- ibm db2 The (1) to_char and (2) to_date function in IBM DB2 8.1 allows local users to cause a denial of... 2.1 Low
- ibm db2 universal database Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for... 7.1 High
- ibm db2 universal database Stack-based buffer overflow in the SATENCRYPT function in IBM DB2 8.1, when Satellite... 9.3 High
- ibm db2 universal database Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to... 6.8 Medium
- ibm db2 universal database Stack-based buffer overflow in call in IBM DB2 7.x and 8.1 allows remote attackers to execute... 10.0 High
- ibm db2 universal database Stack-based buffer overflow in libdb2.so in IBM DB2 7.x and 8.1 allows local users to execute... 7.2 High
- ibm db2 universal database Stack-based buffer overflow in db2fmp in IBM DB2 7.x and 8.1 allows local users to execute... 7.2 High
- xwiki The search functionality in XWiki 0.9.793 indexes cleartext user passwords, which allows remote... 5.0 Medium
- jasio.net ragnarok online control panel functions.php in Ragnarok Online Control Panel (ROCP) 4.3.4a allows remote attackers to bypass... 7.5 High
- spectrumcu cash receipting system Spectrum Cash Receipting System before 6.504 uses weak cryptography (static substitution) in the... 7.8 High
- chitta mimicboard mimicboard2 (Mimic2) 086 and earlier stores sensitive information under the web root with... 6.4 Medium
- chitta mimicboard 2 Multiple cross-site scripting (XSS) vulnerabilities in mimic2.cgi in mimicboard2 (Mimic2) 086 and... 4.3 Medium
- ez publish eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128 allows... 4.0 Medium
- ez publish The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8... 5.0 Medium
- ez publish Unrestricted file upload vulnerability in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7... 3.5 Low
- ez publish eZ publish 3.5 through 3.7 before 20050830 does not use a folder's read permissions to restrict... 5.0 Medium
- ez publish The default configuration of the forum package in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2,... 9.4 High
- ez publish The siteaccess URIMatching implementation in eZ publish 3.5 through 3.8 before 20050812 converts... 5.0 Medium
- ez publish eZ publish 3.4.4 through 3.7 before 20050722 applies certain permissions on the node level, which... 4.0 Medium
- ez publish eZ publish 3.5 through 3.7 before 20050608 requires both edit and create permissions in order to... 5.0 Medium
- apache derby Apache Derby exposes user and password attributes 5.0 Medium
- rim blackberry enterprise server Buffer overflow in the decompression algorithm in Research in Motion BlackBerry Enterprise Server... 7.5 High
- spey Unspecified vulnerability in Spey 0.3.3 has unknown impact and attack vectors related to "A... 10.0 High
- spey Format string vulnerability in Logger.cc for Spey 0.3.3 allows attackers to cause a denial of... 4.3 Medium
- sun java plug-in The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet>... 5.0 Medium
- microsoft internet explorer The CLSID_ApprenticeICW control allows remote attackers to cause a denial of service (Internet... 7.1 High
- microsoft internet explorer The SmartConnect Class control allows remote attackers to cause a denial of service (Internet... 7.8 High
- microsoft internet explorer The System Monitor Source Properties control allows remote attackers to cause a denial of service... 7.1 High
- microsoft internet explorer The Outlook Progress Ctl control allows remote attackers to cause a denial of service (Internet... 7.1 High
- microsoft outlook express book control The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers... 4.3 Medium
- claymore systems inc puretls PureTLS before 0.9b5 does not clear optional Extensions and Algorithm.Parameters values before... 5.0 Medium
- apache tomcat Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta... 4.3 Medium
- net-snmp snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2... 10.0 High
- apache tomcat Apache Tomcat allows remote attackers to read JSP source files 7.8 High
- madwifi The ath_rate_sample function in the ath_rate/sample/sample.c sample code in MadWifi before 0.9.3... 7.1 High
- ibm websphere application server IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1.3 allows remote attackers to obtain... 5.0 Medium
- ibm websphere application server IBM WebSphere Application Server (WAS) 6.0 before 20050201, when serving pages in an Application... 4.3 Medium
- oracle oracle10g SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users... 7.5 High
- viewcvs viewcvs in ViewCVS 0.9.2 allows remote attackers to set the Content-Type header to arbitrary... 4.3 Medium
- viewcvs CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject... 7.6 High
- virtuemart VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a... 10.0 High
- kolab groupware server Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in... 6.4 Medium
- Show olderLoading…