CVEs published in December 2005
1,010 vulnerabilities, 37 critical, 0 exploited.
- webcalendarSQL injection vulnerability in WebCalendar 1.0.1 allows remote attackers to execute arbitrary SQL...7.5 High
- hp systems insight managerUnknown vulnerability in the login page for HP Systems Insight Manager (SIM) 4.0 and 4.1, when...7.8 High
- webcalendarCRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote...5.0 Medium
- microsoft windows xp, windows 2000, windows 2003 server +2 more** DISPUTED ** NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000,...4.9 Medium
- edgewall software tracSQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier...7.5 High
- coppermine-gallery coppermine photo galleryrelocate_server.php in Coppermine Photo Gallery (CPG) 1.4.2 and 1.4 beta is not removed after...5.0 Medium
- scriptdevelopers.net netclassifiedsMultiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional...7.5 High
- qualityebiz qualityppcCross-site scripting (XSS) vulnerability in QualityEBiz Quality PPC 1553 allows remote attackers...4.3 Medium
- duware duamazon, duarticle, duclassified +8 more +10 moreSQL injection vulnerability in type.asp, as used in multiple DUware products including (1)...7.5 High
- drupalInterpretation conflict in file.inc in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allows...4.0 Medium
- drupalDrupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly...6.4 Medium
- drupalMultiple cross-site scripting (XSS) vulnerabilities in Drupal 4.5.0 through 4.5.5 and 4.6.0...4.3 Medium
- extreme corporate searchCross-site scripting (XSS) vulnerability in extremesearch.php in Extreme Search Corporate Edition...4.3 Medium
- citrix metaframe secure access manager, nfuse +1 moreCross-site scripting (XSS) vulnerability in the login form in Citrix MetaFrame Secure Access...4.3 Medium
- mxchangeCross-site scripting (XSS) vulnerability in MXChange before 0.2.0-pre10 PL492 allows remote...4.3 Medium
- mxchangeSQL injection vulnerability in MXChange before 0.2.0-pre10 PL492 allows remote attackers to...7.5 High
- phpxSQL injection vulnerability in auth.inc.php in PHPX 3.5.9 and earlier allows remote attackers to...7.5 High
- atlassian confluenceCross-site scripting (XSS) vulnerability in the dosearchsite.action module in Atlassian...4.3 Medium
- java search engine search engineCross-site scripting (XSS) vulnerability in search.jsp in Java Search Engine (JSE) 0.9.34 allows...4.3 Medium
- integrated computer solutions openmotifMultiple buffer overflows in libUil (libUil.so) in OpenMotif 2.2.3, and possibly other versions,...7.5 High
- dotclearSQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to...7.5 High
- perlInteger overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6...4.6 Medium
- webcalendarexport_handler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data...5.0 Medium
- kaduKadu 0.4.2 and 0.5.0pre allows remote attackers to cause a denial of service (crash or generated...7.8 High
- freewebstatMultiple cross-site scripting (XSS) vulnerabilities in FreeWebStat 1.0 rev37 allow remote...4.3 Medium
- entergal mx mxSQL injection vulnerability in index.php in Entergal MX 2.0 allows remote attackers to execute...7.5 High
- dotclearUnspecified vulnerability in the Trackback functionality in DotClear 1.2.1 has unknown impact and...10.0 High
- dmanewsMultiple SQL injection vulnerabilities in index.php in DMANews 0.904 and 0.910 allow remote...7.5 High
- blogbuddies, jaws, magpierss +2 moreMultiple cross-site scripting (XSS) vulnerabilities in MagpieRSS 7.1, as used in (a) blogBuddiesv...4.3 Medium
- blogbuddiesCross-site scripting (XSS) vulnerability in blogBuddies 0.3 allows remote attackers to inject...4.3 Medium
- bedeng psp pspSQL injection vulnerability in Bedeng PSP 1.1 allows remote attackers to execute arbitrary SQL...7.5 High
- php labs top auctionSQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary...7.5 High
- php labs survey wizardSQL injection vulnerability in survey.php in PHP Labs Survey Wizard allows remote attackers to...7.5 High
- nufwnuauth in NuFW 1.0.x before 1.0.16 and 1.1 allows authenticated users to cause a denial of...6.8 Medium
- webcalendarMultiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute...7.5 High
- phpalbum.net phpalbumDirectory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote...5.0 Medium
- No product listedDirectory traversal vulnerability in index.php in PHP Upload Center allows remote attackers to...5.0 Medium
- opera browserOpera 8.50 allows remote attackers to cause a denial of service (crash) via a Java applet with a...5.0 Medium
- microsoft windows 2000, windows 2003 server +1 moreThe SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4...7.8 High
- faq system systemSQL injection vulnerability in survey.php in ilyav Survey System 1.1 and earlier allows remote...7.5 High
- No product listedMultiple SQL injection vulnerabilities in ilyav FAQ System 1.1 and earlier allows remote...7.5 High
- greywyvern orca knowledgebaseSQL injection vulnerability in knowledgebase-control.php in Orca Knowledgebase 2.1b and earlier...7.5 High
- greywyvern orca blogSQL injection vulnerability in blog.php in Orca Blog 1.3b and earlier allows remote attackers to...7.5 High
- greywyvern orca ringmakerSQL injection vulnerability in ringmaker.php in Orca Ringmaker 2.3c and earlier allows remote...7.5 High
- wsn knowledge base knowledge baseMultiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earler allow remote...7.5 High
- softbizscripts faq scriptSQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to...7.5 High
- softbizscripts b2b trading marketplace scriptSQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows...7.5 High
- socketkbPHP file include vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to include...7.5 High
- socketkbSQL injection vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to execute...7.5 High
- symantec pcanywhereBuffer overflow in Symantec pcAnywhere 11.0.1, 11.5.1, and all other 32-bit versions allows...7.8 High
- Show moreLoading…