CVEs published in December 2005
1,010 vulnerabilities, 37 critical, 0 exploited.
- qnxThe dhcp.client program for QNX 4.25 vmware is setuid, possibly by default, which allows local...4.6 Medium
- alisveristr e-commerceMultiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass...7.5 High
- horde impHorde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which...4.3 Medium
- phpmyadminThe register_globals emulation in phpMyAdmin 2.7.0 rc1 allows remote attackers to exploit other...5.0 Medium
- ideal science bb.netMultiple cross-site scripting (XSS) vulnerabilities in Ideal BB.NET 1.3 and earlier allow remote...4.3 Medium
- appfluent technology database idsBuffer overflow in Appfluent Technology Database IDS 2.0 allows local users to execute arbitrary...4.6 Medium
- mycfnuke cf nukeMultiple cross-site scripting (XSS) vulnerabilities in index.cfm in CF_Nuke 4.6 and earlier allow...4.3 Medium
- mycfnuke cf nukeDirectory traversal vulnerability in index.cfm in CF_Nuke 4.6 and earlier, when Sandbox Security...5.0 Medium
- cfmagic magic list proSQL injection vulnerability in view_archive.cfm in CFMagic Magic List Pro 2.5 allows remote...7.5 High
- cfmagic magic forum personalCross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows...4.3 Medium
- cfmagic magic forum personalMultiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow...7.5 High
- sunncomm mediamax drmSunnComm MediaMax DRM 5.0.21.0, as used by Sony BMG, assigns insecure Everyone/Full Control...4.6 Medium
- ibm aixUnspecified "absolute path vulnerability" in umountall in IBM AIX 5.1 through 5.3 allows local...7.2 High
- xpdfHeap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such...7.5 High
- double precision incorporated courier mail serverauthpam.c in courier-authdaemon for Courier Mail Server 0.37.3 through 0.52.1, when using...7.5 High
- christian ghisler total commanderTotal Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCX_FTP.INI,...4.9 Medium
- edgewall software tracSQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote...7.5 High
- alan ward a-faqMultiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary...7.5 High
- netauctionhelpMultiple cross-site scripting (XSS) vulnerabilities in NetAuctionHelp 3.0 and earlier allow...4.3 Medium
- xcent xcclassifiedCross-site scripting (XSS) vulnerability in CPSearch.asp in XcClassified 3.x allows remote...4.3 Medium
- No product listedCross-site scripting (XSS) vulnerability in PASearch.asp in XcPhotoAlbum 1.x allows remote...4.3 Medium
- rainworx rwauction proCross-site scripting (XSS) vulnerability in search.asp in rwAuction Pro 4.0 and 5.0 allows remote...4.3 Medium
- locazo locazolistSQL injection vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote...7.5 High
- saralblogSQL injection vulnerability in saralblog 1 and earlier allows remote attackers to execute...7.5 High
- jonathan beckett pluggedout nexusCross-site scripting (XSS) vulnerability in search.php in PluggedOut Nexus 0.1 allows remote...4.3 Medium
- jonathan beckett pluggedout nexusSQL injection vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to...7.5 High
- cars portal portalSQL injection vulnerability in index.php in Cars Portal 1.1 and earlier allows remote attackers...7.5 High
- pluggedout blogSQL injection vulnerability in index.php in PluggedOut Blog 1.9.5 and earlier allows remote...7.5 High
- cowikiCross-site scripting (XSS) vulnerability in coWiki 0.3.4 allows remote attackers to inject...4.3 Medium
- No product listede107 0.6174 allows remote attackers to redirect users to other web sites via the download...5.0 Medium
- e107e107 0.6174 allows remote attackers to vote multiple times for a download via repeated requests...5.0 Medium
- multi-tech systems multivoipBuffer overflow in multiple Multi-Tech Systems MultiVOIP devices with firmware before x.08 allows...7.5 High
- netart media blog systemMultiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute...7.5 High
- ffmpegHeap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg...7.5 High
- iisworks aspknowledgebaseCross-site scripting (XSS) vulnerability in kb.asp in IISWorks ASPKnowledgeBase 2.0 allows remote...4.3 Medium
- sun java system application server, one application server +1 moreUnspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server...4.0 Medium
- sun java communications services delegated administratorUnspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in...7.5 High
- daniel stenberg curlMultiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users...4.6 Medium
- xpdfMultiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream:...5.1 Medium
- ipswitch imail server, collaboration suite +1 moreFormat string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration...7.5 High
- ipswitch imail server, collaboration suite +1 moreThe IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows...4.0 Medium
- mr. cgi guy amazon search directoryCross-site scripting (XSS) vulnerability in search.cgi in Amazon Search Directory 1.0.0 and...4.3 Medium
- hobosworld hobsrSQL injection vulnerability in view.php in Hobosworld HobSR 1.0 and earlier allows remote...7.5 High
- mr. cgi guy warm linksCross-site scripting (XSS) vulnerability in Warm Links 1.0.0 and earlier allows remote attackers...4.3 Medium
- mr. cgi guy hot links pro, hot links sql +1 moreCross-site scripting (XSS) vulnerability in search.cgi in MR CGI Guy Hot Links SQL 3.1.x and Hot...4.3 Medium
- tawbaware filelisterSQL injection vulnerability in FileLister 0.51 and earlier allows remote attackers to execute...7.5 High
- web4future portal solutionsDirectory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows...7.8 High
- web4future portal solutionsSQL injection vulnerability in comentarii.php in Web4Future Portal Solutions News Portal allows...7.5 High
- No product listedSQL injection vulnerability in functions.php in Web4Future Affiliate Manager PRO 4.1 and earlier...7.5 High
- web4future keyword frequency counterCross-site scripting (XSS) vulnerability in index.cgi in Web4Future KeyWord Frequency Counter 1.0...4.3 Medium
- Show moreLoading…