Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
December

CVEs published in December 2005

1,010 vulnerabilities, 37 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

acme labs perlcalCross-site scripting (XSS) vulnerability in cal_make.pl in ACME PerlCal 2.99.20 allows remote...CVE-2005-41624.3 MediumDecember 11, 2005
milliscripts** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in MilliScripts 1.4 redirect...CVE-2005-4161Public exploitDisputed4.3 MediumDecember 11, 2005
No product listedDirectory traversal vulnerability in getdox.php in Torrential 1.2 allows remote attackers to read...CVE-2005-4160Public exploit5.0 MediumDecember 11, 2005
simple machines forum** DISPUTED ** NOTE: this issue has been disputed by the vendor and third parties. SQL injection...CVE-2005-4159Disputed7.5 HighDecember 11, 2005
todd miller sudoSudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2)...CVE-2005-4158Public exploitFix available4.6 MediumDecember 11, 2005
No product listedUnspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to...CVE-2005-41577.5 HighDecember 11, 2005
mambo open source 4.5Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (1.0.9), with magic_quotes_gpc...CVE-2005-41569.4 HighDecember 11, 2005
adaptive technology resource centre atutorregistration.PHP in ATutor 1.5.1 pl2 allows remote attackers to execute arbitrary SQL commands...CVE-2005-4155Public exploit7.5 HighDecember 11, 2005
php pearUnspecified vulnerability in PEAR installer 1.4.2 and earlier allows user-assisted attackers to...CVE-2005-41545.1 MediumDecember 11, 2005
gnu mailmanMailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message...CVE-2005-41537.8 HighDecember 11, 2005
soti pocket controller-professionalSoti Pocket Controller-Professional 5.0 allows remote attackers to turn off, reboot, or hard...CVE-2005-41527.8 HighDecember 11, 2005
pgp desktopThe Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and...CVE-2005-41512.1 LowDecember 10, 2005
broadcom cleverpath portalCross-site scripting (XSS) vulnerability in the portal login page in Computer Associates...CVE-2005-41504.3 MediumDecember 10, 2005
lyris technologies inc listmanagerLyris ListManager 8.8 through 8.9b allows remote attackers to obtain sensitive information by...CVE-2005-41495.0 MediumDecember 10, 2005
lyris technologies inc listmanagerLyris ListManager 8.5, and possibly other versions before 8.8, includes sensitive information in...CVE-2005-41485.0 MediumDecember 10, 2005
lyris technologies inc listmanagerThe TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source...CVE-2005-41476.5 MediumDecember 10, 2005
lyris technologies inc listmanagerLyris ListManager before 8.9b allows remote attackers to obtain sensitive information via a...CVE-2005-41465.0 MediumDecember 10, 2005
lyris technologies inc listmanagerThe MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database...CVE-2005-4145Public exploitEPSS 43.9%6.5 MediumDecember 10, 2005
lyris list managerLyris ListManager 5.0 through 8.9a allows remote attackers to add "ORDER BY" columns to SQL...CVE-2005-41447.5 HighDecember 10, 2005
lyris list managerSQL injection vulnerability in Lyris ListManager 5.0 through 8.9a allows remote attackers to...CVE-2005-4143Public exploit7.5 HighDecember 10, 2005
lyris technologies inc listmanagerThe web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination...CVE-2005-41427.5 HighDecember 10, 2005
ethereal group etherealStack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol...CVE-2005-3651Fix available7.5 HighDecember 10, 2005
aspmforumMultiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary...CVE-2005-4141Public exploit7.5 HighDecember 9, 2005
website baker bakerSQL injection vulnerability in admin/login/index.php in Website Baker 2.6.0 allows remote...CVE-2005-4140Public exploit7.5 HighDecember 9, 2005
thwboard betaMultiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to...CVE-2005-4139Public exploit7.5 HighDecember 9, 2005
No product listedMultiple cross-site scripting (XSS) vulnerabilities in ThWboard before 3 Beta 2.84 allow remote...CVE-2005-41384.3 MediumDecember 9, 2005
fad solutions drzes hmsSQL injection vulnerability in viewinvoice.php in DRZES HMS 3.2 allows remote attackers to...CVE-2005-41377.5 HighDecember 9, 2005
fad solutions drzes hmsCross-site scripting (XSS) vulnerability in login.php in DRZES HMS 3.2 allows remote attackers to...CVE-2005-4136Public exploit4.3 MediumDecember 9, 2005
simplemedia simplebbsDirect static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier...CVE-2005-4135Public exploit7.5 HighDecember 9, 2005
k-meleon project k-meleon, mozilla firefox, suite +1 more +3 moreMozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers...CVE-2005-4134Public exploitEPSS 12.6%5.0 MediumDecember 9, 2005
sun solarisSun Update Connection in Sun Solaris 10, when configured to use a web proxy, allows local users...CVE-2005-41332.1 LowDecember 9, 2005
contenido contendioUnspecified "security leak" vulnerability in Contenido before 4.6.4, when register_globals is on...CVE-2005-41327.5 HighDecember 9, 2005
microsoft excelUnspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3...CVE-2005-4131Public exploitEPSS 31.1%6.8 MediumDecember 9, 2005
realnetworks realplayer** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be...CVE-2005-41307.5 HighDecember 9, 2005
realnetworks realplayer** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be...CVE-2005-41267.5 HighDecember 9, 2005
oshBuffer overflow in OSH before 1.7-15 allows local users to execute arbitrary code via a long...CVE-2005-3533Public exploit7.2 HighDecember 9, 2005
docebolmsDirectory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4...CVE-2005-4095Public exploit5.0 MediumDecember 8, 2005
docebolmsconnector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute...CVE-2005-40947.5 HighDecember 8, 2005
checkpoint secureclient ng, vpn-1 secureclient +1 moreCheck Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows...CVE-2005-4093Public exploit6.5 MediumDecember 8, 2005
apple itunes, quicktime +1 moreMultiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes...CVE-2005-40927.5 HighDecember 8, 2005
1-script 1-searchCross-site scripting (XSS) vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote...CVE-2005-4091Public exploit4.3 MediumDecember 8, 2005
hp hp-uxUnspecified vulnerability in HP-UX B.11.00 to B.11.23, when IPSEC is running, allows remote...CVE-2005-409010.0 HighDecember 8, 2005
microsoft internet explorer, ie +1 moreMicrosoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions...CVE-2005-4089EPSS 22.1%7.1 HighDecember 8, 2005
w2b phpforumproSQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute...CVE-2005-40887.5 HighDecember 8, 2005
sugarcrm sugar suitePHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer...CVE-2005-4087Public exploit7.5 HighDecember 8, 2005
sugarcrm sugar suiteDirectory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer...CVE-2005-4086Public exploit5.0 MediumDecember 8, 2005
phpmyadminMultiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.7.0 allow remote...CVE-2005-3665Fix available4.3 MediumDecember 8, 2005
dell truemobile 2300 wireless broadband routerDell TrueMobile 2300 Wireless Broadband Router running firmware 3.0.0.8 and 5.1.1.6, and possibly...CVE-2005-36615.0 MediumDecember 8, 2005
phpbb styles extreme stylesxs_edit.php in the phpBB eXtreme Styles module 2.2.1 and earlier allows remote attackers to...CVE-2005-40845.0 MediumDecember 8, 2005
phpbb styles extreme styles phpbb moduleDirectory traversal vulnerability in xs_edit.php in the eXtreme Styles phpBB module 2.2.1 and...CVE-2005-40835.0 MediumDecember 8, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open