Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
December

CVEs published in December 2005

1,010 vulnerabilities, 37 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

macromedia flash media serverThe Administration Service (FMSAdmin.exe) in Macromedia Flash Media Server 2.0 r1145 allows...CVE-2005-4216Public exploit7.8 HighDecember 14, 2005
motorola cable modemMotorola SB5100E Cable Modem allows remote attackers to cause a denial of service (device crash)...CVE-2005-42157.8 HighDecember 14, 2005
coinsoft technologies phpcoinphpCOIN 1.2.2 allows remote attackers to obtain the installation path via a direct request to...CVE-2005-42145.0 MediumDecember 14, 2005
coinsoft technologies phpcoinSQL injection vulnerability in mod.php in phpCOIN 1.2.2 allows remote attackers to execute...CVE-2005-4213Public exploit7.5 HighDecember 14, 2005
coinsoft technologies phpcoinDirectory traversal vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote...CVE-2005-4212Public exploit5.0 MediumDecember 14, 2005
coinsoft technologies phpcoinPHP remote file inclusion vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote...CVE-2005-4211Public exploit7.5 HighDecember 14, 2005
sco unixwareBuffer overflow in uidadmin in SCO Unixware 7.1.3 and 7.1.4 allows local users to execute...CVE-2005-39034.6 MediumDecember 14, 2005
microsoft internet explorer, ie +1 moreMicrosoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service...CVE-2005-2831EPSS 30.1%7.5 HighDecember 14, 2005
microsoft internet explorer, ie +1 moreMicrosoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires...CVE-2005-2830EPSS 35.5%5.0 MediumDecember 14, 2005
microsoft internet explorer, ie +1 moreMultiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted...CVE-2005-2829EPSS 18.6%5.1 MediumDecember 14, 2005
microsoft windows nt, windows 2000 +1 moreThe thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows...CVE-2005-2827Public exploit7.2 HighDecember 14, 2005
apache http serverCross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev...CVE-2005-3352Fix availableEPSS 73.7%4.3 MediumDecember 13, 2005
opera browserOpera before 8.51, when running on Windows with Input Method Editor (IME) installed, allows...CVE-2005-42105.0 MediumDecember 13, 2005
alt-n mdaemon, worldclient +1 moreWorldClient webmail in Alt-N MDaemon 8.1.3 allows remote attackers to prevent arbitrary users...CVE-2005-4209Public exploit4.3 MediumDecember 13, 2005
flatnukeDirectory traversal vulnerability in Flatnuke 2.5.6 allows remote attackers to access arbitrary...CVE-2005-4208Public exploit5.0 MediumDecember 13, 2005
btgrup admin webcontroller scriptSQL injection vulnerability in BTGrup Admin WebController Script allows remote attackers to...CVE-2005-4207Public exploit7.5 HighDecember 13, 2005
blackboard academic suiteBlackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other...CVE-2005-4206Public exploit6.1 MediumDecember 13, 2005
locazo locazolist classifiedsCross-site scripting (XSS) vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows...CVE-2005-4205Public exploit4.3 MediumDecember 13, 2005
logisphereCross-site scripting (XSS) vulnerability in LogiSphere 0.9.9j allows remote attackers to inject...CVE-2005-42044.3 MediumDecember 13, 2005
logisphereLogiSphere 0.9.9j does not restrict the number of messages that can be sent, which allows remote...CVE-2005-42037.8 HighDecember 13, 2005
logisphereMultiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to...CVE-2005-4202Public exploit5.0 MediumDecember 13, 2005
showalbumonline my album onlineDirectory traversal vulnerability in My Album Online 1.0 allows remote attackers to access...CVE-2005-42015.0 MediumDecember 13, 2005
mybulletinboardMultiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0 have unknown impact and...CVE-2005-420010.0 HighDecember 13, 2005
mybbMultiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) before 1.0 allow remote...CVE-2005-41997.5 HighDecember 13, 2005
netrefSQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute...CVE-2005-4198Public exploit7.5 HighDecember 13, 2005
nortel ssl vpntunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands...CVE-2005-4197Public exploitEPSS 11.9%7.5 HighDecember 13, 2005
internet scout scout portal toolkitMultiple cross-site scripting (XSS) vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and...CVE-2005-4196Public exploit4.3 MediumDecember 13, 2005
internet scout scout portal toolkitMultiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow...CVE-2005-4195Public exploit7.5 HighDecember 13, 2005
innovateware sights n sounds streaming media serverBuffer overflow in MediaServerList.exe in Sights 'n Sounds Streaming Media Server 2.0.3.a allows...CVE-2005-4194Public exploit5.0 MediumDecember 13, 2005
No product listedCross-site scripting (XSS) vulnerability in UseBB before 0.7 allows remote attackers to inject...CVE-2005-41934.3 MediumDecember 13, 2005
No product listedMultiple cross-site scripting (XSS) vulnerabilities in templates/notepads/notepads.inc in Horde...CVE-2005-41923.5 LowDecember 13, 2005
horde nag task list manager h3Multiple cross-site scripting (XSS) vulnerabilities in templates/tasklists/tasklists.inc in Horde...CVE-2005-41913.5 LowDecember 13, 2005
horde application frameworkMultiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework before 3.0.8...CVE-2005-41903.5 LowDecember 13, 2005
horde kronolith h3Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith H3 before 2.0.6 allow...CVE-2005-4189Fix available3.5 LowDecember 13, 2005
debian linux, dropbear ssh project ssh +1 moreBuffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary...CVE-2005-4178Fix available6.5 MediumDecember 12, 2005
cfmagic magic book personal, magic book professional +1 moreCross-site scripting (XSS) vulnerability in book.cfm in Magic Book Personal and Professional 2.0...CVE-2005-4177Public exploit4.3 MediumDecember 12, 2005
No product listedAWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password...CVE-2005-4176Public exploit2.1 LowDecember 11, 2005
insyde biosInsyde BIOS V190 does not clear the keyboard buffer after reading the BIOS password during system...CVE-2005-41752.1 LowDecember 11, 2005
No product listedeFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct...CVE-2005-41747.5 HighDecember 11, 2005
efiction project efictioneFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing...CVE-2005-41735.0 MediumDecember 11, 2005
efiction project efictioneFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information via a direct...CVE-2005-41725.0 MediumDecember 11, 2005
efiction project efictionThe "Upload new image" command in the "Manage Images" eFiction 1.1, when members are allowed to...CVE-2005-4171Public exploit7.5 HighDecember 11, 2005
efiction project efictionSQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL...CVE-2005-4170Public exploit7.5 HighDecember 11, 2005
efiction project efictionMultiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute...CVE-2005-4169Public exploit7.5 HighDecember 11, 2005
efiction project efictionMultiple SQL injection vulnerabilities in eFiction 1.0, 1.1, and 2.0 allow remote attackers to...CVE-2005-4168Public exploit7.5 HighDecember 11, 2005
efiction project efictionCross-site scripting (XSS) vulnerability in eFiction 1.0 and 1.1 allows remote attackers to...CVE-2005-4167Public exploit4.3 MediumDecember 11, 2005
No product listedCross-site scripting (XSS) vulnerability in password.asp in DUWare DUportal Pro 3.4.3 allows...CVE-2005-4166Public exploit4.3 MediumDecember 11, 2005
asp-dev asp resources forumMultiple SQL injection vulnerabilities in ASP-DEV ASP Resources Forum allow remote attackers to...CVE-2005-41657.5 HighDecember 11, 2005
widgetmonkey php-addressbookSQL injection vulnerability in view.php in PHP-addressbook 1.2 allows remote attackers to execute...CVE-2005-41647.5 HighDecember 11, 2005
milky captcha phpDirectory traversal vulnerability in captcha.php in Captcha PHP 0.9 allows remote attackers to...CVE-2005-41635.0 MediumDecember 11, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open