CVEs published in December 2005
1,010 vulnerabilities, 37 critical, 0 exploited.
- dcscripts dcforum, dcforum\+ +1 moreCross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x,...4.3 Medium
- ssh tectia serverSSH Tectia Server 5.0.0 (A, F, and T), when allowing host-based authentication only, allows users...7.5 High
- scriptscenter ezupload proSQL injection vulnerability in ezUpload Pro 2.2 and earlier allows remote attackers to execute...7.5 High
- scriptscenter ezupload proindex.php in ezUpload Pro 2.2 and earlier allows remote attackers to include files via the mode...7.5 High
- jonathan bravata scarecrowCross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to...4.3 Medium
- focalmedia.net sitenet bbsMultiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote...4.3 Medium
- edgewall software tracCross-site scripting (XSS) vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote...4.3 Medium
- indexcor ezdatabaseindex.php in ezDatabase 2.1.2 and earlier allows remote attackers to obtain sensitive information...5.0 Medium
- indexcor ezdatabaseSQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers...7.5 High
- indexcor ezdatabaseDirectory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote...5.0 Medium
- phpxplorerCross-site scripting (XSS) vulnerability in phpXplorer 0.9.12 and earlier allows remote attackers...4.3 Medium
- libremailFormat string vulnerability in the lire_pop function in pop.c in libremail 1.1.0 and earlier,...7.5 High
- atlantpro.com atlant proCross-site scripting (XSS) vulnerability in atl.cgi in Atlant Pro 4.02 and earlier allows remote...4.3 Medium
- atlantpro.com atlantforumCross-site scripting (XSS) vulnerability in atl.cgi in AtlantForum 4.02 and earlier allows remote...4.3 Medium
- bbboardCross-site scripting (XSS) vulnerability in bbBoard 2.56 and earlier allows remote attackers to...4.3 Medium
- citrix ica program neighborhood clientHeap-based buffer overflow in Citrix Program Neighborhood client 9.0 and earlier allows remote...7.5 High
- No product listedAppServ Open Project 2.5.3 allows remote attackers to cause a denial of service via a large HTTP...7.8 High
- xigla absolute image gallery xeCross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.x allows remote attackers...4.3 Medium
- alkacon opencmsAlkacon OpenCms XSS via username during login4.3 Medium
- kryptronic clickcartproCross-site scripting (XSS) vulnerability in cp-app.cgi in ClickCartPro (CCP) 5.1 and earlier...4.3 Medium
- internet express products commercesqlCross-site scripting (XSS) vulnerability in CommerceSQL 1.0 and earlier allows remote attackers...4.3 Medium
- No product listedCross-site scripting (XSS) vulnerability in cart.cgi in ECTOOLS Onlineshop 1.0 and earlier allows...4.3 Medium
- soft4e ecw-cartCross-site scripting (XSS) vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote...4.3 Medium
- edatcat shopping cart systemCross-site scripting (XSS) vulnerability in EDCstore.pl in eDatCat 0.3 allows remote attackers to...4.3 Medium
- marmaraweb e-commerceCross-site scripting (XSS) vulnerability in index.php in MarmaraWeb E-commerce allows remote...4.3 Medium
- marmaraweb e-commercePHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute...7.5 High
- No product listedUnspecified vulnerability in PhpLogCon before 1.2.2 allows remote attackers to use arbitrary...7.5 High
- dick copits pdestoreCross-site scripting (XSS) vulnerability in pdestore.cgi in Dick Copits PDEstore 1.8 and earlier...4.3 Medium
- static store staticstoreCross-site scripting (XSS) vulnerability in StaticStore Search Engine 1.189A and earlier allows...4.3 Medium
- nightmedia the city shopCross-site scripting (XSS) vulnerability in The CITY Shop 1.3 and earlier allows remote attackers...4.3 Medium
- zaygo domaincartCross-site scripting (XSS) vulnerability in Zaygo DomainCart 2.0 and earlier allows remote...4.3 Medium
- zaygo hostingcartCross-site scripting (XSS) vulnerability in Zaygo HostingCart 2.0 and earlier allows remote...4.3 Medium
- No product listedUntrusted search path vulnerability in CMake before 2.2.0-r1 on Gentoo Linux allows local users...7.2 High
- gentoo qt-unixodbcUntrusted search path vulnerability in Qt-UnixODBC before 3.3.4-r1 on Gentoo Linux allows local...7.2 High
- larry wall perlUntrusted search path vulnerability in Perl before 5.8.7-r1 on Gentoo Linux allows local users in...7.2 High
- toenda software development toendacmsCross-site scripting (XSS) vulnerability in index.php in toendaCMS before 0.7 Beta allows remote...4.3 Medium
- westell versalinkWestell Versalink 327W allows remote attackers to cause a denial of service (device crash) via an...7.8 High
- scientific atlanta dpx2100 cable modemScientific Atlanta DPX2100 Cable Modem allows remote attackers to cause a denial of service ...7.8 High
- proxim ap-2000, ap-4000, ap-600 +7 more +9 moreWireless Access Points (AP) for (1) Avaya AP-3 through AP-6 2.5 to 2.5.4, and AP-7/AP-8 2.5 and...7.5 High
- businessobjects webintelligenceUnspecified vulnerability in Business Objects WebIntelligence 6.5x allows remote attackers to...5.0 Medium
- ibm aixMultiple unspecified vulnerabilities in (1) getShell and (2) getCommand in IBM AIX 5.3 allow...2.1 Low
- ibm aixMultiple buffer overflows in IBM AIX 5.1, 5.2, and 5.3 allow remote attackers to execute...10.0 High
- ibm aixBuffer overflow in the malloc debug system in IBM AIX 5.3 allows local users to execute arbitrary...7.2 High
- watchfire appscan qaBuffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute...7.5 High
- microsoft ie, windows xp, windows 2003 server +2 moremshtml.dll in Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers...7.8 High
- gnu cpioBuffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local...3.7 Low
- alt-n mdaemon, worldclient +1 moreWorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a...7.5 High
- triangle solutions php support ticketsMultiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote...7.5 High
- envolutionSQL injection vulnerability in the News module in Envolution allows remote attackers to execute...7.5 High
- envolutionCross-site scripting (XSS) vulnerability in the News module in Envolution allows remote attackers...4.3 Medium
- Show moreLoading…