Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
December

CVEs published in December 2005

1,010 vulnerabilities, 37 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

fad solutions drzes hmsMultiple SQL injection vulnerabilities in DRZES HMS 3.2 allow remote attackers to execute...CVE-2005-43666.4 MediumDecember 20, 2005
flipMultiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to...CVE-2005-4365Public exploit4.3 MediumDecember 20, 2005
hot banana web content management suiteCross-site scripting (XSS) vulnerability in index.cfm in Hot Banana Web Content Management Suite...CVE-2005-4364Public exploit5.8 MediumDecember 20, 2005
komodo cmsCross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote...CVE-2005-4363Public exploit5.8 MediumDecember 20, 2005
komodo cmsSQL injection vulnerability in page.php in Komodo CMS 2.1 allows remote attackers to execute...CVE-2005-43625.0 MediumDecember 20, 2005
magnolia content management suiteCross-site scripting (XSS) vulnerability in search.html in Magnolia Content Management Suite 2.1...CVE-2005-4361Public exploit4.3 MediumDecember 20, 2005
microsoft internet information servicesThe URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional...CVE-2005-4360Public exploitEPSS 86.7%7.8 HighDecember 20, 2005
oodie odfaqSQL injection vulnerability in includes/core.inc.php in ODFaq 2.1.0 allows remote attackers to...CVE-2005-43596.4 MediumDecember 20, 2005
phpbb group phpbbadmin/admin_disallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path...CVE-2005-43585.0 MediumDecember 20, 2005
phpbb group phpbbCross-site scripting (XSS) vulnerability in phpBB 2.0.18, when "Allowed HTML tags" is enabled,...CVE-2005-43572.6 LowDecember 20, 2005
xmpie ustoreSQL injection vulnerability in UStore allows remote attackers to execute arbitrary SQL commands...CVE-2005-43567.5 HighDecember 20, 2005
xmpie ustoreMultiple cross-site scripting (XSS) vulnerabilities in UStore allow remote attackers to inject...CVE-2005-43554.3 MediumDecember 20, 2005
No product listedCross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier...CVE-2005-43544.3 MediumDecember 20, 2005
toenda software development toendacmsSQL injection vulnerability in index.php in toendaCMS 0.6.2.1, when configured to use a SQL...CVE-2005-43537.5 HighDecember 20, 2005
sun wbem servicesUnspecified vulnerability in WBEM Services A.01.x before A.01.05.12 and A.02.x before A.02.00.08...CVE-2005-43507.8 HighDecember 20, 2005
phpmyadmin** DISPUTED ** SQL injection vulnerability in server_privileges.php in phpMyAdmin 2.7.0 allows...CVE-2005-4349Fix availableDisputed6.5 MediumDecember 19, 2005
anthony boyd phpbb blogInvalid SQL syntax error in blog.php in phpBB Blog 2.2.2 and earlier allows remote attackers to...CVE-2005-43465.0 MediumDecember 18, 2005
macromedia coldfusionAdobe (formerly Macromedia) ColdFusion MX 7.0 exposes the password hash of the Administrator in...CVE-2005-43457.2 HighDecember 17, 2005
macromedia coldfusionAdobe (formerly Macromedia) ColdFusion MX 7.0 does not honor when the CFOBJECT /CreateObject(Java...CVE-2005-43442.1 LowDecember 17, 2005
macromedia coldfusionAdobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote...CVE-2005-43435.0 MediumDecember 17, 2005
macromedia coldfusionColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0...CVE-2005-43427.5 HighDecember 17, 2005
blackboard academic suiteBlackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other...CVE-2005-43415.0 MediumDecember 17, 2005
blackboard academic suiteCross-site scripting (XSS) vulnerability in Blackboard Learning and Community Portal System in...CVE-2005-43394.3 MediumDecember 17, 2005
blackboard academic suiteannouncement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6...CVE-2005-433810.0 HighDecember 17, 2005
blackboard academic suiteThe login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6...CVE-2005-43377.5 HighDecember 17, 2005
courseforum projectforumCross-site scripting (XSS) vulnerability in ProjectForum 4.7.0 and earlier allows remote...CVE-2005-43364.3 MediumDecember 17, 2005
courseforum projectforumProjectForum 4.7.0 and earlier allows remote attackers to cause a denial of service (crash) via a...CVE-2005-43357.8 HighDecember 17, 2005
john andersson zixforumSQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL...CVE-2005-4334Public exploit7.5 HighDecember 17, 2005
binary-concepts binary board systemMultiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and...CVE-2005-4333Public exploit4.3 MediumDecember 17, 2005
cisco network admission control manager and server system softwareCisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to...CVE-2005-43329.4 HighDecember 17, 2005
ihtml merchant merchantSQL injection vulnerability in merchant.ihtml in iHTML Merchant Version 2 Pro allows remote...CVE-2005-4331Public exploit7.5 HighDecember 17, 2005
No product listedSQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to...CVE-2005-4330Public exploit7.5 HighDecember 17, 2005
php arena pafiledbSQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and...CVE-2005-4329Public exploit7.5 HighDecember 17, 2005
university of arizona webglimpseCross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier...CVE-2005-4328Public exploit4.3 MediumDecember 17, 2005
No product listedMultiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow...CVE-2005-4327Public exploit4.3 MediumDecember 17, 2005
apc powerchute network shutdownThe web interface for American Power Conversion (APC) PowerChute Network Shutdown performs all...CVE-2005-43265.0 MediumDecember 17, 2005
driverseMultiple unspecified vulnerabilities in Driverse before 0.56b have unknown impact and attack...CVE-2005-432510.0 HighDecember 17, 2005
hitachi groupmax mail smtpHitachi Groupmax Mail SMTP 06-50 through 06-52-/A and 07-00 through 07-20 allows remote attackers...CVE-2005-43247.8 HighDecember 17, 2005
hitachi cosminexus collaboration portal, groupmax collaboration portal, groupmax collaboration web client +2 moreUnspecified vulnerability in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B,...CVE-2005-43237.8 HighDecember 17, 2005
hitachi cosminexus collaboration portal, groupmax collaboration portal, groupmax collaboration web client +2 moreMultiple cross-site scripting (XSS) vulnerabilities in Hitachi Cosminexus Collaboration Portal 06...CVE-2005-43224.3 MediumDecember 17, 2005
apani networks epiforce agentThe Internet Key Exchange version 1 (IKEv1) implementation in Apani Networks EpiForce 1.9 and...CVE-2005-43217.8 HighDecember 17, 2005
limbo cms cmsLimbo CMS 1.0.4.2 and earlier allows remote attackers to obtain the installation path of the...CVE-2005-43205.0 MediumDecember 17, 2005
limbo cms cmsDirectory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote...CVE-2005-4319Public exploit5.0 MediumDecember 17, 2005
No product listedSQL injection vulnerability in index.php in Limbo CMS 1.0.4.2 and earlier, with register_globals...CVE-2005-4318Public exploit7.5 HighDecember 17, 2005
limbo cms cmsLimbo CMS 1.0.4.2 and earlier, with register_globals off, does not protect the $_SERVER variable...CVE-2005-4317Public exploit6.8 MediumDecember 17, 2005
hp hp-uxHP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service...CVE-2005-4316Public exploit7.8 HighDecember 17, 2005
nicplex plexcart x3SQL injection vulnerability in the search function in Plexum PLEXCART X3 allows remote attackers...CVE-2005-43157.5 HighDecember 17, 2005
ppcal shopping cart shopping cartCross-site scripting (XSS) vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier...CVE-2005-4314Public exploit4.3 MediumDecember 17, 2005
almondsoft almond personalsSQL injection vulnerability in index.php in AlmondSoft Almond Personals 4.05 allows remote...CVE-2005-43137.5 HighDecember 17, 2005
No product listedSQL injection vulnerability in index.php in AlmondSoft Almond Classifieds 5.02 allows remote...CVE-2005-43127.5 HighDecember 17, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open