Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
December

CVEs published in December 2005

1,010 vulnerabilities, 37 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

tmlSQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute...CVE-2005-4416Public exploit7.5 HighDecember 20, 2005
tmlCross-site scripting (XSS) vulnerability in index.php in TML CMS 0.5 allows remote attackers to...CVE-2005-4415Public exploit4.3 MediumDecember 20, 2005
open lab teamworkUnspecified vulnerability in Teamwork 3 before alpha 1.7 has unknown impact and attack vectors,...CVE-2005-441410.0 HighDecember 20, 2005
ibm websphere application serverMultiple cross-site scripting (XSS) vulnerabilities in sample scripts in IBM WebSphere...CVE-2005-44134.3 MediumDecember 20, 2005
citrix program neighborhood clientCitrix Program Neighborhood client before 9.150 caches the user password in plaintext in the GUI...CVE-2005-44122.1 LowDecember 20, 2005
david harris mercury mail transport systemBuffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute...CVE-2005-4411Public exploitEPSS 64.7%7.5 HighDecember 20, 2005
nqcontentCross-site scripting (XSS) vulnerability in NQcontent 3 allows remote attackers to inject...CVE-2005-44104.3 MediumDecember 20, 2005
mmbaseCross-site scripting (XSS) vulnerability in MMBase 1.7.4 and earlier allows remote attackers to...CVE-2005-44094.3 MediumDecember 20, 2005
pc media miraserverMultiple SQL injection vulnerabilities in Miraserver 1.0 RC4 and earlier allow remote attackers...CVE-2005-4408Public exploit7.5 HighDecember 20, 2005
tmc visionpool mercury cmsCross-site scripting (XSS) vulnerability in index.cfm in Mercury CMS 4.0 and earlier allows...CVE-2005-44074.3 MediumDecember 20, 2005
tmc visionpool mercury cmsSQL injection vulnerability in index.cfm in Mercury CMS 4.0 and earlier allows remote attackers...CVE-2005-44067.5 HighDecember 20, 2005
random mouse software red queenredqueen.cgi in Red Queen 1.02 and earlier allows remote attackers to obtain the full server path...CVE-2005-44055.0 MediumDecember 20, 2005
media2 cms shopSQL injection vulnerability in default.asp in Media2 CMS Shop 18.x allows remote attackers to...CVE-2005-44047.5 HighDecember 20, 2005
qcm marwelSQL injection vulnerability in index.php in Marwel 2.7 and earlier allows remote attackers to...CVE-2005-4403Public exploit7.5 HighDecember 20, 2005
mailenable enterprise, professional +1 moreBuffer overflow in MailEnable Professional 1.71 and earlier, and Enterprise 1.1 and earlier,...CVE-2005-4402Public exploit6.5 MediumDecember 20, 2005
luteceCross-site scripting (XSS) vulnerability in Lutece 1.2.3 and earlier allows remote attackers to...CVE-2005-44014.3 MediumDecember 20, 2005
liferay portal enterpriseCross-site scripting (XSS) vulnerability in downloads/portal_ent in Liferay Portal Enterprise 3.6...CVE-2005-4400Public exploit4.3 MediumDecember 20, 2005
libertas solutions enterprise cmsCross-site scripting (XSS) vulnerability in search/index.php in Libertas Enterprise CMS 3.0 and...CVE-2005-4399Public exploit4.3 MediumDecember 20, 2005
No product listed** DISPUTED ** NOTE: the vendor has disputed this issue. Cross-site scripting (XSS)...CVE-2005-4398Disputed4.3 MediumDecember 20, 2005
icms content management systems icmsSQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute arbitrary...CVE-2005-43977.5 HighDecember 20, 2005
icms content management systems icmsCross-site scripting (XSS) vulnerability in admin/Default.asp in iCMS allows remote attackers to...CVE-2005-43964.3 MediumDecember 20, 2005
farcryCross-site scripting (XSS) vulnerability in FarCry 3.0 and earlier allows remote attackers to...CVE-2005-43954.3 MediumDecember 20, 2005
formicary ltd. epixCross-site scripting (XSS) vulnerability in EPiX 3.1.2 and earlier allows remote attackers to...CVE-2005-43944.3 MediumDecember 20, 2005
e-publishCross-site scripting (XSS) vulnerability in show.cfm in e-publish CMS 2.0 and earlier allows...CVE-2005-43934.3 MediumDecember 20, 2005
No product listedSQL injection vulnerability in printer_friendly.cfm in e-publish CMS 2.0 and earlier allows...CVE-2005-43927.5 HighDecember 20, 2005
mindroute software damoonCross-site scripting (XSS) vulnerability in damoon allows remote attackers to inject arbitrary...CVE-2005-43914.3 MediumDecember 20, 2005
contentservSQL injection vulnerability in index.php in ContentServ 3.1 and earlier allows remote attackers...CVE-2005-4390Public exploit7.5 HighDecember 20, 2005
contenssearch.cfm in CONTENS 3.0 and earlier allows remote attackers to obtain the full server path via...CVE-2005-43895.0 MediumDecember 20, 2005
contensCross-site scripting (XSS) vulnerability in search.cfm in CONTENS 3.0 and earlier allows remote...CVE-2005-43884.3 MediumDecember 20, 2005
conteniteCross-site scripting (XSS) vulnerability in home.php in contenite 0.11 and earlier allows remote...CVE-2005-43874.3 MediumDecember 20, 2005
colony cms, e-commerce cms, enterprise cms +1 more +3 moreCross-site scripting (XSS) vulnerability in Colony CMS 2.75 and earlier allows remote attackers...CVE-2005-43864.3 MediumDecember 20, 2005
cofaxCross-site scripting (XSS) vulnerability in search.htm in Cofax 2.0 RC3 and earlier allows remote...CVE-2005-4385Public exploit4.3 MediumDecember 20, 2005
citysoft community enterpriseCitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server...CVE-2005-43846.4 MediumDecember 20, 2005
citysoft community enterpriseCross-site scripting (XSS) vulnerability in index.cfm in CitySoft Community Enterprise 4.x allows...CVE-2005-43834.3 MediumDecember 20, 2005
citysoft community enterpriseSQL injection vulnerability in CitySoft Community Enterprise 4.x allows remote attackers to...CVE-2005-43827.5 HighDecember 20, 2005
caravel cms cmsMultiple cross-site scripting (XSS) vulnerabilities in Caravel CMS 3.0 Beta 1 and earlier allow...CVE-2005-4381Public exploit4.3 MediumDecember 20, 2005
bitweaverMultiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to...CVE-2005-4380Public exploit7.5 HighDecember 20, 2005
No product listedMultiple cross-site scripting (XSS) vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote...CVE-2005-43794.3 MediumDecember 20, 2005
nma baseline cmsSQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers...CVE-2005-4378Public exploit7.5 HighDecember 20, 2005
nma baseline cmsCross-site scripting (XSS) vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows...CVE-2005-43774.3 MediumDecember 20, 2005
box uk amaxusDirectory traversal vulnerability in Amaxus 3 and earlier allows remote attackers to access...CVE-2005-43765.0 MediumDecember 20, 2005
box uk amaxusCross-site scripting (XSS) vulnerability in Amaxus 3 and earlier allows remote attackers to...CVE-2005-4375Public exploit4.3 MediumDecember 20, 2005
allintaMultiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote...CVE-2005-4374Public exploit4.3 MediumDecember 20, 2005
No product listedAdaptive Website Framework (AWF) 2.10 and earlier allows remote attackers to obtain the full path...CVE-2005-43735.0 MediumDecember 20, 2005
liquid bytes technologies adaptive website frameworkCross-site scripting (XSS) vulnerability in account.html in Adaptive Website Framework (AWF) 2.10...CVE-2005-43724.3 MediumDecember 20, 2005
acidcatAcidcat 2.1.13 and earlier stores the database under the web root with insufficient access...CVE-2005-4371Public exploit5.0 MediumDecember 20, 2005
acidcatSQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote...CVE-2005-4370Public exploit7.5 HighDecember 20, 2005
the collective acuity cmsCross-site scripting (XSS) vulnerability in Acuity CMS 2.6.2 allows remote attackers to inject...CVE-2005-43694.3 MediumDecember 20, 2005
roundcube webmailroundcube webmail Alpha, with a default high verbose level ($rcmail_config['debug_level'] = 1),...CVE-2005-43685.0 MediumDecember 20, 2005
fad solutions drzes hmsCross-site scripting (XSS) vulnerability in register_domain.php in DRZES HMS 3.2 allows remote...CVE-2005-43675.8 MediumDecember 20, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open