Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
December

CVEs published in December 2005

1,010 vulnerabilities, 37 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

wordpressWordPress before 1.5.2 allows remote attackers to obtain sensitive information via a direct...CVE-2005-4463Fix available5.0 MediumDecember 21, 2005
tolvaPHP remote file include vulnerability in usermods.php in Tolva PHP website system 0.1.0 allows...CVE-2005-4462Public exploit7.5 HighDecember 21, 2005
No product listedSQL injection vulnerability in index.php in Beehive Forum 0.6.2 and earlier allows remote...CVE-2005-4461Public exploit7.5 HighDecember 21, 2005
beehive forum forumCross-site scripting (XSS) vulnerability in Beehive Forum 0.6.2 and earlier allows remote...CVE-2005-4460Public exploit5.1 MediumDecember 21, 2005
vmware ace, gsx server, player +1 more +3 moreHeap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare...CVE-2005-4459EPSS 14.2%10.0 HighDecember 21, 2005
metadot portal serverGroup.pm in Metadot Portal Server 6.4.4 and earlier does not properly reset the $IS_OWNER, ...CVE-2005-44589.0 HighDecember 21, 2005
mailenable enterpriseMailEnable Enterprise 1.1 before patch ME-10009 allows remote attackers to cause a denial of...CVE-2005-44577.5 HighDecember 21, 2005
mailenable enterprise, professional +1 moreMultiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME...CVE-2005-4456Public exploit7.8 HighDecember 21, 2005
livejournalcleanhtml.pl 1.129 in LiveJournal CVS before Dec 13 2005 allows remote attackers to inject...CVE-2005-44555.0 MediumDecember 21, 2005
livejournalValidate-before-filter vulnerability in cleanhtml.pl 1.129 in LiveJournal CVS before Dec 7 2005,...CVE-2005-4454Public exploit4.3 MediumDecember 21, 2005
ultraapps issue managerUserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain...CVE-2005-44539.0 HighDecember 21, 2005
information call center call centerInformation Call Center stores the CallCenterData.mdb database under the web root with...CVE-2005-44525.0 MediumDecember 21, 2005
hp hp-uxUnspecified vulnerability in Software Distributor in HP-UX B.11.11 allows remote attackers to...CVE-2005-44517.5 HighDecember 21, 2005
phpmyadminCross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.7.0 allows remote attackers to...CVE-2005-44507.5 HighDecember 21, 2005
flatnukeverify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP...CVE-2005-4449Public exploit4.0 MediumDecember 21, 2005
flatnukeFlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and...CVE-2005-444810.0 HighDecember 21, 2005
qualcomm worldmailStack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute...CVE-2005-4267Public exploitEPSS 66.8%7.5 HighDecember 21, 2005
mcafee mcinsctl.dll, virusscan security center +1 moreThe ActiveX control in MCINSCTL.DLL for McAfee VirusScan Security Center does not use the...CVE-2005-36575.0 MediumDecember 21, 2005
No product listedSQL injection vulnerability in articles\articles_funcs.php in phpCOIN 1.2.2 allows remote...CVE-2005-44477.5 HighDecember 21, 2005
aspbiteCross-site scripting (XSS) vulnerability in index.asp in ASPBite 8.x allows remote attackers to...CVE-2005-44464.3 MediumDecember 21, 2005
david harris pegasus mailOff-by-one error in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allows remote attackers to...CVE-2005-44455.1 MediumDecember 21, 2005
david harris pegasus mailStack-based buffer overflow in the trace message functionality in Pegasus Mail 4.21a through 4...CVE-2005-44445.1 MediumDecember 21, 2005
gaucheUntrusted search path vulnerability in Gauche before 0.8.6-r1 on Gentoo Linux allows local users...CVE-2005-44437.2 HighDecember 21, 2005
openldapUntrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local...CVE-2005-44427.2 HighDecember 21, 2005
pvlan protocol protocolThe PVLAN protocol allows remote attackers to bypass network segmentation and spoof PVLAN traffic...CVE-2005-44415.0 MediumDecember 21, 2005
vlan protocol protocolThe 802.1q VLAN protocol allows remote attackers to bypass network segmentation and spoof VLAN...CVE-2005-44405.0 MediumDecember 21, 2005
elog elogdBuffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service ...CVE-2005-44397.8 HighDecember 21, 2005
dec2rar.dllHeap-based buffer overflow in Dec2Rar.dll 3.2.14.3, as distributed in the Symantec Antivirus...CVE-2005-44387.5 HighDecember 21, 2005
extended interior gateway routing protocol interior gateway routing protocolMD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as...CVE-2005-44377.5 HighDecember 21, 2005
No product listedExtended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS after 12.3(2)...CVE-2005-44367.8 HighDecember 21, 2005
abledesign d-manCross-site scripting (XSS) vulnerability in index.php AbleDesign D-Man 3.x allows remote...CVE-2005-4435Public exploit4.3 MediumDecember 21, 2005
abledesignCross-site scripting (XSS) vulnerability in AbleDesign ReSearch 2.x allows remote attackers to...CVE-2005-4434Fix available4.3 MediumDecember 21, 2005
esselbach internet solutions storyteller cmsCross-site scripting (XSS) vulnerability in search.php in Esselbach Storyteller CMS 1.8 allows...CVE-2005-44334.3 MediumDecember 21, 2005
playsmsCross-site scripting (XSS) vulnerability in index.php in PlaySMS 0.8 allows remote attackers to...CVE-2005-4432Public exploit4.3 MediumDecember 21, 2005
wowbbSQL injection vulnerability in WowBB 1.65 allows remote attackers to execute arbitrary SQL...CVE-2005-44317.5 HighDecember 21, 2005
No product listedSQL injection vulnerability in LogicBill 1.0 and earlier allows remote attackers to execute...CVE-2005-4430Public exploit7.5 HighDecember 21, 2005
cs-cartSQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL...CVE-2005-4429Public exploit7.5 HighDecember 21, 2005
fetchmailfetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote...CVE-2005-4348Fix available7.8 HighDecember 21, 2005
wouter verhelst nbdBuffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8...CVE-2005-3534Fix available7.5 HighDecember 21, 2005
cerberus helpdeskCross-site scripting (XSS) vulnerability in index.php in Cerberus Helpdesk allows remote...CVE-2005-44284.3 MediumDecember 20, 2005
cerberus helpdeskMultiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute...CVE-2005-4427Public exploit7.5 HighDecember 20, 2005
yabbInterpretation conflict in YaBB before 2.1 allows remote authenticated users to inject arbitrary...CVE-2005-44264.0 MediumDecember 20, 2005
kerio winroute firewallUnspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to...CVE-2005-44257.8 HighDecember 20, 2005
phpkitDirectory traversal vulnerability in PHPKIT 1.6.1 R2 and earlier might allow remote authenticated...CVE-2005-44246.5 MediumDecember 20, 2005
No product listedUnrestricted file upload vulnerability in PHPFM before 0.2.3 allows remote authenticated users to...CVE-2005-4423Public exploit6.5 MediumDecember 20, 2005
toenda software development toendacmsUnrestricted file upload vulnerability in toendaCMS before 0.6.2 Stable allows remote...CVE-2005-44226.5 MediumDecember 20, 2005
dev-editorDev-Editor 3.0 allows remote attackers to access any directory outside the web root whose name is...CVE-2005-44217.5 HighDecember 20, 2005
quicksquare development honeycomb archive enterpriseCross-site scripting (XSS) vulnerability in Honeycomb Archive Enterprise 3.0 allows remote...CVE-2005-44204.3 MediumDecember 20, 2005
quicksquare development honeycomb archive, honeycomb archive enterprise +1 moreMultiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb...CVE-2005-4419Public exploit7.5 HighDecember 20, 2005
anycom blue usb-130-250 software, belkin bluetooth software, widcomm bluetooth for windows +2 moreThe default configuration of Widcomm Bluetooth for Windows (BTW) 4.0.1.1500 and earlier, as...CVE-2005-4417Public exploit6.4 MediumDecember 20, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open