CVEs published in December 2005
1,010 vulnerabilities, 37 critical, 0 exploited.
- nexus concepts dev houndNexus Concepts Dev Hound 2.24 and earlier allows remote attackers to obtain the installation path...5.0 Medium
- nexus concepts dev houndMultiple cross-site scripting (XSS) vulnerabilities in Nexus Concepts Dev Hound 2.24 and earlier...4.3 Medium
- nexus concepts dev houndNexus Concepts Dev Hound 2.24 and earlier stores username and password information in cleartext...4.6 Medium
- mcafee virusscan enterprise, common management agent +1 moreUnquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA...7.2 High
- ketmBuffer overflow in KETM 0.0.6 allows local users to execute arbitrary code via unknown vectors.7.5 High
- apple mac os x, safari, textedit +1 more +3 moreThe khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and...7.8 High
- linux kernelLinux kernel 2.4 and 2.6 allows attackers to cause a denial of service (memory exhaustion and...4.9 Medium
- net-square httprinthttprint v202, and possibly other versions before v301, allows remote attackers to cause a denial...5.0 Medium
- net-square httprintCross-site scripting (XSS) vulnerability in httprint v202, and possibly other versions before...4.3 Medium
- mediawikiMediaWiki before 1.5.4 uses a hard-coded "internal placeholder string", which allows remote...4.3 Medium
- musicboxSQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary SQL...7.5 High
- cisco secure access control server, adaptive security appliance software, pix asa ids +18 more +20 moreThe Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an...7.5 High
- text-e cmsCross-site scripting (XSS) vulnerability in Text-e 1.6.4 and earlier allows remote attackers to...4.3 Medium
- tangora portal cmsCross-site scripting (XSS) vulnerability in Tangora Portal CMS 4.0 and earlier allows remote...4.3 Medium
- forum one syntaxcmsCross-site scripting (XSS) vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote...4.3 Medium
- spiremedia mx7** DISPUTED ** SQL injection vulnerability in index.cfm in SpireMedia mx7 allows remote...7.5 High
- spipCross-site scripting (XSS) vulnerability in SPIP 1.8.2 and earlier allows remote attackers to...2.6 Low
- speartekCross-site scripting (XSS) vulnerability in SpearTek 6.0 and earlier allows remote attackers to...6.8 Medium
- starphire technologies sitesage, sitesage-ee, sitesage-le +2 more +4 moreCross-site scripting (XSS) vulnerability in Starphire SiteSage 5.0.18 and earlier allows remote...4.3 Medium
- sitekit solutions cmsMultiple cross-site scripting (XSS) vulnerabilities in Sitekit CMS 6.6 and earlier allow remote...4.3 Medium
- commercial interactive media scoopMultiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote...4.3 Medium
- scoopCross-site scripting (XSS) vulnerability in Scoop 1.1 RC1 and earlier allows remote attackers to...4.3 Medium
- computeroil redakto cmsMultiple cross-site scripting (XSS) vulnerabilities in index.tpl in Redakto WCMS 3.2 and earlier...4.3 Medium
- ramsite r1 cmsCross-site scripting (XSS) vulnerability in RAMSite R|1 CMS 1.0 and earlier allows remote...4.3 Medium
- quantum art qp7 enterprise** DISPUTED ** SQL injection vulnerability in Quantum Art QP7.Enterprise (formerly Q-Publishing)...7.5 High
- iatek projectappMultiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote...4.3 Medium
- iatek intranetappMultiple cross-site scripting (XSS) vulnerabilities in IntranetApp 3.3 and earlier allow remote...4.3 Medium
- iatek siteenableCross-site scripting (XSS) vulnerability in login.asp in SiteEnable 3.3 and earlier allows remote...4.3 Medium
- iatek portalappCross-site scripting (XSS) vulnerability in login.asp in PortalApp 3.3 and earlier allows remote...6.8 Medium
- polopoly** DISPUTED ** Cross-site scripting (XSS) vulnerability in Polopoly 9 and earlier allows remote...6.8 Medium
- plexcor cmsCross-site scripting (XSS) vulnerability in Plexcor CMS 4.0 and earlier allows remote attackers...6.8 Medium
- phpslashSQL injection vulnerability in article.php in phpSlash 0.8.1 and earlier allows remote attackers...7.5 High
- papooMultiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to...7.5 High
- No product listedCross-site scripting (XSS) vulnerability in papaya CMS 4.0.4 and earlier allows remote attackers...6.8 Medium
- openedit inc openeditCross-site scripting (XSS) vulnerability in store/search/results.html in OpenEdit 4.0 and earlier...6.8 Medium
- alkacon opencmsCross-site scripting (XSS) vulnerability in OpenCms 6.0.3 and earlier allows remote attackers to...6.8 Medium
- redhat enterprise linux, enterprise linux desktop +1 moreudev does not properly set permissions on certain files in /dev/input, which allows local users...4.6 Medium
- rarlab winrarBuffer overflow in the "Add to archive" command in WinRAR 3.51 allows user-assisted attackers to...5.1 Medium
- macromedia jrunUnspecified vulnerability in Macromedia JRun 4 web server (JWS) allows remote attackers to view...5.0 Medium
- macromedia jrunStack-based buffer overflow in the Macromedia JRun 4 web server (JWS) allows remote attackers to...7.5 High
- avaya modular messaging message storage serverPOP3 service in Avaya Modular Messaging Message Storage Server (MSS) 2.0 SP 4 and earlier allows...5.0 Medium
- blender blenloaderHeap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0...7.5 High
- phpgedviewMultiple direct static code injection vulnerabilities in PHPGedView 3.3.7 and earlier allow...7.5 High
- No product listedPHP remote file include vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier...7.5 High
- phpgedviewDirectory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows...5.0 Medium
- interactive intelligence interaction sip proxyHeap-based buffer overflow in the SIPParser function in i3sipmsg.dll in Interaction SIP Proxy...7.5 High
- nec univergeThe Internet Key Exchange version 1 (IKEv1) implementation in NEC UNIVERGE IX1000, IX2000, and...7.5 High
- No product listedIngate Firewall before 4.3.4 and SIParator before 4.3.4 allows remote attackers to cause a denial...7.8 High
- phpbb group phpbbA "missing request validation" error in phpBB 2 before 2.0.18 allows remote attackers to edit...5.0 Medium
- phpbb group phpbbSQL injection vulnerability in phpBB 2 before 2.0.18 allows remote attackers to execute arbitrary...7.5 High
- Show moreLoading…