CVEs published in December 2005
1,010 vulnerabilities, 37 critical, 0 exploited.
- floosietek ftgateMultiple format string vulnerabilities in FTGate Technology (formerly known as Floosietek) FTGate...7.5 High
- floosietek ftgateMultiple cross-site scripting (XSS) vulnerabilities in FTGate Technology (formerly known as...5.8 Medium
- adtran netvantaBuffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta...10.0 High
- adtran netvantaFormat string vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation in...10.0 High
- adtran netvantaThe Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E...5.0 Medium
- enterprise heart connectorSQL injection vulnerability in main.php in Enterprise Heart Enterprise Connector 1.0.2 allows...7.5 High
- rsshrssh 2.0.0 through 2.2.3 allows local users to bypass access restrictions and gain root...7.2 High
- microsoft windows 2003 server, windows xp +1 moreThe Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote...7.5 High
- deerfield visnetic mail server, icewarp web mail, merak mail server +2 moremail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic...5.0 Medium
- deerfield visnetic mail server, icewarp web mail, merak mail server +2 moreIceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3...6.5 Medium
- deerfield visnetic mail server, icewarp web mail, merak mail server +2 moredir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail...5.0 Medium
- deerfield visnetic mail server, icewarp web mail, merak mail server +2 morePHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3...7.5 High
- dev web management systemCross-site scripting (XSS) vulnerability in add.php in DEV web management system 1.5 and earlier...4.3 Medium
- dev web management systemMultiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote...7.5 High
- kmint21 software golden ftp serverBuffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a...7.5 High
- sun solaris pc netlinkThe (1) slsmgr and (2) slsadmin programs in Sun Solaris PC NetLink 2.0 create temporary files...7.2 High
- simpbookCross-site scripting (XSS) vulnerability in sign.php in codegrrl SimpBook 1.0, when html_enable...4.3 Medium
- oracle application server discussion forum portletThe PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote...5.0 Medium
- oracle application server discussion forum portletCross-site scripting (XSS) vulnerability in Oracle Application Server (OracleAS) Discussion Forum...4.3 Medium
- rws statistics counterSQL injection vulnerability in the "user area" in RWS Statistics Counter before 2.4.1 allows...7.5 High
- epic designs eggblogCross-site scripting (XSS) vulnerability in home/search.php in eggblog 2.0 allows remote...4.3 Medium
- epic designs eggblogsearch.php in eggblog 2.0 allows remote attackers to obtain the full path via an invalid q...7.8 High
- netdirect shopengineCross-site scripting (XSS) vulnerability in search.asp in NetDirect ShopEngine allows remote...4.3 Medium
- mozilla bugzillaThe shadow database feature (syncshadowdb) in Bugzilla 2.9 through 2.16.10 allows local users to...7.5 High
- scponlyArgument injection vulnerability in scponlyc in scponly 4.1 and earlier, when both scp and rsync...7.5 High
- scponlyscponlyc in scponly 4.1 and earlier, when the operating system supports LD_PRELOAD mechanisms,...7.2 High
- alstrasoft epayMultiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Enterprise 3.0 (formerly...5.1 Medium
- chatspotThe Chatspot 2.0.0a7 module for phpBB might allow remote attackers to impersonate other users via...7.5 High
- chatspotSQL injection vulnerability in the Chatspot 2.0.0a7 module for phpBB allows remote attackers to...7.5 High
- direct news newsMultiple SQL injection vulnerabilities in Direct News 4.9 allow remote attackers to execute...7.5 High
- clearswift mimesweeper for webClearswift MIMEsweeper For Web (a.k.a. WEBsweeper) 4.0 through 5.1 allows remote attackers to...5.0 Medium
- sygate technologies protection agentSmcGui.exe in Sygate Protection Agent 5.0 build 6144 allows local users to obtain management...4.6 Medium
mantisDebianMantis 1.0.0rc3 does not properly handle "Make note private" when a bug is being resolved, which...5.0 Medium- mantisMantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote...5.0 Medium
- mantisMultiple cross-site scripting (XSS) vulnerabilities in the view_filters_page.php filters script...4.3 Medium
mantisDebianCRLF injection vulnerability in Mantis 1.0.0rc3 and earlier allows remote attackers to modify...5.0 Medium- mantisUnspecified "port injection" vulnerabilities in filters in Mantis 1.0.0rc3 and earlier have...5.0 Medium
- mantisMultiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1...7.5 High
mantisDebianMantis before 0.19.4 allows remote attackers to bypass the file upload size restriction by...7.5 High- php fusion fusionSQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to...7.5 High
- php fusion fusionMultiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow...4.3 Medium
- tkdifftkdiff before 4.1.1 allows local users to overwrite arbitrary files via a symlink attack on...4.6 Medium
- dhis tools dns packageDHIS tools DNS package (dhis-tools-dns) before 5.0 allows local users to overwrite arbitrary...2.1 Low
- lois software webdb** DISPUTED ** SQL injection vulnerability in WebDB 1.1 and earlier allows remote attackers to...7.5 High
- webwasher csm appliance suite** DISPUTED ** The encapsulation script mechanism in Webwasher CSM Appliance Suite 5.x uses case...5.0 Medium
- wandsoft e-searchCross-site scripting (XSS) vulnerability in WANDSOFT e-SEARCH allows remote attackers to inject...4.3 Medium
- waxtrappCross-site scripting (XSS) vulnerability in WAXTRAPP 3.0.1 and earlier allows remote attackers to...4.3 Medium
- curtis hawthorne tn3270 resource gatewayFormat string vulnerability in TN3270 Resource Gateway 1.1.0 allows local users to cause a denial...4.6 Medium
- extensis netpublish serverDirectory traversal vulnerability in server.np in NetPublish Server 7 allows remote attackers to...5.0 Medium
- parallel tools consortium ptoolsSQL injection vulnerability in index.asp in pTools allows remote attackers to execute arbitrary...7.5 High
- Show moreLoading…