Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
December

CVEs published in December 2005

1,010 vulnerabilities, 37 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

kayako liveresponseMultiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow...CVE-2005-2461Public exploit6.4 MediumDecember 31, 2005
kayako liveresponseMultiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote...CVE-2005-2460Public exploit5.8 MediumDecember 31, 2005
ibm lotus notesIBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions (Everyone...CVE-2005-24544.6 MediumDecember 31, 2005
rim blackberry enterprise serverThe BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES)...CVE-2005-23445.0 MediumDecember 31, 2005
rim blackberry, blackberry desktop manager, blackberry device software +2 moreResearch in Motion (RIM) BlackBerry Handheld web browser for BlackBerry Handheld before 4.0.2...CVE-2005-23432.6 LowDecember 31, 2005
rim blackberry router, blackberry enterprise server +1 moreResearch in Motion (RIM) BlackBerry Router allows remote attackers to cause a denial of service ...CVE-2005-23427.8 HighDecember 31, 2005
rim blackberry attachment service, blackberry enterprise server +1 moreHeap-based buffer overflow in Research in Motion (RIM) BlackBerry Attachment Service allows...CVE-2005-23417.5 HighDecember 31, 2005
apple quicktimeHeap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute...CVE-2005-2340Public exploitEPSS 25.5%7.5 HighDecember 31, 2005
dnrdDomain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to cause a denial of...CVE-2005-23165.0 MediumDecember 31, 2005
dnrdBuffer overflow in Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to...CVE-2005-23157.5 HighDecember 31, 2005
apple mac os xUnspecified vulnerability in the Apple Mac OS X kernel before 10.4.2 allows remote attackers to...CVE-2005-21945.0 MediumDecember 31, 2005
novell netmailNovell NetMail 3.5.2a, 3.5.2b, and 3.5.2c, when running on Linux, sets the owner and group ID to...CVE-2005-19761.7 LowDecember 31, 2005
ipswitch whatsup small businessDirectory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers...CVE-2005-1939Public exploitEPSS 63.6%5.0 MediumDecember 31, 2005
squirrelmail gpg pluginThe G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to...CVE-2005-1924Public exploitEPSS 10.3%9.3 HighDecember 31, 2005
gnu tar, redhat enterprise linux, enterprise linux desktop +1 more +3 moreThe original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat...CVE-2005-1918Fix available2.6 LowDecember 31, 2005
php poll creator poll creatorPHP remote file inclusion vulnerability in poll_vote.php in PHP Poll Creator 1.01 allows remote...CVE-2005-17556.4 MediumDecember 31, 2005
apache tomcat tomcat, sun javamail +1 more** DISPUTED ** JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote...CVE-2005-1754Public exploitDisputed5.0 MediumDecember 31, 2005
sun javamail** DISPUTED ** ReadMessage.jsp in JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0...CVE-2005-1753Disputed5.0 MediumDecember 31, 2005
gforgeviewFile.php in the scm component of Gforge before 4.0 allows remote attackers to execute...CVE-2005-1752Public exploit6.4 MediumDecember 31, 2005
novell imanagerMultiple vulnerabilities in the OpenSSL ASN.1 parser, as used in Novell iManager 2.0.2, allows...CVE-2005-17309.3 HighDecember 31, 2005
apple mac os xThe CoreGraphics Window Server in Mac OS X 10.4.1 allows local users with console access to gain...CVE-2005-17264.6 MediumDecember 31, 2005
qnx rtosUntrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows...CVE-2005-1528Public exploit7.2 HighDecember 31, 2005
No product listedUnspecified vulnerability in the Mac OS X kernel before 10.3.8 allows local users to cause a...CVE-2005-09852.1 LowDecember 31, 2005
linux kernelThe /proc handling (proc/base.c) Linux kernel 2.4 before 2.4.17 allows local users to cause a...CVE-2005-04894.9 MediumDecember 31, 2005
linux kernelThe Linux kernel before 2.6.11 on the Itanium IA64 platform has certain "ptrace corner cases"...CVE-2005-01362.1 LowDecember 31, 2005
powerdnsThe DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial...CVE-2005-0038Fix available5.0 MediumDecember 31, 2005
dnrdThe DNS implementation of DNRD before 2.10 allows remote attackers to cause a denial of service...CVE-2005-00375.0 MediumDecember 31, 2005
delegateThe DNS implementation in DeleGate 8.10.2 and earlier allows remote attackers to cause a denial...CVE-2005-00365.0 MediumDecember 31, 2005
spb kiosk engineSpb Kiosk Engine 1.0.0.1 allows local users to bypass restrictions on allowed applications via (1...CVE-2005-45904.6 MediumDecember 30, 2005
spb kiosk engineSpb Kiosk Engine 1.0.0.1 stores the administrator's passcode in the registry in plaintext, which...CVE-2005-45892.1 LowDecember 30, 2005
dream4 koobiCross-site scripting (XSS) vulnerability in Koobi 5 allows remote attackers to inject arbitrary...CVE-2005-4588Public exploit4.3 MediumDecember 30, 2005
juniper netscreen-security manager 2004Juniper NetScreen-Security Manager (NSM) 2004 FP2 and FP3 allow remote attackers to cause a...CVE-2005-45877.8 HighDecember 30, 2005
phpsurveyorMultiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to...CVE-2005-45867.5 HighDecember 30, 2005
ethereal group etherealUnspecified vulnerability in the GTP dissector for Ethereal 0.9.1 to 0.10.13 allows remote...CVE-2005-45857.8 HighDecember 29, 2005
bzflag serverBZFlag server 2.0.4 and earlier allows remote attackers to cause a denial of service (application...CVE-2005-4584Public exploitFix available5.0 MediumDecember 29, 2005
vmware esxUnspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before...CVE-2005-45834.3 MediumDecember 29, 2005
scott draves electric sheepElectric Sheep 2.6.3 does not require authentication or integrity checks from the server to the...CVE-2005-45827.5 HighDecember 29, 2005
scott draves electric sheepBuffer overflow in Electric Sheep 2.6.3 client allows local users to execute arbitrary code via a...CVE-2005-45814.6 MediumDecember 29, 2005
day communiqueCross-site scripting (XSS) vulnerability in Day Communique 4 allows remote attackers to inject...CVE-2005-45804.3 MediumDecember 29, 2005
hitachi business logicMultiple HTTP response splitting vulnerabilities in Hitachi Business Logic - Container (BLC) P...CVE-2005-45795.0 MediumDecember 29, 2005
hitachi business logicMultiple SQL injection vulnerabilities in Hitachi Business Logic - Container (BLC) P-2443-9114 01...CVE-2005-45787.5 HighDecember 29, 2005
hitachi business logicMultiple cross-site scripting (XSS) vulnerabilities in Hitachi Business Logic - Container (BLC) P...CVE-2005-45774.3 MediumDecember 29, 2005
fatwire updateengineMultiple cross-site scripting (XSS) vulnerabilities in the UpdateEngine program in Fatwire...CVE-2005-4576Public exploit4.3 MediumDecember 29, 2005
paperthin commonspot content serverPaperThin CommonSpot Content Server 4.5 and earlier allow remote attackers to obtain sensitive...CVE-2005-45755.0 MediumDecember 29, 2005
paperthin commonspot content serverCross-site scripting (XSS) vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5...CVE-2005-4574Public exploit4.3 MediumDecember 29, 2005
ploggerPHP remote file include vulnerability in plog-admin-functions.php in Plogger Beta 2 allows remote...CVE-2005-4573Public exploitEPSS 11.7%7.5 HighDecember 29, 2005
myezshop shopping cartMultiple SQL injection vulnerabilities in myEZshop Shopping Cart allow remote attackers to...CVE-2005-45727.5 HighDecember 29, 2005
myezshop shopping cartCross-site scripting (XSS) vulnerability in myEZshop Shopping Cart allows remote attackers to...CVE-2005-45714.3 MediumDecember 29, 2005
No product listedThe Internet Key Exchange version 1 (IKEv1) implementations in Fortinet FortiOS 2.50, 2.80 and 3...CVE-2005-45707.8 HighDecember 29, 2005
floosietek ftgateStack-based buffer overflow in index.fts in FTGate Technology (formerly known as Floosietek)...CVE-2005-45697.5 HighDecember 29, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open