CVEs published in December 2005
1,010 vulnerabilities, 37 critical, 0 exploited.
- apple mac os x, mac os x server +1 moreHeap-based buffer overflow in LibSystem in Mac OS X 10.4 through 10.4.5 allows context-dependent...6.4 Medium
- emc legato networkernsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other...5.0 Medium
- emc legato networkerMultiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before...7.5 High
- guiseppe tanzilli and matthias eckermann mod auth pgsqlMultiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when...10.0 High
- novell open enterprise serverHeap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell...7.5 High
- bluecoat webproxyBlue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service ...7.5 High
- broadcom itechnology igateway, brightstor arcserve backup, brightstor arcserve backup laptops desktops +28 more +30 moreHeap-based buffer overflow in the iGateway service for various Computer Associates (CA)...10.0 High
- redhat fedora coreFedora Directory Server before 10 allows remote attackers to obtain sensitive information, such...5.0 Medium
- redhat enterprise linuxinitscripts in Red Hat Enterprise Linux 4 does not properly handle certain environment variables...7.2 High
- linux kernelnfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting...5.0 Medium
- vmware esxThe management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3...2.1 Low
- vmware esxCross-site scripting (XSS) vulnerability in the management interface for VMware ESX 2.5.x before...6.8 Medium
- vmware esxCross-site request forgery (CSRF) vulnerability in the management interface for VMware ESX Server...7.6 High
- petrisBuffer overflow in petris before 1.0.1 allows remote attackers to execute arbitrary code via...7.5 High
- hylafaxMultiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to...7.5 High
- ifax solutions hylafaxhfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows...7.5 High
- ipswitch collaboration suiteBuffer overflow in the IMAP daemon in Ipswitch Collaboration Suite 2006.02 and earlier allows...6.5 Medium
- adobe shockwave playerStack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia...9.3 High
- linux kernelThe atm module in Linux kernel 2.6 before 2.6.14 allows local users to cause a denial of service ...4.9 Medium
- apache http servermod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a...5.4 Medium
- linux kernelThe mq_open system call in Linux kernel 2.6.9, in certain situations, can decrement a counter...2.1 Low
- norman ramsey nowebnoweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on...1.2 Low
- new breed software tux paintThe tuxpaint-import.sh script in Tux Paint (tuxpaint) 0.9.14 and earlier creates temporary files...7.2 High
- microsoft ie, internet explorer +1 moreRace condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite...5.1 Medium
- nullsoft winampBuffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1...7.6 High
- bluecoat winproxyThe listening daemon in Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to...5.0 Medium
- antiwordThe (1) kantiword (kantiword.sh) and (2) gantiword (gantiword.sh) scripts in antiword 0.35 and...1.9 Low
- fortinet fortigate, fortios +1 moreInterpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows...7.5 High
- fortinet fortigate, fortios +1 moreThe FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and other versions before...10.0 High
- sco unixwareUnspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain...7.2 High
- checkpoint zonealarm, zonealarm security suite +1 moreMultiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security...7.2 High
- realnetworks helix player, realone player, realplayer +1 more +3 moreHeap-based buffer overflow in the embedded player in multiple RealNetworks products and versions...9.3 High
- avaya vpnremoteAvaya VPNRemote before 4.2.33 stores credentials in cleartext in process memory, which allows...2.1 Low
- sun javaJava 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs from...5.0 Medium
- apple mac os x, mac os x server +1 morepasswd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows...6.8 Medium
- apple mac os x, mac os x server +1 morepasswd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows...6.8 Medium
- ibm lotus dominoThe LDAP server (nldap.exe) in IBM Lotus Domino before 7.0.1, 6.5.5, and 6.5.4 FP2 allows remote...7.8 High
- iss blackice pc protection, realsecure desktop, blackice agent server +1 more +3 moreISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server...7.2 High
- ibm lotus notes, autonomy keyview export sdk, keyview filter sdk +1 more +3 moreDirectory traversal vulnerability in kvarcve.dll in Autonomy (formerly Verity) KeyView SDK before...9.3 High
- ibm lotus notes, autonomy keyview export sdk, keyview filter sdk +1 more +3 moreMultiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as...9.3 High
- sun javaUnspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X allows an untrusted...10.0 High
- sun javaUnspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local...10.0 High
- sun javaRace condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to...1.2 Low
- mysql eventumMultiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers...6.4 Medium
- mysql eventumMultiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow...5.8 Medium
- openbookMultiple SQL injection vulnerabilities in the auth_user function in admin.php in OpenBook 1.2.2...6.4 Medium
- toppe cms, pc-experience +1 moreCross-site scripting (XSS) vulnerability in pm.php in PCXP/TOPPE CMS allows remote attackers to...5.8 Medium
- pcxp toppe cms toppe cmslogin.php in PCXP/TOPPE CMS allows remote attackers to bypass authentication and gain privileges...7.5 High
- kayako liveresponseKayako liveResponse 2.x allows remote attackers to obtain sensitive information via a direct...6.4 Medium
- kayako liveresponseKayako liveResponse 2.x, when logging in a user, records the password in plaintext in the URL,...2.1 Low
- Show moreLoading…