Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
December

CVEs published in December 2005

1,010 vulnerabilities, 37 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

andreas huggel exiv2Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling...CVE-2005-4676Public exploitFix available5.0 MediumDecember 31, 2005
complete php counter php counterCross-site scripting (XSS) vulnerability in list.php in Complete PHP Counter allows remote...CVE-2005-4675Public exploit4.3 MediumDecember 31, 2005
complete php counter php counterMultiple SQL injection vulnerabilities in list.php in Complete PHP Counter allow remote attackers...CVE-2005-4674Public exploit7.5 HighDecember 31, 2005
inicom networks ioftpdioFTPD 0.5.84 u responds with different messages depending on whether or not a username exists,...CVE-2005-46735.0 MediumDecember 31, 2005
citypost simple image editorCross-site scripting (XSS) vulnerability in image-editor-52/index.php in CityPost Simple Image...CVE-2005-46724.3 MediumDecember 31, 2005
citypost simple php uploadCross-site scripting (XSS) vulnerability in simple-upload-53.php in CityPost Simple PHP Upload 5...CVE-2005-4671Public exploit4.3 MediumDecember 31, 2005
citypost php lnkxCross-site scripting (XSS) vulnerability in message.php in CityPost Automated Link Exchange (LNKX...CVE-2005-4670Public exploit4.3 MediumDecember 31, 2005
rt internet solutions webadminSQL injection vulnerability in RT Internet Solutions (RTIS) WebAdmin allows remote attackers to...CVE-2005-46697.5 HighDecember 31, 2005
parosproxyThe embedded HSQLDB in ParosProxy before 3.2.7, when running with JDK 1.4.2 before 1.4.2_08,...CVE-2005-46684.6 MediumDecember 31, 2005
info-zip unzipBuffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary...CVE-2005-4667Public exploitFix available3.7 LowDecember 31, 2005
phlymailCross-site scripting (XSS) vulnerability in PHlyMail before 3.3 Beta1 allows remote attackers to...CVE-2005-46664.3 MediumDecember 31, 2005
punbbCross-site scripting (XSS) vulnerability in PunBB 1.2.6 and earlier allows remote attackers to...CVE-2005-46654.3 MediumDecember 31, 2005
ocomonSQL injection vulnerability in OcoMon 1.21, and possibly other versions, when magic_quotes_gpc is...CVE-2005-4664Public exploit5.0 MediumDecember 31, 2005
ocomonCross-site scripting (XSS) vulnerability in OcoMon 1.20, and possibly earlier versions, allows...CVE-2005-46634.3 MediumDecember 31, 2005
ocomonMultiple SQL injection vulnerabilities in OcoMon 1.20, and possibly earlier versions, allow...CVE-2005-46625.0 MediumDecember 31, 2005
campware.org campsiteThe notifyendsubs cron job in Campsite before 2.3.3 sends an e-mail message containing a certain...CVE-2005-46615.0 MediumDecember 31, 2005
ipcopRace condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite...CVE-2005-46601.2 LowDecember 31, 2005
ipcopIPCop (aka IPCop Firewall) before 1.4.10 has world-readable permissions for the backup.key file,...CVE-2005-46592.1 LowDecember 31, 2005
iisworks aspknowledgebaseMultiple cross-site scripting (XSS) vulnerabilities in ASP-Programmers.com ASPKnowledgebase allow...CVE-2005-46586.8 MediumDecember 31, 2005
ocean12 technologies calendar manager proOcean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain...CVE-2005-4657Public exploit7.5 HighDecember 31, 2005
triggertg tclanportalSQL injection vulnerability in index.php in TClanPortal 1.1.3 and earlier allows remote attackers...CVE-2005-4656Public exploit5.0 MediumDecember 31, 2005
php fusion fusionCross-site scripting (XSS) vulnerability in submit.php in PHP-Fusion 6.0.204 allows remote...CVE-2005-46554.3 MediumDecember 31, 2005
hp oracle for openviewMultiple unspecified vulnerabilities in Oracle for OpenView (OfO) 8.1.7, 9.1.01, and 9.2, and OfO...CVE-2005-46546.4 MediumDecember 31, 2005
al-caricatierUnspecified vulnerability in ss.php in AL-Caricatier 2.5 and earlier allows remote attackers to...CVE-2005-46535.0 MediumDecember 31, 2005
phlymailSQL injection vulnerability in PHlyMail 3.02.01 allows remote attackers to execute arbitrary SQL...CVE-2005-46526.4 MediumDecember 31, 2005
alstrasoft epaySQL injection vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to...CVE-2005-46516.4 MediumDecember 31, 2005
joomla joomla\!Joomla! 1.03 does not restrict the number of "Search" Mambots, which allows remote attackers to...CVE-2005-46505.0 MediumDecember 31, 2005
advanced guestbook guestbookMultiple cross-site scripting (XSS) vulnerabilities in Advanced Guestbook 2.2 and 2.3.1 allow...CVE-2005-46494.3 MediumDecember 31, 2005
illustrate dbpoweramp music converterBuffer overflow in Illustrate dBpowerAMP Music Converter 11.5 and earlier, possibly including (1)...CVE-2005-46485.1 MediumDecember 31, 2005
pearlinger pearl forumsMultiple SQL injection vulnerabilities in PEARLINGER Pearl Forums 2.4 allow remote attackers to...CVE-2005-4647Public exploit7.5 HighDecember 31, 2005
pearlinger pearl forumsUnspecified vulnerability in index.php in PEARLINGER Pearl Forums 2.4 allows remote attackers to...CVE-2005-4646Public exploit5.0 MediumDecember 31, 2005
3cfrSQL injection vulnerability in index.php in 3CFR allows remote attackers to execute arbitrary SQL...CVE-2005-46457.5 HighDecember 31, 2005
edgewall software tracTrac HTML WikiProcessor cross-site scripting (XSS) vulnerabilityCVE-2005-4644Fix available4.3 MediumDecember 31, 2005
antharia oncontent cmsSQL injection vulnerability in index.php in Antharia OnContent // CMS allows remote attackers to...CVE-2005-46437.5 HighDecember 31, 2005
hydrobbMultiple cross-site scripting (XSS) vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote...CVE-2005-46424.3 MediumDecember 31, 2005
eazycmsSQL injection vulnerability in home.php in eazyCMS 2.0 allows remote attackers to execute...CVE-2005-46417.5 HighDecember 31, 2005
class-1 poll softwareSQL injection vulnerability in index.php in class-1 Poll Software 0.4 and earlier allows remote...CVE-2005-46407.5 HighDecember 31, 2005
linux kernelBuffer overflow in the CA-driver (dst_ca.c) for TwinHan DST Frontend/Card in Linux kernel 2.6.12...CVE-2005-46394.6 MediumDecember 31, 2005
kayako supportsuiteindex.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to obtain the full...CVE-2005-46385.0 MediumDecember 31, 2005
No product listedMultiple cross-site scripting (XSS) vulnerabilities in index.php in Kayako SupportSuite 3.00.26...CVE-2005-4637Public exploit4.3 MediumDecember 31, 2005
openofficeOpenOffice.org 2.0 and earlier, when hyperlinks has been disabled, does not prevent the user from...CVE-2005-46364.6 MediumDecember 31, 2005
linux kernelThe nl_fib_input function in fib_frontend.c in the Linux kernel before 2.6.15 does not check for...CVE-2005-46355.0 MediumDecember 31, 2005
activecampaign supporttrioSQL injection vulnerability in index.php in ActiveCampaign SupportTrio 1.4 allows remote...CVE-2005-46347.5 HighDecember 31, 2005
vote pro proSQL injection vulnerability in poll_frame.php in Vote! Pro 4.0 and earlier allows remote...CVE-2005-46327.5 HighDecember 31, 2005
ryan lath zinaSQL injection vulnerability in index.php in Zina 0.12.07 and earlier allows remote attackers to...CVE-2005-46317.5 HighDecember 31, 2005
clientexecSQL injection vulnerability in index.php in ClientExec 2.3 allows remote attackers to execute...CVE-2005-46307.5 HighDecember 31, 2005
smbcmsSQL injection vulnerability in SMBCMS 2.1 allows remote attackers to execute arbitrary SQL...CVE-2005-46297.5 HighDecember 31, 2005
help desk point software helpdeskpointSQL injection vulnerability in index.php in HelpDeskPoint 2.38 and earlier allows remote...CVE-2005-46287.5 HighDecember 31, 2005
gfhost, gmailsite +1 moreCross-site scripting (XSS) vulnerability in index.php in (1) GmailSite 1.0 through 1.0.4 and (2)...CVE-2005-4627Public exploit4.3 MediumDecember 31, 2005
recruitment software softwareThe default configuration of Recruitment Software installs admin/site.xml under the web document...CVE-2005-46265.0 MediumDecember 31, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open