Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
December

CVEs published in December 2005

1,010 vulnerabilities, 37 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

muteMUTE 0.4 uses improper flood protection algorithms, which allows remote attackers to obtain...CVE-2005-47265.0 MediumDecember 31, 2005
geeklogGeeklog before 1.3.11sr3 allows remote attackers to bypass intended access restrictions and...CVE-2005-47257.5 HighDecember 31, 2005
No product listedSQL injection vulnerability in post.php in PhpTagCool 1.0.3 allows remote attackers to execute...CVE-2005-4724Public exploit7.5 HighDecember 31, 2005
d-link di-524, di-784, dlink di-624 +2 moreD-Link DI-524 Wireless Router, DI-624 Wireless Router, and DI-784 allow remote attackers to cause...CVE-2005-4723Public exploit5.0 MediumDecember 31, 2005
the media shoppe berhad tmspublisher_Request_Message.cfm in tmsPUBLISHER 3.3 allows remote attackers to obtain sensitive information...CVE-2005-47225.0 MediumDecember 31, 2005
the media shoppe berhad tmspublisherCross-site scripting (XSS) vulnerability in search.cfm in tmsPUBLISHER 3.3 allows remote...CVE-2005-47214.3 MediumDecember 31, 2005
mozilla firefoxMozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service ...CVE-2005-4720Public exploit5.0 MediumDecember 31, 2005
sysbotz systems panelMultiple SQL injection vulnerabilities in Sysbotz Systems Panel 1.0.6 and earlier allow remote...CVE-2005-47197.5 HighDecember 31, 2005
opera browserOpera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1...CVE-2005-4718Public exploitEPSS 10.2%5.0 MediumDecember 31, 2005
microsoft ie, internet explorer, windows 2000 +3 more +5 moreMicrosoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows...CVE-2005-4717Public exploitEPSS 16.3%5.0 MediumDecember 31, 2005
No product listedHitachi TP1/Server Base and TP1/NET/Library 2 on IBM AIX allow remote attackers to (1) cause a...CVE-2005-47165.0 MediumDecember 31, 2005
francisco burzi php-nukeMultiple SQL injection vulnerabilities in modules.php in PHP-Nuke 7.8, when magic_quotes_gpc is...CVE-2005-47157.5 HighDecember 31, 2005
openvmpsFormat string vulnerability in the vmps_log function in OpenVMPS (VLAN Management Policy Server)...CVE-2005-4714Public exploit7.5 HighDecember 31, 2005
pam mysql mysqlUnspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x...CVE-2005-4713Fix available5.0 MediumDecember 31, 2005
php handicapper handicapperCRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to...CVE-2005-47125.0 MediumDecember 31, 2005
No product listedSQL injection vulnerability in Neocrome Land Down Under (LDU) 801 allows remote attackers to...CVE-2005-47116.8 MediumDecember 31, 2005
autodesk autocad, 3ds max, architectural desktop +15 more +17 moreUnspecified vulnerability in multiple Autodesk and AutoCAD products and product families from...CVE-2005-47104.6 MediumDecember 31, 2005
No product listedThe popSubjectContext method in the SecurityAssociation class in JBoss Enterprise Java Beans (EJB...CVE-2005-47095.0 MediumDecember 31, 2005
adobe captivate, contribute, elicensing +6 more +8 moreAdobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client...CVE-2005-47087.2 HighDecember 31, 2005
php gen genMultiple cross-site scripting (XSS) vulnerabilities in PHP GEN before 1.3 allow remote attackers...CVE-2005-47074.3 MediumDecember 31, 2005
sun solarisUnspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local...CVE-2005-47062.1 LowDecember 31, 2005
bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7,...CVE-2005-47055.0 MediumDecember 31, 2005
bea weblogic serverUnspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0...CVE-2005-47045.0 MediumDecember 31, 2005
apache tomcatApache Tomcat Discloses MS-DOS PathnameCVE-2005-4703Public exploitEPSS 25.7%5.0 MediumDecember 31, 2005
ipbproarcadeSQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows...CVE-2005-4702Public exploit6.4 MediumDecember 31, 2005
sun solarisUnspecified vulnerability in Process File System (procfs) in Sun Solaris 10 allows local users to...CVE-2005-47012.1 LowDecember 31, 2005
tellmeTellMe 1.2 and earlier, when the Server (o_Server) and HEAD (o_Head) options are enabled, allows...CVE-2005-47005.0 MediumDecember 31, 2005
kimihia tellmeArgument injection vulnerability in TellMe 1.2 and earlier allows remote attackers to modify...CVE-2005-46996.4 MediumDecember 31, 2005
tellmeCross-site scripting (XSS) vulnerability in TellMe 1.2 and earlier allows remote attackers to...CVE-2005-4698Public exploit4.3 MediumDecember 31, 2005
microsoft windows xpThe Microsoft Wireless Zero Configuration system (WZCS) allows local users to access WEP keys and...CVE-2005-46972.1 LowDecember 31, 2005
microsoft windows xpThe Microsoft Wireless Zero Configuration system (WZCS) stores WEP keys and pair-wise Master Keys...CVE-2005-4696Public exploit2.1 LowDecember 31, 2005
symantec brightmail antispamSymantec Brightmail AntiSpam 6.0 build 1 and 2 allows remote attackers to cause a denial of...CVE-2005-46955.0 MediumDecember 31, 2005
No product listedUnspecified vulnerability in the www_add method in Asset.pm in Plain Black WebGUI 6.3.0 and other...CVE-2005-4694Public exploit7.5 HighDecember 31, 2005
gaim-encryptionGaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service ...CVE-2005-46935.0 MediumDecember 31, 2005
mroovca statsUnspecified vulnerability in mroovca stats (mroovcastats) before 0.4.5b has unknown attack...CVE-2005-46927.5 HighDecember 31, 2005
netbsdimake in NetBSD before 2.0.3, NetBSD-current before 12 September 2005, certain versions of X.Org,...CVE-2005-46912.1 LowDecember 31, 2005
six apart movable typeSix Apart Movable Type 3.16 allows local users with blog-creation privileges to create or...CVE-2005-46902.1 LowDecember 31, 2005
No product listedSix Apart Movable Type 3.16 stores account names and password hashes in a cookie, which allows...CVE-2005-46895.0 MediumDecember 31, 2005
punbbPunBB 1.2.9 does not require password entry when changing the e-mail address in an account's...CVE-2005-46885.0 MediumDecember 31, 2005
punbb, f-art agency blog cms +1 morePunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in...CVE-2005-46875.0 MediumDecember 31, 2005
punbbPunBB 1.2.9, when used alone or with F-ART BLOG:CMS, includes config.php before calling the...CVE-2005-46865.0 MediumDecember 31, 2005
mozilla firefox, mozilla +1 moreFirefox and Mozilla can associate a cookie with multiple domains when the DNS resolver has a non...CVE-2005-46856.4 MediumDecember 31, 2005
kde konquerorKonqueror can associate a cookie with multiple domains when the DNS resolver has a non-root...CVE-2005-46846.4 MediumDecember 31, 2005
padl software migrationtoolsPADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable...CVE-2005-4683Fix available2.1 LowDecember 31, 2005
audienceviewCross-site scripting (XSS) vulnerability in error.asp in AudienceView allows remote attackers to...CVE-2005-46824.3 MediumDecember 31, 2005
khaled mardam-bey mirc** DISPUTED ** Buffer overflow in mIRC 5.91, 6.03, 6.12, and 6.16 allows local users to execute...CVE-2005-4681Disputed4.6 MediumDecember 31, 2005
sophos anti-virusSophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow...CVE-2005-46805.0 MediumDecember 31, 2005
microsoft ieInternet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to spoof the URL in the...CVE-2005-46795.0 MediumDecember 31, 2005
apple safariApple Safari 2.0.2 (aka 416.12) allows remote attackers to spoof the URL in the status bar via...CVE-2005-46785.0 MediumDecember 31, 2005
No product listedSQL injection vulnerability in additional_images.php (aka the Additional Images module) before 1...CVE-2005-46777.5 HighDecember 31, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open