CVEs published in December 2005
1,010 vulnerabilities, 37 critical, 0 exploited.
- netbsdInteger overflow in the FreeBSD compatibility code (freebsd_misc.c) in NetBSD-current, NetBSD-3,...7.2 High
- michael scholz contineoMichael Scholz and Sebastian Stein Contineo 2.0, when the admin account lacks an e-mail address...5.0 Medium
- xerverCross-site scripting (XSS) vulnerability in Xerver 4.17 allows remote attackers to inject...4.3 Medium
- vmware esxThe configuration of VMware ESX Server 2.x, 2.0.x, 2.1.x, and 2.5.x allows local users to cause a...4.9 Medium
- suse linux, linux openexchange server, linux school server +2 more +4 moreliby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions...6.4 Medium
- No product listedTrusted Mobility Agent PC Policy in Trust Digital Trusted Mobility Suite provides a cancel button...4.6 Medium
- accelerated enterprise solutions e solutionsSQL injection vulnerability in an unspecified Accelerated Enterprise Solutions product, possibly...7.5 High
- No product listedSQL injection vulnerability in addrbook.php in Belchior Foundry vCard PRO 3.1 allows remote...7.5 High
- tux racer tuxbankSQL injection vulnerability in manage_account.php in Tux Racer TuxBank 0.7x and 0.8 allows remote...7.5 High
- bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 SP5 and earlier, and 7.0 SP6 and earlier, when using...5.1 Medium
- bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not...5.4 Medium
- bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier and 7.0 SP6 and earlier, when using...7.6 High
- bea weblogic serverBEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after...7.8 High
- bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7...7.5 High
- bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7...7.2 High
- bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7...1.2 Low
- bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, when...5.1 Medium
- bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system...5.0 Medium
- bea weblogic serverUnspecified vulnerability in the Administration server in BEA WebLogic Server and WebLogic...4.0 Medium
- bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, do not...7.5 High
- bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not...7.5 High
- bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier (1) stores the private key...2.1 Low
- bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier allow remote attackers to obtain...5.0 Medium
- bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP6 and earlier, in certain...5.0 Medium
- bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP6 and earlier, might...4.6 Medium
- bea weblogic serverMultiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and WebLogic Express 9...6.8 Medium
- bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7...7.5 High
- bea weblogic serverHTTP request smuggling vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP4 and...5.0 Medium
- vwar virtual warPHP remote file include vulnerability in functions_admin.php in Virtual War (VWar) 1.5.0 R10...6.8 Medium
- No product listedCross-site scripting (XSS) vulnerability in WebHost Automation Ltd Helm before 3.2.6 allows...4.3 Medium
- freeradiusMultiple buffer overflows in FreeRADIUS 1.0.3 and 1.0.4 allow remote attackers to cause denial of...7.8 High
- freeradiusSQL injection vulnerability in the rlm_sqlcounter module in FreeRADIUS 1.0.3 and 1.0.4 allows...7.5 High
- freeradiusOff-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and...6.4 Medium
- nelogic technologies nephp publisherMultiple SQL injection vulnerabilities in index.php in NeLogic Nephp Publisher 4.5.2 and earlier...5.0 Medium
- pavel kankovsky echelogUnspecified vulnerability in Echelog 0.6.2 allows attackers to "exploit function stacks on some...4.9 Medium
- netbsdNetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 allows local users to gain...7.5 High
- No product listedIBM DB2 Universal Database (UDB) 810 before version 8 FixPak 10 allows remote authenticated users...4.0 Medium
- ibm db2 universal databaseIBM DB2 Universal Database (UDB) 820 before version 8 FixPak 10 (s050811) allows remote...6.8 Medium
- ibm db2 universal databaseIBM DB2 Universal Database (UDB) 810 before ESE AIX 5765F4100 does not ensure that a user has...6.5 Medium
- ibm db2 universal databaseIBM DB2 Universal Database (UDB) 820 before ESE AIX 5765F4100 allows remote authenticated users...7.5 High
- ibm db2 universal databaseIBM DB2 Universal Database (UDB) 820 before 8.2 FP10 allows remote authenticated users to cause a...6.8 Medium
- ibm db2 universal databaseIBM DB2 Universal Database (UDB) 810 before 8.1 FP10 allows remote authenticated users to cause a...6.8 Medium
- rsa authentication agent for webStack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID...6.4 Medium
- netbsdNetBSD 2.0 before 20050316 and NetBSD-current before 20050112 allow local users to cause a denial...4.9 Medium
- tux racer tuxbankMultiple cross-site scripting (XSS) vulnerabilities in index.php in Tux Racer TuxBank 0.7x and 0...4.3 Medium
- the php group pear html quickform controllerThe Next action in PEAR HTML_QuickForm_Controller 1.0.4 includes the SID in the URL even when...5.0 Medium
- pear text passwordUnspecified vulnerability in PEAR Text_Password 1.0 has unknown impact and attack vectors,...10.0 High
- vbzoomSQL injection vulnerability in show.php in VBZooM Forum allows remote attackers to execute...7.5 High
- debian amayaUntrusted search path vulnerability (RPATH) in amaya 9.2.1 on Debian GNU/Linux allows local users...4.6 Medium
- martin bauer gbookCross-site scripting (XSS) vulnerability in gbook.cgi in gBook before 1.0.2 allows remote...5.1 Medium
- Show moreLoading…