cve.nowby Sazabi

CVEs published November 21, 2005

37 CVEs were published on November 21, 2005: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 37
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 37
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 37

CVE-2005-2339Cross-site scripting (XSS) vulnerability in the Unicode version of msearch (unicode-msearch) 1.51(U1)-beta1, 1.51(U1), and 1.52(U1) allows…UnratedNov 21, 2005
CVE-2005-3733The Internet Key Exchange version 1 (IKEv1) implementation in Juniper JUNOS and JUNOSe software for M, T, and J-series routers before…UnratedNov 21, 2005
CVE-2005-3632Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlier allow attackers to execute arbitrary code via a crafted PNM file.UnratedNov 21, 2005
CVE-2005-3732The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in…UnratedNov 21, 2005
CVE-2004-2546Multiple memory leaks in Samba before 3.0.6 allow attackers to cause a denial of service (memory consumption).UnratedNov 21, 2005
CVE-2004-2547NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify…UnratedNov 21, 2005
CVE-2004-2548Multiple cross-site scripting (XSS) vulnerabilities in NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to inject…UnratedNov 21, 2005
CVE-2004-2549Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via…UnratedNov 21, 2005
CVE-2004-2550Multiple cross-site scripting (XSS) vulnerabilities in unspecified Perl scripts in SandSurfer before 1.7.1 allow remote attackers to…UnratedNov 21, 2005
CVE-2004-2551Multiple SQL injection vulnerabilities in Layton HelpBox 3.0.1 allow remote attackers to execute arbitrary SQL commands via (1) the…UnratedNov 21, 2005
CVE-2004-2552Buffer overflow in XBoard 4.2.7 and earlier might allow local users to execute arbitrary code via a long -icshost command line argument.UnratedNov 21, 2005
CVE-2004-2553The Ignition Project ignitionServer 0.1.2 through 0.1.2-R2 allows remote authenticated users with local IRC operator privileges to obtain…UnratedNov 21, 2005
CVE-2004-2554Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM…UnratedNov 21, 2005
CVE-2004-2555Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography (arithmetic and XOR operations) to relate the…UnratedNov 21, 2005
CVE-2004-2556NetGear WG602 (aka WG602v1) Wireless Access Point firmware 1.04.0 and 1.5.67 has a hardcoded account of username "super" and password…UnratedNov 21, 2005
CVE-2004-2557NetGear WG602 (aka WG602v1) Wireless Access Point 1.7.14 has a hardcoded account of username "superman" and password "21241036", which…UnratedNov 21, 2005
CVE-2004-2558Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity…UnratedNov 21, 2005
CVE-2005-3697Unspecified vulnerability in the administration interface in Uresk Links 2.0 Lite allows remote attackers to bypass authentication via…UnratedNov 21, 2005
CVE-2005-3698PHP Easy Download allows remote attackers to bypass authentication via edit.php.UnratedNov 21, 2005
CVE-2005-3699Opera Web Browser 8.50 and 8.0 through 8.0.2 allows remote attackers to spoof the URL in the status bar via the title in an image in a…UnratedNov 21, 2005
CVE-2005-3715Senao SI-680H Wireless VoIP Phone Firmware 0.03.0839 leaves the VxWorks debugger UDP port 17185 available without authentication, which…UnratedNov 21, 2005
CVE-2005-3716The SNMP daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has hard-coded public credentials that…UnratedNov 21, 2005
CVE-2005-3717The telnet daemon in UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 has a default username "target" and…UnratedNov 21, 2005
CVE-2005-3718UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 does not allow users to disable access to (1) SNMP or (2)…UnratedNov 21, 2005
CVE-2005-3719Hitachi IP5000 VOIP WIFI Phone 1.5.6 has a hard-coded administrator password of "0000", which allows attackers with physical access to…UnratedNov 21, 2005

Show all 37 entriesShow fewer entries