cve.nowby Sazabi

CVEs published December 8, 2005

29 CVEs were published on December 8, 2005: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 29
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 29
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 29

CVE-2005-3661Dell TrueMobile 2300 Wireless Broadband Router running firmware 3.0.0.8 and 5.1.1.6, and possibly other versions, allows remote attackers…UnratedDec 8, 2005
CVE-2005-3665Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.7.0 allow remote attackers to inject arbitrary web script or…UnratedDec 8, 2005
CVE-2005-4086Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and…UnratedDec 8, 2005
CVE-2005-4087PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta…UnratedDec 8, 2005
CVE-2005-4088SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) parent…UnratedDec 8, 2005
CVE-2005-4089Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using…UnratedDec 8, 2005
CVE-2005-4090Unspecified vulnerability in HP-UX B.11.00 to B.11.23, when IPSEC is running, allows remote attackers to have unknown impact.UnratedDec 8, 2005
CVE-2005-4091Cross-site scripting (XSS) vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote attackers to inject arbitrary web script or…UnratedDec 8, 2005
CVE-2005-4092Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 (3) and earlier allow remote…UnratedDec 8, 2005
CVE-2005-4093Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to bypass security…UnratedDec 8, 2005
CVE-2005-4094connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload…UnratedDec 8, 2005
CVE-2005-4095Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to list arbitrary…UnratedDec 8, 2005
CVE-2005-3192Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf…UnratedDec 8, 2005
CVE-2005-4068Unspecified "absolute path vulnerability" in umountall in IBM AIX 5.1 through 5.3 allows local users to cause unknown impact via unknown…UnratedDec 8, 2005
CVE-2005-4069SunnComm MediaMax DRM 5.0.21.0, as used by Sony BMG, assigns insecure Everyone/Full Control permissions to the "SunnComm Shared"…UnratedDec 8, 2005
CVE-2005-4071Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL…UnratedDec 8, 2005
CVE-2005-4072Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web…UnratedDec 8, 2005
CVE-2005-4073SQL injection vulnerability in view_archive.cfm in CFMagic Magic List Pro 2.5 allows remote attackers to execute arbitrary SQL commands…UnratedDec 8, 2005
CVE-2005-4074Directory traversal vulnerability in index.cfm in CF_Nuke 4.6 and earlier, when Sandbox Security is disabled, allows remote attackers to…UnratedDec 8, 2005
CVE-2005-4075Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in CF_Nuke 4.6 and earlier allow remote attackers to inject arbitrary web…UnratedDec 8, 2005
CVE-2005-4076Buffer overflow in Appfluent Technology Database IDS 2.0 allows local users to execute arbitrary code via a long APPFLUENT_HOME…UnratedDec 8, 2005
CVE-2005-4077Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a…UnratedDec 8, 2005
CVE-2005-4078Multiple cross-site scripting (XSS) vulnerabilities in Ideal BB.NET 1.3 and earlier allow remote attackers to inject arbitrary web script…UnratedDec 8, 2005
CVE-2005-4079The register_globals emulation in phpMyAdmin 2.7.0 rc1 allows remote attackers to exploit other vulnerabilities in phpMyAdmin by modifying…UnratedDec 8, 2005
CVE-2005-4080Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which allows remote attackers to conduct…UnratedDec 8, 2005

Show all 29 entriesShow fewer entries