# CVEs published 2005-12-10

11 CVEs were published on December 10, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-3651](https://cve.now/CVE-2005-3651.md): Stack-based buffer overflow in the dissect\_ospf\_v3\_address\_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and… (no CVSS)
- [CVE-2005-4142](https://cve.now/CVE-2005-4142.md): The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line wrap feature, allows remote… (no CVSS)
- [CVE-2005-4143](https://cve.now/CVE-2005-4143.md): SQL injection vulnerability in Lyris ListManager 5.0 through 8.9a allows remote attackers to execute arbitrary SQL commands via SQL code… (no CVSS)
- [CVE-2005-4144](https://cve.now/CVE-2005-4144.md): Lyris ListManager 5.0 through 8.9a allows remote attackers to add "ORDER BY" columns to SQL queries via unusual whitespace characters in… (no CVSS)
- [CVE-2005-4145](https://cve.now/CVE-2005-4145.md): The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search… (no CVSS)
- [CVE-2005-4146](https://cve.now/CVE-2005-4146.md): Lyris ListManager before 8.9b allows remote attackers to obtain sensitive information via a request to the TCLHTTPd status module, which… (no CVSS)
- [CVE-2005-4147](https://cve.now/CVE-2005-4147.md): The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitrary .tml (TCL) files via (1)… (no CVSS)
- [CVE-2005-4148](https://cve.now/CVE-2005-4148.md): Lyris ListManager 8.5, and possibly other versions before 8.8, includes sensitive information in the env hidden variable, which allows… (no CVSS)
- [CVE-2005-4149](https://cve.now/CVE-2005-4149.md): Lyris ListManager 8.8 through 8.9b allows remote attackers to obtain sensitive information by causing errors in TML scripts, such as via… (no CVSS)
- [CVE-2005-4150](https://cve.now/CVE-2005-4150.md): Cross-site scripting (XSS) vulnerability in the portal login page in Computer Associates CleverPath 4.7 allows remote attackers to execute… (no CVSS)
- [CVE-2005-4151](https://cve.now/CVE-2005-4151.md): The Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and earlier does not clear file slack space… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2005-12-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.