cve.nowby Sazabi

CVEs published December 21, 2005

39 CVEs were published on December 21, 2005: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 39
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 39
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 39

CVE-2005-4462PHP remote file include vulnerability in usermods.php in Tolva PHP website system 0.1.0 allows remote attackers to execute arbitrary code…UnratedDec 21, 2005
CVE-2005-4463WordPress before 1.5.2 allows remote attackers to obtain sensitive information via a direct request to (1) wp-includes/vars.php, (2)…UnratedDec 21, 2005
CVE-2005-4459Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1…UnratedDec 21, 2005
CVE-2005-4460Cross-site scripting (XSS) vulnerability in Beehive Forum 0.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML…UnratedDec 21, 2005
CVE-2005-4461SQL injection vulnerability in index.php in Beehive Forum 0.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via…UnratedDec 21, 2005
CVE-2005-3657The ActiveX control in MCINSCTL.DLL for McAfee VirusScan Security Center does not use the IObjectSafetySiteLock API to restrict access to…UnratedDec 21, 2005
CVE-2005-4267Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends…UnratedDec 21, 2005
CVE-2005-4448FlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and the hashed password rather than the…UnratedDec 21, 2005
CVE-2005-4449verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the file parameter to an…UnratedDec 21, 2005
CVE-2005-4450Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.7.0 allows remote attackers to perform unauthorized actions as a logged-in…UnratedDec 21, 2005
CVE-2005-4451Unspecified vulnerability in Software Distributor in HP-UX B.11.11 allows remote attackers to gain access via unspecified attack vectors.UnratedDec 21, 2005
CVE-2005-4452Information Call Center stores the CallCenterData.mdb database under the web root with insufficient access control, which allows remote…UnratedDec 21, 2005
CVE-2005-4453UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges by modifying the…UnratedDec 21, 2005
CVE-2005-4454Validate-before-filter vulnerability in cleanhtml.pl 1.129 in LiveJournal CVS before Dec 7 2005, when the cleancss option is enabled…UnratedDec 21, 2005
CVE-2005-4455cleanhtml.pl 1.129 in LiveJournal CVS before Dec 13 2005 allows remote attackers to inject scripting languages via the XSL namespace in…UnratedDec 21, 2005
CVE-2005-4456Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a…UnratedDec 21, 2005
CVE-2005-4457MailEnable Enterprise 1.1 before patch ME-10009 allows remote attackers to cause a denial of service (crash) and possibly execute…UnratedDec 21, 2005
CVE-2005-4458Group.pm in Metadot Portal Server 6.4.4 and earlier does not properly reset the $IS_OWNER, $IS_ADMIN, and $IS_MANAGER global variables…UnratedDec 21, 2005
CVE-2005-4440The 802.1q VLAN protocol allows remote attackers to bypass network segmentation and spoof VLAN traffic via a message with two 802.1q tags…UnratedDec 21, 2005
CVE-2005-4441The PVLAN protocol allows remote attackers to bypass network segmentation and spoof PVLAN traffic via a PVLAN message with a target MAC…UnratedDec 21, 2005
CVE-2005-4442Untrusted search path vulnerability in OpenLDAP before 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain…UnratedDec 21, 2005
CVE-2005-4443Untrusted search path vulnerability in Gauche before 0.8.6-r1 on Gentoo Linux allows local users in the portage group to gain privileges…UnratedDec 21, 2005
CVE-2005-4444Stack-based buffer overflow in the trace message functionality in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allow remote attackers to…UnratedDec 21, 2005
CVE-2005-4445Off-by-one error in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allows remote attackers to execute arbitrary code via a long email…UnratedDec 21, 2005
CVE-2005-4446Cross-site scripting (XSS) vulnerability in index.asp in ASPBite 8.x allows remote attackers to inject arbitrary web script or HTML via…UnratedDec 21, 2005

Show all 39 entriesShow fewer entries