cve.nowby Sazabi

CVEs published December 28, 2005

35 CVEs were published on December 28, 2005: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 35
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 35
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 35

CVE-2005-3345rssh 2.0.0 through 2.2.3 allows local users to bypass access restrictions and gain root privileges by using the rssh_chroot_helper command…UnratedDec 28, 2005
CVE-2005-4560The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a…UnratedDec 28, 2005
CVE-2005-4545Cross-site scripting (XSS) vulnerability in search.asp in NetDirect ShopEngine allows remote attackers to inject arbitrary web script or…UnratedDec 28, 2005
CVE-2005-4546search.php in eggblog 2.0 allows remote attackers to obtain the full path via an invalid q parameter, as used by the Keyword and Search…UnratedDec 28, 2005
CVE-2005-4547Cross-site scripting (XSS) vulnerability in home/search.php in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via…UnratedDec 28, 2005
CVE-2005-4548SQL injection vulnerability in the "user area" in RWS Statistics Counter before 2.4.1 allows remote attackers to execute arbitrary SQL…UnratedDec 28, 2005
CVE-2005-4549Cross-site scripting (XSS) vulnerability in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to…UnratedDec 28, 2005
CVE-2005-4550The PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to obtain the source code for…UnratedDec 28, 2005
CVE-2005-4551Cross-site scripting (XSS) vulnerability in sign.php in codegrrl SimpBook 1.0, when html_enable is on, allows remote attackers to inject…UnratedDec 28, 2005
CVE-2005-4552The (1) slsmgr and (2) slsadmin programs in Sun Solaris PC NetLink 2.0 create temporary files insecurely, which allows local users to gain…UnratedDec 28, 2005
CVE-2005-4553Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long APPE command.UnratedDec 28, 2005
CVE-2005-4554Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute arbitrary SQL…UnratedDec 28, 2005
CVE-2005-4555Cross-site scripting (XSS) vulnerability in add.php in DEV web management system 1.5 and earlier allows remote attackers to inject…UnratedDec 28, 2005
CVE-2005-4556PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version…UnratedDec 28, 2005
CVE-2005-4557dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, allows…UnratedDec 28, 2005
CVE-2005-4558IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not properly restrict…UnratedDec 28, 2005
CVE-2005-4559mail/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, does not…UnratedDec 28, 2005
CVE-2005-4534The shadow database feature (syncshadowdb) in Bugzilla 2.9 through 2.16.10 allows local users to overwrite arbitrary files via a symlink…UnratedDec 28, 2005
CVE-2005-4516Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web…UnratedDec 28, 2005
CVE-2005-4517SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL commands via the…UnratedDec 28, 2005
CVE-2005-4518Mantis before 0.19.4 allows remote attackers to bypass the file upload size restriction by modifying the max_file_size parameter to (1)…UnratedDec 28, 2005
CVE-2005-4519Multiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1.0.0rc3 and earlier allow remote…UnratedDec 28, 2005
CVE-2005-4520Unspecified "port injection" vulnerabilities in filters in Mantis 1.0.0rc3 and earlier have unknown impact and attack vectors.UnratedDec 28, 2005
CVE-2005-4521CRLF injection vulnerability in Mantis 1.0.0rc3 and earlier allows remote attackers to modify HTTP headers and conduct HTTP response…UnratedDec 28, 2005
CVE-2005-4522Multiple cross-site scripting (XSS) vulnerabilities in the view_filters_page.php filters script in Mantis 1.0.0rc3 and earlier allow…UnratedDec 28, 2005

Show all 35 entriesShow fewer entries