# CVEs published 2005-11-03

17 CVEs were published on November 3, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-3483](https://cve.now/CVE-2005-3483.md): Buffer overflow in GO-Global for Windows 3.1.0.3270 and earlier allows remote attackers to execute arbitrary code via a data block that is l (no CVSS)
- [CVE-2005-3484](https://cve.now/CVE-2005-3484.md): Directory traversal vulnerability in NeroNET 1.2.0.2 and earlier allows remote attackers to read arbitrary files with certain file extension (no CVSS)
- [CVE-2005-3485](https://cve.now/CVE-2005-3485.md): Buffer overflow in Glider Collect'n kill 1.0.0.0 allows remote attackers to execute arbitrary code via a gl\_playerEnter command with a long (no CVSS)
- [CVE-2005-3486](https://cve.now/CVE-2005-3486.md): Multiple format string vulnerabilities in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via various (1) (no CVSS)
- [CVE-2005-3487](https://cve.now/CVE-2005-3487.md): Multiple buffer overflows in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via various (1) GLConsole::a (no CVSS)
- [CVE-2005-3488](https://cve.now/CVE-2005-3488.md): Scorched 3D 39.1 (bf) and earlier allows remote attackers to cause a denial of service (long loop and server hang) via a negative numplayers (no CVSS)
- [CVE-2005-3472](https://cve.now/CVE-2005-3472.md): Unspecified vulnerability in Sun Java System Communications Express 2005Q1 and 2004Q2 allows local and remote attackers to read sensitive in (no CVSS)
- [CVE-2005-3473](https://cve.now/CVE-2005-3473.md): Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.4.5 and earlier allow remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2005-3474](https://cve.now/CVE-2005-3474.md): The aries.sys driver in Sony First4Internet XCP DRM software hides any file, registry key, or process with a name that starts with "$sys$", (no CVSS)
- [CVE-2005-3475](https://cve.now/CVE-2005-3475.md): Hasbani Web Server (WindWeb) 2.0 allows remote attackers to cause a denial of service (infinite loop) via HTTP crafted GET requests. (no CVSS)
- [CVE-2005-3476](https://cve.now/CVE-2005-3476.md): Unspecified vulnerability in HP OpenVMS Integrity 8.2-1 and 8.2, and OpenVMS Alpha 7.3-2 and 8.2, allows local users to cause a denial of se (no CVSS)
- [CVE-2005-3477](https://cve.now/CVE-2005-3477.md): Multiple interpretation error in the image upload handling code in Invision Gallery 2.0.3 allows remote attackers to conduct cross-site scri (no CVSS)
- [CVE-2005-3478](https://cve.now/CVE-2005-3478.md): SQL injection vulnerability in index.php in PHPCafe.net Tutorials Manager 1.0 Beta 2 allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2005-3479](https://cve.now/CVE-2005-3479.md): Cross-site scripting (XSS) vulnerability in login.asp in Ringtail CaseBook 6.1.0 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2005-3480](https://cve.now/CVE-2005-3480.md): login.asp in Ringtail CaseBook 6.1.0 displays different error messages depending on whether a user exists or not, which allows remote attack (no CVSS)
- [CVE-2005-3481](https://cve.now/CVE-2005-3481.md): Cisco IOS 12.0 to 12.4 might allow remote attackers to execute arbitrary code via a heap-based buffer overflow in system timers. (no CVSS)
- [CVE-2005-3482](https://cve.now/CVE-2005-3482.md): Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol (LWAPP) mode and controlled by 2000 and (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-11-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.