# CVEs published 2005-11-04

13 CVEs were published on November 4, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2974](https://cve.now/CVE-2005-2974.md): libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference. (no CVSS)
- [CVE-2005-3350](https://cve.now/CVE-2005-3350.md): libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an (no CVSS)
- [CVE-2005-3489](https://cve.now/CVE-2005-3489.md): Buffer overflow in Asus Video Security 3.5.0.0 and earlier, when using authorization, allows remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2005-3490](https://cve.now/CVE-2005-3490.md): Directory traversal vulnerability in the web server in Asus Video Security 3.5.0.0 and earlier allows remote attackers to read arbitrary fil (no CVSS)
- [CVE-2005-3491](https://cve.now/CVE-2005-3491.md): Multiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2005-3492](https://cve.now/CVE-2005-3492.md): FlatFrag 0.3 and earlier allows remote attackers to cause a denial of service (crash) by sending an NT\_CONN\_OK command from a client that is (no CVSS)
- [CVE-2005-3493](https://cve.now/CVE-2005-3493.md): Battle Carry .005 and earlier allows remote attackers to cause a denial of service (inaccessible port) via a large packet, which triggers a (no CVSS)
- [CVE-2005-3494](https://cve.now/CVE-2005-3494.md): Cross-site scripting (XSS) vulnerability in Ar-blog 5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a blo (no CVSS)
- [CVE-2005-3495](https://cve.now/CVE-2005-3495.md): Ar-blog 5.2 and earlier allows remote attackers to bypass authentication by modifying cookies. (no CVSS)
- [CVE-2005-3496](https://cve.now/CVE-2005-3496.md): Cross-site scripting (XSS) vulnerability in PHP Handicapper allows remote attackers to inject arbitrary web script or HTML via the msg param (no CVSS)
- [CVE-2005-3497](https://cve.now/CVE-2005-3497.md): SQL injection vulnerability in process\_signup.php in PHP Handicapper allows remote attackers to execute arbitrary SQL commands via the servi (no CVSS)
- [CVE-2005-3498](https://cve.now/CVE-2005-3498.md): IBM WebSphere Application Server 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before fixpack V6.0.2.5, when session trace is enabled, (no CVSS)
- [CVE-2005-3499](https://cve.now/CVE-2005-3499.md): Frisk F-Prot Antivirus allows remote attackers to bypass protection via a ZIP file with a version header greater than 15, which prevents F-P (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-11-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.