# CVEs published 2005-11-20

15 CVEs were published on November 20, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2709](https://cve.now/CVE-2005-2709.md): The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possib (no CVSS)
- [CVE-2005-3528](https://cve.now/CVE-2005-3528.md): Cross-site scripting (XSS) vulnerability in tiki-view\_forum\_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to inject arb (no CVSS)
- [CVE-2005-3529](https://cve.now/CVE-2005-3529.md): tiki-view\_forum\_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to obtain the installation path via an invalid topics\_sor (no CVSS)
- [CVE-2005-3530](https://cve.now/CVE-2005-3530.md): Cross-site scripting (XSS) vulnerability in Antville 1.1 allows remote attackers to inject arbitrary web script or HTML via the notfound.ski (no CVSS)
- [CVE-2005-3695](https://cve.now/CVE-2005-3695.md): Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attackers to inject arbitra (no CVSS)
- [CVE-2005-3696](https://cve.now/CVE-2005-3696.md): SQL injection vulnerability in Arki-DB 1.0 and 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a vi (no CVSS)
- [CVE-2004-2541](https://cve.now/CVE-2004-2541.md): Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long (no CVSS)
- [CVE-2004-2542](https://cve.now/CVE-2004-2542.md): Multiple SQL injection vulnerabilities in Dynix (formerly known as epixtech) WebPAC allow remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2004-2543](https://cve.now/CVE-2004-2543.md): Secure Computing Corporation Sidewinder G2 6.1.0.01 might allow remote attackers to cause a denial of service (proxy failure) via invalid tr (no CVSS)
- [CVE-2004-2544](https://cve.now/CVE-2004-2544.md): Admin Console in Secure Computing Corporation Sidewinder G2 6.1.0.01 exports private keys when exporting firewall certificates, which might (no CVSS)
- [CVE-2004-2545](https://cve.now/CVE-2004-2545.md): Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service (SMTP proxy failure) via unknown at (no CVSS)
- [CVE-2005-3346](https://cve.now/CVE-2005-3346.md): Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbitrary environment var (no CVSS)
- [CVE-2005-3351](https://cve.now/CVE-2005-3351.md): SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients ("To" addresses), which trigger (no CVSS)
- [CVE-2005-3354](https://cve.now/CVE-2005-3354.md): Stack-based buffer overflow in the ldif\_get\_line function in ldif.c of Sylpheed before 2.1.6 allows user-assisted attackers to execute arbit (no CVSS)
- [CVE-2005-3694](https://cve.now/CVE-2005-3694.md): centericq 4.20.0-r3 with "Enable peer-to-peer communications" set allows remote attackers to cause a denial of service (segmentation fault a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-11-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.