# CVEs published 2005-11-23 19 CVEs were published on November 23, 2005: 0 critical, 0 high. Days are UTC. - [CVE-2005-3785](https://cve.now/CVE-2005-3785.md): Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX (eix) before 0.5.0\_pre2 allows local users to overwrite arbitrary files vi (no CVSS) - [CVE-2005-3786](https://cve.now/CVE-2005-3786.md): Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict access to Remote Diagn (no CVSS) - [CVE-2005-3783](https://cve.now/CVE-2005-3783.md): The ptrace functionality (ptrace.c) in Linux kernel 2.6 before 2.6.14.2, using CLONE\_THREAD, does not use the thread group ID to check wheth (no CVSS) - [CVE-2005-3784](https://cve.now/CVE-2005-3784.md): The auto-reap of child processes in Linux kernel 2.6 before 2.6.15 includes processes with ptrace attached, which leads to a dangling ptrace (no CVSS) - [CVE-2005-3781](https://cve.now/CVE-2005-3781.md): Unspecified vulnerability in in.named in Solaris 9 allows attackers to cause a denial of service via unknown manipulations that cause in.nam (no CVSS) - [CVE-2005-3775](https://cve.now/CVE-2005-3775.md): PHP remote file inclusion vulnerability in pollvote.php in PollVote allows remote attackers to include arbitrary files via a URL in the poll (no CVSS) - [CVE-2005-3776](https://cve.now/CVE-2005-3776.md): Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allow remote attackers to inject arbitrary web (no CVSS) - [CVE-2005-3777](https://cve.now/CVE-2005-3777.md): MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allows remote attackers to delete or move private messages (PM) via modified fields in the inbox form (no CVSS) - [CVE-2005-3778](https://cve.now/CVE-2005-3778.md): Unspecified vulnerability in MyBulletinBoard (MyBB) before 1.0 PR2 Rev 686 allows attackers to cause a denial of service via unknown vectors (no CVSS) - [CVE-2005-3779](https://cve.now/CVE-2005-3779.md): Unspecified vulnerability in xterm for HP-UX 11.00, 11.11, and 11.23 allows local users to gain privileges via unknown vectors. (no CVSS) - [CVE-2005-3780](https://cve.now/CVE-2005-3780.md): Multiple buffer overflows in IPUpdate 1.1 might allow attackers to execute arbitrary code via (1) memmcat in the memm module or (2) certain (no CVSS) - [CVE-2005-3531](https://cve.now/CVE-2005-3531.md): fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by perf (no CVSS) - [CVE-2005-3768](https://cve.now/CVE-2005-3768.md): Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewa (no CVSS) - [CVE-2005-3769](https://cve.now/CVE-2005-3769.md): SQL injection vulnerability in files.php in PHP Download Manager 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands (no CVSS) - [CVE-2005-3770](https://cve.now/CVE-2005-3770.md): Multiple cross-site scripting (XSS) vulnerabilities in PHP-Post (PHPp) 1.0 allow remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2005-3771](https://cve.now/CVE-2005-3771.md): Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.4 allow remote attackers to inject arbitrary web script or HTML vi (no CVSS) - [CVE-2005-3772](https://cve.now/CVE-2005-3772.md): Multiple SQL injection vulnerabilities in Joomla! before 1.0.4 allow remote attackers to execute arbitrary SQL commands via the (1) Itemid v (no CVSS) - [CVE-2005-3773](https://cve.now/CVE-2005-3773.md): Unspecified vulnerability in Joomla! before 1.0.4 has unknown impact and attack vectors, related to "Potential misuse of Media component fil (no CVSS) - [CVE-2005-3774](https://cve.now/CVE-2005-3774.md): Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2005-11-23 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.