# CVEs published 2005-12-01

39 CVEs were published on December 1, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-3962](https://cve.now/CVE-2005-3962.md): Integer overflow in the format string functionality (Perl\_sv\_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary (no CVSS)
- [CVE-2005-3930](https://cve.now/CVE-2005-3930.md): SQL injection vulnerability in index.php in N-13 News 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2005-3931](https://cve.now/CVE-2005-3931.md): SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands via the HTTP referer. (no CVSS)
- [CVE-2005-3932](https://cve.now/CVE-2005-3932.md): SQL injection vulnerability in okiraku.php in O-Kiraku Nikki 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2005-3933](https://cve.now/CVE-2005-3933.md): SQL injection vulnerability in index.php in 88Script's Event Calendar 2.0 and earlier allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2005-3934](https://cve.now/CVE-2005-3934.md): Buffer overflow in Symantec pcAnywhere 11.0.1, 11.5.1, and all other 32-bit versions allows remote attackers to cause a denial of service (a (no CVSS)
- [CVE-2005-3935](https://cve.now/CVE-2005-3935.md): SQL injection vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) node and (2) (no CVSS)
- [CVE-2005-3936](https://cve.now/CVE-2005-3936.md): PHP file include vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to include arbitrary local files via the \_\_f parameter. (no CVSS)
- [CVE-2005-3937](https://cve.now/CVE-2005-3937.md): SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2005-3938](https://cve.now/CVE-2005-3938.md): SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the id parame (no CVSS)
- [CVE-2005-3939](https://cve.now/CVE-2005-3939.md): Multiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earler allow remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2005-3940](https://cve.now/CVE-2005-3940.md): SQL injection vulnerability in ringmaker.php in Orca Ringmaker 2.3c and earlier allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2005-3941](https://cve.now/CVE-2005-3941.md): SQL injection vulnerability in blog.php in Orca Blog 1.3b and earlier allows remote attackers to execute arbitrary SQL commands via the msg (no CVSS)
- [CVE-2005-3942](https://cve.now/CVE-2005-3942.md): SQL injection vulnerability in knowledgebase-control.php in Orca Knowledgebase 2.1b and earlier allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2005-3943](https://cve.now/CVE-2005-3943.md): Multiple SQL injection vulnerabilities in ilyav FAQ System 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2005-3944](https://cve.now/CVE-2005-3944.md): SQL injection vulnerability in survey.php in ilyav Survey System 1.1 and earlier allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2005-3945](https://cve.now/CVE-2005-3945.md): The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predicta (no CVSS)
- [CVE-2005-3946](https://cve.now/CVE-2005-3946.md): Opera 8.50 allows remote attackers to cause a denial of service (crash) via a Java applet with a large string argument to the removeMember J (no CVSS)
- [CVE-2005-3947](https://cve.now/CVE-2005-3947.md): Directory traversal vulnerability in index.php in PHP Upload Center allows remote attackers to read arbitrary files via "../" sequences in t (no CVSS)
- [CVE-2005-3948](https://cve.now/CVE-2005-3948.md): Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the (1) cmd (no CVSS)
- [CVE-2005-3949](https://cve.now/CVE-2005-3949.md): Multiple SQL injection vulnerabilities in WebCalendar 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) startid par (no CVSS)
- [CVE-2005-3950](https://cve.now/CVE-2005-3950.md): nuauth in NuFW 1.0.x before 1.0.16 and 1.1 allows authenticated users to cause a denial of service via malformed packets. (no CVSS)
- [CVE-2005-3951](https://cve.now/CVE-2005-3951.md): SQL injection vulnerability in survey.php in PHP Labs Survey Wizard allows remote attackers to execute arbitrary SQL commands via the sid pa (no CVSS)
- [CVE-2005-3952](https://cve.now/CVE-2005-3952.md): SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) t (no CVSS)
- [CVE-2005-3953](https://cve.now/CVE-2005-3953.md): SQL injection vulnerability in Bedeng PSP 1.1 allows remote attackers to execute arbitrary SQL commands via the cwhere parameter to (1) inde (no CVSS)
- [CVE-2005-3954](https://cve.now/CVE-2005-3954.md): Cross-site scripting (XSS) vulnerability in blogBuddies 0.3 allows remote attackers to inject arbitrary web script or HTML via the u paramet (no CVSS)
- [CVE-2005-3955](https://cve.now/CVE-2005-3955.md): Multiple cross-site scripting (XSS) vulnerabilities in MagpieRSS 7.1, as used in (a) blogBuddiesv 0.3, (b) Jaws 0.6.2, and possibly other pr (no CVSS)
- [CVE-2005-3956](https://cve.now/CVE-2005-3956.md): Multiple SQL injection vulnerabilities in index.php in DMANews 0.904 and 0.910 allow remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2005-3957](https://cve.now/CVE-2005-3957.md): Unspecified vulnerability in the Trackback functionality in DotClear 1.2.1 has unknown impact and attack vectors. (no CVSS)
- [CVE-2005-3958](https://cve.now/CVE-2005-3958.md): SQL injection vulnerability in index.php in Entergal MX 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) idcat para (no CVSS)
- [CVE-2005-3959](https://cve.now/CVE-2005-3959.md): Multiple cross-site scripting (XSS) vulnerabilities in FreeWebStat 1.0 rev37 allow remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2005-3960](https://cve.now/CVE-2005-3960.md): Kadu 0.4.2 and 0.5.0pre allows remote attackers to cause a denial of service (crash or generated traffic) via a malformed message, possibly (no CVSS)
- [CVE-2005-3961](https://cve.now/CVE-2005-3961.md): export\_handler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter. (no CVSS)
- [CVE-2005-2757](https://cve.now/CVE-2005-2757.md): Heap-based buffer overflow in CoreFoundation in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to execute arbitrary co (no CVSS)
- [CVE-2005-3700](https://cve.now/CVE-2005-3700.md): Unknown vulnerability in iodbcadmintool in the ODBC Administrator utility in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows local users t (no CVSS)
- [CVE-2005-3701](https://cve.now/CVE-2005-3701.md): Unspecified vulnerability in passwordserver in Mac OS X Server 10.3.9 and 10.4.3, when creating an Open Directory master server, allows loca (no CVSS)
- [CVE-2005-3702](https://cve.now/CVE-2005-3702.md): Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows remote attackers to cause files to be downloaded to locations outside the downlo (no CVSS)
- [CVE-2005-3704](https://cve.now/CVE-2005-3704.md): System log server in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to spoof syslog messages in log files by injecting (no CVSS)
- [CVE-2005-3705](https://cve.now/CVE-2005-3705.md): Heap-based buffer overflow in WebKit in Mac OS X and OS X Server 10.3.9 and 10.4.3, as used in applications such as Safari, allows remote at (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-12-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.