# CVEs published 2005-12-10

11 CVEs were published on December 10, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-3651](https://cve.now/CVE-2005-3651.md): Stack-based buffer overflow in the dissect\_ospf\_v3\_address\_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly (no CVSS)
- [CVE-2005-4142](https://cve.now/CVE-2005-4142.md): The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line wrap feature, allows remote at (no CVSS)
- [CVE-2005-4143](https://cve.now/CVE-2005-4143.md): SQL injection vulnerability in Lyris ListManager 5.0 through 8.9a allows remote attackers to execute arbitrary SQL commands via SQL code aft (no CVSS)
- [CVE-2005-4144](https://cve.now/CVE-2005-4144.md): Lyris ListManager 5.0 through 8.9a allows remote attackers to add "ORDER BY" columns to SQL queries via unusual whitespace characters in the (no CVSS)
- [CVE-2005-4145](https://cve.now/CVE-2005-4145.md): The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space (no CVSS)
- [CVE-2005-4146](https://cve.now/CVE-2005-4146.md): Lyris ListManager before 8.9b allows remote attackers to obtain sensitive information via a request to the TCLHTTPd status module, which pro (no CVSS)
- [CVE-2005-4147](https://cve.now/CVE-2005-4147.md): The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitrary .tml (TCL) files via (1) a (no CVSS)
- [CVE-2005-4148](https://cve.now/CVE-2005-4148.md): Lyris ListManager 8.5, and possibly other versions before 8.8, includes sensitive information in the env hidden variable, which allows remot (no CVSS)
- [CVE-2005-4149](https://cve.now/CVE-2005-4149.md): Lyris ListManager 8.8 through 8.9b allows remote attackers to obtain sensitive information by causing errors in TML scripts, such as via dir (no CVSS)
- [CVE-2005-4150](https://cve.now/CVE-2005-4150.md): Cross-site scripting (XSS) vulnerability in the portal login page in Computer Associates CleverPath 4.7 allows remote attackers to execute J (no CVSS)
- [CVE-2005-4151](https://cve.now/CVE-2005-4151.md): The Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and earlier does not clear file slack space in (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-12-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.