# CVEs published 2005-12-15

23 CVEs were published on December 15, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4274](https://cve.now/CVE-2005-4274.md): Unspecified vulnerability in Business Objects WebIntelligence 6.5x allows remote attackers to cause a denial of service (user account lock o (no CVSS)
- [CVE-2005-4271](https://cve.now/CVE-2005-4271.md): Buffer overflow in the malloc debug system in IBM AIX 5.3 allows local users to execute arbitrary code. (no CVSS)
- [CVE-2005-4272](https://cve.now/CVE-2005-4272.md): Multiple buffer overflows in IBM AIX 5.1, 5.2, and 5.3 allow remote attackers to execute arbitrary code via (1) muxatmd and (2) slocal. (no CVSS)
- [CVE-2005-4273](https://cve.now/CVE-2005-4273.md): Multiple unspecified vulnerabilities in (1) getShell and (2) getCommand in IBM AIX 5.3 allow local users to append to arbitrary files. (no CVSS)
- [CVE-2005-4269](https://cve.now/CVE-2005-4269.md): mshtml.dll in Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers to cause a denial of service (access violati (no CVSS)
- [CVE-2005-4270](https://cve.now/CVE-2005-4270.md): Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an HTTP 401 response wit (no CVSS)
- [CVE-2005-4268](https://cve.now/CVE-2005-4268.md): Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service (crash) (no CVSS)
- [CVE-2005-4243](https://cve.now/CVE-2005-4243.md): Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) popupid param (no CVSS)
- [CVE-2005-4248](https://cve.now/CVE-2005-4248.md): Multiple cross-site scripting (XSS) vulnerabilities in QuickPayPro 3.1 allow remote attackers to inject arbitrary web script or HTML via var (no CVSS)
- [CVE-2005-4249](https://cve.now/CVE-2005-4249.md): ADP Forum 2.0 through 2.0.3 stores sensitive information in plaintext files under the web document root with insufficient access control, wh (no CVSS)
- [CVE-2005-4253](https://cve.now/CVE-2005-4253.md): Cross-site scripting (XSS) vulnerability in getdox.php in Torrential 1.2 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2005-4254](https://cve.now/CVE-2005-4254.md): SQL injection vulnerability in view\_Results.php in DreamLevels DreamPoll 3.0 final allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2005-4255](https://cve.now/CVE-2005-4255.md): Cross-site scripting (XSS) vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2005-4256](https://cve.now/CVE-2005-4256.md): Cross-site scripting (XSS) vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2005-4257](https://cve.now/CVE-2005-4257.md): Linksys WRT54GS and BEFW11S4 allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and d (no CVSS)
- [CVE-2005-4258](https://cve.now/CVE-2005-4258.md): Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source (no CVSS)
- [CVE-2005-4259](https://cve.now/CVE-2005-4259.md): Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the (1) TID parameter in to (no CVSS)
- [CVE-2005-4260](https://cve.now/CVE-2005-4260.md): Interpretation conflict in includes/mainfile.php in PHP-Nuke 7.9 and later allows remote attackers to perform cross-site scripting (XSS) att (no CVSS)
- [CVE-2005-4261](https://cve.now/CVE-2005-4261.md): Unspecified vulnerability in Positive Software Corporation CP+ (cpplus) before 2.5.5 allows attackers to have unknown impact and attack vect (no CVSS)
- [CVE-2005-4262](https://cve.now/CVE-2005-4262.md): Cross-site scripting (XSS) vulnerability in the News module in Envolution allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2005-4263](https://cve.now/CVE-2005-4263.md): SQL injection vulnerability in the News module in Envolution allows remote attackers to execute arbitrary SQL commands via the (1) startrow (no CVSS)
- [CVE-2005-4264](https://cve.now/CVE-2005-4264.md): Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2005-4266](https://cve.now/CVE-2005-4266.md): WorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a randomly generated session ID that is asso (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-12-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.