# CVEs published 2005-12-18

3 CVEs were published on December 18, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2004-2651](https://cve.now/CVE-2004-2651.md): Multiple cross-site scripting (XSS) vulnerabilities in YaCy before 0.32 allow remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2004-2652](https://cve.now/CVE-2004-2652.md): The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remo (no CVSS)
- [CVE-2005-4346](https://cve.now/CVE-2005-4346.md): Invalid SQL syntax error in blog.php in phpBB Blog 2.2.2 and earlier allows remote attackers to obtain the full path of the application via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-12-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.