cve.nowby Sazabi

CVEs published December 22, 2005

46 CVEs were published on December 22, 2005: 0 critical, 0 high.

Published: 46
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 46
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 46

CVE-2005-3536SQL injection vulnerability in phpBB 2 before 2.0.18 allows remote attackers to execute arbitrary SQL commands via the topic type.UnratedDec 22, 2005
CVE-2005-3537A "missing request validation" error in phpBB 2 before 2.0.18 allows remote attackers to edit private messages of other users, probably by mUnratedDec 22, 2005
CVE-2005-3660Linux kernel 2.4 and 2.6 allows attackers to cause a denial of service (memory exhaustion and panic) by creating a large number of connectedUnratedDec 22, 2005
CVE-2005-4504The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, alloUnratedDec 22, 2005
CVE-2005-3534Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbiUnratedDec 22, 2005
CVE-2005-4500SQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) show and (2) type parameteUnratedDec 22, 2005
CVE-2005-4501MediaWiki before 1.5.4 uses a hard-coded "internal placeholder string", which allows remote attackers to bypass protection against cross-sitUnratedDec 22, 2005
CVE-2005-4502Cross-site scripting (XSS) vulnerability in httprint v202, and possibly other versions before v301, allows remote attackers to inject arbitrUnratedDec 22, 2005
CVE-2005-4503httprint v202, and possibly other versions before v301, allows remote attackers to cause a denial of service (crash) via a long Server fieldUnratedDec 22, 2005
CVE-2005-3631udev does not properly set permissions on certain files in /dev/input, which allows local users to obtain sensitive data that is entered at UnratedDec 22, 2005
CVE-2005-4475Cross-site scripting (XSS) vulnerability in OpenCms 6.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unsUnratedDec 22, 2005
CVE-2005-4476Cross-site scripting (XSS) vulnerability in store/search/results.html in OpenEdit 4.0 and earlier allows remote attackers to inject arbitrarUnratedDec 22, 2005
CVE-2005-4477Cross-site scripting (XSS) vulnerability in papaya CMS 4.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via UnratedDec 22, 2005
CVE-2005-4478Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) menuiUnratedDec 22, 2005
CVE-2005-4479SQL injection vulnerability in article.php in phpSlash 0.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the sUnratedDec 22, 2005
CVE-2005-4480Cross-site scripting (XSS) vulnerability in Plexcor CMS 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via uUnratedDec 22, 2005
CVE-2005-4481Cross-site scripting (XSS) vulnerability in Polopoly 9 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecUnratedDec 22, 2005
CVE-2005-4482Cross-site scripting (XSS) vulnerability in login.asp in PortalApp 3.3 and earlier allows remote attackers to inject arbitrary web script orUnratedDec 22, 2005
CVE-2005-4483Cross-site scripting (XSS) vulnerability in login.asp in SiteEnable 3.3 and earlier allows remote attackers to inject arbitrary web script oUnratedDec 22, 2005
CVE-2005-4484Multiple cross-site scripting (XSS) vulnerabilities in IntranetApp 3.3 and earlier allow remote attackers to inject arbitrary web script or UnratedDec 22, 2005
CVE-2005-4485Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HUnratedDec 22, 2005
CVE-2005-4486SQL injection vulnerability in Quantum Art QP7.Enterprise (formerly Q-Publishing) allows remote attackers to execute arbitrary SQL commands UnratedDec 22, 2005
CVE-2005-4487Cross-site scripting (XSS) vulnerability in RAMSite R|1 CMS 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML vUnratedDec 22, 2005
CVE-2005-4488Multiple cross-site scripting (XSS) vulnerabilities in index.tpl in Redakto WCMS 3.2 and earlier allow remote attackers to inject arbitrary UnratedDec 22, 2005
CVE-2005-4489Cross-site scripting (XSS) vulnerability in Scoop 1.1 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via theUnratedDec 22, 2005
CVE-2005-4490Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML UnratedDec 22, 2005
CVE-2005-4491Multiple cross-site scripting (XSS) vulnerabilities in Sitekit CMS 6.6 and earlier allow remote attackers to inject arbitrary web script or UnratedDec 22, 2005
CVE-2005-4492Cross-site scripting (XSS) vulnerability in Starphire SiteSage 5.0.18 and earlier allows remote attackers to inject arbitrary web script or UnratedDec 22, 2005
CVE-2005-4493Cross-site scripting (XSS) vulnerability in SpearTek 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspUnratedDec 22, 2005
CVE-2005-4494Cross-site scripting (XSS) vulnerability in SPIP 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecUnratedDec 22, 2005
CVE-2005-4495SQL injection vulnerability in index.cfm in SpireMedia mx7 allows remote attackers to execute arbitrary SQL commands via the cid parameter.UnratedDec 22, 2005
CVE-2005-4496Cross-site scripting (XSS) vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arbitrary web script or UnratedDec 22, 2005
CVE-2005-4497Cross-site scripting (XSS) vulnerability in Tangora Portal CMS 4.0 and earlier allows remote attackers to inject arbitrary web script or HTMUnratedDec 22, 2005
CVE-2005-4498Cross-site scripting (XSS) vulnerability in Text-e 1.6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspUnratedDec 22, 2005
CVE-2005-4499The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control ServerUnratedDec 22, 2005
CVE-2005-4474Buffer overflow in the "Add to archive" command in WinRAR 3.51 allows user-assisted attackers to cause a denial of service (crash) and possiUnratedDec 22, 2005
CVE-2005-4464Ingate Firewall before 4.3.4 and SIParator before 4.3.4 allows remote attackers to cause a denial of service (kernel deadlock) by sending a UnratedDec 22, 2005
CVE-2005-4465The Internet Key Exchange version 1 (IKEv1) implementation in NEC UNIVERGE IX1000, IX2000, and IX3000 allows remote attackers to cause a denUnratedDec 22, 2005
CVE-2005-4466Heap-based buffer overflow in the SIPParser function in i3sipmsg.dll in Interaction SIP Proxy before 3.0.011 allows remote attackers to causUnratedDec 22, 2005
CVE-2005-4467Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read and include arbitrarUnratedDec 22, 2005
CVE-2005-4468PHP remote file include vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to execute arbitrary codUnratedDec 22, 2005
CVE-2005-4469Multiple direct static code injection vulnerabilities in PHPGedView 3.3.7 and earlier allow remote attackers to execute arbitrary PHP code vUnratedDec 22, 2005
CVE-2005-4470Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to causUnratedDec 22, 2005
CVE-2005-4471POP3 service in Avaya Modular Messaging Message Storage Server (MSS) 2.0 SP 4 and earlier allows remote attackers to cause a denial of serviUnratedDec 22, 2005
CVE-2005-4472Stack-based buffer overflow in the Macromedia JRun 4 web server (JWS) allows remote attackers to cause a denial of service and possibly execUnratedDec 22, 2005
CVE-2005-4473Unspecified vulnerability in Macromedia JRun 4 web server (JWS) allows remote attackers to view web application source code via "a malformedUnratedDec 22, 2005