# CVEs published 2005-12-22

46 CVEs were published on December 22, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-3536](https://cve.now/CVE-2005-3536.md): SQL injection vulnerability in phpBB 2 before 2.0.18 allows remote attackers to execute arbitrary SQL commands via the topic type. (no CVSS)
- [CVE-2005-3537](https://cve.now/CVE-2005-3537.md): A "missing request validation" error in phpBB 2 before 2.0.18 allows remote attackers to edit private messages of other users, probably by m (no CVSS)
- [CVE-2005-3660](https://cve.now/CVE-2005-3660.md): Linux kernel 2.4 and 2.6 allows attackers to cause a denial of service (memory exhaustion and panic) by creating a large number of connected (no CVSS)
- [CVE-2005-4504](https://cve.now/CVE-2005-4504.md): The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allo (no CVSS)
- [CVE-2005-3534](https://cve.now/CVE-2005-3534.md): Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbi (no CVSS)
- [CVE-2005-4500](https://cve.now/CVE-2005-4500.md): SQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) show and (2) type paramete (no CVSS)
- [CVE-2005-4501](https://cve.now/CVE-2005-4501.md): MediaWiki before 1.5.4 uses a hard-coded "internal placeholder string", which allows remote attackers to bypass protection against cross-sit (no CVSS)
- [CVE-2005-4502](https://cve.now/CVE-2005-4502.md): Cross-site scripting (XSS) vulnerability in httprint v202, and possibly other versions before v301, allows remote attackers to inject arbitr (no CVSS)
- [CVE-2005-4503](https://cve.now/CVE-2005-4503.md): httprint v202, and possibly other versions before v301, allows remote attackers to cause a denial of service (crash) via a long Server field (no CVSS)
- [CVE-2005-3631](https://cve.now/CVE-2005-3631.md): udev does not properly set permissions on certain files in /dev/input, which allows local users to obtain sensitive data that is entered at (no CVSS)
- [CVE-2005-4475](https://cve.now/CVE-2005-4475.md): Cross-site scripting (XSS) vulnerability in OpenCms 6.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via uns (no CVSS)
- [CVE-2005-4476](https://cve.now/CVE-2005-4476.md): Cross-site scripting (XSS) vulnerability in store/search/results.html in OpenEdit 4.0 and earlier allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2005-4477](https://cve.now/CVE-2005-4477.md): Cross-site scripting (XSS) vulnerability in papaya CMS 4.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2005-4478](https://cve.now/CVE-2005-4478.md): Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) menui (no CVSS)
- [CVE-2005-4479](https://cve.now/CVE-2005-4479.md): SQL injection vulnerability in article.php in phpSlash 0.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the s (no CVSS)
- [CVE-2005-4480](https://cve.now/CVE-2005-4480.md): Cross-site scripting (XSS) vulnerability in Plexcor CMS 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via u (no CVSS)
- [CVE-2005-4481](https://cve.now/CVE-2005-4481.md): Cross-site scripting (XSS) vulnerability in Polopoly 9 and earlier allows remote attackers to inject arbitrary web script or HTML via unspec (no CVSS)
- [CVE-2005-4482](https://cve.now/CVE-2005-4482.md): Cross-site scripting (XSS) vulnerability in login.asp in PortalApp 3.3 and earlier allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2005-4483](https://cve.now/CVE-2005-4483.md): Cross-site scripting (XSS) vulnerability in login.asp in SiteEnable 3.3 and earlier allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2005-4484](https://cve.now/CVE-2005-4484.md): Multiple cross-site scripting (XSS) vulnerabilities in IntranetApp 3.3 and earlier allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2005-4485](https://cve.now/CVE-2005-4485.md): Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2005-4486](https://cve.now/CVE-2005-4486.md): SQL injection vulnerability in Quantum Art QP7.Enterprise (formerly Q-Publishing) allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2005-4487](https://cve.now/CVE-2005-4487.md): Cross-site scripting (XSS) vulnerability in RAMSite R|1 CMS 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2005-4488](https://cve.now/CVE-2005-4488.md): Multiple cross-site scripting (XSS) vulnerabilities in index.tpl in Redakto WCMS 3.2 and earlier allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2005-4489](https://cve.now/CVE-2005-4489.md): Cross-site scripting (XSS) vulnerability in Scoop 1.1 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2005-4490](https://cve.now/CVE-2005-4490.md): Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2005-4491](https://cve.now/CVE-2005-4491.md): Multiple cross-site scripting (XSS) vulnerabilities in Sitekit CMS 6.6 and earlier allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2005-4492](https://cve.now/CVE-2005-4492.md): Cross-site scripting (XSS) vulnerability in Starphire SiteSage 5.0.18 and earlier allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2005-4493](https://cve.now/CVE-2005-4493.md): Cross-site scripting (XSS) vulnerability in SpearTek 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unsp (no CVSS)
- [CVE-2005-4494](https://cve.now/CVE-2005-4494.md): Cross-site scripting (XSS) vulnerability in SPIP 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspec (no CVSS)
- [CVE-2005-4495](https://cve.now/CVE-2005-4495.md): SQL injection vulnerability in index.cfm in SpireMedia mx7 allows remote attackers to execute arbitrary SQL commands via the cid parameter. (no CVSS)
- [CVE-2005-4496](https://cve.now/CVE-2005-4496.md): Cross-site scripting (XSS) vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2005-4497](https://cve.now/CVE-2005-4497.md): Cross-site scripting (XSS) vulnerability in Tangora Portal CMS 4.0 and earlier allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2005-4498](https://cve.now/CVE-2005-4498.md): Cross-site scripting (XSS) vulnerability in Text-e 1.6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unsp (no CVSS)
- [CVE-2005-4499](https://cve.now/CVE-2005-4499.md): The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (no CVSS)
- [CVE-2005-4474](https://cve.now/CVE-2005-4474.md): Buffer overflow in the "Add to archive" command in WinRAR 3.51 allows user-assisted attackers to cause a denial of service (crash) and possi (no CVSS)
- [CVE-2005-4464](https://cve.now/CVE-2005-4464.md): Ingate Firewall before 4.3.4 and SIParator before 4.3.4 allows remote attackers to cause a denial of service (kernel deadlock) by sending a (no CVSS)
- [CVE-2005-4465](https://cve.now/CVE-2005-4465.md): The Internet Key Exchange version 1 (IKEv1) implementation in NEC UNIVERGE IX1000, IX2000, and IX3000 allows remote attackers to cause a den (no CVSS)
- [CVE-2005-4466](https://cve.now/CVE-2005-4466.md): Heap-based buffer overflow in the SIPParser function in i3sipmsg.dll in Interaction SIP Proxy before 3.0.011 allows remote attackers to caus (no CVSS)
- [CVE-2005-4467](https://cve.now/CVE-2005-4467.md): Directory traversal vulnerability in help\_text\_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read and include arbitrar (no CVSS)
- [CVE-2005-4468](https://cve.now/CVE-2005-4468.md): PHP remote file include vulnerability in help\_text\_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2005-4469](https://cve.now/CVE-2005-4469.md): Multiple direct static code injection vulnerabilities in PHPGedView 3.3.7 and earlier allow remote attackers to execute arbitrary PHP code v (no CVSS)
- [CVE-2005-4470](https://cve.now/CVE-2005-4470.md): Heap-based buffer overflow in the get\_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to caus (no CVSS)
- [CVE-2005-4471](https://cve.now/CVE-2005-4471.md): POP3 service in Avaya Modular Messaging Message Storage Server (MSS) 2.0 SP 4 and earlier allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2005-4472](https://cve.now/CVE-2005-4472.md): Stack-based buffer overflow in the Macromedia JRun 4 web server (JWS) allows remote attackers to cause a denial of service and possibly exec (no CVSS)
- [CVE-2005-4473](https://cve.now/CVE-2005-4473.md): Unspecified vulnerability in Macromedia JRun 4 web server (JWS) allows remote attackers to view web application source code via "a malformed (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-12-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.