CVEs

343,040 total · page 6571 of 6,861

CVE	Vendor / Product	Risk	CVSS	EPSS	Published	Description
CVE-2005-4170	Efiction Efiction	0.03	—	0.02	Dec 11, 2005	SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands via the uid parameter to viewuser.php.
CVE-2005-4171	Efiction Efiction	0.04	—	0.08	Dec 11, 2005	The "Upload new image" command in the "Manage Images" eFiction 1.1, when members are allowed to upload images, allows remote attackers to execute arbitrary PHP code by uploading a filename with a .php extension that contains a GIF header, which passes the image validity check…
CVE-2005-4172	Efiction Efiction	0.00	—	0.02	Dec 11, 2005	eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information via a direct request to storyblock.php without arguments, which leaks the full pathname in the resulting PHP error message.
CVE-2005-4173	Efiction Efiction	0.00	—	0.02	Dec 11, 2005	eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing phpinfo.php, which executes the PHP phpinfo function.
CVE-2005-4174	Efiction Efiction	0.00	—	0.02	Dec 11, 2005	eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessing (1) install.php or (2) upgrade.php. NOTE: it is unclear whether this is a vulnerability in eFiction itself or the result of incorrect…
CVE-2005-4175	Insyde BIOS	0.00	—	0.00	Dec 11, 2005	Insyde BIOS V190 does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory.
CVE-2005-4176	—	0.03	—	0.01	Dec 11, 2005	AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory.
CVE-2005-4159	Simple Machines Simple Machines Forum	0.00	—	0.01	Dec 11, 2005	NOTE: this issue has been disputed by the vendor and third parties. SQL injection vulnerability in Memberlist.php in Simple Machines Forum (SMF) 1.1 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter. NOTE: the vendor says that…
CVE-2005-4160	—	0.03	—	0.03	Dec 11, 2005	Directory traversal vulnerability in getdox.php in Torrential 1.2 allows remote attackers to read arbitrary files via "../" sequences in the query string argument.
CVE-2005-4161	Milliscripts Milliscripts	0.03	—	0.02	Dec 11, 2005	Multiple cross-site scripting (XSS) vulnerabilities in MilliScripts 1.4 redirect script allow remote attackers to inject arbitrary web script or HTML via the domainname parameter to register.php, and other unspecified vectors. NOTE: the vendor has disputed this issue, stating…
CVE-2005-4162	Acme Perlcal	0.00	—	0.01	Dec 11, 2005	Cross-site scripting (XSS) vulnerability in cal_make.pl in ACME PerlCal 2.99.20 allows remote attackers to inject arbitrary web script or HTML via the p0 parameter.
CVE-2005-4163	Captcha PHP Captcha PHP	0.00	—	0.02	Dec 11, 2005	Directory traversal vulnerability in captcha.php in Captcha PHP 0.9 allows remote attackers to read arbitrary files via the _tcf parameter.
CVE-2005-4164	Widgetmonkey PHP Addressbook	0.00	—	0.01	Dec 11, 2005	SQL injection vulnerability in view.php in PHP-addressbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2005-3533	Osh Osh	0.03	—	0.01	Dec 11, 2005	Buffer overflow in OSH before 1.7-15 allows local users to execute arbitrary code via a long current working directory and filename.
CVE-2005-4152	Soti Pocket Controller Professional	0.00	—	0.02	Dec 11, 2005	Soti Pocket Controller-Professional 5.0 allows remote attackers to turn off, reboot, or hard reset a PDA via a series of initialization, command, and reset packets sent to port 5492.
CVE-2005-4153	Mailman Mailman	0.00	—	0.03	Dec 11, 2005	Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message that causes the server to "fail with an Overflow on bad date data in a processed message," a different vulnerability than CVE-2005-3573.
CVE-2005-4154	Pear PEAR Installer	0.01	—	0.07	Dec 11, 2005	Unspecified vulnerability in PEAR installer 1.4.2 and earlier allows user-assisted attackers to execute arbitrary code via a crafted package that can execute code when the pear command is executed or when the Web/Gtk frontend is loaded.
CVE-2005-4155	Atutor Atutor	0.03	—	0.03	Dec 11, 2005	registration.PHP in ATutor 1.5.1 pl2 allows remote attackers to execute arbitrary SQL commands via an e-mail address that ends in a NULL character, which bypasses the PHP regular expression check. NOTE: it is possible that this is actually a bug in PHP code, in which case this…
CVE-2005-4156	Mambo (software) Mambo	0.00	—	0.02	Dec 11, 2005	Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (1.0.9), with magic_quotes_gpc disabled, allows remote attackers to read arbitrary files and possibly cause a denial of service via a query string that ends with a NULL character.
CVE-2005-4157	Kerio Technologies Winroute Firewall	0.00	—	0.02	Dec 11, 2005	Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to authenticate to the service using an account that has been disabled.
CVE-2005-4158	Todd Miller Sudo	0.03	—	0.01	Dec 11, 2005	Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library…
CVE-2005-3532	Double Precision Incorporated Courier Mail Server	0.00	—	0.02	Dec 11, 2005	authpam.c in courier-authdaemon for Courier Mail Server 0.37.3 through 0.52.1, when using pam_tally, does not call the pam_acct_mgmt function to verify that access should be granted, which allows attackers to authenticate to the server using accounts that have been disabled.
CVE-2005-3651	Ethereal Group Ethereal	0.00	—	0.06	Dec 10, 2005	Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets.
CVE-2005-4142	Lyris Listmanager	0.00	—	0.03	Dec 10, 2005	The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line wrap feature, allows remote attackers to execute arbitrary list administration commands via LFCR (%0A%0D) sequences in the pw parameter. NOTE: it is not clear whether…
CVE-2005-4143	Lyris Listmanager	0.03	—	0.01	Dec 10, 2005	SQL injection vulnerability in Lyris ListManager 5.0 through 8.9a allows remote attackers to execute arbitrary SQL commands via SQL code after a numeric argument to a /read/attachment URL.
CVE-2005-4144	Lyris Listmanager	0.00	—	0.02	Dec 10, 2005	Lyris ListManager 5.0 through 8.9a allows remote attackers to add "ORDER BY" columns to SQL queries via unusual whitespace characters in the orderby parameter, such as (1) newlines and (2) 0xFF (ASCII 255) characters, which are interpreted as whitespace.
CVE-2005-4145	Lyris Listmanager	0.07	—	0.44	Dec 10, 2005	The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to 5 digits, possibly from the process ID), which allows remote attackers to gain access via a brute force attack.
CVE-2005-4146	Lyris Listmanager	0.00	—	0.02	Dec 10, 2005	Lyris ListManager before 8.9b allows remote attackers to obtain sensitive information via a request to the TCLHTTPd status module, which provides sensitive server configuration information.
CVE-2005-4147	Lyris Listmanager	0.00	—	0.02	Dec 10, 2005	The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitrary .tml (TCL) files via (1) a request with a trailing null byte (%00), which might also require (2) an authentication bypass step that involves a username with a…
CVE-2005-4148	Lyris Listmanager	0.00	—	0.02	Dec 10, 2005	Lyris ListManager 8.5, and possibly other versions before 8.8, includes sensitive information in the env hidden variable, which allows remote attackers to obtain information such as the installation path by requesting a non-existent page and reading the env variable from the…
CVE-2005-4149	Lyris Listmanager	0.00	—	0.01	Dec 10, 2005	Lyris ListManager 8.8 through 8.9b allows remote attackers to obtain sensitive information by causing errors in TML scripts, such as via direct requests, which leaks the installation path, SQL queries, or product code in diagnostic messages.
CVE-2005-4150	Broadcom Corporation Cleverpath Portal	0.00	—	0.02	Dec 10, 2005	Cross-site scripting (XSS) vulnerability in the portal login page in Computer Associates CleverPath 4.7 allows remote attackers to execute Javascript via unknown vectors.
CVE-2005-4151	PGP Corporation Desktop	0.00	—	0.00	Dec 10, 2005	The Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and earlier does not clear file slack space in the last cluster for the file, which allows local users to access the previous contents of the disk.
CVE-2005-4133	Sun Corporation Solaris	0.00	—	0.00	Dec 9, 2005	Sun Update Connection in Sun Solaris 10, when configured to use a web proxy, allows local users to obtain the proxy authentication password via (1) an unspecified vector and (2) proxy log files.
CVE-2005-4134	Netscape Netscape	0.04	—	0.13	Dec 9, 2005	Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not processed efficiently during…
CVE-2005-4135	Simplemedia Simplebbs	0.04	—	0.09	Dec 9, 2005	Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header (possibly the name parameter or variable), which is then written to data/topics.php.
CVE-2005-4136	DRZES HMS	0.03	—	0.02	Dec 9, 2005	Cross-site scripting (XSS) vulnerability in login.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web script or HTML via the customerEmailAddress parameter.
CVE-2005-4137	DRZES HMS	0.00	—	0.02	Dec 9, 2005	SQL injection vulnerability in viewinvoice.php in DRZES HMS 3.2 allows remote attackers to execute arbitrary SQL commands via the invoiceID parameter.
CVE-2005-4138	Thwboard Thwboard	0.00	—	0.01	Dec 9, 2005	Multiple cross-site scripting (XSS) vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to inject arbitrary web script or HTML via the (1) Wohnort and (2) Beruf fields in editprofile.php, (3) user parameter array in v_profile.php, and (4) the action parameter…
CVE-2005-4139	Thwboard Thwboard	0.03	—	0.02	Dec 9, 2005	Multiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) year parameter in calendar.php, (2) user parameter array in v_profile.php, and (3) the userid parameter in misc.php.
CVE-2005-4140	Website Baker Websitebaker	0.03	—	0.02	Dec 9, 2005	SQL injection vulnerability in admin/login/index.php in Website Baker 2.6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter, as used by the user field.
CVE-2005-4141	Kervancilar Aspmforum	0.03	—	0.01	Dec 9, 2005	Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via the (1) harf parameter in kullanicilistesi.asp and (2) baslik parameter in forum.asp.
CVE-2005-4126	RealNetworks Realplayer	0.00	—	0.02	Dec 9, 2005	UNVERIFIABLE, PRERELEASE NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows attackers to execute arbitrary code. NOTE: the information regarding…
CVE-2005-4130	RealNetworks Realplayer	0.00	—	0.02	Dec 9, 2005	UNVERIFIABLE, PRERELEASE NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows remote attackers to execute arbitrary code. NOTE: it is not known…
CVE-2005-4131	Microsoft Excel	0.05	—	0.31	Dec 9, 2005	Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to…
CVE-2005-4132	Contenido Contendio	0.00	—	0.01	Dec 9, 2005	Unspecified "security leak" vulnerability in Contenido before 4.6.4, when register_globals is on and allow_url_fopen is true, has unspecified impact and attack vectors. NOTE: it is likely that this is a PHP remote file include vulnerability.
CVE-2005-3661	Dell Truemobile 2300 Wireless Broadband Router	0.00	—	0.02	Dec 8, 2005	Dell TrueMobile 2300 Wireless Broadband Router running firmware 3.0.0.8 and 5.1.1.6, and possibly other versions, allows remote attackers to reset authentication credentials, then change configuration or firmware, via a direct request to apply.cgi with the Page parameter set to…
CVE-2005-3665	PhpMyAdmin phpMyAdmin	0.00	—	0.02	Dec 8, 2005	Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_HOST variable and (2) various scripts in the libraries directory that handle header generation.
CVE-2005-4086	Sugarcrm Sugar Suite	0.04	—	0.07	Dec 8, 2005	Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the beanFiles array parameter.
CVE-2005-4087	Sugarcrm Sugar Suite	0.03	—	0.04	Dec 8, 2005	PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the beanFiles array parameter.

CVE-2005-4170Dec 11, 2005
Efiction
Efiction
risk 0.03cvss —epss 0.02
SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands via the uid parameter to viewuser.php.
CVE-2005-4171Dec 11, 2005
Efiction
Efiction
risk 0.04cvss —epss 0.08
The "Upload new image" command in the "Manage Images" eFiction 1.1, when members are allowed to upload images, allows remote attackers to execute arbitrary PHP code by uploading a filename with a .php extension that contains a GIF header, which passes the image validity check…
CVE-2005-4172Dec 11, 2005
Efiction
Efiction
risk 0.00cvss —epss 0.02
eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information via a direct request to storyblock.php without arguments, which leaks the full pathname in the resulting PHP error message.
CVE-2005-4173Dec 11, 2005
Efiction
Efiction
risk 0.00cvss —epss 0.02
eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing phpinfo.php, which executes the PHP phpinfo function.
CVE-2005-4174Dec 11, 2005
Efiction
Efiction
risk 0.00cvss —epss 0.02
eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessing (1) install.php or (2) upgrade.php. NOTE: it is unclear whether this is a vulnerability in eFiction itself or the result of incorrect…
CVE-2005-4175Dec 11, 2005
Insyde
BIOS
risk 0.00cvss —epss 0.00
Insyde BIOS V190 does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory.
CVE-2005-4176Dec 11, 2005
risk 0.03cvss —epss 0.01
AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory.
CVE-2005-4159Dec 11, 2005
Simple Machines
Simple Machines Forum
risk 0.00cvss —epss 0.01
NOTE: this issue has been disputed by the vendor and third parties. SQL injection vulnerability in Memberlist.php in Simple Machines Forum (SMF) 1.1 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter. NOTE: the vendor says that…
CVE-2005-4160Dec 11, 2005
risk 0.03cvss —epss 0.03
Directory traversal vulnerability in getdox.php in Torrential 1.2 allows remote attackers to read arbitrary files via "../" sequences in the query string argument.
CVE-2005-4161Dec 11, 2005
Milliscripts
Milliscripts
risk 0.03cvss —epss 0.02
Multiple cross-site scripting (XSS) vulnerabilities in MilliScripts 1.4 redirect script allow remote attackers to inject arbitrary web script or HTML via the domainname parameter to register.php, and other unspecified vectors. NOTE: the vendor has disputed this issue, stating…
CVE-2005-4162Dec 11, 2005
Acme
Perlcal
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in cal_make.pl in ACME PerlCal 2.99.20 allows remote attackers to inject arbitrary web script or HTML via the p0 parameter.
CVE-2005-4163Dec 11, 2005
Captcha PHP
Captcha PHP
risk 0.00cvss —epss 0.02
Directory traversal vulnerability in captcha.php in Captcha PHP 0.9 allows remote attackers to read arbitrary files via the _tcf parameter.
CVE-2005-4164Dec 11, 2005
Widgetmonkey
PHP Addressbook
risk 0.00cvss —epss 0.01
SQL injection vulnerability in view.php in PHP-addressbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2005-3533Dec 11, 2005
Osh
Osh
risk 0.03cvss —epss 0.01
Buffer overflow in OSH before 1.7-15 allows local users to execute arbitrary code via a long current working directory and filename.
CVE-2005-4152Dec 11, 2005
Soti
Pocket Controller Professional
risk 0.00cvss —epss 0.02
Soti Pocket Controller-Professional 5.0 allows remote attackers to turn off, reboot, or hard reset a PDA via a series of initialization, command, and reset packets sent to port 5492.
CVE-2005-4153Dec 11, 2005
Mailman
Mailman
risk 0.00cvss —epss 0.03
Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message that causes the server to "fail with an Overflow on bad date data in a processed message," a different vulnerability than CVE-2005-3573.
CVE-2005-4154Dec 11, 2005
Pear
PEAR Installer
risk 0.01cvss —epss 0.07
Unspecified vulnerability in PEAR installer 1.4.2 and earlier allows user-assisted attackers to execute arbitrary code via a crafted package that can execute code when the pear command is executed or when the Web/Gtk frontend is loaded.
CVE-2005-4155Dec 11, 2005
Atutor
Atutor
risk 0.03cvss —epss 0.03
registration.PHP in ATutor 1.5.1 pl2 allows remote attackers to execute arbitrary SQL commands via an e-mail address that ends in a NULL character, which bypasses the PHP regular expression check. NOTE: it is possible that this is actually a bug in PHP code, in which case this…
CVE-2005-4156Dec 11, 2005
Mambo (software)
Mambo
risk 0.00cvss —epss 0.02
Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (1.0.9), with magic_quotes_gpc disabled, allows remote attackers to read arbitrary files and possibly cause a denial of service via a query string that ends with a NULL character.
CVE-2005-4157Dec 11, 2005
Kerio Technologies
Winroute Firewall
risk 0.00cvss —epss 0.02
Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to authenticate to the service using an account that has been disabled.
CVE-2005-4158Dec 11, 2005
Todd Miller
Sudo
risk 0.03cvss —epss 0.01
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library…
CVE-2005-3532Dec 11, 2005
Double Precision Incorporated
Courier Mail Server
risk 0.00cvss —epss 0.02
authpam.c in courier-authdaemon for Courier Mail Server 0.37.3 through 0.52.1, when using pam_tally, does not call the pam_acct_mgmt function to verify that access should be granted, which allows attackers to authenticate to the server using accounts that have been disabled.
CVE-2005-3651Dec 10, 2005
Ethereal Group
Ethereal
risk 0.00cvss —epss 0.06
Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly other versions, allows remote attackers to execute arbitrary code via crafted packets.
CVE-2005-4142Dec 10, 2005
Lyris
Listmanager
risk 0.00cvss —epss 0.03
The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line wrap feature, allows remote attackers to execute arbitrary list administration commands via LFCR (%0A%0D) sequences in the pw parameter. NOTE: it is not clear whether…
CVE-2005-4143Dec 10, 2005
Lyris
Listmanager
risk 0.03cvss —epss 0.01
SQL injection vulnerability in Lyris ListManager 5.0 through 8.9a allows remote attackers to execute arbitrary SQL commands via SQL code after a numeric argument to a /read/attachment URL.
CVE-2005-4144Dec 10, 2005
Lyris
Listmanager
risk 0.00cvss —epss 0.02
Lyris ListManager 5.0 through 8.9a allows remote attackers to add "ORDER BY" columns to SQL queries via unusual whitespace characters in the orderby parameter, such as (1) newlines and (2) 0xFF (ASCII 255) characters, which are interpreted as whitespace.
CVE-2005-4145Dec 10, 2005
Lyris
Listmanager
risk 0.07cvss —epss 0.44
The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to 5 digits, possibly from the process ID), which allows remote attackers to gain access via a brute force attack.
CVE-2005-4146Dec 10, 2005
Lyris
Listmanager
risk 0.00cvss —epss 0.02
Lyris ListManager before 8.9b allows remote attackers to obtain sensitive information via a request to the TCLHTTPd status module, which provides sensitive server configuration information.
CVE-2005-4147Dec 10, 2005
Lyris
Listmanager
risk 0.00cvss —epss 0.02
The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitrary .tml (TCL) files via (1) a request with a trailing null byte (%00), which might also require (2) an authentication bypass step that involves a username with a…
CVE-2005-4148Dec 10, 2005
Lyris
Listmanager
risk 0.00cvss —epss 0.02
Lyris ListManager 8.5, and possibly other versions before 8.8, includes sensitive information in the env hidden variable, which allows remote attackers to obtain information such as the installation path by requesting a non-existent page and reading the env variable from the…
CVE-2005-4149Dec 10, 2005
Lyris
Listmanager
risk 0.00cvss —epss 0.01
Lyris ListManager 8.8 through 8.9b allows remote attackers to obtain sensitive information by causing errors in TML scripts, such as via direct requests, which leaks the installation path, SQL queries, or product code in diagnostic messages.
CVE-2005-4150Dec 10, 2005
Broadcom Corporation
Cleverpath Portal
risk 0.00cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in the portal login page in Computer Associates CleverPath 4.7 allows remote attackers to execute Javascript via unknown vectors.
CVE-2005-4151Dec 10, 2005
PGP Corporation
Desktop
risk 0.00cvss —epss 0.00
The Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and earlier does not clear file slack space in the last cluster for the file, which allows local users to access the previous contents of the disk.
CVE-2005-4133Dec 9, 2005
Sun Corporation
Solaris
risk 0.00cvss —epss 0.00
Sun Update Connection in Sun Solaris 10, when configured to use a web proxy, allows local users to obtain the proxy authentication password via (1) an unspecified vector and (2) proxy log files.
CVE-2005-4134Dec 9, 2005
Netscape
Netscape
risk 0.04cvss —epss 0.13
Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not processed efficiently during…
CVE-2005-4135Dec 9, 2005
Simplemedia
Simplebbs
risk 0.04cvss —epss 0.09
Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header (possibly the name parameter or variable), which is then written to data/topics.php.
CVE-2005-4136Dec 9, 2005
DRZES
HMS
risk 0.03cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in login.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web script or HTML via the customerEmailAddress parameter.
CVE-2005-4137Dec 9, 2005
DRZES
HMS
risk 0.00cvss —epss 0.02
SQL injection vulnerability in viewinvoice.php in DRZES HMS 3.2 allows remote attackers to execute arbitrary SQL commands via the invoiceID parameter.
CVE-2005-4138Dec 9, 2005
Thwboard
Thwboard
risk 0.00cvss —epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to inject arbitrary web script or HTML via the (1) Wohnort and (2) Beruf fields in editprofile.php, (3) user parameter array in v_profile.php, and (4) the action parameter…
CVE-2005-4139Dec 9, 2005
Thwboard
Thwboard
risk 0.03cvss —epss 0.02
Multiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) year parameter in calendar.php, (2) user parameter array in v_profile.php, and (3) the userid parameter in misc.php.
CVE-2005-4140Dec 9, 2005
Website Baker
Websitebaker
risk 0.03cvss —epss 0.02
SQL injection vulnerability in admin/login/index.php in Website Baker 2.6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter, as used by the user field.
CVE-2005-4141Dec 9, 2005
Kervancilar
Aspmforum
risk 0.03cvss —epss 0.01
Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via the (1) harf parameter in kullanicilistesi.asp and (2) baslik parameter in forum.asp.
CVE-2005-4126Dec 9, 2005
RealNetworks
Realplayer
risk 0.00cvss —epss 0.02
** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows attackers to execute arbitrary code. NOTE: the information regarding…
CVE-2005-4130Dec 9, 2005
RealNetworks
Realplayer
risk 0.00cvss —epss 0.02
** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows remote attackers to execute arbitrary code. NOTE: it is not known…
CVE-2005-4131Dec 9, 2005
Microsoft
Excel
risk 0.05cvss —epss 0.31
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to…
CVE-2005-4132Dec 9, 2005
Contenido
Contendio
risk 0.00cvss —epss 0.01
Unspecified "security leak" vulnerability in Contenido before 4.6.4, when register_globals is on and allow_url_fopen is true, has unspecified impact and attack vectors. NOTE: it is likely that this is a PHP remote file include vulnerability.
CVE-2005-3661Dec 8, 2005
Dell
Truemobile 2300 Wireless Broadband Router
risk 0.00cvss —epss 0.02
Dell TrueMobile 2300 Wireless Broadband Router running firmware 3.0.0.8 and 5.1.1.6, and possibly other versions, allows remote attackers to reset authentication credentials, then change configuration or firmware, via a direct request to apply.cgi with the Page parameter set to…
CVE-2005-3665Dec 8, 2005
PhpMyAdmin
phpMyAdmin
risk 0.00cvss —epss 0.02
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_HOST variable and (2) various scripts in the libraries directory that handle header generation.
CVE-2005-4086Dec 8, 2005
Sugarcrm
Sugar Suite
risk 0.04cvss —epss 0.07
Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the beanFiles array parameter.
CVE-2005-4087Dec 8, 2005
Sugarcrm
Sugar Suite
risk 0.03cvss —epss 0.04
PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the beanFiles array parameter.