Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: December 2005

44 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2005-3945
    35Monitor

    The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predicta

    HighCVSS 7.8No exploitEPSS 12%

    microsoft · windows 2000Dec 1, 2005

  • CVE-2005-2923
    19Monitor

    The IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to cause a denial of service

    MediumCVSS 4.0No exploitEPSS 10%

    ipswitch · imail serverDec 6, 2005

  • CVE-2005-4089
    35Monitor

    Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using t

    HighCVSS 7.1No exploitEPSS 22%

    microsoft · ieDec 8, 2005

  • CVE-2005-4131
    36Monitor

    Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted att

    MediumCVSS 6.8Proof of conceptEPSS 31%

    microsoft · excelDec 9, 2005

  • CVE-2005-4134
    24Monitor

    Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumptio

    MediumCVSS 5.0Proof of conceptEPSS 12%

    mozilla · firefoxDec 9, 2005

  • CVE-2005-4145
    40Plan

    The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space

    MediumCVSS 6.5WeaponizedEPSS 43%

    lyris technologies inc · listmanagerDec 10, 2005

  • CVE-2005-4197
    34Monitor

    tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a parameter, which is exec

    HighCVSS 7.5Proof of conceptEPSS 11%

    nortel · ssl vpnDec 13, 2005

  • CVE-2005-3352
    39Monitor

    Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev a

    MediumCVSS 4.3No exploitEPSS 73%

    apache · http serverDec 13, 2005

  • CVE-2005-2829
    26Monitor

    Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overla

    MediumCVSS 5.1No exploitEPSS 18%

    microsoft · ieDec 14, 2005

  • CVE-2005-2830
    31Monitor

    Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext,

    MediumCVSS 5.0No exploitEPSS 35%

    microsoft · ieDec 14, 2005

  • CVE-2005-2831
    39Monitor

    Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute a

    HighCVSS 7.5No exploitEPSS 30%

    microsoft · ieDec 14, 2005

  • CVE-2005-3652
    35Monitor

    Heap-based buffer overflow in Citrix Program Neighborhood client 9.0 and earlier allows remote attackers to execute arbitrary code via a lon

    HighCVSS 7.5No exploitEPSS 15%

    citrix · ica program neighborhood clientDec 16, 2005

  • CVE-2005-4360
    57Plan

    The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitr

    HighCVSS 7.8Proof of conceptEPSS 86%

    microsoft · internet information servicesDec 19, 2005

  • CVE-2005-4411
    49Plan

    Buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via a long request to TCP port 105.

    HighCVSS 7.5WeaponizedEPSS 64%

    david harris · mercury mail transport systemDec 20, 2005

  • CVE-2005-4267
    50Plan

    Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends wi

    HighCVSS 7.5WeaponizedEPSS 66%

    qualcomm · worldmailDec 21, 2005

  • CVE-2005-4459
    44Plan

    Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, a

    CriticalCVSS 10.0No exploitEPSS 14%

    vmware · aceDec 21, 2005

  • CVE-2005-4466
    34Monitor

    Heap-based buffer overflow in the SIPParser function in i3sipmsg.dll in Interaction SIP Proxy before 3.0.011 allows remote attackers to caus

    HighCVSS 7.5Proof of conceptEPSS 12%

    interactive intelligence · interaction sip proxyDec 21, 2005

  • CVE-2005-4504
    35Monitor

    The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allo

    HighCVSS 7.8Proof of conceptEPSS 11%

    apple · safariDec 22, 2005

  • CVE-2005-4556
    33Monitor

    PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0

    HighCVSS 7.5Proof of conceptEPSS 10%

    icewarp · web mailDec 28, 2005

  • CVE-2005-4560
    56Plan

    The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Wind

    HighCVSS 7.5WeaponizedEPSS 86%

    microsoft · windows 2003 serverDec 28, 2005

  • CVE-2005-4573
    34Monitor

    PHP remote file include vulnerability in plog-admin-functions.php in Plogger Beta 2 allows remote attackers to execute arbitrary code via a

    HighCVSS 7.5Proof of conceptEPSS 11%

    plogger · ploggerDec 29, 2005

  • CVE-2005-1924
    40Plan

    The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands via shell metacharact

    CriticalCVSS 9.3Proof of conceptEPSS 10%

    squirrelmail · gpg pluginDec 31, 2005

  • CVE-2005-1939
    39Monitor

    Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot)

    MediumCVSS 5.0Proof of conceptEPSS 63%

    ipswitch · whatsup small businessDec 31, 2005

  • CVE-2005-2340
    38Monitor

    Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Ima

    HighCVSS 7.5Proof of conceptEPSS 25%

    apple · quicktimeDec 31, 2005

  • CVE-2005-3357
    28Monitor

    mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote a

    MediumCVSS 5.4No exploitEPSS 24%

    apache · http serverDec 31, 2005

  • CVE-2005-3525
    43Plan

    Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and earlier allows remot

    CriticalCVSS 9.3No exploitEPSS 19%

    adobe · shockwave playerDec 31, 2005

  • CVE-2005-3539
    34Monitor

    Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify

    HighCVSS 7.5Proof of conceptEPSS 12%

    hylafax · hylafaxDec 31, 2005

  • CVE-2005-3653
    46Plan

    Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before

    CriticalCVSS 10.0No exploitEPSS 18%

    ca · brightstor arcserve backupDec 31, 2005

  • CVE-2005-4085
    50Plan

    Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote at

    HighCVSS 7.5WeaponizedEPSS 65%

    bluecoat · webproxyDec 31, 2005

  • CVE-2005-4593
    34Monitor

    PHP remote file inclusion vulnerability in phpDocumentor 1.3.0 rc4 and earlier, when register_globals is enabled, allows remote attackers to

    HighCVSS 7.5Proof of conceptEPSS 14%

    joshua eichorn · phpdocumentorDec 31, 2005

  • CVE-2005-4703
    28Monitor

    Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains

    MediumCVSS 5.0Proof of conceptEPSS 25%

    apache · tomcatDec 31, 2005

  • CVE-2005-4717
    25Monitor

    Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows

    MediumCVSS 5.0Proof of conceptEPSS 16%

    microsoft · ieDec 31, 2005

  • CVE-2005-4718
    23Monitor

    Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file with a "content: url(

    MediumCVSS 5.0Proof of conceptEPSS 10%

    opera · opera browserDec 31, 2005

  • CVE-2005-4734
    42Plan

    Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remo

    MediumCVSS 6.4WeaponizedEPSS 55%

    rsa · authentication agent for webDec 31, 2005

  • CVE-2005-4797
    40Plan

    Directory traversal vulnerability in printd line printer daemon (lpd) in Solaris 7 through 10 allows remote attackers to delete arbitrary fi

    MediumCVSS 5.0WeaponizedEPSS 29%

    sun · solarisDec 31, 2005

  • CVE-2005-4807
    34Monitor

    Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils befo

    HighCVSS 7.5Proof of conceptEPSS 12%

    gnu · binutilsDec 31, 2005

  • CVE-2005-4810
    24Monitor

    Microsoft Internet Explorer 7.0 Beta3 and earlier allows remote attackers to cause a denial of service (crash) via a "text/html" HTML Conten

    MediumCVSS 5.0No exploitEPSS 14%

    microsoft · internet explorerDec 31, 2005

  • CVE-2005-4816
    34Monitor

    Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service (crash) and possibly execute a

    HighCVSS 7.5No exploitEPSS 12%

    proftpd project · proftpdDec 31, 2005

  • CVE-2005-4823
    44Plan

    Buffer overflow in the HP HTTP Server 5.0 through 5.95 of the HP Web-enabled Management Software allows remote attackers to execute arbitrar

    CriticalCVSS 10.0No exploitEPSS 12%

    hp · http serverDec 31, 2005

  • CVE-2005-4827
    33Monitor

    Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outs

    HighCVSS 7.5No exploitEPSS 11%

    microsoft · ieDec 31, 2005

  • CVE-2005-4832
    43Plan

    SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with eleva

    HighCVSS 7.5WeaponizedEPSS 42%

    oracle · oracle10gDec 31, 2005

  • CVE-2005-4840
    20Monitor

    The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of service (NULL derefer

    MediumCVSS 4.3No exploitEPSS 11%

    microsoft · outlook express book controlDec 31, 2005

  • CVE-2005-4843
    34Monitor

    The SmartConnect Class control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of th

    HighCVSS 7.8No exploitEPSS 11%

    microsoft · internet explorerDec 31, 2005

  • CVE-2005-4844
    32Monitor

    The CLSID_ApprenticeICW control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of t

    HighCVSS 7.1No exploitEPSS 12%

    microsoft · internet explorerDec 31, 2005