Export limit exceeded: 30000 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (30000 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2005-3932 | 1 O-kiraku Nikki | 1 O-kiraku Nikki | 2026-04-16 | N/A |
| SQL injection vulnerability in okiraku.php in O-Kiraku Nikki 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the day_id parameter. | ||||
| CVE-2005-3934 | 1 Symantec | 1 Pcanywhere | 2026-04-16 | N/A |
| Buffer overflow in Symantec pcAnywhere 11.0.1, 11.5.1, and all other 32-bit versions allows remote attackers to cause a denial of service (application crash) via unknown attack vectors. | ||||
| CVE-2005-3940 | 1 Greywyvern | 1 Orca Ringmaker | 2026-04-16 | N/A |
| SQL injection vulnerability in ringmaker.php in Orca Ringmaker 2.3c and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter. | ||||
| CVE-2005-3941 | 1 Greywyvern | 1 Orca Blog | 2026-04-16 | N/A |
| SQL injection vulnerability in blog.php in Orca Blog 1.3b and earlier allows remote attackers to execute arbitrary SQL commands via the msg parameter. | ||||
| CVE-2005-3942 | 1 Greywyvern | 1 Orca Knowledgebase | 2026-04-16 | N/A |
| SQL injection vulnerability in knowledgebase-control.php in Orca Knowledgebase 2.1b and earlier allows remote attackers to execute arbitrary SQL commands via the qid parameter. | ||||
| CVE-2005-3943 | 1 Faq System | 1 Faq System | 2026-04-16 | N/A |
| Multiple SQL injection vulnerabilities in ilyav FAQ System 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) FAQ_ID and (2) action parameters in (a) viewFAQ.php; and (3) CATEGORY_ID parameter in (b) index.php. | ||||
| CVE-2005-3951 | 1 Php Labs | 1 Survey Wizard | 2026-04-16 | N/A |
| SQL injection vulnerability in survey.php in PHP Labs Survey Wizard allows remote attackers to execute arbitrary SQL commands via the sid parameter. | ||||
| CVE-2005-3947 | 1 Sergey Korostel | 1 Php Upload Center | 2026-04-16 | N/A |
| Directory traversal vulnerability in index.php in PHP Upload Center allows remote attackers to read arbitrary files via "../" sequences in the filename parameter. | ||||
| CVE-2005-3948 | 1 Phpalbum.net | 1 Phpalbum | 2026-04-16 | N/A |
| Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the (1) cmd and (2) var1 parameters. | ||||
| CVE-2005-3950 | 1 Nufw | 1 Nufw | 2026-04-16 | N/A |
| nuauth in NuFW 1.0.x before 1.0.16 and 1.1 allows authenticated users to cause a denial of service via malformed packets. | ||||
| CVE-2002-1277 | 2 Redhat, Windowmaker | 3 Enterprise Linux, Linux, Windowmaker | 2026-04-16 | N/A |
| Buffer overflow in Window Maker (wmaker) 0.80.0 and earlier may allow remote attackers to execute arbitrary code via a certain image file that is not properly handled when Window Maker uses width and height information to allocate a buffer. | ||||
| CVE-2005-3957 | 1 Dotclear | 1 Dotclear | 2026-04-16 | N/A |
| Unspecified vulnerability in the Trackback functionality in DotClear 1.2.1 has unknown impact and attack vectors. | ||||
| CVE-2005-3958 | 1 Entergal Mx | 1 Entergal Mx | 2026-04-16 | N/A |
| SQL injection vulnerability in index.php in Entergal MX 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) idcat parameter in a showcat action and (2) the action parameter. | ||||
| CVE-2005-3960 | 1 Kadu | 1 Kadu | 2026-04-16 | N/A |
| Kadu 0.4.2 and 0.5.0pre allows remote attackers to cause a denial of service (crash or generated traffic) via a malformed message, possibly with incomplete information. | ||||
| CVE-2005-3961 | 1 Webcalendar | 1 Webcalendar | 2026-04-16 | N/A |
| export_handler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter. | ||||
| CVE-2005-3966 | 1 Java Search Engine | 1 Java Search Engine | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in search.jsp in Java Search Engine (JSE) 0.9.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter. | ||||
| CVE-2005-3967 | 1 Atlassian | 1 Confluence | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in the dosearchsite.action module in Atlassian Confluence 2.0.1 Build 321 allows remote attackers to inject arbitrary web script or HTML via the searchQuery.queryString search module parameter. | ||||
| CVE-2005-3969 | 1 Mxchange | 1 Mxchange | 2026-04-16 | N/A |
| SQL injection vulnerability in MXChange before 0.2.0-pre10 PL492 allows remote attackers to execute arbitrary SQL commands via unknown vectors. | ||||
| CVE-2005-3970 | 1 Mxchange | 1 Mxchange | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in MXChange before 0.2.0-pre10 PL492 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. | ||||
| CVE-2005-3986 | 1 Verosky Media | 1 Instant Photo Gallery | 2026-04-16 | N/A |
| Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter in portfolio.php and (2) cid parameter in content.php. | ||||