CVE-2005-4574

CVE-2005-4574 is an XSS vulnerability in PaperThin CommonSpot Content Server 4.5 and earlier, triggered by the bNewWindow parameter in loader.cfm. Exploitation would allow remote attackers to inject arbitrary web script/HTML. Public references (NVD entry and related advisories) corroborate the is...

CVE-2005-4563

CVE-2005-4563 describes a SQL injection vulnerability in Enterprise Heart Enterprise Connector 1.0.2 (main.php) allowing remote attackers to execute arbitrary SQL via the loginid parameter and bypass login authentication. This is a different vulnerability from CVE-2005-3875, which covers multiple...

CVE-2005-4580

CVE-2005-4580 is a cross-site scripting (XSS) vulnerability in Day Communique 4. The issue allows remote attackers to inject arbitrary web script or HTML via the query parameter used in a search. The description does not provide affected versions, root cause details beyond input reflected in the ...

CVE-2005-4569

CVE-2005-4569 : Concrete details exist in connected docs. FTGate Technology’s FTGate 4.4 (Build 4.4.000, Oct 26 2005) is affected by a stack-based buffer overflow in index.fts triggered by a long tzoffset value. The vulnerability allows remote attackers to execute arbitrary code on the affected s...

CVE-2005-4582

CVE-2005-4582 affects Electric Sheep 2.6.3, where the client does not require authentication or integrity checks from the server. This can allow remote attackers to download and display arbitrary MPEG movie files via DNS spoofing, a URL on the command line, or a URL in the configuration file. The...

CVE-2005-4565

CVE-2005-4565 affects ADTRAN NetVanta devices (before 10.03.03.E) via the Internet Key Exchange v1 (IKEv1) implementation. The issue is a format string vulnerability in IKEv1, exploitable by crafted IKE packets to yield an impact that is not explicitly quantified in the available documents. The v...

CVE-2005-4575

PaperThin CommonSpot Content Server 4.5 and earlier is affected. An attacker can trigger an error by passing an invalid errmsg parameter to loader.cfm with the url parameter set to email-login-info.cfm, causing the full filesystem pathname to be exposed in the error message. The vulnerability lea...

CVE-2005-4585

CVE-2005-4585 affects Ethereal (packet analyzer) GTP dissector, with versions 0.9.1 through 0.10.13 affected. The vulnerability allows remote attackers to cause a denial of service via an infinite loop when processing crafted traffic. Public advisories from Red Hat/CentOS update Ethereal to versi...

CVE-2005-4571

The provided documents confirm a Cross-site scripting (XSS) vulnerability in the myEZshop Shopping Cart . The issue allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter. No explicit root cause or vulnerable version is stated in the sources; the impact is limite...

CVE-2005-4577

Hitachi Business Logic - Container (BLC) vulnerabilities CVE-2005-4577: multiple XSS flaws in BLC versions P-2443-9114 (Windows, 01-00 to 02-06) and P-1M43-9111 (AIX, 01-01 to 02-00) allow remote attackers to inject arbitrary web script or HTML via an unspecified input form. The issue is cross-si...

CVE-2005-4581

CVE-2005-4581: A buffer overflow in the Electric Sheep 2.6.3 client allows local users to execute arbitrary code via a long window-id parameter. The advisory notes the program is not setuid and is not typically invoked by remote programs, so there may not be a typical privilege‑escalation attack ...

CVE-2005-4584

CVE-2005-4584 affects the BZFlag server (version 2.0.4 and earlier). The issue is a missing NULL terminator after a callsign, enabling remote attackers to trigger a denial of service via an application crash. The connected sources corroborate this description. No specific exploit details or remed...

CVE-2005-4579

Technical specifics (affected product/version, root cause, impact, and fixes) are not provided in the supplied documents. No concrete exploit details are available. Monitor for updates from vendors and advisories to obtain detailed mitigations.

CVE-2005-4564

The CVE-2005-4564 entry concerns the IKEv1 implementation in ADTRAN NetVanta devices prior to version 10.03.03.E, which can be DoS’d by remotely crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. Connected documents confirm affected product/line and version range and ...

CVE-2005-4567

CVE-2005-4567 describes multiple cross-site scripting (XSS) vulnerabilities in FTGate Technology’s FTGate 4.4 (Build 4.4.000 Oct 26 2005). The issue arises from unsanitized input in web-accessible endpoints: index.fts via the href parameter, and /domains/index.fts, /config/licence.fts, and /confi...

CVE-2005-4583

Technical details about CVE-2005-4583 are not publicly provided in the supplied documents. No concrete affected products, vulnerable components, or remediation are specified here. Monitor for updates from official advisories.

[SECURITY] [DSA 927-2] New tkdiff packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 927-2 [email protected] http://www.debian.org/security/ Martin Schulze December 29th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 927-2] New tkdiff packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 927-2 [email protected] http://www.debian.org/security/ Martin Schulze December 29th, 2005 http://www.debian.org/security/faq -...

CVE-2005-3345

rssh 2.0.0 through 2.2.3 allows local users to bypass access restrictions and gain root privileges by using the rsshchroothelper command to chroot to an external directory...

Immunity Canvas: WMF_SETABORT

Name| wmfsetabort ---|--- CVE| CVE-2005-4560 Exploit Pack| CANVAS Description| WMF SetAbort MS06-001 Notes| CVE Name: CVE-2005-4560 VENDOR: Microsoft MSADV: MS06-001 Repeatability: Infinite MSRC: http://www.microsoft.com/technet/security/bulletin/ms06-001.mspx CVE Url:...