CVE-2005-3534

Buffer overflow in the Network Block Device nbd server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header...

CVE-2005-4500

SQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary SQL commands via the 1 show and 2 type parameter. NOTE: the provenance of this information is unknown, although it was later rediscovered...

CVE-2005-4500

MusicBox 2.3 is affected by CVE-2005-4500 due to an SQL injection in the show and type parameters, enabling remote attackers to execute arbitrary SQL commands. The connected sources confirm the vulnerability and its parameters, but do not provide remediation details in these documents.

CVE-2005-4502

CVE-2005-4502 is a cross-site scripting (XSS) vulnerability in httprint v202 and possibly earlier versions prior to v301. The issue permits remote attackers to inject arbitrary web script or HTML through the Server field in an HTTP response that is not sanitized before display to users. Public re...

CVE-2005-4503

CVE-2005-4503 affects httprint v202 and possibly earlier versions up to v301, where a remote attacker can cause a denial of service (crash) by sending an HTTP response with a long Server field. Evidence in multiple sources confirms the vulnerability description and affected versions; no exploitat...

CVE-2005-3534

Buffer overflow in the Network Block Device nbd server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header...

CVE-2005-4502

Cross-site scripting XSS vulnerability in httprint v202, and possibly other versions before v301, allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response, which is not sanitized before being displayed to the user...

CVE-2005-3534

CVE-2005-3534 describes a buffer overflow in the NBD (Network Block Device) server (nbd) that could allow remote code execution via a large request. Affected are nbd server versions 2.7.5 and earlier, and 2.8.0 through 2.8.2, with the issue caused by writing past the end of memory allocated for t...

CVE-2005-4501

MediaWiki before 1.5.4 is vulnerable due to a hard-coded "internal placeholder string" that bypasses XSS protections by allowing Javascript in inline style attributes processed by Internet Explorer. Affected component: MediaWiki code handling user input/html; root cause: hard-coded placeholder st...

CVE-2005-4492

Cross-site scripting XSS vulnerability in Starphire SiteSage 5.0.18 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the norelayhighlightwords parameter...

CVE-2005-3631

udev does not properly set permissions on certain files in /dev/input, which allows local users to obtain sensitive data that is entered at the console, such as user passwords...

CVE-2005-4483

CVE-2005-4483 discloses a cross-site scripting (XSS) flaw in SiteEnable 3.3 and earlier, occurring in login.asp and exploitable via the ret_page parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML, potentially affecting users who interact with the compromis...

CVE-2005-4487

RAMSite R|1 CMS 1.0 and earlier is affected by a cross-site scripting (XSS) vulnerability. The issue arises in the searchfield parameter, allowing remote attackers to inject arbitrary web script or HTML. Impact is user-facing script execution, with potential credential or session-related implicat...

CVE-2005-4477

The CVE-2005-4477 entry documents a Cross-site Scripting (XSS) vulnerability in papaya CMS 4.0.4 and earlier, exploitable via the bab[searchfor] parameter to inject arbitrary script/HTML. Affected software: papaya CMS (versions up to 4.0.4 and earlier). Root cause: input handling in the bab[searc...

CVE-2005-4478

The CVE-2005-4478 entries (and related records) document multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier. An attacker can remotely execute arbitrary SQL commands via: (1) menuid parameter to index.php and guestbook.php; and (2) forumid and (3) reporeid_print parameters to print....

CVE-2005-3631

The CVE-2005-3631 issue affects udev, where permissions on certain files under /dev/input were not set correctly. The root cause is flawed permission handling in udev, allowing a local attacker to potentially view sensitive data entered at the console (e.g., passwords). Public references in Red H...

CVE-2005-4485

CVE-2005-4485 describes cross-site scripting (XSS) in ProjectApp 3.3 and earlier. The issue arises from unsanitized input in multiple parameters across several pages: keywords (forums.asp, search_employees.asp, cat.asp, links.asp), projectid (pmprojects.asp), ret_page (login.asp), and skin_number...

CVE-2005-4497

The CVE-2005-4497 entry affects Tangora Portal CMS 4.0 and earlier. The vulnerability is a Cross-site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML through the action parameter in the search page (demonstrated with page1631.aspx and page496.aspx). No rem...

CVE-2005-4476

The CVE-2005-4476 entry documents a Cross-site scripting (XSS) vulnerability in OpenEdit 4.0 and earlier, specifically in store/search/results.html, exploitable via the oe-action and page HTTP parameters. The issue allows remote attackers to inject arbitrary web script or HTML. Affected product i...

CVE-2005-4498

Text-e 1.6.4 and earlier contains a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. The existing records do not specify the exact vulnerable component beyond the search parameter vector, nor do they pr...