CVE-2005-4140

Website Baker 2.6.0 is vulnerable to SQL injection in admin/login/index.php via the username parameter used in user-field queries. The vulnerability can allow an unauthenticated attacker to bypass authentication, disclose sensitive information, modify data, or mount further database attacks. Affe...

CVE-2005-4139

ThWboard before 3 Beta 2.84 contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL via (1) the year parameter in calendar.php, (2) the user parameter array in v_profile.php, and (3) the userid parameter in misc.php. This is a remote, unauthenticated i...

CVE-2005-4137

CVE-2005-4137 describes an SQL injection in DRZES HMS 3.2: viewinvoice.php allows remote attackers to manipulate the backend via the invoiceID parameter, enabling arbitrary SQL execution. This is part of broader SQL injection findings in DRZES HMS 3.2 (noting that the 4137 vector is explicitly th...

CVE-2005-4134

Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service CPU consumption and delayed application startup via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup. NOTE:...

CVE-2005-4126

UNVERIFIABLE, PRERELEASE NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows attackers to execute arbitrary code. NOTE: the information regarding this issue is extremely...

CVE-2005-4128

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-4092. Reason: This candidate is a duplicate of CVE-2005-4092. This candidate was originally published to handle a pre-patch vague announcement, but multiple simultaneous pre-patch announcements resulted in duplicate CVEs that...

CVE-2005-4127

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-4092. Reason: This candidate is a duplicate of CVE-2005-4092. This candidate was originally published to handle a pre-patch vague announcement, but multiple simultaneous pre-patch announcements resulted in duplicate CVEs that...

CVE-2005-4130

Technical details are not publicly available in the provided documents for CVE-2005-4130. This entry is marked UNVERIFIABLE/PRERELEASE; monitor for updates from reliable sources.

CVE-2005-4126

UNVERIFIABLE, PRERELEASE NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows attackers to execute arbitrary code. NOTE: the information regarding this issue is extremely...

CVE-2005-4129

CVE-2005-4129 is a reservation duplicate of CVE-2005-4092 (no separate details). Connected advisories describe Apple QuickTime/ iTunes heap/memory overflows affecting QuickTime components via crafted image/media files (GIF, TGA, TIFF, QTIF, STSD). The vulnerability class is heap-based overflow th...

CVE-2005-4130

UNVERIFIABLE, PRERELEASE NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows remote attackers to execute arbitrary code. NOTE: it is not known whether this issue should be...

CVE-2005-4128

...

CVE-2005-4128

CVE-2005-4128 is a duplicate of CVE-2005-4092. The connected advisories describe Apple QuickTime/QuickTime Player heap memory corruption vulnerabilities in handling various image/media formats (GIF, TGA, TIFF, STSD) that may allow remote code execution or denial of service. The issues were addres...

CVE-2005-4132

Summary: CVE-2005-4132 affects Contenido prior to version 4.6.4. The vulnerability is described as a PHP remote file inclusion due to improper sanitization when PHP’s register_globals is enabled and allow_url_fopen is true, enabling an attacker to potentially read arbitrary files or execute code ...

CVE-2005-4129

...

CVE-2005-4126

Technical details for CVE-2005-4126 are not publicly available in the provided documents. The entry is UNVERIFIABLE/PRERELEASE and lacks verifiable information. Monitor for updates from trusted sources to confirm applicability, affected products, and remediation.

CVE-2005-4127

...

CVE-2005-4131

CVE-2005-4131 affects Microsoft Excel 2000, 2002 and 2003 (Office 2000 SP3 and related packages). The vulnerability stems from parsing a malformed named range/range data in Excel files, which can cause memory corruption in a call to msvcrt.memmove. An attacker could leverage this via a specially ...

CVE-2005-4127

CVE-2005-4127 is a duplicate of CVE-2005-4092 and not an active entry. The connected advisories describe Apple QuickTime/ iTunes heap overflow vulnerabilities in various image/media formats (GIF, TGA, TIFF, QTIF) leading to arbitrary code execution or denial of service. QuickTime 7.0.4 (and relat...

[SECURITY] [DSA 918-1] New osh packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 918-1 [email protected] http://www.debian.org/security/ Martin Schulze December 9th, 2005 http://www.debian.org/security/faq -...