KLA10231 DoS vulnerability in browser

An unspecified vulnerability was found in the browsers. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed web site. Original advisories - Related products Mozilla-Firefox K-Meleon Netscape CVE list...

DSA-918-1 osh - programming error

Bulletin has no description...

CVE-2005-3665

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.7.0 allow remote attackers to inject arbitrary web script or HTML via the 1 HTTPHOST variable and 2 various scripts in the libraries directory that handle header generation...

CVE-2005-4088

SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the 1 parent and 2 day parameters...

CVE-2005-4089

Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files from other domains that are not valid Cascading Style Sheets CSS files, as demonstrated using Google Desktop, aka...

CVE-2005-3665

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.7.0 allow remote attackers to inject arbitrary web script or HTML via the 1 HTTPHOST variable and 2 various scripts in the libraries directory that handle header generation...

CVE-2005-4095

Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to list arbitrary files and directories via ".." sequences in the Type parameter in a GetFoldersAndFiles command...

CVE-2005-3665

phpMyAdmin (before 2.7.0) is affected by CVE-2005-3665, with multiple XSS vulnerabilities exploitable via the HTTP_HOST variable and header-generation scripts in libraries. Connected advisories (Debian DSA-1207-1/DSA-1207-2 and Gentoo/OpenVAS entries) reference this CVE among several in phpMyAdmi...

CVE-2005-4086

SugarCRM

CVE-2005-4094

The CVE-2005-4094 entry describes a remote code execution in DoceboLMS 2.0.4 via the fckeditor2rc2 addon’s FileUpload command. A file that appears to be an image but contains PHP script could be uploaded through connector.php, enabling an attacker to execute arbitrary PHP on the server. The impac...

CVE-2005-4092

Summary of CVE-2005-4092 and related advisories: This issue is a heap-based overflow in Apple QuickTime/ iTunes involving QuickTime.qts, exploitable via crafted QuickTime movie files. The vulnerabilities concern the handling of the Movie Resource atom with a large size and the STSD (Sample Descri...

CVE-2005-4091

CVE-2005-4091 : Cross-site scripting (XSS) vulnerability in the web interface component "1search.cgi" of 1-Script 1-Search 1.8 . The issue allows remote attackers to inject arbitrary web script or HTML via the q parameter. This is documented in multiple sources (NVD/NVD entry). No explicit user-f...

CVE-2005-4093

CVE-2005-4093 affects Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0 and 4.1. The vulnerability allows a remote attacker to bypass security policies by modifying the local copy of the local.scv policy file after it has been downloaded from the VPN Endpoint. The i...

CVE-2005-3661

CVE-2005-3661 describes a vulnerability in the Dell TrueMobile 2300 Wireless Broadband Router. Affected firmware versions include 3.0.0.8 and 5.1.1.6 (and possibly others). The issue allows remote attackers to reset authentication credentials and then modify configuration or upload firmware by se...

CVE-2005-4095

CVE-2005-4095 is a directory traversal vulnerability affecting DoceboLMS 2.0.4 via the fckeditor2rc2 addon. The issue allows remote attackers to list arbitrary files and directories by injecting ".." sequences into the Type parameter of a GetFoldersAndFiles command. The description is consistent ...

CVE-2005-4086

Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management SugarCRM 4.0 beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the beanFiles array parameter...

CVE-2005-4090

Technical details about CVE-2005-4090 are not publicly provided in the supplied documents. Monitor for updates as new information becomes available.

CVE-2005-4094

connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload command to upload a file that appears to be an image but contains PHP script...

CVE-2005-4092

Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 3 and earlier allow remote attackers to cause a denial of service crash and execute arbitrary code via a .mov file with 1 a Movie Resource atom with a large size value, or 2 an stsd atom with a...

CVE-2005-4088

CVE-2005-4088 describes an SQL injection vulnerability in index.php of phpForumPro 2.2 that allows remote attackers to execute arbitrary SQL commands via the (1) parent and (2) day parameters. The issue affects phpForumPro 2.2 and is documented with a CVSSv2 base score of 7.5 (HIGH). Exploitation...