CVE-2005-3779

CVE-2005-3779 affects HP-UX xterm on HP-UX 11.00, 11.11, and 11.23, enabling local users to gain privileges. The issue is described as an unspecified vulnerability with local execution vectors, and multiple Nessus plugins link the risk to local unauthorized access. Remediation in the connected do...

CVE-2005-3775

The CVE concerns a PHP remote file inclusion in PollVote’s pollvote.php, allowing an attacker to include arbitrary files via a URL in the pollname parameter. This constitutes a network-exposed vulnerability with low attack complexity and no authentication, with potential partial impacts to confid...

CVE-2005-3780

CVE-2005-3780 describes multiple buffer overflows in IPUpdate 1.1 that could permit arbitrary code execution. Vectors include (1) memmcat in the memm module and (2) certain TSIG format records. The initial description provides no details about affected versions beyond IPUpdate 1.1 or available fi...

DEBIAN-CVE-2005-3531

fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters...

CVE-2005-3531

fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters...

CVE-2005-3770

Multiple cross-site scripting XSS vulnerabilities in PHP-Post PHPp 1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the subject in a post, or the user parameter to 2 profile.php and 3 mail.php...

CVE-2005-3773

Technical details about CVE-2005-3773 are not publicly provided in the supplied documents; monitor for updates.

CVE-2005-3770

PHP-Post (PHPp) 1.0 contains cross-site scripting (XSS) vulnerabilities exploitable via the subject field in posts or the user parameter to profile.php and mail.php. The underlying issue is arbitrary-script/HTML injection, leading to potential script execution in victims’ browsers. Affected softw...

CVE-2005-3774

CVE-2005-3774 affects Cisco PIX firewall versions 6.3 and 7.0. Remote attackers can cause a denial of service by sending spoofed TCP packets that generate embryonic connections that never complete. Details include (1) SYN packets with invalid checksums, (2) one byte of meaningless data, or (3) a ...

CVE-2005-3531

CVE-2005-3531 affects fusermount in the FUSE project (before version 2.4.1). The issue arises when fusermount is installed setuid root and a mount is performed over a directory whose name contains certain special characters, allowing local users to corrupt /etc/mtab and potentially modify mount o...

CVE-2005-3771

CVE-2005-3771 covers multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.4. The flaws allow remote attackers to inject arbitrary web script or HTML via (1) the GET and other variables and (2) SEF. Affected product: Joomla! prior to 1.0.4. Impact as stated: potential for part...

XSS vulnerabilities

PMASA-2005-7 Announcement-ID: PMASA-2005-7 Date: 2005-11-23 Summary XSS vulnerabilities Description During the course of phpMyAdmin 2.6.4 development, some XSS vulnerabilities were fixed but were not documented here. The cookie-based login panel, the title parameter and the table creation dialog...

Top Auction Multiple SQL Vuln.

Top Auction Multiple SQL Vuln. Vuln. dicovered by : r0t Date 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/top-auction-multiple-sql-vuln.html Vendor:http://www.phplabs.com/ Product link:http://www.phplabs.com/scripts.php?script=Top20Auction affected version: Top Auction last...

CVE-2005-3768

CVE-2005-3768 affects Symantec Dynamic VPN Services (Enterprise Firewall, Gateway Security, and Firewall/VPN Appliance) in the IKEv1 implementation. A buffer overflow in IKEv1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demo...

CVE-2005-3769

CVE-2005-3769 affects PHP Download Manager

CVE-2005-3760

Double free vulnerability in the BBOORB module in IBM WebSphere Application Server for z/OS 5.0 allows attackers to cause a denial of service ABEND...

CVE-2005-3761

CVE-2005-3761 concerns Exponent CMS, specifically 0.96.3 and later. The vulnerability is a reflected XSS allowing remote attackers to inject arbitrary web script or HTML via (1) Javascript in forms produced by the form generator or (2) parameters to the installer. The provided sources confirm the...

CVE-2005-3765

CVE-2005-3765 affects Exponent CMS 0.96.3 and later, where uploading files triggers a chmod to give execute permissions, enabling remote attackers to run arbitrary code. Multiple connected sources confirm the affected product and the root cause (permissions on uploaded files) leading to code exec...

CVE-2005-3762

Exponent CMS versions 0.96.3 and later are affected by a SQL injection in the navigation module (navigationmodule) that allows remote attackers to execute arbitrary SQL commands via the parent parameter. This is supported by the NVD entry CVE-2005-3762. No explicit remediation is provided in the ...

CVE-2005-3766

CVE-2005-3766 affects Exponent CMS 0.96.3 and later; sensitive user pages are stored under the web document root with insufficient access control, allowing access by browsing uploaded files. Impact: potential information disclosure. No remediation details provided in the supplied documents.