CVE-2005-3767

Exponent CMS 0.96.3 and later versions contain a vulnerability where the uploader does not properly restrict file types, enabling remote attackers to upload and execute PHP files. The underlying issue is insufficient validation of uploaded content, allowing arbitrary PHP code execution via the CM...

CVE-2005-3763

Exponent CMS 0.96.3 and later is affected by CVE-2005-3763: the base parameter to thumb.php reveals the full installation path, enabling an information disclosure vulnerability that may stem from an absolute path traversal issue. The description indicates a remote attacker could obtain sensitive ...

CVE-2005-3764

The CVE-2005-3764 entry concerns Exponent CMS, specifically the imagegallery component in version 0.96.3 and later. The vulnerability stems from improper MIME-type validation of uploaded files, with an unclear impact tied to the preview icon, and a possibility of HTML injection. The available doc...

CVE-2005-3760

CVE-2005-3760 describes a double free vulnerability in the BBOORB module of IBM WebSphere Application Server for z/OS 5.0, causing denial of service (ABEND). The issue is exploitable over a network with no authentication (per NVD metrics: AV:N/AC:L/Au:N/C:N/I:N/A:C, base score 7.8). References po...

CVE-2005-3758

Cross-site scripting XSS vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via a proxystylesheet variable that contains a malicious XSLT style sheet...

CVE-2005-3758

CVE-2005-3758 is an XSS in Google Mini Search Appliance (and possibly Google Search Appliance) triggered by a malicious proxystylesheet in the proxystylesheet variable, allowing remote injection of Javascript/HTML. Affected: proxystylesheet handling; vulnerability type: XSS. Impact (per provided ...

CVE-2005-3754

Cross-site scripting XSS vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via the proxystylesheet variable, which will be executed in the resulting error message...

CVE-2005-3757

The CVE-2005-3757 issue affects the Saxon XSLT parser used by Google Mini Search Appliance (and possibly Google Search Appliance). The vulnerability arises from dangerous Java methods (system-property, sys:getProperty, run:exec) in the select attribute of xsl:value-of in XSLT style sheets, enabli...

CVE-2005-3756

Nessus plugin data in the connected document associates CVE-2005-3756 with Google Search Appliance proxystylesheet vulnerabilities that include remote access flaws enabling port scanning and potential code execution (via unsanitized proxystylesheet input). The CVE description in the initial docum...

CVE-2005-3758

Cross-site scripting XSS vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via a proxystylesheet variable that contains a malicious XSLT style sheet...

CVE-2005-3754

CVE-2005-3754 describes a cross-site scripting (XSS) vulnerability in the Google Mini Search Appliance, and possibly Google Search Appliance, caused by insufficient sanitization of the proxystylesheet parameter. The flaw allows remote attackers to inject arbitrary Javascript (and potentially othe...

CVE-2005-3757

Removed by vendor...

CVE-2005-3751

HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-length and Transfer-encoding headers...

CVE-2005-3753

CVE-2005-3753 affects the Linux kernel in the 2.6.x line, around versions near 2.6.12 up to 2.6.13.1. The issue could allow a denial of service (an Oops) via certain IPSec packets that trigger alignment problems in standard multi-block cipher processors. The description notes it is not clear whet...

CVE-2005-3752

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2005-3751

Pound fixes before 1.9.4 are exposed as an HTTP request smuggling vulnerability: conflicting Content-length and Transfer-encoding headers can allow remote attackers to poison caches, bypass WAFs, and enable XSS. The description notes the vulnerable window (before 1.9.4) but does not provide expli...

CVE-2005-3751

HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-length and Transfer-encoding headers...

CVE-2005-3750

CVE-2005-3750 affects Opera before 8.51 on Linux/Unix. A remote attacker can execute arbitrary code by supplying a URL containing shell metacharacters (backticks) in a command-line argument used to launch Opera, enabling code execution without user interaction. The vulnerability score is CVSS v2 ...

[SECURITY] [DSA 906-1] New sylpheed packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 906-1 [email protected] http://www.debian.org/security/ Martin Schulze November 22nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 900-3] New fetchmail-ssl packages fix potential information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 900-3 [email protected] http://www.debian.org/security/ Martin Schulze November 22nd, 2005 http://www.debian.org/security/faq -...