10533 matches found
CVE-2005-3683
CVE-2005-3683 is a stack-based buffer overflow in FreeFTPd prior to 1.0.9 (logging-enabled) that can be triggered remotely by a long USER command. The vulnerability allows an unauthenticated attacker to crash the application and potentially execute arbitrary code, effectively enabling remote comm...
CVE-2005-3691
MailEnable IMAP server (meimaps.exe) prior to version 1.7/Enterprise prior to 1.1 is affected by a directory traversal vulnerability in the IMAP MAILBOX NAME handling during CREATE/RENAME commands. Root cause: insufficient boundary checks on the mailbox name parameter, allowing remote attackers t...
CVE-2005-3693
CVE-2005-3693 concerns the AxWebRemoveCtrl ActiveX control from SunnComm used for uninstalling MediaMax DRM. The vulnerability enables remote attackers to download and execute arbitrary code via the control from an arbitrary URL when a user visits a malicious site. This is documented as an Active...
CVE-2005-3675
The Transmission Control Protocol TCP allows remote attackers to cause a denial of service bandwidth consumption by sending ACK messages for packets that have not yet been received optimistic ACKs, which can cause the sender to increase its transmission rate until it fills available bandwidth...
CVE-2005-3676
SQL injection vulnerability in download.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the file parameter...
CVE-2005-2629
Integer overflow in RealNetworks RealPlayer 8, 10, and 10.5, RealOne Player 1 and 2, and Helix Player 10.0.0 allows remote attackers to execute arbitrary code via an .rm movie file with a large value in the length field of the first data packet, which leads to a stack-based buffer overflow, a...
CVE-2005-3678
CVE-2005-3678 affects Google Talk prior to 1.0.0.76 when email notification is enabled. The vulnerability allows remote attackers to cause a denial-of-service by sending an email with a blank sender, triggering a connection reset. The public documents consistently describe the issue at a high lev...
CVE-2005-3682
CVE-2005-3682 describes multiple SQL injection vulnerabilities in Wizz Forum 1.20 . Attackers can remotely exploit: (1) AuthID in ForumAuthDetails.php, (2) TopicID in ForumTopicDetails.php, and (3) TopicID/ForumReply in ForumReply.php to execute arbitrary SQL commands. The description indicates t...
CVE-2005-2630
RealPlayer/RealOne Player family (RealPlayer 8, 10, 10.5 and RealOne Player 1 and 2) are affected by CVE-2005-2630 via a heap-based buffer overflow in DUNZIP32.DLL used to handle RealPlayer Skin (RJS) files. The root cause is insufficient verification of size fields in Zipped Skin files, enabling...
CVE-2005-3679
CVE-2005-3679 describes an SQL injection in ActiveCampaign 1-2-All Broadcast Email, specifically in admin/index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username field in the admin control panel. Affected component: ActiveC...
CVE-2005-2629
CVE-2005-2629 describes an integer/stack-based overflow in RealNetworks RealPlayer (versions 8, 10, 10.5), RealOne Player (1–2), and Helix Player 10.0.0 that can be triggered by a malformed .rm file with a large length field in the first data packet, allowing remote code execution. The vulnerabil...
CVE-2005-3675
The CVE-2005-3675 entry describes a TCP vulnerability where an attacker can trigger optimistic ACKs for unseen packets, causing a remote TCP sender to increase its transmission rate and potentially exhaust bandwidth, leading to denial of service. Public details note an amplification effect and Do...
CVE-2005-3680
The CVE-2005-3680 entry concerns XOOPS 2.2.3. It describes a directory traversal/Local File Inclusion in editor_registry.php, exploitable via a .. in the xoopsConfig[language] parameter, allowing remote attackers to read or include arbitrary local files. The affected component is XOOPS 2.2.3 (edi...
CVE-2005-3676
SQL injection vulnerability in download.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the file parameter...
CVE-2005-3677
CVE-2005-3677 describes a buffer overflow in RealNetworks RealPlayer 10/10.5 triggered by a crafted image in a RealPlayer Skin (RJS) file, allowing remote code execution. The description notes that details are sparse and it is unclear how this differs from CVE-2005-2629 and CVE-2005-2630, but ven...
CVE-2005-3676
The CVE-2005-3676 entry affects PhpWebThings 1.4.4, where a vulnerability in download.php allows SQL injection via the file parameter. This enables remote attackers to execute arbitrary SQL commands, with not-fully-specified impact details beyond the NVD summary. The connected documents confirm t...
CVE-2005-3681
CVE-2005-3681 describes a SQL injection vulnerability in the XOOPS WF-Downloads module 2.05. The flaw affects the file viewcat.php where the list parameter can be exploited to execute arbitrary SQL commands. Based on the provided documents, the vulnerability is exploitable remotely (network vecto...
CVE-2005-3353
Technical details for CVE-2005-3353 are not provided in the connected documents. Public information about affected products/versions, root cause, and fixes is not available here. Monitor for updates and new disclosures.