CVE-2005-3443

Technical details and affected specifics for CVE-2005-3443 are not publicly provided in the supplied documents; monitor for updates.

CVE-2005-3446

Technical details for CVE-2005-3446 are not publicly available in the provided documents. Monitor for updates.

CVE-2005-3450

Technical details about CVE-2005-3450 (affected component, impact, exploitability) are not provided in the supplied documents. Monitor for updates.

CVE-2005-3435

adminnews.php in Archilles Newsworld up to 1.3.0 allows attackers to bypass authentication by obtaining the password hash for another user, for example through another Newsworld vulnerability, and specifying the hash in the pwd argument...

CVE-2005-3435

CVE-2005-3435 affects Archilles Newsworld up to version 1.3.0, where the admin_news.php authentication can be bypassed by obtaining a password hash for another user and supplying that hash in the pwd argument. The underlying issue enables an attacker to gain access to protected functionality with...

CVE-2005-3432

The CVE-2005-3432 issue affects MiniGal 2 (MG2) 0.5.1, where a remote attacker can cause listing of password-protected images by sending a request to index.php with list = * and page = all. The public sources describe the vulnerability as an information-disclosure flaw allowing access to protecte...

CVE-2005-3457

Technical details about CVE-2005-3457 are not publicly available in the provided documents. No affected products, impact, vectors, or remediation are specified here. Monitor for updates.

CVE-2005-3445

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2005-3439

Technical details about CVE-2005-3439 are not publicly available in the provided connected documents. Monitor for updates from official advisories and vendor notices.

CVE-2005-3447

Technical details for CVE-2005-3447 are not publicly available in the provided documents; the entry remains with unspecified impact and vectors. Monitor for updates.

CVE-2005-3453

Technical details for CVE-2005-3453 are not publicly provided in the supplied documents; the connected data lists only generic references to multiple unspecified vulnerabilities in Oracle Web Cache. Monitor for updates.

CVE-2005-3437

Technical details about CVE-2005-3437 are not publicly available in the provided connected documents; the entries describe an unspecified vulnerability in Oracle PL/SQL with unknown impact. Monitor for updates.

CVE-2005-3440

Technical details about CVE-2005-3440 are not provided in the supplied documents. No affected product/version or concrete impact is documented here; monitor for updates.

CVE-2005-3463

Technical details for CVE-2005-3463 are not publicly provided in the supplied documents. The records note an unspecified vulnerability with unknown impact/vectors in Oracle PeopleSoft 8.44–8.46.03; monitor for updates.

CVE-2005-3434

CVE-2005-3434 affects Archilles Newsworld prior to 1.5.0-rc1. The vulnerability arises from storing (1) account.nwd and (2) session.nwd under the web root with insufficient access control, enabling remote attackers to obtain sensitive information such as usernames, hashed passwords, and session I...

CVE-2005-3461

CVE-2005-3461 concerns Oracle PeopleSoft Enterprise’s PeopleTools for versions 8.42 through 8.45.17. The provided documents describe an unspecified vulnerability with unknown impact and attack vectors, identified by Oracle Vuln# PSE01. No concrete exploit details, affected components beyond Peopl...

CVE-2005-3442

Technical details about CVE-2005-3442 are not publicly available in the provided documents. No specific impact, affected components, or remediation are given. Monitor for updates and new disclosures.

CVE-2005-3449

CVE-2005-3449 pertains to Oracle Application Server 9.0–10.1.2.0, with multiple unspecified vulnerabilities affecting components AS02 (Containers for J2EE), AS07 (Internet Directory), AS09 (Report Server), and AS11 (Web Cache). The connected documents do not provide concrete technical details (no...

CVE-2005-3429

Rockliffe MailSite Express before 6.1.22 stores user passwords in plaintext in cookies when the “save login information” option is enabled. This enables local users to read cookies to obtain passwords and allows remote attackers to steal cookies via cross-site scripting (XSS) vulnerabilities. Aff...

[SECURITY] [DSA 879-1] New gallery packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 879-1 [email protected] http://www.debian.org/security/ Martin Schulze November 2nd, 2005 http://www.debian.org/security/faq -...