10533 matches found
CVE-2005-3136
CVE-2005-3136 affects Virtools Web Player 3.0.0.100 and earlier. The vulnerability is a directory traversal flaw where a .. in a filename enables writing to arbitrary files. The connected documents provide the vulnerability description and do not include explicit exploitation details or confirmed...
CVE-2005-3128
Cross-site scripting XSS vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag...
CVE-2005-3132
CVE-2005-3132 affects MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1 (and possibly earlier). The vulnerability allows remote attackers to obtain sensitive information by directly requesting bwlist_inc.html, causing an error message that reveals the path. Impact is partial confidentiality di...
CVE-2005-3135
CVE-2005-3135 describes a buffer overflow in Virtools Web Player 3.0.0.100 and earlier that allows a remote attacker to execute arbitrary code via a long filename. The NVD listing attributes a CVSS v2 base score of 7.5 (HIGH) with vector AV:N/AC:L/Au:N/C:P/I:P/A:P. The connected documents confirm...
CVE-2005-3130
CVE-2005-3130 : LucidCMS 1.0.11 is affected by an SQL injection in the login field that allows remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) with network access, low attack complexity, no authentication, and partial impacts on confidenti...
CVE-2005-3134
CVE-2005-3134 affects Citrix Metaframe Presentation Server 3.0 and 4.0. The issue allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the ClientName, enabling partial impacts to confidentiality, integrity, and availability as per the CVSSv2 vector...
CVE-2005-3133
Observation: CVE-2005-3133 describes multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1 (and possibly earlier versions). The issues allow remote attackers to: (1) delete arbitrary files or directories via a relative path supplied to the id paramet...
CVE-2005-3131
Summary (CVE-2005-3131) : Multiple cross-site scripting (XSS) vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1 (and possibly earlier) allow remote attackers to inject arbitrary web script or HTML. The issues arise via the (1) id parameter to blank.html and (2) createdataCX ...
CVE-2005-3132
MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to bwlistinc.html, which reveals the path in an error message...
CVE-2005-3128
CVE-2005-3128 is a cross-site scripting vulnerability in the Address Add Plugin for SquirrelMail (versions 1.9 and 2.0) where the add.php functionality fails to sanitize input, allowing an attacker to inject arbitrary script via the IMG tag . The vulnerability could enable execution of script in ...
CVE-2005-3129
CVE-2005-3129 describes a CSRF vulnerability in Serendipity 0.8.4 and earlier. The issue allows remote attackers to perform unauthorized actions as a logged-in user through a link or an IMG tag to serendipity_admin.php. The supplied documents do not provide remediation steps or patch/version deta...
Limbo CMS <=1.0.4.2 XSS
Limbo CMS =1.0.4.2 XSS 2005-10-03 12:37:28 bugtaq at lol dot lt Vulnerability type: Permanent XSS Risk: Moderate A malicious HTML tag can be injected through the Contact menu form. A PM can be send, which will later be red by admins. E.g.: scriptalertdocument.cookie/script Information was provide...
[SECURITY] [DSA 838-1] New mozilla-firefox packages fox multiple vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 838-1 [email protected] http://www.debian.org/security/ Michael Stone October 2nd, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 836-1] New cfengine2 packages fix arbitrary file overwriting
-------------------------------------------------------------------------- Debian Security Advisory DSA 836-1 [email protected] http://www.debian.org/security/ Martin Schulze October 1st, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 835-1] New cfengine packages fix arbitrary file overwriting
-------------------------------------------------------------------------- Debian Security Advisory DSA 835-1 [email protected] http://www.debian.org/security/ Martin Schulze October 1st, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 834-1] New prozilla packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 834-1 [email protected] http://www.debian.org/security/ Martin Schulze October 1st, 2005 http://www.debian.org/security/faq -...
CVE-2005-2917
Squid 2.5.STABLE10 and earlier, while performing NTLM authentication, does not properly handle certain request sequences, which allows attackers to cause a denial of service daemon restart...
[SECURITY] [DSA 832-1] New gopher packages fix several buffer overflows
-------------------------------------------------------------------------- Debian Security Advisory DSA 832-1 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2005 http://www.debian.org/security/faq -...
