CVE-2005-3031

CVE-2005-3031 affects vxFtpSrv 0.9.7, where a buffer overflow in handling a long USER name permits remote code execution. The NVD entry indicates a NETWORK-based, low-attachment-exploit complexity issue with no authentication and partial impacts to confidentiality, integrity, and availability (ba...

CVE-2005-3041

CVE-2005-3041 concerns Opera for Windows versions before 8.50. The issue is a drag‑and‑drop vulnerability described as an unspecified flaw that enables unintentional file uploads. The NVD entry lists a base score of 5.0 (Medium) with network attack vector, low complexity, and partial integrity im...

CVE-2005-3042

Webmin/miniserv.pl (and Usermin) vulnerability CVE-2005-3042 allows remote authentication bypass when PAM conversations are enabled. Specifically, miniserv.pl in Webmin < 1.230 and Usermin

CVE-2005-3032

CVE-2005-3032: Buffer overflow in vxTftpSrv 1.7.0 allows remote attackers to cause denial of service and possibly execute arbitrary code via a TFTP request with a long filename argument. No exploitation details or fixes are provided in the supplied documents; remediation status is not specified.

CVE-2005-3035

CVE-2005-3035 affects Compuware DriverStudio Remote Control service (DSRsvc.exe) versions 2.7 and 3.0 beta 2. An attacker can trigger a denial of service (reboot) by sending a UDP packet directly to port 9110. The available sources (NVD, Red Hat advisory, CVE listing) confirm the same impact but ...

CVE-2005-3040

The vulnerability CVE-2005-3040 affects TAC Vista 4.0 (and possibly other versions before 4.3) via the web interface ISALogin.dll. The issue is a directory traversal: an attacker can read arbitrary files by supplying .. sequences in the Template parameter. This is a root-cause path traversal vuln...

CVE-2005-3044

CVE-2005-3044 affects the Linux kernel prior to 2.6.13.2. Vulnerabilities arise from (1) fput in a 32-bit ioctl on 64-bit x86 systems and (2) sockfd_put in the 32-bit routing_ioctl function on 64-bit systems, enabling local attackers to trigger a kernel OOPS and cause a denial of service. Remedia...

CVE-2005-3025

Multiple cross-site scripting XSS vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the loc parameter to 1 modcp/index.php or 2 admincp/index.php, or the ip parameter to 3 modcp/user.php or 4 admincp/usertitle.php...

CVE-2005-3004

SQL injection vulnerability in Interakt MX Shop 3.2.0 allows remote attackers to execute arbitrary SQL commands via the 1 idp, 2 idctg, or 3 idprd parameters to the pages module in index.php...

CVE-2005-3022

Affects vBulletin 3.0.9 and earlier. Multiple SQL injection vectors exist in the product, exploitable via parameters to specific PHP scripts: announcement.php (announcement), user.php (userid), admincalendar.php (calendar), cronlog.php (cronid), email.php (usergroupid), help.php (help), language....

CVE-2005-3016

Technical details are not publicly available in the provided documents for CVE-2005-3016. No concrete information on affected products, versions, root cause, or remediation is provided; monitor for updates.

CVE-2005-3023

CVE-2005-3023 affects vBulletin 3.0.9 and earlier. The vulnerability is a set of cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via crafted arguments to multiple PHP endpoints, including announcement.php, admincalendar.php, bbcode.php, cronadmi...

CVE-2005-3004

SQL injection vulnerability in Interakt MX Shop 3.2.0 allows remote attackers to execute arbitrary SQL commands via the 1 idp, 2 idctg, or 3 idprd parameters to the pages module in index.php...

CVE-2005-3029

CVE-2005-3029 affects AhnLab V3Pro 2004 (build 6.0.0.383), V3 VirusBlock 2005 (build 6.0.0.383), and V3Net for Windows Server 6.0 (build 6.0.0.383). The issue is a stack-based buffer overflow in processing ACE archives, triggered by a long filename, allowing remote attackers to potentially execut...

CVE-2005-2662

Summary (CVE-2005-2662) masqmail prior to 0.2.18 allows a remote attacker to execute arbitrary commands by sending crafted addresses in a failed delivery message. This is caused by improper sanitization during failed-delivery processing. In addition, CVE-2005-2663 involves a privilege-related iss...

CVE-2005-3028

...

CVE-2005-3028

CVE-2005-3028 is a duplicate of CVE-2005-2986. Connected records describe the same underlying issue: the v3flt2k.sys driver used by AhnLab V3Pro 2004 Build 6.0.0.383, V3 VirusBlock 2005 Build 6.0.0.383, and V3Net for Windows Server 6.0 Build 6.0.0.383 does not properly validate the source of Devi...

CVE-2005-3026

The vulnerability CVE-2005-3026 affects Alstrasoft Epay Pro 2.0 and earlier, allowing remote attackers to read arbitrary files through a directory traversal in the read parameter (..). The issue is described in the NVD entry as a directory traversal in index.php. No remediation details are provid...

CVE-2005-3009

CVE-2005-3009 affects CuteNews; the vulnerability exists in the index.php mod parameter and allows remote attackers to inject arbitrary web script or HTML (XSS). This is a client-side scripting flaw (XSS) likely exploitable via crafted input sent to the mod parameter. Exploitation details, affect...

CVE-2005-3003

The CVE-2005-3003 entry concerns NooTopList 1.0.0 release 17, specifically in index.php. The vulnerability is a SQL injection in the application’s handling of the (1) o and (2) sort parameters, enabling remote attackers to execute arbitrary SQL commands. The NVD metrics indicate a high base sever...