CVE-2005-2596

CVE-2005-2596 concerns a programming error in the Gallery component used with Postnuke that allows any user with Admin privileges to access all galleries. Open-source advisories and Debian security notes describe a remote-attack surface stemming from a bug in the gallery code that grants full gal...

CVE-2005-2606

Unknown vulnerability in the "frontend authentication" in PHlyMail 3.02.00 has unknown impact and attack vectors...

CVE-2005-2617

The CVE-2005-2617 entry describes a vulnerability in Linux kernel 2.6.12 and later on 64-bit x86 where syscall32_setup_pages (syscall32.c) does not check the return value of insert_vm_struct. This can allow local users to trigger a memory leak via a crafted 32‑bit ELF header. Affected component: ...

CVE-2005-2620

The CVE affects Novell GroupWise Windows clients (5.x–6.5.2) where the grpWise.exe process stores passwords in plaintext in memory. This allows a local attacker with access (e.g., via memory dump/read mechanisms or a debugger) to recover credentials. The issue is a memory-credential caching probl...

CVE-2005-2101

CVE-2005-2101 affects KDE kdeedu: specifically the langen2kvtml script in the kvoctrain component creates insecure temporary files in /tmp with predictable names, allowing a local attacker to overwrite arbitrary files. Multiple vendors/advisories (Debian DSA-818-1, Mandrake/MKSA-2005:159, SUSE, O...

CVE-2005-2595

CVE-2005-2595 is a cross-site scripting (XSS) vulnerability in Dada Mail (Perl) prior to 2.10 Alpha 1. An attacker could inject arbitrary JavaScript into archived messages, which would then execute in a user’s browser when viewed. The root cause is improper validation of user-submitted content be...

CVE-2005-2611

CVE-2005-2611 affects VERITAS Backup Exec/NetWare components and NetBackup NetWare Media Server Option, where a static/hard-coded NDMP authentication credential enables remote attackers to read and write arbitrary files on the backup server. Products and versions implicated include VERITAS Backup...

CVE-2005-2592

Technical details for CVE-2005-2592 are not publicly available in the provided documents; monitor for updates.

CVE-2005-2597

CVE-2005-2597 concerns AOL Client Software 9.0, where insecure permissions on the installation path allow a local user to replace ACSD.exe with a malicious program, enabling arbitrary code execution with SYSTEM privileges. The vulnerability is local in scope and hinges on insufficient protection ...

BELL-CVE-2005-2617 CVE-2005-2617 does not affect BellSoft software

Bulletin has no description...

CVE-2005-2603

The CVE-2005-2603 entry describes a Cross-site Scripting (XSS) vulnerability in index.php of My Image Gallery (Mig) 1.4.1. The vulnerability allows remote attackers to inject arbitrary web script or HTML by supplying the currDir or image parameters. The available references (NVD entry and CVE rec...

CVE-2005-2602

Mozilla Thunderbird 1.0 and Firefox 1.0.6 allows remote attackers to obfuscate URIs via a long URI, which causes the address bar to go blank and could facilitate phishing attacks...

CVE-2005-2613

CVE-2005-2613 : The vulnerability is listed for the CPAINT Ajax Toolkit before 1.3-SP . It is described as an unknown vulnerability that could allow an attacker to execute arbitrary PHP or ASP code or read files via unknown vectors . The NVD entry assigns a CVSSv2 base score of 6.4 (MEDIUM) with ...

CVE-2005-2600

CVE-2005-2600 is described in connected sources as a vulnerability in the tree view of FUD Forum Bulletin Board Software (also present in phpgroupware/egroupware imports) that allows remote attackers to read private posts by modifying the mid parameter. The OpenVAS entries reference this CVE with...

CVE-2005-2599

CVE-2005-2599 affects Hummingbird FTP for Connectivity 10.0. The vulnerability arises from storing the user’s password in the FTP profile using weak encoding, enabling an attacker to gain privileges. The available sources (CVE entries and related records) describe the weakness in password storage...

CVE-2005-2614

CVE-2005-2614 affects Discuz!

CVE-2005-2590

Cross-site scripting XSS vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-2600

FUDForum 2.6.15 with "Tree View" enabled, as used in other products such as phpgroupware and egroupware, allows remote attackers to read private posts via a modified mid parameter...

KLA10377 WLF vulnerability in Veritas Backup Exec

An insecure auth was found in Veritas Backup Exec. By exploiting this vulnerability malicious users can read & write arbitrary code. This vulnerability can be exploited remotely at a point related to NDMP agent. Original advisories Symantec bulletin Related products VERITAS-Backup-Exec CVE list...

Apple Mac OS X Server servermgrd authentication vulnerable to buffer overflow

Overview Apple Mac OS X Server servermgrd contains an unspecified buffer overflow vulnerability in the authentication handling routines. This vulnerability may lead to remote execution of arbitrary code. Description Mac OS X Server contains the servermgrd application for back-end management...