10533 matches found
CVE-2005-1851
A certain contributed script for ekg Gadu Gadu client 1.5 and earlier allows attackers to execute shell commands via unknown attack vectors...
CVE-2005-2325
CVE-2005-2325 affects Clever Copy 2.0 and 2.0a. The vulnerability allows remote attackers to disclose the full path of the web root by directly requesting any of the listed PHP files (ticker.php, menu.php, banned.php, endlayout.php, randomhlinesblock.php, showlast.php, showlast5class1.php, showla...
CVE-2005-2303
CVE-2005-2303 is rejected/not used; refer to CVE-2005-1218.
CVE-2005-2302
PowerDNS before 2.9.18 is affected by CVE-2005-2302. When the server is configured to allow recursion to a restricted IP range, it does not properly handle queries from clients that are denied recursion, which can cause a temporary blanking of answers for clients that are permitted to recurse. Th...
CVE-2005-2310
CVE-2005-2310 : Winamp 5.03a, 5.09, 5.091 and other builds before 5.094 are affected by a buffer overflow in ID3v2 tag handling. An MP3 file with a crafted long ID3v2 tag (e.g., ARTIST or TITLE) can be parsed by Winamp, enabling a remote attacker to execute arbitrary code with the caller’s privil...
CVE-2005-2307
CVE-2005-2307 is a denial-of-service vulnerability in the Windows Network Connection Manager (Network Connection Manager) where a web or local attacker could crash the Network Connections Service by sending a specially crafted input to netman.dll. The issue affects the Network Connection Manager ...
CVE-2005-2309
CVE-2005-2309 affects Opera 8.01: a crafted JPEG image can cause a denial-of-service (CPU consumption). Demonstrated with random.jpg. Documents confirm Opera as affected and the DoS impact; no additional details on root cause or patch are provided in the supplied sources.
CVE-2005-2305
DG Remote Control Server 1.6.2 allows remote attackers to cause a denial of service crash or CPU consumption and possibly execute arbitrary code via a long message to TCP port 1071 or 1073, possibly due to a buffer overflow...
CVE-2005-2305
CVE-2005-2305 affects DG Remote Control Server 1.6.2. The vulnerability arises from a potential buffer overflow triggered by a long message sent to TCP ports 1071 or 1073, causing a denial of service and possibly allowing arbitrary code execution. The available documents explicitly describe the r...
CVE-2005-1530
Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service CPU consumption by infinite loop via a Bzip2 archive with a large 'Extra field length' value...
CVE-2005-2299
CVE-2005-2299 affects Simple Message Board Version 2.0 Beta 1 and describes multiple XSS flaws exposed via parameters: FID (forum.cfm), UID (user.cfm), TID (thread.cfm), and PostDate (search.cfm). The vulnerability allows remote injection of arbitrary script/HTML. CVSS details in the entry indica...
CVE-2005-2321
CaLogic 1.2.2 is affected by a PHP remote file inclusion vulnerability. The flaw allows an attacker to execute arbitrary code by passing a crafted CLPATH value to endpoints such as /cl_minical.php, /clmcpreload.php, /mcconfig.php, or /mcpi-demo.php. The root cause is improper handling of CLPATH l...
CVE-2005-1851
Removed by vendor...
Read parts of any XML-file via customize parameter in Oracle Reports
Name Read parts of any XML-file via customize parameter in Oracle Reports Systems Affected All version of Oracle Reports Severity Medium Risk Category Information disclosure Vendor URL http://www.oracle.com Author Alexander Kornbrust ak at red-database-security.com Date 19 July 2005 V 1.00 Adviso...
Run any OS Command via unauthorized Oracle Reports
Name Run any OS Command via unauthorized Oracle Reports Systems Affected Oracle Reports 6.0, 6i, 9i, 10g Severity High Risk Category OS command execution Vendor URL http://www.oracle.com Author Alexander Kornbrust ak at red-database-security.com Date 19 July 2005 V 1.00 Advisory AKSEC2003-014...
[SECURITY] [DSA 760-1] New ekg packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 760-1 [email protected] http://www.debian.org/security/ Martin Schulze July 18th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 759-1] New phppgadmin packages fix directory traversal vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 759-1 [email protected] http://www.debian.org/security/ Martin Schulze July 18th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 758-1] New heimdal packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 758-1 [email protected] http://www.debian.org/security/ Martin Schulze July 18th, 2005 http://www.debian.org/security/faq -...
CVE-2005-1175
Heap-based buffer overflow in the Key Distribution Center KDC in MIT Kerberos 5 krb5 1.4.1 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a certain valid TCP or UDP request...
