10533 matches found
CVE-2005-2179
PHP remote file inclusion vulnerability in BlogModel.php in Jaws 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via the path parameter...
PunBB < 1.2.6 Multiple Vulnerabilities
The remote version of PunBB contains a flaw in its template system that can be exploited to read arbitrary local files or, if an attacker can upload a specially crafted avatar, to execute arbitrary PHP code. In addition, the application fails to sanitize the 'temp' parameter of the 'profile.php'...
RHEL 3 / 4 : Adobe Acrobat Reader (RHSA-2005:575)
Updated acroread packages that fix a security issue are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Adobe Acrobat Reader browser allows for the viewing, distributing, and printing of documents in portable document format...
CVE-2005-2176
Novell NetMail is vulnerable to an issue where HTML in an attachment is processed automatically without prompting the user to save or open it, enabling potential web-based attacks and cookie theft. The provided sources (NVD/CVE record) confirm the description but do not specify affected versions,...
Critical: Red Hat Security Advisory: Adobe Acrobat Reader security update
Updated acroread packages that fix a security issue are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Adobe Acrobat Reader browser allows for the viewing, distributing, and printing of documents in portable document format...
[SECURITY] [DSA 743-1] New ht packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 743-1 [email protected] http://www.debian.org/security/ Martin Schulze July 8th, 2005 http://www.debian.org/security/faq -...
CVE-2005-2174
CVE-2005-2174 concerns Bugzilla where Bugzilla 2.17.x, 2.18 before 2.18.2, 2.19.x, and 2.20 before 2.20rc1 insert bugs before they are private, enabling a race condition that can expose bug details via buglist.cgi before MySQL replication completes. Connected references corroborate the flaw and i...
[SECURITY] [DSA 735-2] New sudo packages fix pathname validation race
------------------------------------------------------------------------ Debian Security Advisory DSA 735-2 [email protected] http://www.debian.org/security/ Michael Stone July 07, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
[SECURITY] [DSA 736-2] New spamassassin packages fix potential DOS
------------------------------------------------------------------------ Debian Security Advisory DSA 736-2 [email protected] http://www.debian.org/security/ Michael Stone July 07, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
DSA-743-1 ht - buffer overflows, integer overflows
Bulletin has no description...
SimplePHPBlog 0.4.0 <= Remote Password Disclosure
. || | | .. | | | | | | | | | | | | | /| | /|/ | || || / Where is the security? ... Security Advisory 2005-0x00 Authors......... pjphem && LazyCrs Date............ 07/07/2005 Vendor.......... www.simplephpblog.com Type............ SimplePHPBlog 0.4.0 = Remote Password Disclosure o The Problem:...
MediaWiki 1.4.x < 1.4.6 / 1.5.x < 1.5.0 beta3 Page Move Template XSS
According to its self-reported version number, the installation of MediaWiki running on the remote host is affected by a cross-site scripting vulnerability due to a failure to sanitize user-supplied input passed to the page move template. A remote attacker can exploit this to inject arbitrary HTM...
Debian DSA-743-1 : ht - buffer overflows, integer overflows
Several problems have been discovered in ht, a viewer, editor and analyser for various executables, that may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-1545 Tavis Ormandy of the Gentoo Linux Security Tea...
Important: Red Hat Security Advisory: php security update
Updated PHP packages that fix two security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was discovered in the PEAR...
CVE-2005-1912
This CVE entry is rejected/not used as stated in the Initial Description.
CVE-2005-1912
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1841. Reason: This candidate is a duplicate of CVE-2005-1841. Notes: this duplicate occurred as a result of separate assignments by multiple CNAs, one to the researcher and one to the vendor. All CVE users should reference...
CVE-2005-1841
Adobe Reader information-disclosure vulnerability CVE-2005-1841 affects Adobe Reader 5.0.9 and 5.0.10 on Linux, Solaris, HP-UX, and AIX. The issue arises from how temporary files are created in /tmp using the user’s umask, which can allow local users to read the owner’s PDF documents. Connected a...
iejavaprxyexploit.pl.txt
Microsoft Internet Explorer "javaprxy.dll" COM Object Exploit Unpatched Advisory : FrSIRT/ADV-2005-0935 Rated as : Critical Status : Unpatched Code : http://www.frsirt.com/exploits/20050702.iejavaprxyexploit.pl.php !/usr/bin/perl Microsoft Internet Explorer "javaprxy.dll" COM Object Exploit...
phpsource.traverse.txt
--SLDf9lqlvOQaIe6s Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable =3D=3D Vendor: Kaf Oseo =3D=3D Product: http://guff.szub.net/quick-dirty-phpsource-printer/ =3D=3D Version: 1.0 =3D=3D Vulnerability: Filtering "../" to "" allowed...