CVE-2005-2139

PHP remote file inclusion vulnerability in usercheck.php for Pavsta Auto Site allows remote attackers to execute arbitrary PHP code via the sitepath parameter...

CVE-2005-2144

Prevx Pro 2005 1.0 allows local users to bypass file protection and modify files by using MapViewOfFile to perform memory mapping on the file...

CVE-2005-1923

The ENSUREBITS macro in mszipd.c for Clam AntiVirus ClamAV 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service CPU consumption by infinite loop via a cabinet CAB file with the cffileFolderOffset field set to 0xff, which causes a zero-length read...

CVE-2005-0393

The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack vectors...

CVE-2005-2081

Stack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option is enabled, allows remote attackers to execute arbitrary code via a command that has two double quotes followed by a tab character...

CVE-2005-1922

The MS-Expand file handling in Clam AntiVirus ClamAV before 0.86 allows remote attackers to cause a denial of service file descriptor and memory consumption via a crafted file that causes repeated errors in the climsexpand function...

CVE-2005-2086

PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code...

CVE-2005-2133

CVE-2005-2133 is a duplicate of CVE-2005-1915. The connected CVE-2005-1915 describes a vulnerability in log4sh_readProperties for log4sh versions up to 1.2.5, where local users can overwrite arbitrary files via a symlink attack on predictable log4sh.$$ filenames. Affected product: log4sh (

CVE-2005-2133

...

CVE-2005-2019

ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor SMP or Uni Processor UP systems with the PREEMPTION kernel option enabled, does not sufficiently lock certain resources while performing table lookups, which can cause the cache results to be corrupted during multiple concurrent...

CVE-2005-2086

PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code...

CVE-2005-2116

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1921. Reason: This candidate is a duplicate of CVE-2005-1921. Notes: All CVE users should reference CVE-2005-1921 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-2139

CVE-2005-2139 is a PHP remote file inclusion vulnerability affecting Pavsta Auto Site, exploitable via the sitepath parameter in user_check.php to execute arbitrary PHP code. Core details present across sources indicate the vulnerability arises from improper handling of user-controlled input lead...

CVE-2005-2134

The vulnerability CVE-2005-2134 affects NetBSD 1.6–2.0.2, specifically the clcs and emuxki audio drivers. A local attacker can trigger a denial-of-service (kernel crash) by issuing the set-parameters ioctl to an audio device to simultaneously change the block size and set the pause state to unpau...

Immunity Canvas: PHPBB_HIGHLIGHT

Name| phpbbhighlight ---|--- CVE| CVE-2005-2086 Exploit Pack| CANVAS Description| phpBB Highlight Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: phpbb.com CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-2086 CVE Name: CVE-2005-2086...

CVE-2005-2141

CVE-2005-2141 affects TCP Chat 1.0. The vulnerability allows remote attackers to cause a denial of service (crash) by sending a long string to the chat service, potentially triggering a buffer overflow. The provided documents do not specify a patch or version-specific remediation.

CVE-2005-2139

PHP remote file inclusion vulnerability in usercheck.php for Pavsta Auto Site allows remote attackers to execute arbitrary PHP code via the sitepath parameter...

CVE-2005-2138

CVE-2005-2138 describes a Cross-site Scripting (XSS) vulnerability in the Comdev eCommerce 3.0 and 3.1 product line, specifically in index.php. The flaw allows remote attackers to inject arbitrary web script or HTML by injecting Javascript into the onMouseOver event of an anchor tag in a review m...

CVE-2005-2142

CVE-2005-2142 is a vulnerability in Golden FTP Server 2.60 where an authenticated remote attacker can use a backslash-dot-dot in the LIST command to disclose directory contents. The available sources consistently describe a directory traversal that allows listing arbitrary directories, exposing f...

CVE-2005-1917

CVE-2005-1917 affects kpopper 1.0 and earlier. Local users can create and overwrite arbitrary files through a symlink attack on the .popper-new temporary file due to insecure temporary file handling. Impact is described as low; exploitation is indicated in public advisories. Affected versions: kp...