10535 matches found
CVE-2005-0751
CVE-2005-0751 is rejected/not used per initial description.
CVE-2005-1901
Sawmill before 7.1.6 is affected by CVE-2005-1901 due to XSS vulnerabilities in two input points: the username in the Add User window and the license key on the Licensing page. An authenticated, remote attacker can craft requests to trigger script execution in an affected user’s browser session. ...
CVE-2005-1903
The CVE-2005-1903 entry concerns SPA-PRO Mail @Solomon 4.00: the IMAP service is affected by a buffer overflow triggered by a long CREATE command, allowing remote authenticated users to execute arbitrary code. The vulnerability is rooted in improper handling of IMAP CREATE data, enabling potentia...
CVE-2005-1888
Cross-site scripting XSS vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates...
CVE-2005-1904
CVE-2005-1904 affects JiRo's Upload System (JUS) version 1, where login.asp is vulnerable to SQL injection via the password parameter, enabling remote attackers to execute arbitrary SQL commands. Root cause is unsafe handling/concatenation of the password input in the login logic, leading to comm...
CVE-2005-1908
Perception LiteWeb is affected by CVE-2005-1908 where remote attackers can bypass file access controls by supplying an extra leading / or \ in the URL. The issue is documented across NVD, Red Hat, and CVE records; the core detail is that an improper URL handling allows path traversal-like bypass,...
CVE-2005-1900
The vulnerability CVE-2005-1900 affects Sawmill prior to 7.1.6, where an authenticated, remote attacker can bypass authentication to (1) gain administrative privileges or (2) add a license. The connected NASL entry confirms the affected range as Sawmill
CVE-2005-0395
CVE-2005-0395 is rejected/not used and does not represent an active vulnerability entry.
CVE-2005-1891
Summary : CVE-2005-1891 affects AOL Instant Messenger (AIM) versions 5.9.3797 and earlier. The issue stems from the GIF parser in the ateimg32.dll component, where processing a specially crafted buddy icon can trigger an integer underflow in a loop counter, enabling a remote denial of service (cr...
CVE-2005-1911
Leafnode’s CVE-2005-1911 affects the fetchnews NNTP client (in leafnode up to version 1.11.2). A hang can occur while waiting for input, allowing remote servers to cause a denial of service (news loss) by stalling fetchnews. The Red Hat advisory and related OpenVAS entries confirm this issue for ...
CVE-2005-1887
CVE-2005-1887 affects Sun Solaris 10 libc.so.1/libc and libproject components. Connected documents indicate Solaris 10 SPARC patch 119689-07 and x86 patch 118345-13 address the issue; patches target libc.so.1. The vulnerability is described as allowing local privilege escalation, with local acces...
CVE-2005-1890
Mortiforo before 0.9.1 has an unknown vulnerability that reportedly lets users access private forums. The exact vulnerable component, root cause, and attack vectors are not disclosed in the provided connected documents. The NVD entry lists a CVSS v2 base score of 5.0 (Medium) with network impact,...
CVE-2005-1906
The connected PT-2005-2863 entry provides concrete details for CVE-2005-1906: Livingmailing version 1.3 is affected, specifically the login.asp component. The vulnerability is an SQL injection via the password parameter, enabling remote attackers to execute arbitrary SQL commands. The entry notes...
CVE-2005-1902
The CVE-2005-1902 entry concerns the IMAP service of SPA-PRO Mail @Solomon 4.00. The vulnerability is a directory traversal in IMAP commands (SELECT, CREATE, DELETE, RENAME) that allows remote authenticated users to read other users’ mail and perform operations on arbitrary directories by using ....
CVE-2005-1893
CVE-2005-1893 affects FlatNuke 2.5.3. The vulnerability arises when a remote attacker supplies invalid parameters to certain scripts, causing an error message that leaks the web document root. The available documents describe the impact as an information disclosure vulnerability (partial confiden...
CVE-2005-1727
Apple Mac OS X 10.4.x up to 10.4.1 sets insecure world- and group-writable permissions for the 1 system cache folder and 2 Dashboard system widgets, which allows local users to conduct unauthorized file operations via "file race conditions."...
CVE-2005-1907
CVE-2005-1907 affects the ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000. The issue allows remote attackers to cause a denial of service (Wspsrv.exe crash) by sending a large volume of SecureNAT traffic. The connected Nessus entry MS05-034 (ISA Server 2000 ...