10535 matches found
CVE-2005-1793
CVE-2005-1793 affects Microsoft Windows 98SE (and possibly other operating systems) via User32.DLL. A crafted icon (.ico) bitmap file with unusually large width and height values can cause a denial of service (crash). The vulnerability is described as allowing local and remote DoS; CVSS 2.0 base ...
CVE-2005-1814
Stack-based buffer overflow in PicoWebServer 1.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long URL...
CVE-2005-1810
SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands via the $catID variable, as demonstrated using the cat parameter to index.php...
CVE-2005-1810
WordPress 1.5.1 is affected by a SQL injection in template-functions-category.php via the cat_ID parameter (index.php), enabling remote SQL command execution. Affected component: WordPress 1.5.1; vulnerable file: template-functions-category.php; vulnerability likely allows information disclosure ...
CVE-2005-1821
PHP remote file inclusion vulnerability in pdlheader.inc.php in PowerDownload 3.0.2 and 3.0.3 allows remote attackers to execute arbitrary PHP code via the incdir parameter to downloads.php...
[EXPL] ZeroBoard Remote Command Execution (Exploit, preg_replace)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
payproXSS.txt
PayProCart multiple variable XSS & path disclosure vendor:http://www.profitcode.net/products/payprocart.html vendor confirmed: yes exploit avaible: yes advisore:http://lostmon.blogspot.com/2005/04/ payprocart-multiple-variable-xss-path.html OSVDB IDS:15528,15529,15530,15531,15532,15533,...
CVE-2005-1796
Format string vulnerability in the cursesmsg function in the Ncurses interface eccurses.c for Ettercap before 0.7.3 allows remote attackers to execute arbitrary code...
CVE-2005-1765
syscall in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform, when running in 32-bit compatibility mode, allows local users to cause a denial of service kernel hang via crafted arguments...
CVE-2005-1774
The CVE-2005-1774 entry concerns WEB-DAV Linux File System (davfs2) 0.2.3, where improper enforcement of Unix permissions allows local users to write arbitrary files on a davfs2 mounted filesystem. Multiple connected sources describe the issue as a permission enforcement flaw in davfs2, specifica...
CVE-2005-1774
WEB-DAV Linux File System davfs2 0.2.3 does not properly enforce Unix permissions, which allows local users to write arbitrary files on a davfs2 mounted filesystem...
CVE-2005-1787
CVE-2005-1787 affects phpStat 1.5; setup.php contains a flaw where remote attackers can bypass authentication and gain administrator privileges by setting the $check variable. The connected documents confirm this vulnerability but do not provide detailed exploit steps or patches within the given ...
CVE-2005-1780
CVE-2005-1780 is a SQL injection flaw in Active News Manager, specifically in admin/login.asp, where the password field can be manipulated to execute arbitrary SQL commands. The vulnerability allows remote attackers to compromise data confidentiality and integrity. Documents indicate affected sof...
CVE-2005-1774
WEB-DAV Linux File System davfs2 0.2.3 does not properly enforce Unix permissions, which allows local users to write arbitrary files on a davfs2 mounted filesystem...
CVE-2005-1786
Summary (CVE-2005-1786): FunkyASP AD System 1.1 is affected by an SQL injection in the admin.asp file, exploitable via the password parameter to execute arbitrary SQL and gain privileges. The vulnerability is described across multiple records (CVE/NT NVD entries and PT-2005-2754). The exploitatio...
CVE-2005-1772
CVE-2005-1772 describes a buffer overflow in the client cd-key hash of Terminator 3: War of the Machines (versions 1.16 and earlier). The flaw can allow remote attackers to cause an application crash (denial of service) by sending a long client cd-key hash value. The provided documents do not inc...
CVE-2005-1776
CVE-2005-1776 affects C'Nedra 0.4.0 and earlier. The vulnerability is a buffer overflow in READ_TCP_STRING (game_message_functions.cpp) within the network plugin, enabling remote attackers to execute arbitrary code by sending a long text string. Affected product/component: C'Nedra network plugin;...
CVE-2005-1784
CVE-2005-1784 affects Hosting Controller 6.1 HotFix 2.0 and earlier. According to connected sources (Red Hat, CVE lists, and Nessus), a remote attacker can steal passwords and gain privileges by submitting a modified emailaddress parameter in the updateprofile action of UserProfile.asp. The under...
CVE-2005-1770
CVE-2005-1770 affects Avast! Antivirus 4.6 and possibly other versions. A buffer overflow in the Aavmker4 device driver can allow local users to cause a denial of service (system crash) and potentially execute arbitrary code via certain signals combined with crafted input. The connected documents...