CVE-2005-1716

The CVE refers to TOPo 2.2 (2.2.178), where data files are stored in the data directory under the web document root with insufficient access control. This could allow remote attackers to view sensitive information, such as client IP addresses. Connected documents (e.g., Red Hat advisory and CVE l...

CVE-2005-1703

CVE-2005-1703 affects Warrior Kings: Battles versions 1.23 and earlier. The vulnerability allows remote attackers to cause a denial of service (server crash) via a partial join packet that triggers a NULL pointer dereference. The provided connected documents confirm this description but do not re...

CVE-2005-1714

CVE-2005-1714: A cross-site scripting (XSS) vulnerability affects NetWin SurgeMail 3.0c2 and earlier. Multiple XSS issues may allow remote attackers to inject arbitrary HTML/JavaScript in users’ browsers, via unknown vectors. Connected sources corroborate the susceptibility for SurgeMail 3.0c2, w...

CVE-2005-1694

Technical details (affected product/version, root cause, exploit, impact) are not publicly provided in the supplied documents; monitor for updates.

CVE-2005-1740

Net-SNMP vulnerability CVE-2005-1740 arises from fixproc creating insecure temporary files, enabling a local user to modify file contents and potentially trigger arbitrary command execution, or overwrite files via a symlink attack. Affected component is the fixproc utility in Net-SNMP 5.x prior t...

CVE-2005-1704

Integer overflow in the Binary File Descriptor BFD library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer...

CVE-2005-1698

CVE-2005-1698 affects PostNuke 0.750 and 0.760RC3, enabling remote attackers to obtain sensitive information through direct requests to a set of files across the Xanthia module, pnblocks directory, NS-Multisites module, and xmlrpc.php. The listed targets include theme.php, Xanthia.php, user.php, ...

CVE-2005-1700

CVE-2005-1700 affects PostNuke 0.760-RC3 via the Xanthia module. The vulnerability is an SQL injection in pnadmin.php exploitable by the riga[0] parameter, allowing remote administrators to execute arbitrary SQL commands. Connected sources corroborate SQL injection in Xanthia/Messages areas and P...

CVE-2005-1692

CVE-2005-1692 affects gxine 0.4.4 and earlier (down to 0.3) where a ram file with a hostname containing format string specifiers can lead to remote code execution. The issue was publicly documented across multiple advisories (Slackware SSA 2005-203-04, Gentoo GLSA 200505-19, etc.). The root cause...

CVE-2005-1743

CVE-2005-1743 affects BEA WebLogic Server/Express versions 8.1 (SP3) and 7.0 (SP5). The root cause: when a security provider throws an exception, WebLogic may use an incorrect thread identity and may fail to audit security exceptions. Implications noted: potential partial impact on confidentialit...

CVE-2005-1713

Serendipity 0.8 is affected by multiple XSS vulnerabilities described in CVE-2005-1713, exploitable via the templatedropdown and shoutbox plugins. The Red Hat and NVD entries corroborate that remote attackers could inject arbitrary web script or HTML through these plugins, enabling client-side sc...

CVE-2005-1744

The CVE concerns BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5, where a redeploy does not log out users. This allows continued access to the application without re-authentication, potentially violating newly changed security constraints or role mappings. The issue is documen...

CVE-2005-1736

Technical details about this CVE are not publicly available in the provided documents. Monitor for updates on affected versions, root cause specifics, and remediation.

CVE-2005-1695

CVE-2005-1695 affects PostNuke RSS module (versions 0.750, 0.760RC2/RC3). The vulnerability is described as multiple cross-site scripting (XSS) flaws allowing remote injection of script/HTML via parameters: rss_url in magpie_slashbox.php and url in magpie_simple.php/magpie_debug.php. Connected Op...

CVE-2005-1697

The CVE-2005-1697 issue affects PostNuke’s RSS module (versions 0.750 and 0.760 RC2/RC3). A direct request to simple_smarty.php exposes the installation path via an error message, enabling remote disclosure of sensitive information. Exploit details are not provided in the sources; no patch/versio...

CVE-2005-1705

CVE-2005-1705 concerns gdb prior to 6.3 that searches the current working directory for a ".gdbinit" file, allowing a local attacker to execute arbitrary commands as the user running gdb. Multiple connected advisories confirm the issue alongside a separate overflow in gdb that is CVE-2005-1704, b...

CVE-2005-1692

Format string vulnerability in gxine 0.4.1 through 0.4.4, and other versions down to 0.3, allows remote attackers to execute arbitrary code via a ram file with a URL whose hostname contains format string specifiers...

CVE-2005-1715

CVE-2005-1715 describes a reflected cross-site scripting vulnerability in TOPo 2.2 (version 2.2.178), specifically in index.php. The issue allows remote attackers to inject arbitrary script/HTML via several inputs in the comments section and related fields: (1) m, (2) s, (3) ID, (4) t, and (5) fi...

CVE-2005-1737

Multiple unknown vulnerabilities in PROMS 0.11 allow "non-authorized users" to 1 view or modify the project member list or 2 modify the todos list...

CVE-2005-1709

CVE-2005-1709 concerns Blue Coat Reporter before version 7.1.2. The connected documentation provides no exact root-cause or vulnerable component details beyond the vendor/product scope. The entry states that remote unauthenticated attackers can add a license, implying modification of licensing da...