CVE-2005-1737

CVE-2005-1737 affects PROMS 0.11, where multiple unknown vulnerabilities allow non-authorized users to view or modify the project member list and to modify the todos list. The connected documents do not provide explicit root cause, affected versions beyond 0.11, or remediation details. No in‑the‑...

CVE-2005-1749

CVE-2005-1749 affects BEA WebLogic Server and WebLogic Express 6.1 Service Pack 4. A buffer overflow flaw allows remote attackers to trigger a denial of service via CPU consumption caused by a looping thread. The vulnerability is documented with a MEDIUM base score (CVSS v2.0) and network access ...

CVE-2005-1704

CVE-2005-1704 is a heap-based overflow in the BFD library used by gdb, binutils, elfutils, caused by an integer overflow when a crafted object file specifies a large number of section headers. Connected advisories indicate Red Hat updates for elfutils/binutils/gdb (RHSA-2005/659, -673, -709) to r...

CVE-2005-1745

The CVE-2005-1745 entry concerns BEA WebLogic Portal 8.1 with Service Pack 0?3 (Portal 8.1 SP3) where the UserLogin control prints the password to standard output after an incorrect login attempt. Affected component: BEA WebLogic Portal 8.1 (UserLogin control). Root cause: password leakage via st...

CVE-2005-1718

CVE-2005-1718 describes a buffer overflow in LS Games War Times (version 1.03 and earlier) that allows remote attackers to crash the server by sending a long nickname. The issue is confirmed across multiple records (NVD/Red Hat/CVE listing). The connected documents do not provide a patched versio...

CVE-2005-1739

The XWD Decoder in ImageMagick before 6.2.2.3, and GraphicsMagick before 1.1.6-r1, allows remote attackers to cause a denial of service infinite loop via an image with a zero color mask...

CVE-2005-1734

PROMS before 0.11 has multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL via unknown vectors. The connected Red Hat/CVE and CVE records confirm the issue but provide no further technical details, affected modules, exploit vectors, or a remediation within the...

CVE-2005-1741

Technical details about CVE-2005-1741 are not publicly available in the provided documents. No specifics on affected components, versions, root cause, or exploit information are included here; monitor for official disclosures.

CVE-2005-1712

CVE-2005-1712 affects Serendipity 0.8; when used with multiple authors, unprivileged authors can upload arbitrary media files. The provided documents state the vulnerability and affected scenario but do not disclose root cause, exploit details, or a remediation. No explicit patch information is g...

CVE-2005-1701

CVE-2005-1701 affects PortailPHP 1.3 and is a SQL injection vulnerability exploitable via the id parameter to the News, File, Liens, or Faq modules. The issue allows remote attackers to execute arbitrary SQL commands, as stated in the CVE entry. The connected records corroborate the same vulnerab...

CVE-2005-1739

CVE-2005-1739 affects ImageMagick (XWD decoder) and GraphicsMagick per reports; a vulnerability allows a remote attacker to trigger a denial-of-service (infinite loop) by processing an image with a zero color mask. Technical details across sources: the issue arises in the XWD parsing path, leadin...

CVE-2005-1738

The provided CVE-2005-1738 data describes a format-string vulnerability in the logPrintBadfile function of delbadfiles.c in Iron Bars SHell (ibsh) prior to version 0.3d. The flaw, triggered by certain inputs not properly handled in a syslog call, allows access to files outside the home directory ...

CVE-2005-1714

Cross-site scripting XSS vulnerability in NetWin SurgeMail 3.0c2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-1746

The cluster cookie parsing code in BEA WebLogic Server 7.0 through Service Pack 5 attempts to contact any host or port specified in a cookie, even when it is not in the cluster, which allows remote attackers to cause a denial of service cluster slowdown via modified cookies...

CVE-2005-1707

CVE-2005-1707 affects Gentoo webapp-config, where the fn_show_postinst function can be abused via a symlink attack on the temporary file postinst.txt. This race condition could let a local attacker overwrite arbitrary files with the privileges of the webapp-config user, potentially disrupting ope...

CVE-2005-1735

Multiple cross-site scripting XSS vulnerabilities in PROMS before 0.11 allow remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-1736

PROMS 0.11 does not properly handle "certain combinations of rights," which gives more rights to users than intended...

CVE-2005-1742

CVE-2005-1742 affects BEA WebLogic Server and WebLogic Express 8.1 SP2/SP3. The vulnerability allows users with the Monitor security role to shrink or reset JDBC connection pools, indicating an authorization/privilege misuse issue affecting pool configuration. The provided documents confirm the a...

[Full-disclosure] [ GLSA 200505-17 ] Qpopper: Multiple Vulnerabilities

Gentoo Linux Security Advisory GLSA 200505-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Important: Red Hat Security Advisory: mozilla security update

Updated mozilla packages that fix various security bugs are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 24 May 2005 This erratum now includes updated devhelp packages which are required to satisfy a dependancy on...