CVE-2005-1587

The CVE-2005-1587 entry concerns a Cross-site Scripting (XSS) vulnerability in Quick.cart 0.3.0, specifically in index.php where the sWord parameter allows remote attackers to inject arbitrary script/HTML. Public details in the connected records confirm the affected component and the vulnerabilit...

CVE-2005-1572

CVE-2005-1572 relates to ShowOff! Digital Media Software version 1.5.4, where a remote attacker can cause a denial of service (server crash) by sending a malformed request to port 8083. Multiple connected sources (Red Hat advisory, NVD/NVD detail, CVE record, and Nessus plugin) corroborate the Do...

CVE-2005-1575

The CVE-2005-1575 issue concerns Mozilla Firefox for Windows (versions 0.10.1 and 1.0) where the file download dialog could misrepresent a file’s type. The root cause described across connected records is that a malicious HTTP Content-Type header combined with a filename containing whitespace, do...

CVE-2005-1556

CVE-2005-1556 affects the Gamespy cd-key validation system. The vulnerability allows remote attackers to cause a denial of service (cd-key already in use) by capturing and replaying a cd-key authorization session. The provided documents describe the issue but do not include exploit code, affected...

CVE-2005-1569

The CVE-2005-1569 entry describes a Cross-site Scripting (XSS) flaw in DirectTopics 2.1 and 2.2. The vulnerability arises from accepting a javascript: URL in either a thread context or an IMG tag, enabling remote script injection. Affected product is DirectTopics (versions 2.1/2.2); root cause is...

CVE-2005-1549

The OpenVAS entries confirm a concrete vulnerability in Easy Message Board (Easy Message Board, Perl-based). The flaw resides in easymsgb.pl where input validation is inadequate, enabling directory traversal via the print parameter and potentially allowing remote command execution on the web serv...

CVE-2005-1553

GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via sniffing...

CVE-2005-1581

Cross-site scripting XSS vulnerability in Bug Report 1.0 allows remote attackers to inject arbitrary web script or HTML via various fields to bugreport.php, which are not filtered or quoted when processed by buglist.php or admin/index.php...

CVE-2005-1553

GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 use a weak password encryption scheme that enables password sniffing by remote attackers. The provided documents do not include specifics on affected components, root cause details beyond the weak crypto description, or a published rem...

CVE-2005-1545

CVE-2005-1545 affects ht, a viewer/editor/analyser for executables. The vulnerability is an integer overflow in ht's ELF parser that can be triggered by a crafted ELF file, causing a heap-based buffer overflow and allowing arbitrary code execution. Debian/GLSA advisories note fixes in ht versions...

CVE-2005-1566

CVE-2005-1566 affects the Acrowave AAP-3100AR wireless router. Remote attackers can bypass authentication by pressing CTRL-C at the telnet username/password prompt, causing the shell to crash and restart and leaving the attacker in a new shell. Impact: partial confidentiality, integrity, and avai...

CVE-2005-1574

CVE-2005-1574 affects Windows Media Player versions 9 and 10, where WMDRM-protected content could redirect users to a licensing Web site even if the auto-license setting is disabled. The connected sources describe the impact as a license-redirect vulnerability within WMDRM, but do not provide dee...

CVE-2005-1580

BoastMachine 3.0 is affected by an arbitrary file upload via users.ini.php due to improper file type restriction, enabling remote code execution. Connected records also indicate a vulnerability class lasting into newer versions; remediation noted in Nessus: upgrade to BoastMachine 3.1 or later to...

CVE-2005-1578

EnCase Forensic Edition 4.18a is affected by CVE-2005-1578, which describes that the product does not support Device Configuration Overlays (DCO). The underlying impact is that DCO non-support could allow an attacker to hide information without detection, with a CVSSv2 base score of 2.1 (LOW) and...

CVE-2005-1558

The CVE-2005-1558 entry describes a vulnerability in the web module of Neteyes Nexusway where remote attackers can bypass authentication and obtain administrator privileges by setting the cyclone500_auth cookie. The impact is authenticated/admin access with partial confidentiality, integrity, and...

CVE-2005-1570

CVE-2005-1570 affects forum.asp in bttlxeForum 2.0. The vulnerability allows remote attackers to obtain full path information via a hex-encoded argument to the page parameter, with the description suggesting this may be due to a SQL injection vulnerability. The documents do not provide concrete e...

CVE-2005-1547

CVE-2005-1547 : BakBone NetVault is affected by a heap-based buffer overflow in the demo version (and possibly other versions) that allows a remote attacker to execute arbitrary commands by sending a large packet to port 20031. The vulnerability is rated CVSSv2 base 7.5 (HIGH) with network access...

CVE-2005-1562

CVE-2005-1562 affects MaxWebPortal 1.3.5 and earlier. The vulnerability is due to multiple SQL injection flaws in ASP components, allowing remote attackers to execute arbitrary SQL commands via specific parameters: fpassword (inc_functions.asp), txtAddress, message, or subject (post_info.asp), an...

CVE-2005-1586

Quick.Forum 2.1.6 is affected by a vulnerability where sensitive data (usernames, banned IP addresses, censored words, and backups) is stored under the web document root and can be obtained by direct requests to (1) db/users.txt, (2) db/banList.txt, (3) db/censureWords.txt, or (4) backup files. R...

CVE-2005-1544

CVE-2005-1544 describes a stack-based buffer overflow in libTIFF prior to 3.7.2, triggered while processing a TIFF file with a malformed BitsPerSample tag. This allows remote attackers to execute arbitrary code. The OpenVAS and distro advisories (e.g., Debian DSA-755-1, Ubuntu USN-130-1, Mandrake...