CVE-2005-1433

HP OpenView Event Correlation Services (OV ECS) 3.32 and 3.33 are listed in CVE-2005-1433 with multiple unknown vulnerabilities that could lead to denial of service or arbitrary code execution. The provided connected documents confirm affected product/version details and impact but do not specify...

CVE-2005-1401

The CVE-2005-1401 entry describes a format-string vulnerability in the Mtp-Target client (versions 1.2.2 and earlier). The underlying issue is a format string flaw that can allow remote attackers to execute arbitrary code via game messages or other text sent to the client. Documented impact is re...

CVE-2005-0106

CVE-2005-0106 affects the perl module libnet-ssleay-perl (SSLeay.pm) before 1.25. When no entropy source is set in EGD_PATH, it falls back to the file /tmp/entropy, which an attacker with write access to that file could modify to weaken cryptographic operations. Consequence: potential partial imp...

DEBIAN-CVE-2005-1391

Buffer overflow in the addport function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header...

CVE-2005-1442

Buffer overflow in the Lotus Notes client for Domino 6.5 (before 6.5.4) and 6.0 (before 6.0.5) allows local users to crash the client and potentially execute arbitrary code via the NOTES.INI file. Affected component: NOTES.INI handling in Lotus Notes client. Impact: local denial of service, with ...

CVE-2005-1423

CVE-2005-1423 affects Software602 602LAN SUITE; the mail component is vulnerable to directory traversal via .. sequences in the A parameter, enabling remote denial of service and potential file presence enumeration. Vulnerable in 2004.0.05.0413; fixed in 2004.0.05.0509 (or later). Upgrade to 2004...

CVE-2005-0106

SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGDPATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file...

CVE-2005-1390

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0174. Reason: This candidate is a duplicate of CVE-2005-0174. Notes: All CVE users should reference CVE-2005-0174 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-1392

The SQL install script in phpMyAdmin 2.6.2 is created with world-readable permissions, which allows local users to obtain the initial database password by reading the script...

CVE-2005-1409

PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability."...

CVE-2005-1407

CVE-2005-1407 affects Skype for Windows versions 1.2.0.0 through 1.2.0.46. The issue allows a local user to bypass the identity check for an authorized application and then call arbitrary Skype API functions by modifying or replacing that application. The underlying impact is limited to a local e...

CVE-2005-1440

CVE-2005-1440 affects ViArt Shop Enterprise 2.1.6 and involves multiple cross-site scripting (XSS) flaws. The vulnerabilities allow remote attackers to inject arbitrary script/HTML via various entry points: basket.php parameters; forum.php fields (nickname, email, topic, message) as used by forum...

CVE-2005-1451

The CVE-2005-1451 entry affects Serendipity’s media manager prior to version 0.8. The vulnerability allows remote attackers to upload and execute arbitrary files of type .php or .shtml, enabling possible remote code execution on the affected server. The available documents do not provide addition...

CVE-2005-1420

CVE-2005-1420 affects Raysoft/Raybase Video Cam Server 1.0.0 beta. The vulnerability is an information disclosure where remote attackers can determine the full server pathname by requesting an invalid page using a hex-encoded space ("%20"). The provided documents do not specify exploit details be...

CVE-2005-1422

CVE-2005-1422 affects Raysoft/Raybase Video Cam Server 1.0.0 beta. The vulnerability allows remote attackers to perform administrator operations and trigger a denial of service by sending a direct request to admin.html . The connected documents confirm the affected product and impact but do not p...

CVE-2005-1452

Technical details are not publicly available in the provided documents for CVE-2005-1452; no affected products, root cause, or remediation are specified beyond the description. Monitor for updates.

CVE-2005-1428

The CVE-2005-1428 entry concerns edit_image.asp in Uapplication Uphotogallery, where remote attackers can upload arbitrary files. The vulnerability enables an attacker to affect confidentiality, integrity, and availability (C/P/I/P), with a CVSSv2 base score of 7.5 (NETWORK vector, low attack com...

CVE-2005-1448

CVE-2005-1448 describes a cross-site scripting (XSS) vulnerability in the Serendipity BBCode plugin for Serendipity, prior to version 0.8. Remote attackers can inject arbitrary web script or HTML, which executes in a user’s browser when viewing malicious entries or comments. The affected componen...

CVE-2005-1418

CVE-2005-1418 affects NetLeaf Limited NotJustBrowsing 1.0.3. The vulnerability arises because the View Lock Password is stored in plaintext in the notjustbrowsing.prf file, allowing local users to gain privileges. The NVD entry provides a base score of 4.6 (Medium) with local attack vector and lo...

CVE-2005-1416

The CVE-2005-1416 entry concerns 04WebServer 1.81 with a directory traversal vulnerability that lets remote attackers read files outside the web root but inside the installation folder. The issue is remote, of low attack complexity, and does not require authentication (per CVSS metrics: AV NETWOR...