CVE-2005-1419

CVE-2005-1419 affects Ocean12 Mailing List Manager 1.06, where the admin login panel is vulnerable to SQL injection via the Admin_id parameter. The available connected documents confirm the root cause as an SQL injection flaw in the admin authentication path, enabling remote attackers to execute ...

CVE-2005-1422

Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to conduct administrator operations and cause a denial of service server or camera shutdown via a direct request to admin.html...

CVE-2005-1410

The connected documents confirm CVE-2005-1410 affects the PostgreSQL tsearch2 module (versions 7.4–8.0.x). The root cause is misdeclaring several tsearch2 functions as internal when they do not take an internal argument, enabling SQL calls to other internal-argument functions and potentially caus...

CVE-2005-1450

Technical details are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

Immunity Canvas: RADEXECD

Name| radexecd ---|--- CVE| CVE-2005-1825 Exploit Pack| CANVAS Description| radexecd.exe Notes| CVE Name: CVE-2005-1825 VENDOR: HP Release Date: Apr 28, 2005 Reliability: This is a one-shot exploit. It's single threaded. CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1825 CVS...

CVE-2005-1444

SitePanel 2.6.1 and earlier (SitePanel2) are affected by multiple cross-site scripting (XSS) vulnerabilities. The issues allow remote attackers to inject arbitrary web script/HTML via: (1) v, show, or sec_name parameters to main.php, (2) inadmin, newsev, or postid parameters to 5.php, or (3) id p...

CVE-2005-1429

CVE-2005-1429 describes a SQL injection vulnerability in login.asp of WWWguestbook 1.1. The vulnerability arises from unsafely handling the password parameter, allowing remote attackers to execute arbitrary SQL commands. Affects the WWWguestbook 1.1 web application (login.asp) and could enable un...

CVE-2005-1401

Format string vulnerability in the client for Mtp-Target 1.2.2 and earlier allows remote attackers to execute arbitrary code via game messages or other text...

CVE-2005-1386

PHP-Nuke 7.6 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 ipban.php, 2 db.php, 3 lang-norwegian.php, 4 lang-indonesian.php, 5 lang-greek.php, 6 a request to WebLinks with the portuguese language lang-portuguese.php, 7 a request to WebLinks with the...

Mac OS X Multiple Vulnerabilities (Security Update 2005-005)

The remote host is missing Security Update 2005-005. This security update contains fixes for the following applications : - Apache - AppKit - AppleScript - Bluetooth - Directory Services - Finder - Foundation - HelpViewer - LDAP - libXpm - lukemftpd - NetInfo - ServerAdmin - sudo - Terminal - VPN...

CVE-2005-0012

Format string vulnerability in the aInterfacemsg function in Dillo before 0.8.3-r4 allows remote attackers to execute arbitrary code via format string specifiers in a web page...

CVE-2005-0007

Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service application crash from assertion...

CVE-2005-0400

The ext2makeempty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new directory entry, which allows local users to obtain potentially sensitive information by reading the block...

CVE-2005-0388

Unknown vulnerability in the remoteping service in remstats 1.0.13 and earlier allows remote attackers to execute arbitrary commands "due to missing input sanitising."...

CVE-2005-0247

Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via 1 a large number of variables in a SQL statement being handled by the readsqlconstruct function, 2 a large number of INTO variables in a SELECT statement being handled by the...

CVE-2005-0682

Cross-site scripting XSS vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs...

Immunity Canvas: MEWEBMAIL

Name| MEWebMail ---|--- CVE| CVE-2005-1348 Exploit Pack| CANVAS Description| MailEnable WebMail Authorization Buffer Overflow Notes| References: Found by CorryL of www.x0n3-h4ck.org CVE Name: CVE-2005-1348 VENDOR: MailEnable Repeatability: This is a repeatable exploit given that the node is...

CVE-2005-1396

The CVE-2005-1396 entry describes a race condition in Ce/Ceterm (aka ARPUS/Ce) versions 2.5.4 and earlier. The underlying issue allows local users to write to arbitrary files via a symlink attack on the ce_edit_log temporary file. Affected component: Ce/Ceterm, vulnerable file handling during log...

CVE-2005-1386

PHP-Nuke 7.6 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 ipban.php, 2 db.php, 3 lang-norwegian.php, 4 lang-indonesian.php, 5 lang-greek.php, 6 a request to WebLinks with the portuguese language lang-portuguese.php, 7 a request to WebLinks with the...

CVE-2005-0727

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0735. Reason: This candidate is a duplicate of CVE-2005-0735. Notes: All CVE users should reference CVE-2005-0727 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...