10535 matches found
CVE-2005-0544
phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server via direct requests to 1 sqlvalidator.lib.php, 2 sqlparser.lib.php, 3 selecttheme.lib.php, 4 selectlang.lib.php, 5 relationcleanup.lib.php, 6 headermetastyle.inc.php, 7 getforeign.lib.php, 8 displaytbllinks.lib.php, 9...
CVE-2005-1394
CVE-2005-1394 describes a format-string vulnerability in ESRI ArcInfo Workstation 9.0 where local users can escalate privileges via format string specifiers in the ARCHOME environment variable, affecting components such as wservice and lockmgr . The connected PT-2005-2391 entry confirms product/v...
CVE-2005-1368
The vulnerability CVE-2005-1368 affects Linux kernel 2.6.10 through 2.6.11.8, caused by the key_user_lookup() path in security/keys/key.c, enabling a local attacker to crash the system (kernel oops) via SMP. Fedora and Ubuntu advisories indicate that upgrading to a 2.6.11.8-based release or later...
CVE-2005-0119
helvis 1.8h21 and earlier allows local users to recover and read the files of other users via the elvrec setuid program...
CVE-2005-1395
CVE-2005-1395 affects Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier. The vulnerability is a buffer overflow that can allow local users to gain privileges when a long environment variable (XAPPLRESLANGPATH or XAPPLRESDIR) is set or via a long command line argument. The Red Hat and NVD entries confirm...
CVE-2005-0440
ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a sensitive write password via a modified URL...
CVE-2005-0120
helvis 1.8h21 and earlier allows local users to delete arbitrary files via the elvprsv setuid program...
CVE-2005-0195
Cisco IOS 12.0S through 12.3YH allows remote attackers to cause a denial of service device restart via a crafted IPv6 packet...
CVE-2005-0970
Mac OS X 10.3.9 and earlier allows users to install, create, and execute setuid/setgid scripts, contrary to the intended design, which may allow attackers to conduct unauthorized activities with escalated privileges via vulnerable scripts...
CVE-2005-0853
betaparticle blog bp blog stores the database under the web root, which allows remote attackers to obtain sensitive information via a direct request to 1 dbBlogMX.mdb for versions before 3.0, or 2 Blog.mdb for versions 3.0 and later. NOTE: it was later reported that vector 2 also affects versions...
CVE-2005-1120
Multiple cross-site scripting XSS vulnerabilities in IlohaMail 0.8.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the e-mail 1 body, 2 filename, or 3 MIME type...
CVE-2005-0734
PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to cause a denial of service memory exhaustion and process crash via a large number of HTTP requests...
CVE-2005-1092
Lightspeed DeluxeFTP 6.01 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges...
CVE-2005-1148
calendar.pl in CalendarScript 3.21 allows remote attackers to obtain sensitive information via invalid 1 year or 2 month parameters, which leaks the full pathname and debug information...
CVE-2005-1166
The DNTUS26 process in Dameware NT Utilities and the DWRCS process in MiniRemote Control 4.9 and earlier stores the username and password in cleartext in memory, which could allow attackers to obtain sensitive information...
CVE-2005-1358
text.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...
CVE-2005-1222
catforgen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the addirect parameter to reference catforgen.php, then including the code in the mforracine parameter, which is then written to catforgen.php...
Immunity Canvas: MAILENABLE_IMAP
Name| mailenableimap ---|--- CVE| CVE-2005-1015 Exploit Pack| CANVAS Description| mailenableimap Notes| CVE Name: CVE-2005-1015 VENDOR: MailEnable VersionsAffected: MailEnable Enterprise = 1.04 Repeatability: Repeatable. CVE Url: https://vulners.com/cve/CVE-2005-1015 CVSS: 10.0...
CVE-2005-1061
The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the secure file that are later used as part of a regular expression, which causes the parser to crash, aka "logwatch log processing regular expression DoS."...
