CVE-2005-0085

Cross-site scripting XSS vulnerability in ht://dig htdig before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message...

CVE-2005-1316

The CVE-2005-1316 entry documents a cross-site scripting (XSS) vulnerability in the Horde Accounts module for Horde, present before version 2.1.2. The issue allows remote attackers to inject arbitrary script or HTML via the parent’s frame page title. Affected software: Horde Accounts module prior...

CVE-2005-1322

CVE-2005-1322 affects the Horde Nag Task List Manager prior to 1.1.3, where a cross-site scripting (XSS) flaw allows remote attackers to inject arbitrary script or HTML via the parent frame page title. The vulnerability arises in the Nag web interface’s handling of the parent frame title, enablin...

CVE-2005-1328

OneWorldStore is affected by CVE-2005-1328. The vulnerability is a denial-of-service condition caused by remote requests to the owConnections/chksettings.asp endpoint, which can crash the application. The available connected data confirms the vulnerable component and the impact but provides limit...

MySQL MaxDB Webtool <= 7.5.00.23 Remote Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================== MySQL MaxDB Webtool 0 -- connecting to 192.168.2.103:9999...done! -- sending packet 16383 bytes ...done! -- sleeping 5 seconds before connecting to 192.168.2.103:4444... --...

iDEFENSE Security Advisory 04.25.05: MySQL MaxDB Webtool Remote Lock-Token Stack Overflow Vulnerability

MySQL MaxDB Webtool Remote Lock-Token Stack Overflow Vulnerability iDEFENSE Security Advisory 04.25.05 www.idefense.com/application/poi/display?id=235&type=vulnerabilities April 25, 2005 I. BACKGROUND MaxDB by MySQL is a re-branded and enhanced version of SAP DB, SAP AG's open source database...

RHEL 4 : sharutils (RHSA-2005:377)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:377 advisory. The sharutils package contains a set of tools for encoding and decoding packages of files in binary or text format. A stack based overflow bu...

Debian DSA-714-1 : kdelibs - several vulnerabilities

KDE security team discovered several vulnerabilities in the PCX and other image file format readers in the KDE core libraries, some of them exploitable to execute arbitrary code. To a small extent the packages in woody are affected as well. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

RHEL 4 : Mozilla (RHSA-2005:386)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:386 advisory. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Vladimir V. Perepelitsa...

openoffice.org security update

CentOS Errata and Security Advisory CESA-2005:375 Updated openoffice.org packages are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop applications such as a wo...

mozilla security update

CentOS Errata and Security Advisory CESA-2005:386 Updated mozilla packages that fix various security bugs are now available. This update has been rated as having Important security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup...

CVE-2005-1288

The vulnerability CVE-2005-1288 affects ACS Blog 0.8 through 1.1.3, where attackers can gain administrator privileges by manipulating the value of the in cookie. Affected component: login/authentication flow (inc_login_check.asp). Root cause: insecure cookie handling that allows privilege escalat...

CVE-2005-0684

CVE-2005-0684 affects the MySQL MaxDB Webtool/WebTools in MaxDB before version 7.5.00.26. The vulnerability is a stack buffer overflow caused by improper handling of long HTTP GET requests containing a percent sign or long Lock-Token strings in WebDAV handling (WDVHandler_CommonUtils.c), allowing...

CVE-2005-1282

CVE-2005-1282 affects ArGoSoft Mail Server Pro 1.8.7.6, with multiple XSS vulnerabilities allowing remote injection via (1) IMG src, (2) webmail user settings, or (3) address book input. The connected sources confirm XSS exposure and affected component, but do not provide patch/version remediatio...

CVE-2005-1279

CVE-2005-1279 affects tcpdump up to version 3.8.3 (and related issues CVE-2005-1278, CVE-2005-1280). The vulnerability is a denial-of-service via infinite loops caused by improper handling in the BGP dissector (RT_ROUTING_INFO) and the LDP packet handling in ldp_print, exploitable by crafted netw...

CVE-2005-1290

CVE-2005-1290 affects phpBB 2.0.14 and earlier. It has multiple XSS vulnerabilities allowing remote attackers to inject arbitrary script/HTML via: (1) the u parameter in profile.php, (2) the highlight parameter in viewtopic.php, and (3) the forumname or forumdesc parameters in admin_forums.php. T...

CVE-2005-1275

Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial of service application crash via a PNM file with a small colors value...

CVE-2005-1294

The vulnerability CVE-2005-1294 affects the Affix Bluetooth Protocol Stack for Linux, specifically via affix_sock_register. A socket call with a negative protocol value is used as an array index, enabling a local attacker to gain privileges. The documents do not specify affected versions or exact...

CVE-2005-1298

CVE-2005-1298 describes a vulnerability in the inserter.cgi script where remote attackers can read arbitrary files by passing a full pathname as the argument. The NVD entry lists a base score of 7.5 (HIGH) with NETWORK attack vector and LOW complexity, but the provided documents do not specify af...

CVE-2005-1304

CVE-2005-1304 affects the citat.pl script. The exposed vulnerability allows remote attackers to execute arbitrary files by supplying shell metacharacters in the argument. The available documents confirm the issue and its impact (arbitrary command/file execution) but do not provide exploit details...