CVE-2005-1274

Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via an HTTP unlock request and a long "If" parameter...

CVE-2005-1289

CVE-2005-1289 affects E-Cart 2004 1.1 and earlier. The issue is in index.cgi where user-supplied parameters (art and possibly cat) allow shell metacharacters to be interpreted, enabling remote execution of arbitrary commands. This is a remote code execution vulnerability with network access and n...

CVE-2005-1305

The CVE-2005-1305 issue affects the hyper.cgi script. It allows remote attackers to read arbitrary files by supplying a full pathname in the argument. NVD lists a base score of 5.0 (Medium) with network attack vector, low complexity, no authentication, and partial confidentiality impact. Exploit ...

CVE-2005-1275

CVE-2005-1275: A heap-based buffer overflow in ImageMagick’s ReadPNMImage (pnm.c) allows remote attackers to crash or run arbitrary code by tricking a user into opening a specially crafted PNM file. Affected: ImageMagick 6.2.1 and earlier (as per multiple advisories). Red Hat/CentOS and SUSE/Mand...

CVE-2005-1283

Summary : CVE-2005-1283 describes multiple directory traversal vulnerabilities in ArGoSoft Mail Server Pro 1.8.7.6. Remote authenticated users can read arbitrary files via the UIDL parameter to the msg script or copy/move the user’s .eml file to arbitrary locations via the delete script. This is ...

CVE-2005-1285

CVE-2005-1285 affects WoltLab Burning Board (thread.php) and earlier 2.3.1, where an XSS flaw can be exploited via the hilight parameter to inject script/HTML. The vulnerability is rooted in insufficient input sanitization for hilight in thread.php. CVSS info from NVD shows a medium severity (3.0...

CVE-2005-1284

CVE-2005-1284 affects ArGoSoft Mail Server Pro 1.8.7.6; the addnew script allows remote attackers to create arbitrary accounts via a direct HTTP POST, even when web-interface account creation is disabled. This is a network‑level issue with CVSS2 base score 7.5 (HIGH). No exploit details or remedi...

CVE-2005-1299

CVE-2005-1299 concerns the inserter.cgi script, where remote attackers can execute arbitrary commands by supplying shell metacharacters in the argument. The issue yields a high-severity, in-progress code execution risk with complete impact on confidentiality, integrity and availability (CVSSv2 ba...

CVE-2005-1296

include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...

CVE-2005-1295

Technical details (affected products, precise root cause, affected versions, and exploitability) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2005-1286

CVE-2005-1286 affects BitDefender 8 with an unquoted Windows search path when executing a process. The root cause is lack of quoting of the full pathname, enabling a local user to prevent BitDefender from starting by creating a malicious C:\program.exe. The NVD entry documents this local, high-co...

CVE-2005-1296

The CVE-2005-1296 issue involves an include.cgi script that allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. The available data indicate a remote, network-accessible flaw with a CVSSv2 base score of 7.5 (High) and partial impacts to confidentiality, ...

CVE-2005-1270

The 1 checkupdate.sh and 2 rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack...

CVE-2005-1293

CVE-2005-1293 involves multiple SQL injection vulnerabilities in StorePortal 2.63’s default.asp. The affected component is the web application entry point (default.asp) with six injectable parameters: language, bpic, idcategory, content, keyword, and idproduct. The underlying issue is improper in...

CVE-2005-1278

CVE-2005-1278 affects tcpdump up to version 3.9.1, where isis_print invoked by isoclns_print can be triggered by a zero-length GRE packet to cause a denial of service (infinite loop). Connected advisories (Red Hat, CentOS, Gentoo, Ubuntu, OpenVAS/Nessus entries) confirm tcpdump-related fixes and ...

CVE-2005-1280

CVE-2005-1280 affects tcpdump 3.9.1 and earlier, where the rsvp_print function can enter an infinite loop when handling a crafted RSVP packet of length 4, causing a denial of service. The vulnerability is publicly documented across multiple sources (e.g., Red Hat/CentOS advisories RHSA-2005-417 a...

CVE-2005-1300

Technical details (affected product/version, root cause, exploitability) are not publicly provided in the connected documents for CVE-2005-1300. Monitor for updates.

CVE-2005-1274

CVE-2005-1274 affects MySQL MaxDB prior to 7.5.00.26. A stack-based buffer overflow occurs in the WebDAV getIfHeader function, exploitable through an HTTP unlock request with a long If parameter. This can allow remote attackers to execute arbitrary code. The vulnerability is documented across mul...

CVE-2005-1281

CVE-2005-1281 affects Ethereal up to version 0.10.10 and earlier, where a remote attacker can trigger a denial of service (infinite loop) by sending a crafted RSVP packet of length 4. This is documented across multiple sources (NVD entry and vendor advisories) and is characterized with a CVSSv2 b...

CVE-2005-1301

CVE-2005-1301 affects nProtect Netizen. The issue is that the update module is not verified to come from an authorized site, enabling remote malicious sites to write arbitrary files and potentially trigger abnormal browser behavior. Affected components: update-fetch mechanism in nProtect Netizen;...