CVE-2005-1157

CVE-2005-1157 affects Firefox < 1.0.3, Mozilla Suite

CVE-2005-1167

Technical details about CVE-2005-1167 are not publicly provided in the supplied documents. The materials only note that Musicmatch 10.00.2047 and earlier store logs in Program Files; no affected versions, exploit info, or fixes are listed. Monitor for updates.

CVE-2005-1154

CVE-2005-1154 affects Firefox before 1.0.3 and Mozilla Suite before 1.7.7. A vulnerable global scope in the browser allows a malicious page to set a variable in the target domain, which is executed when the user visits that domain, enabling remote script execution in the context of the affected s...

CVE-2005-1159

CVE-2005-1159 affects Mozilla/Firefox: the native implementations of InstallTrigger and related JS access paths do not properly verify object types, allowing the JavaScript interpreter to run at an incorrect memory address. This can cause an application crash (DoS) and, in the worst case, may ena...

SUSE-SA:2005:024: cvs

The remote host is missing the patch for the advisory SUSE-SA:2005:024 cvs. The Concurrent Versions System CVS offers tools which allow developers to share and maintain large software projects. The current maintainer of CVS reported various problems within CVS such as a buffer overflow and memory...

WheresJames Webcam Publisher Beta 2.0.0014 Remote Buffer Over

Exploit for unknown platform in category remote exploits ================================================================= WheresJames Webcam Publisher Beta 2.0.0014 Remote Buffer Overflow ================================================================= / WheresJames Webcam Publisher Beta 2.0.00...

[Full-disclosure] SUSE Security Announcement: cvs (SUSE-SA:2005:024)

-----BEGIN PGP SIGNED MESSAGE----- SUSE Security Announcement Package: cvs Announcement-ID: SUSE-SA:2005:024 Date: Monday, Apr 18st 2005 13:30 MEST Affected products: 8.2, 9.0, 9.1, 9.2, 9.3 SUSE CORE 9 for x86 SuSE Linux Enterprise Server 8, 9 UnitedLinux 1.0 School-Server 1 Open-Enterprise-Serv...

Solaris 8 (sparc) : 116950-15

SunOS 5.8: ufs patch. Date this patch was last updated by Sun : Nov/09/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit...

Solaris 8 (x86) : 116951-15

SunOS 5.8x86: ufs patch. Date this patch was last updated by Sun : Nov/09/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

ocean12_xss_and_sql_inj.txt

Content-type: Multipart/Alternative; boundary="Alt-Boundary-17843.14003556" --Alt-Boundary-17843.14003556 Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Title: Ocean12 Membership Manager Pro : XSS and Sql injection Risk: High Date: 5/04/2005 Vendor:...

comersusv6.txt

--Alt-Boundary-27163.23868601 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Content-description: Mail message body Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Title: Comersus v6 Shopping Cart Sever Script injection Risk: High...

CVE-2005-1138

CVE-2005-1138 refers to an unknown vulnerability in the WebMail component of Kerio MailServer prior to 6.0.9 that can cause a denial of service via certain e‑mail messages. Multiple sources (NVD, CVE List, and Nessus plugin) describe it as a resource exhaustion/CPU consumption issue when malforme...

CVE-2005-1118

CVE-2005-1118 describes a cross-site scripting (XSS) vulnerability in IISWebAgentIF.dll of the RSA Authentication Agent for Web 5.2. The flaw allows remote attackers to inject arbitrary web script or HTML via the postdata parameter. The CVE entry lists the affected product as RSA Authentication A...

CVE-2005-1124

CVE-2005-1124 affects Solaris 7–9 where the libgss Generic Security Services Library is vulnerable. The issue allows local users to gain privileges by loading their own GSS-API, with partial impact to confidentiality, integrity, and availability (per CVSS). The exploitation status and concrete fi...

CVE-2005-1117

CVE-2005-1117 concerns All4WWW-Homepagecreator 1.0a, where index.php is vulnerable to PHP remote file inclusion via manipulation of the site parameter to reference a remote URL. The underlying issue is unsafe inclusion of external PHP code, enabling arbitrary code execution on the server. The NVD...

CVE-2005-1109

CVE-2005-1109 affects JunkBuster (before 2.0.2-r3): the URL filtering fails, allowing remote attackers to cause an application crash (DoS) and possibly execute arbitrary code via heap corruption. Remediation: upgrade to 2.0.2-r3 or later, per public descriptions. Exploitation details are not prov...

CVE-2005-1150

The CVE-2005-1150 entry describes an unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier when running on Windows, which can allow an attacker to cause a denial of service (hang). The available connected records corroborate the affected product and Windows-based DoS impact but ...

CVE-2005-1121

CVE-2005-1121 affects Oops! Proxy Server up to version 1.5.23. A format string vulnerability in the my_xlog function (lib.c), triggered via the passwd_mysql and passwd_pgsql authentication modules, may allow an attacker to execute arbitrary code remotely by crafting a URL. The CVSS v2 base score ...

CVE-2005-1108

JunkBuster 2.0.2-r2 in single-threaded mode is affected by CVE-2005-1108. The vulnerability allows remote attackers to overwrite the referrer field in HTTP requests by sending a crafted request, enabling partial integrity impact as described in the CVE entry. The linked OpenVAS entries and NVD re...

CVE-2005-1142

CVE-2005-1142: Heap-based buffer overflow in GOCR 0.40’s readpgm (pnm.c) when not using netpbm; a specially crafted P3 PNM file with more data than implied by width/height allows remote code execution. Severity is high (CVSS v2 base 7.5); exploitation status is not detailed in the provided docume...