10535 matches found
Microsoft Windows Kernel Vulnerability
Overview A privilege elevation vulnerability exists in the way that the Windows' kernel processes certain access requests. This vulnerability could allow a logged on user to take complete control of the system. Description A locally authenticated user could potentially exploit a vulnerability in...
Moderate: Red Hat Security Advisory: dhcp security update
An updated dhcp package that fixes a string format issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcp package provides the ISC Dynamic Host Configuration Protocol DHCP server and...
CVE-2005-1051
CVE-2005-1051 affects PunBB 1.2.4: a SQL injection in profile.php via the id parameter in the change_email action. The vulnerability requires an authenticated remote user and allows arbitrary SQL execution, with reported potential for modification of database queries and administrative access. Do...
CVE-2005-1085
CVE-2005-1085 : The vulnerability is a cross-site scripting (XSS) issue in the aeDating 3.2 control panel that allows remote attackers to inject arbitrary web script or HTML. Connected sources (NVD, Red Hat, CVE listings) reiterate the same description without providing technical details such as ...
CVE-2005-1079
The CVE-2005-1079 entry describes a SQL injection in zOOm Media Gallery 2.1.2 through the catid parameter in index.php, allowing remote attackers to execute arbitrary SQL commands. Affected software: zOOm Media Gallery 2.1.2 (index.php vulnerability in catid). Root cause: unsafely concatenated us...
CVE-2005-1083
CVE-2005-1083 concerns index.php in aeDating 3.2, where an attacker can remotely include arbitrary files via the skin parameter. This is a plain file inclusion vulnerability and results in arbitrary file inclusion. Context from multiple sources (NVD/Red Hat/CVE records) confirms the affected prod...
CVE-2005-1048
CVE-2005-1048 relates to a SQL injection in PostNuke 0.760 RC3, where the sid parameter in modules.php can be exploited remotely to run arbitrary SQL statements. The affected software is PostNuke (version 0.760 RC3 as cited; vendor reportedly could not reproduce issues for 0.760 RC3 or 0.750). Th...
CVE-2005-1052
The vulnerability (CVE-2005-1052) affects Microsoft Outlook 2003 and Outlook Web Access 2003, where From header display fails to correctly render comma-separated addresses. This could enable remote email spoofing since the From field may appear to originate from a different address. Root cause: i...
CVE-2005-1042
The CVE-2005-1042 entry corresponds to an integer overflow in exif_process_IFD_TAG within PHP’s exif.c (pre-4.3.11), enabling possible remote code execution via an crafted IFD tag with a negative byte count. Connected records corroborate that PHP4/Exif-related components were affected and that mu...
CVE-2005-1050
The modload op in the Reviews module for PostNuke 0.760-RC3 allows remote attackers to obtain sensitive information via an invalid id parameter, which reveals the path in a PHP error message...
CVE-2005-1078
CVE-2005-1078 affects XAMPP 1.4.x with multiple default or null passwords. The underlying issue is default credentials in the XAMPP installation, allowing an attacker to gain privileges (attack vector: network; authentication: none; impact: partial confidentiality, integrity, and availability). T...
CVE-2005-1078
XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges...
CVE-2005-1130
Cross-site scripting XSS vulnerability in index.php in Pinnacle Cart allows remote attackers to inject arbitrary web script or HTML via the pg parameter...
CVE-2005-1067
CVE-2005-1067 describes a local privilege escalation in the Access_user Class prior to version 1.75, where an attacker can gain access as another user using the password “new.” The connected documents confirm this vulnerability but do not provide vendor/product specifics, affected versions beyond...
CVE-2005-1055
CVE-2005-1055 (TowerBlog): TowerBlog 0.6 and earlier stores the login data file under the web root, enabling remote access to the file via a direct request to the _dat/login path. This exposes MD5 checksums of usernames and passwords, constituting a partial confidentiality impact. The connected r...
CVE-2005-1084
The CVE describes an SQL injection in aeDating 3.2 involving sdating.php where the event parameter can be exploited by remote attackers to execute arbitrary SQL commands. Affected component: sdating.php within aeDating 3.2. Root cause: improper handling/sanitization of the event parameter leading...
CVE-2005-1080
The CVE-2005-1080 entry concerns a directory traversal vulnerability in the jar utility of the Java Archive Tool (Jar) used by J2SE SDK 1.4.2/1.5 and OpenJDK. The underlying issue allows a remote attacker to create or overwrite arbitrary files via a .. sequence in filenames stored inside a .jar f...
CVE-2005-1072
The CVE-2005-1072 entry describes a Cross-site Scripting (XSS) vulnerability in PunBB versions prior to 1.2.5, allowing remote attackers to inject arbitrary web script or HTML. The description explicitly states the affected product and the vulnerability type, with the impact limited to injection ...
CVE-2005-1059
CVE-2005-1059 affects Linksys WET11 1.5.4. The vulnerability allows remote attackers to change the device password without providing the original password by sending data to changepw.html, indicating an authentication/authorization weakness. The provided sources describe the exploit scenario and ...