CVE-2005-1046

CVE-2005-1046 is a vulnerability in KDE’s kimgio library used by KDE 3.4.0 (kdelibs/kimgio). A buffer overflow when processing PCX images allows remote attackers to execute arbitrary code. Impact is remote code execution with network access and no user interaction per the CVSS data. The public do...

CVE-2005-1146

NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in the login command in calendar.pl in CalendarScript 3.21 allows remote attackers to inject arbitrary web script or HTML via the username parameter, a different vulnerability than CVE-2005-1145...

CVE-2005-1066

Pine 4.62 and earlier (University of Washington Pine) is affected by a race condition in rpdump that allows local users to overwrite arbitrary files via a symlink attack, leading to Local File Write. Root cause: race window in rpdump during file operations. Impact: potential overwriting of sensit...

CVE-2005-1080

Directory traversal vulnerability in the Java Archive Tool Jar utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. dot dot in filenames in a .jar file...

CVE-2005-1084

SQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to execute arbitrary SQL commands files via the event parameter...

CVE-2005-1074

CVE-2005-1074 : SQL injection in index.php for RadScripts RadBids Gold 2. An attacker can supply the mode parameter to remotely execute arbitrary SQL commands. Affected: RadScripts RadBids Gold 2; vulnerability arises in the index.php handling of mode. CVSSv2 base score 7.5 (HIGH) with network ac...

CVE-2005-1068

CVE-2005-1068 describes a Cross-site scripting (XSS) vulnerability in sCssBoard 1.11 and earlier. The issue allows remote attackers to execute arbitrary Javascript via [url] tags, indicating an input handling flaw that fails to sanitize or validate user-supplied URLs. The documents provide the af...

CVE-2005-1070

CVE-2005-1070 describes a SQL injection in Invision Power Board 1.3.1 Final and earlier, occurring in index.php via the st parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands and is indicated to affect versions up to 1.3.1 Final and earlier; specific impact and ...

CVE-2005-1056

The CVE describes a heap overflow in HP OpenView Network Node Manager (NNM) components affecting versions 6.2–6.4 and 7.01–7.50. Connected Nessus data attributes the flaw to the HP OpenView Topology Manager Daemon, which handles IP discovery/layout. An unauthenticated, remote attacker can send a ...

CVE-2005-1077

CVE-2005-1077 concerns XSS vulnerabilities in XAMPP 1.4.x , allowing remote attackers to inject arbitrary script/HTML via the endpoints cds.php , Guestbook-EN.pl , or phonebook.php . The NVD entry lists a Medium base score (4.3) with network attack vector and no authentication needed, but the doc...

CVE-2005-1054

CVE-2005-1054 affects ModernBill prior to or including 4.3.0, allowing remote PHP code execution via a PHP remote file include through the DIR parameter in news.php when DIR is set to a URL. This is echoed by later related CVEs (e.g., CVE-2008-5060) describing similar PHP RFI vulnerabilities in M...

CVE-2005-1058

Cisco IOS 12.2T, 12.3 and 12.3T contain an ISAKMP/XAUTH processing flaw: if XAUTH attributes in the ISAKMP profile are not fully processed after Phase 1, a remote attacker can bypass XAUTH and proceed to Phase 2 negotiations, potentially gaining access to private resources. Affected functionality...

CVE-2005-1050

CVE-2005-1050 affects PostNuke 0.760-RC3 in the Reviews module’s modload op. The vulnerability allows remote attackers to disclose sensitive information by supplying an invalid id parameter, causing a PHP error message that reveals the path. The NVD entry rates impact as Partial Confidentiality w...

CVE-2005-1073

CVE-2005-1073 describes a directory-traversal vulnerability in RadScripts RadBids Gold 2, where an attacker can read arbitrary files via the read parameter in index.php. The NVD entry lists a 5.0/Medium CVSS v2 base score with network exposure and no authentication, indicating remote access is po...

CVE-2005-1082

CVE-2005-1082: The affected software is AzDGDatingPlatinum version 1.1.0. The issue consists of multiple SQL injection vulnerabilities in view.php (id parameter) and in members/index.php (from parameter). The underlying root cause is SQL injection that allows remote attackers to craft inputs to e...

CVE-2005-0941

OpenOffice.org (1.1.4 and earlier) is affected by CVE-2005-0941 due to a mismatch between 16-bit length values used for memory allocation and 32-bit processing in StgCompObjStream::Load, causing a heap-based buffer overflow via crafted DOC files. This can lead to remote denial of service and pote...

CVE-2005-1081

The CVE-2005-1081 entry describes an XSS vulnerability in AzDGDatingPlatinum version 1.1.0, triggered by the id parameter in view.php. The underlying issue is likely insufficient input sanitization allowing remote attackers to inject arbitrary web script or HTML. Affected component: view.php (id ...

CVE-2005-1047

CVE-2005-1047 concerns a vulnerability in the phpBB 2.0.x up.php file upload mod. The issue is that the upload script does not properly restrict file types, allowing remote authenticated users to upload executable PHP files and subsequently access them from the uploads directory to execute arbitr...

CVE-2005-0390

CVE-2005-0390 affects Axel, a lightweight download accelerator. The issue is a buffer overflow in Axel’s HTTP redirection capability (in conn.c) prior to version 1.0b, which could allow remote attackers to execute arbitrary code. The CVE entry documents a network-facing vulnerability with a base ...

CVE-2005-1065

The vulnerability CVE-2005-1065 affects tetex in Novell Linux Desktop 9. An attacker with local access can determine the existence of arbitrary files via a symlink attack in /var/cache/fonts, enabling partial confidentiality impact without authentication. The common root cause is a symlink handli...