CVE-2005-0693

Buffer overflow in JoWood Chaser 1.50 and earlier allows remote attackers to cause a denial of service client or server crash and execute arbitrary code via a long nickname...

CVE-2005-0353

CVE-2005-0353 affects SafeNet Sentinel License Manager (Sentinel LM) with the lservnt service (7.2.0.2). A remote attacker can overflow a buffer by sending large data to UDP port 5093, potentially executing arbitrary code. Public references show a Metasploit module (SentinelLM UDP Buffer Overflow...

CVE-2005-0689

The Includer project (The Includer, includer.cgi) contains a remote command execution vulnerability (CVE-2005-0689). The flaw allows an attacker to execute arbitrary shell commands by injecting shell metacharacters in the URL or in the template parameter, enabling a remote attacker to run command...

CVE-2005-0686

Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote attackers to execute arbitrary code via a large image file that is used as a background...

CVE-2005-0099

The SDL port of abuse abuse-SDL before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files...

CVE-2005-0626

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...

CVE-2005-0685

Multiple access validation errors in OutStart Participate Enterprise PE allow remote attackers to 1 browse arbitrary directory trees by modifying the rootFolder parameter to displaynavigator.jsp, 2 rename arbitrary directory objects by modifying the selectedObject parameter to renamepopup.jsp, 3...

CVE-2005-0696

CVE-2005-0696 refers to a heap-based buffer overflow in ArGoSoft FTP Server triggered by a DELE command with a very long argument (reported on versions including 1.4.2.8 and later 1.4.3.5). The vulnerability allows a remote authenticated user to potentially execute arbitrary code. The issue is de...

CVE-2005-0686

CVE-2005-0686 affects mlterm versions 2.5.0 through 2.9.1 when compiled with gtk/gdk-pixbuf support. The issue is an integer overflow triggered by a specially crafted large background image, enabling remote code execution with user privileges. Public reports/entries consistently describe the vuln...

CVE-2005-0691

The CVE-2005-0691 issue is a PHP remote file inclusion in SocialMPN’s modules.php (article mode). The name parameter can reference a remote URL to execute arbitrary PHP code, enabling remote code execution on the server. The document set does not specify affected versions or a patch. NVD data lis...

CVE-2005-0664

CVE-2005-0664 concerns a buffer overflow in libexif 0.6.9 due to improper validation of EXIF tag structures, enabling a crafted JPEG image to cause an application crash and potentially allow remote code execution. Publicly documented impact is a crash and possible arbitrary code execution, with e...

CVE-2005-0109

Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic key...

CVE-2005-0723

Cross-site scripting XSS vulnerability in the jumpmenu function in functions.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL parameters, which is not properly cleansed in the $pageurl variable, as demonstrated using pafiledb.php...

CVE-2005-0687

Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service memory consumption and possibly execute arbitrary code via format string specifiers in a reply address, which is not properly handled when printing the header...

CVE-2005-0697

CopperExport XP_Publish.PHP SQL Injection (CVE-2005-0697) affects CopperExport 0.2.1 via the xp_publish.php process_picture function. The vulnerability arises from unsanitized input used in a SQL query, potentially allowing an attacker to inject arbitrary SQL commands via the title, caption, or k...

CVE-2005-0626

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...

CVE-2005-0725

SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections wfsections 1.07 allows remote attackers to execute arbitrary SQL commands via the articleid parameter to article.php...

CVE-2005-0696

Buffer overflow in ArGoSoft FTP Server 1.4.2.8 allows remote authenticated users to execute arbitrary code via a long DELE command. NOTE: this issue was later reported to also affect 1.4.3.5...

CVE-2005-0695

The password recovery feature forgotpassword.asp in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field...

CVE-2005-0695

The CVE-2005-0695 issue affects Hosting Controller 6.1 Hotfix 1.7 and earlier, where the forgotpassword.asp password recovery flow can let a remote attacker infer the owner's e-mail address by submitting part of a domain in the login ID field. The underlying vulnerability is described as partial ...