CVE-2005-0650

CVE-2005-0650 : Multiple cross-site scripting vulnerabilities in ProjectBB 0.4.5.1 allow remote injection of arbitrary script/HTML. Affected vectors include (1) the pages parameter to divers.php, (2) the search feature text area, (3) forum name, (4) site name, or (5) the maximum avatar size in th...

CVE-2005-0637

CVE-2005-0637 concerns the copyout functions in locore.s (notably OpenBSD 3.5 and 3.6) which may allow an attacker to exceed certain address boundaries and modify kernel memory. The underlying issue is a boundary/offset handling in these copy routines that can bypass protection checks, leading to...

CVE-2005-0634

Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command...

CVE-2005-0628

CVE-2005-0628 describes multiple cross-site scripting (XSS) vulnerabilities in Forumwa 1.0. The flaws permit remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter in search.php or (2) the body or (3) the subject of a forum message. The vulnerability is associated w...

CVE-2005-0629

The CVE-2005-0629 issue concerns multiple XSS vulnerabilities in profile.php of 427BB 2.2. The vulnerability is triggered by the (1) user or (2) Avatar parameters, allowing remote attackers to inject arbitrary web script or HTML. The NVD entry documents a MEDIUM severity (CVSS v2: AV:N/AC:M/Au:N/...

CVE-2005-0649

Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting XSS protection via "hexadecimal HTML entities."...

CVE-2005-0648

Pixel-Apes SafeHTML (pre-1.3.0) contains vulnerabilities that allow remote attackers to bypass XSS protections via (1) decimal HTML entities or (2) the null byte \x00 symbol. Affected component is SafeHTML prior to version 1.3.0. Impact is HTML/script injection bypass of protections; no other sys...

CVE-2005-0605

scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmapunit value that leads to a buffer overflow...

CVE-2005-0638

xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...

CVE-2005-0627

Qt before 3.3.4 searches the BUILDPREFIX directory, which could be world-writable, to load shared libraries regardless of the LDLIBRARYPATH environment variable, which allows local users to execute arbitrary programs...

CVE-2005-0645

Cross-site scripting XSS vulnerability in show.inc.php in cuteNews 1.3.6 allows remote attackers to inject arbitrary HTML, web script, and PHP code via the 1 CLIENT-IP or 2 X-FORWARDED-FOR header in an HTTP POST request to shownews.php...

CVE-2005-0649

Pixel-Apes SafeHTML prior to version 1.2.1 is vulnerable to bypassing XSS protection via hexadecimal HTML entities. Affected: SafeHTML component (pre-1.2.1). Root cause: input handling allows bypass of HTML entity encoding to defeat XSS protections. Impact: potential remote XSS. Exploitation deta...

CVE-2005-0593

Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure site" lock icon via 1 a web site that does not finish loading, which shows the lock of the previous site, 2 a non-HTTP server that uses SSL, which causes the lock to be displayed when the SSL handshake ...

CVE-2005-0605

The CVE-2005-0605 issue concerns LibXPM’s scan.c where a negative bitmap_unit value can cause a buffer overflow, allowing arbitrary code execution. Connected sources confirm LibXPM involvement and link to patches/advisories; for Solaris SPARC, patch 119063-01 (libXpm patch) is cited as remediatio...

CVE-2005-0641

CVE-2005-0641 affects the CA Unicenter Asset Management Reporter (UAM) 4.0, where a flaw in report templates (fields: name and description) enables cross-site scripting (XSS). The root cause is a vulnerability in how the report template content is handled, allowing remote attackers to inject arbi...

CVE-2005-0633

The CVE-2005-0633 issue affects Trillian 3.0 and Trillian Pro 3.0. It is described as a buffer overflow that allows remote attackers to execute arbitrary code through a crafted PNG image file. The available sources consistently state remote code execution is possible due to the overflow, but do n...

CVE-2005-0630

CVE-2005-0630 affects PBLang 4.63, where an authenticated remote user can read arbitrary files by supplying a full pathname in the orig parameter of sendpm.php (directory traversal). The vulnerability is classified as low risk in NVD (CVSS v2 base score 2.1; LOCAL access, low complexity, partial ...

CVE-2005-0636

The CVE-2005-0636 entry describes a format string vulnerability in Foxmail Server 2.0, exploitable via remote USER command input over the network. The underlying flaw is in format string handling, allowing denial of service (crash) and potentially arbitrary code execution. Documents do not specif...

CVE-2005-0629

Multiple cross-site scripting XSS vulnerabilities in profile.php in 427BB 2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 user or 2 Avatar parameters...

CVE-2005-0632

CVE-2005-0632 concerns PHPNews, an open‑source PHP-based news application. The vulnerability is a remote file include in the script auth.php , allowing an attacker to execute arbitrary PHP code via the path parameter on PHPNews versions 1.2.4 (and possibly 1.2.3). Root cause is a missing validati...