10535 matches found
CVE-2005-0577
Format string vulnerability in DNA MKBold-MKItalic 0.061 and earlier allows remote attackers to execute arbitrary code via crafted BDF font files...
CVE-2005-0572
index.php in phpWebSite 0.10.0 and earlier allows remote attackers to obtain sensitive information via an invalid SEAsearchmodule parameter, which reveals the path in a PHP error message...
CVE-2005-0568
CVE-2005-0568 affects Soldier of Fortune II 1.03 Gold. The issue is a remote denial of service caused by processing a large cl_guid value, leading to an invalid pointer dereference and an application crash. The available sources document the vulnerability class and its impact as a crash, but do n...
CVE-2005-0579
nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to access the X server without X authentication...
CVE-2005-0567
CVE-2005-0567 affects phpMyAdmin 2.6.1 with multiple remote file inclusion vulnerabilities. An attacker can modify the theme parameter to phpmyadmin.css.php or the cfg[Server][extension] parameter to database_interface.lib.php to reference a URL on a remote server, enabling execution of arbitrary...
CVE-2005-0569
PunBB 1.2.1 is affected by multiple SQL injection vulnerabilities (CVE-2005-0569) allowing remote attackers to execute arbitrary SQL commands via the language parameter in register.php, the change email feature in profile.php, or the posts/topics parameters in moderate.php. This aligns with the N...
CVE-2005-0570
PunBB 1.2.1 contains a vulnerability in profile.php that allows remote attackers to cause a denial of service (account lockout) by setting a user’s password to NULL. This is the concrete vulnerability described in CVE-2005-0570 across sources (NVD/NIST and CVE list). The connected documents also ...
CVE-2005-0571
PunBB 1.2.1 contains an information-disclosure flaw in admin_loader.php: the plugin parameter allows remote attackers to read arbitrary files. This is a file-read vulnerability (no user authentication required) with a CVSS base score of 5.0 (medium) per NVD, indicating network-remote access and l...
CVE-2005-0572
Summary (CVE-2005-0572) : Affects phpWebSite 0.10.0 and earlier. The vulnerability stems from an invalid SEA_search_module parameter in index.php, which causes a PHP error message that reveals the script path, enabling a remote attacker to disclose sensitive information. The issue is associated w...
CVE-2005-0574
CVE-2005-0574 describes a directory traversal vulnerability in CIS WebServer 3.5.13 that allows remote attackers to read arbitrary files through URL paths containing dot-dot (..) sequences. The vulnerability is documented in multiple sources (NVD, Red Hat, CVE List) with the same description. The...
CVE-2005-0565
The vulnerability CVE-2005-0565 affects phpWebSite 0.10.0 and earlier, where the Announce module lets a remote attacker cause arbitrary PHP execution by setting the Image field to reference a PHP file whose name contains a .gif.php extension. OpenVAS/Nessus/Gentoo GLSA entries corroborate remote ...
CVE-2005-0575
CVE-2005-0575 affects Stormy Studios Knet server (versions 1.04c and earlier). A buffer overflow allows remote attackers to cause a denial of service and potentially execute arbitrary code via a long HTTP GET request. Exploitation details are not provided in the included documents; no patch or re...
CVE-2005-0579
Affected software: nxagent in FreeNX before 0.2.8. Issue: missing handling of an unset XAUTHORITY environment variable. Impact: local users can access the X server without X authentication. Notes: the records do not specify a patch version or remediation steps. If true fixes or mitigations exist,...
CVE-2005-0576
CVE-2005-0576 concerns Solaris 9, specifically the Standard Type Services Framework (STSF) Font Server Daemon (stfontserverd). The vulnerability is described as unknown but allows local users to modify or delete arbitrary files. The available references indicate advisories and vendor notes, but n...
CVE-2005-0571
adminloader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin parameter...
CVE-2005-0566
Summary: Golden FTP Server Pro (goldenftpd) 2.x contains a buffer overflow vulnerability exploitable via a long RNTO command, enabling remote arbitrary code execution. Affected software: Golden FTP Server Pro, goldenftpd, version 2.x. Vulnerability details: Root cause described as a buffer overfl...
CVE-2005-0578
CVE-2005-0578 affects Firefox up to 1.0.0 and Mozilla Suite up to 1.7.5, where a predictable plugin temporary directory filename enables local users to delete arbitrary files via a symlink attack on plugtmp. Root cause: insecure naming of the plugtmp directory. Impact: local privilege/unauthorize...
CVE-2005-0578
Firefox before 1.0.1 and Mozilla Suite before 1.7.6 use a predictable filename for the plugin temporary directory, which allows local users to delete arbitrary files of other users via a symlink attack on the plugtmp directory...
CVE-2005-0577
CVE-2005-0577 affects DNA MKBold-MKItalic up to version 0.06_1. The vulnerability is a format string flaw in the BDF font processing that could allow remote code execution. The OpenVAS and NVD records corroborate the issue; they reference the FreeBSD ports mkbold-mkitalic package as affected. The...