10535 matches found
CVE-2005-0543
Cross-site scripting XSS vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via 1 the strServer, cfgBgcolorOne, or strServerChoice parameters in selectserver.lib.php, 2 the bgcolor or rowno parameters in displaytbllinks.lib.php, the leftfontfamily...
CVE-2005-0531
CVE-2005-0531 refers to a bug in the Linux kernel (2.6.10 and 2.6.11 before 2.6.11-rc4) where the atm_get_addr function in addr.c could be triggered by negative length arguments, allowing a local user to overwrite substantial kernel memory. The issue stems from insufficient input validation in th...
CVE-2005-0160
The CVE-2005-0160 issue concerns the unace library’s handling of ACE archives, where multiple buffer overflows in the unpacking/extraction logic (and a vulnerability related to very long command-line arguments) can enable remote code execution. Several connected entries confirm a vulnerability in...
CVE-2005-0538
Directory traversal vulnerability in 1 GinpPictureServlet.java and 2 PicCollection.java in ginp Java Photo Gallery Web Application before 0.22 allows remote attackers to read arbitrary files...
CVE-2005-0533
Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with long header file names that modify pointers within a structure...
CVE-2005-0535
Cross-site request forgery CSRF vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users...
CVE-2005-0542
The CVE-2005-0542 entry concerns Cyclades AlterPath Manager (APM) Console Server 1.2.1. The flaw allows local privilege escalation by setting the adminUser parameter to true in saveUser.do. No exploitation details or patch/version remediation are provided in the connected documents; exploitation ...
CVE-2005-0541
The CVE-2005-0541 issue affects Cyclades AlterPath Manager (APM) Console Server 1.2.1. The vulnerability is in consoleConnect.jsp, where an attacker can modify the consolename parameter to connect to arbitrary consoles. The NVD entry lists a high base score of 7.5 (NETWORK, LOW complexity, no aut...
CVE-2005-0537
CVE-2005-0537: Multiple SQL injection vulnerabilities in page.php of iGeneric (iG) Shop 1.2 allow remote attackers to inject arbitrary SQL via the parameters cats, l_price, or u_price. The connected records also describe a related SQL injection in iG Shop 1.4 (CVE-2007-2717) via the type_id[] par...
CVE-2005-0530
Signedness error in the copyfromreadbuf function in ntty.c for Linux kernel 2.6.10 and 2.6.11rc1 allows local users to read kernel memory via a negative argument...
CVE-2005-0529
CVE-2005-0529 concerns Linux kernel versions 2.6.10 and 2.6.11rc1-bk6, where proc_file_read and locks_read_proc use mismatched size types for offsets, causing a heap-based buffer overflow when a signed comparison yields negative values used in a positive context. Several connected advisories conf...
CVE-2005-0538
Technical details about CVE-2005-0538 are not publicly available in the provided connected documents. Current entries reiterate the directory-traversal description but do not specify affected versions beyond 0.22 or remediation. Monitor for official updates.
CVE-2005-0540
Technical details about CVE-2005-0540 are not publicly available in the provided connected documents. Monitor for updates from official advisories.
CVE-2005-0539
Unknown vulnerability in IBM Hardware Management Console HMC before 4.4 for POWER5 servers allows local users to gain privileges, related to the Guided Setup Wizard...
CVE-2005-0529
Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the procfileread and locksreadproc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context...
CVE-2005-0544
phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server via direct requests to 1 sqlvalidator.lib.php, 2 sqlparser.lib.php, 3 selecttheme.lib.php, 4 selectlang.lib.php, 5 relationcleanup.lib.php, 6 headermetastyle.inc.php, 7 getforeign.lib.php, 8 displaytbllinks.lib.php, 9...
CVE-2005-0535
Cross-site request forgery CSRF vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users...
CVE-2005-0535
MediaWiki is affected by a CSRF vulnerability (CVE-2005-0535) in 1.3.x prior to 1.3.11 and 1.4 beta prior to 1.4 RC1, allowing remote attackers to perform actions as authenticated users. The issue is documented across multiple sources (NVD entry, Gentoo GLSA-200502-33, and related advisories), wi...
CVE-2005-0161
CVE-2005-0161 concerns unace 1.2b, with confirmed issues in multiple advisories. The vulnerability allows directory traversal via ACE archives containing sequences such as "../" or absolute pathnames, potentially enabling overwriting arbitrary files. Some sources also describe buffer overflows du...