10535 matches found
CVE-2005-0542
saveUser.do in Cyclades AlterPath Manager APM Console Server 1.2.1 allows local users to gain privileges by setting the adminUser parameter to true...
CVE-2005-0540
Cyclades AlterPath Manager APM Console Server 1.2.1 allows remote attackers to obtain sensitive information via a direct request to the /about.html page...
CVE-2005-0530
CVE-2005-0530 is a signedness error in the copy_from_read_buf function in n_tty.c of the Linux kernel (affected: 2.6.10 and 2.6.11rc1) that allows local users to read kernel memory via a negative argument. The vulnerability is documented across multiple advisories, including Red Hat (RHSA-2005:36...
CVE-2005-0543
Cross-site scripting XSS vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via 1 the strServer, cfgBgcolorOne, or strServerChoice parameters in selectserver.lib.php, 2 the bgcolor or rowno parameters in displaytbllinks.lib.php, the leftfontfamily...
CVE-2005-0547
Unknown vulnerability in ftpd on HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23 allows remote authenticated users to gain "unauthorized access to files."...
CVE-2005-0600
Cisco devices running Application and Content Networking System ACNS 5.0, 5.1 before 5.1.13.7, or 5.2 before 5.2.3.9 allow remote attackers to cause a denial of service bandwidth consumption via "crafted IP packets" that are continuously forwarded...
CVE-2005-0534
CVE-2005-0534 involves multiple XSS vulnerabilities in MediaWiki 1.3.x (before 1.3.11) and 1.4 beta (before 1.4rc1) allowing remote attackers to inject arbitrary script. Connected sources corroborate remote-exploitability and browser-context impact (I = PARTIAL). The Gentoo GLSA 200502-33 specifi...
CVE-2005-0533
CVE-2005-0533: Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI prior to 7.510, used across multiple Trend Micro products. An overly long ARJ header file name can overrun a buffer in the ARJ parsing path, enabling remote code execution when a crafted ARJ archive is scanned. Affec...
OFF2000: Office Programs Can Browse Restricted Drives (302753)
The remote host is running a version of Microsoft Office that contains a security flaw that could allow a user to browse restricted drives. An attacker could exploit this flaw to gain access to files he would otherwise not have access to. C Tenable Network Security, Inc. include"compat.inc"; if...
Cyrus IMAP Server < 2.2.11 Multiple Remote Overflows
According to its banner, the remote Cyrus IMAP server is affected by off-by-one errors in its imapd annotate extension and its cached header handling which can be triggered by an authenticated user, a buffer overflow in fetchnews that can be triggered by a peer news admin, and an unspecified...
CVE-2005-0512
The CVE-2005-0512 entry describes a remote file inclusion in Mambo Open Source 4.5.2, via Tar.php, where the mosConfig_absolute_path parameter can be altered to reference a URL on a remote server containing PHP code. This allows an attacker to execute arbitrary PHP code on the affected web server...
CVE-2005-0518
eXeem 0.21 stores sensitive information such as passwords in plaintext in the Exeem registry key, which allows local users to gain privileges via the proxyuser and proxypassword values...
CVE-2005-0513
The CVE-2005-0513 issue is a PHP remote file inclusion in the Email This Entry add-on for pMachine Pro 2.4 (and possibly other pMachine Free variants) via mail_autocheck.php. An attacker can set pm_path to a URL containing PHP code, enabling arbitrary code execution on the remote server. The rela...
CVE-2005-0520
ArGoSoft FTP Server before 1.4.2.8 allows remote attackers to read arbitrary files via shortcut .LNK files in the SITE COPY command, a different vulnerability than CVE-2005-0519...
CVE-2005-0522
Chat Anywhere 2.72a stores sensitive information such as passwords in plaintext in the .INI file for a chatroom, which allows local users to gain privileges...
CVE-2005-0520
CVE-2005-0520 affects ArGoSoft FTP Server prior to version 1.4.2.8. The vulnerability arises from handling shortcut (.LNK) files in the SITE COPY command, enabling remote attackers to read arbitrary files on the server (confidentiality and integrity impacts reported as high). The connected Nessus...
CVE-2005-0512
PHP remote file inclusion vulnerability in Tar.php in Mambo 4.5.2 allows remote attackers to execute arbitrary PHP code by modifying the mosConfigabsolutepath parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2004-1693...
CVE-2005-0516
The ImageGalleryPlugin ImageGalleryPlugin.pm in Twiki allows remote attackers to execute arbitrary commands via certain commands that generate thumbnails...