CVE-2005-0517

PeerFTP5 stores sensitive information such as passwords in plaintext in the PeerFTP.ini files, which allows local users to gain privileges...

CVE-2005-0511

The CVE-2005-0511 issue affects vBulletin 3.0.6 and earlier (per CVE listing) where enabling “Add Template Name in HTML Comments” allows remote PHP code execution via nested variables in the template parameter. Connected advisories confirm this flaw is exploitable in practice, with public PoCs/mo...

CVE-2005-0517

The CVE-2005-0517 entry relates to PeerFTP_5: sensitive data (passwords) stored in plaintext in PeerFTP.ini, enabling local users to gain privileges. The available documents confirm the root cause as plaintext credential storage and local-privilege impact. No explicit patch/version details or exp...

CVE-2005-0519

ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut .LNK file, using SITE UNZIP to extract the .LNK file onto the server, then accessing the file, a different vulnerability than CVE-2005-0520...

CVE-2005-0523

Format string vulnerability in ProZilla 1.3.7.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the Location header...

CVE-2005-0518

Affected software: eXeem 0.21. Vulnerability: Credentials (proxy_user and proxy_password) are stored in plaintext in the Exeem registry key, enabling local users to gain privileges. Root cause: Insecure storage of sensitive credentials within the application’s registry entries. Impact: Local priv...

CVE-2005-0523

ProZilla: format-string vulnerability in Location header affecting 1.3.7.3 and earlier that enables remote code execution. Debian/DSA-719-1 fixes in prozilla available (1.3.7.4-1 and related) and advisories recommend upgrading.

CVE-2005-0514

Cross-site scripting XSS vulnerability in Verity Ultraseek before 5.3.3 allows remote attackers to inject arbitrary HTML and web script via search parameters...

CVE-2005-0516

CVE-2005-0516 affects the Twiki ImageGalleryPlugin (ImageGalleryPlugin.pm). The vulnerability is a remote command-injection flaw exposed via certain thumbnail-generation commands, potentially allowing an attacker to execute arbitrary commands on the server. Connected sources corroborate a shell-c...

CVE-2005-0518

eXeem 0.21 stores sensitive information such as passwords in plaintext in the Exeem registry key, which allows local users to gain privileges via the proxyuser and proxypassword values...

CVE-2005-0521

CVE-2005-0521 affects SendLink 1.5. The issue arises because the product stores sensitive information—possibly passwords—in plaintext within the data.eat file, enabling local users to gain privileges. The available documentation does not disclose exploit vectors, in-the-wild exploitation, or conc...

CVE-2005-0513

PHP remote file inclusion vulnerability in mailautocheck.php in the Email This Entry add-on for pMachine Pro 2.4, and possibly other versions including pMachine Free, allows remote attackers to execute arbitrary PHP code by directly requesting mailautocheck.php and modifying the pmpath parameter ...

SUSE-SA:2005:008: squid

The remote host is missing the patch for the advisory SUSE-SA:2005:008 squid. Squid is an Open Source web proxy. A remote attacker was potentially able to crash the Squid web proxy if the logfqdn option was set to 'on' and the DNS replies were manipulated. This is tracked by the Mitre CVE ID...

CVE-2005-0504

CVE-2005-0504 is a buffer overflow in the MoxaDriverIoctl function of the MOXA serial driver (moxa.c) in Linux 2.2.x, 2.4.x, and 2.6.x prior to 2.6.22. This vulnerability could allow a local unprivileged user to execute arbitrary code via a modified length value. The CVE is referenced in multiple...

CVE-2005-0510

The CVE-2005-0510 issue affects the daemon for fallback-reboot and allows a denial of service (daemon exit) in versions prior to 0.995, possibly related to verbose debug messages when the daemon is not attached to a tty. The provided documents confirm the vulnerability description but do not supp...

CVE-2005-0509

CVE-2005-0509 : The connected documents confirm a vulnerability in the Mono 1.0.5 implementation of ASP.NET (.Net) where Unicode representations for ASCII fullwidth characters (e.g., that are converted to normal ASCII like ">" and "

CVE-2005-0535

Cross-site request forgery CSRF vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users...

CVE-2005-0258

CVE-2005-0258 is a directory traversal vulnerability in phpBB 2.0.11 (and possibly later versions) affecting the avatar handling paths when Gallery avatars are enabled. The issue resides in the code paths for usercp_avatar.php and usercp_register.php , where remote input can be manipulated with “...

CVE-2005-0510

The daemon for fallback-reboot before 0.995 allows attackers to cause a denial of service daemon exit, possibly related to verbose debug messages when the daemon is not on a tty...

CVE-2005-0259

CVE-2005-0259 affects phpBB 2.0.11 (and possibly other versions) where enabling remote avatars and avatar uploading allows local users to read arbitrary files by providing both a local and remote avatar location and setting the “Upload Avatar from a URL:” field to reference the target file. Root ...