CVE-2005-0456

Opera 7.54 and earlier is vulnerable to a data: URI handling issue where base64-encoded binary data is not validated, allowing a malicious site to obscure the URL in the download dialog and potentially lead to arbitrary code execution. Connected advisories (Gentoo GLSA 200502-17, OpenVAS entries)...

CVE-2005-0462

MercuryBoard is affected (versions 1.0.x and 1.1.x) by a cross-site scripting (XSS) vulnerability that allows remote injection of HTML/script via the f parameter. The OpenVAS entry also notes multiple vulnerabilities including XSS, SQL injection, and path disclosure in MercuryBoard. The CVE-2005-...

CVE-2005-0460

CVE-2005-0460 affects MercuryBoard (Web PHP bulletin board) versions 1.0.x and 1.1.x. The issue arises in index.php via the debug parameter, allowing remote attackers to obtain sensitive information. Public references indicate multiple feeds about MercuryBoard vulnerabilities, but the provided do...

CVE-2005-0253

CVE-2005-0253 affects BibORB, specifically 1.3.2 and earlier. A directory traversal flaw in index.php (database_name parameter) allows remote attackers with Delete action rights to delete arbitrary files on the host where BibORB runs. Related disclosures (Full-Disclosure advisory, PacketStorm not...

CVE-2005-0457

CVE-2005-0457 affects Opera on Gentoo Linux (versions 7.54 and earlier) due to an insecure plugin path that allows local privilege escalation by placing malicious libraries in the PORTAGE_TMPDIR. Connected sources (Gentoo GLSA 200502-17) reiterate this as a vulnerability in Opera’s handling of pl...

CVE-2005-0411

CVE-2005-0411 affects CitrusDB up to version 0.3.6 (and earlier). The vulnerability is a directory-traversal in index.php where the GET parameter load can include arbitrary local PHP files via .. sequences, enabling remote attackers and local users to include PHP files. The issue is documented wi...

CVE-2005-0176

The shmctl function in Linux 2.6.9 and earlier allows local users to unlock the memory of other processes, which could cause sensitive memory to be swapped to disk, which could allow it to be read by other users once it has been released...

CVE-2005-0105

CVE-2005-0105 affects the typespeed package (0.4.1 and earlier). Debian’s DSA-684-1 notes a local format-string vulnerability that could allow a local attacker to execute arbitrary code as the games group; a fix is provided in 0.4.1-2.3 for woody, with updates planned for sid. OpenVAS/NVD referen...

CVE-2005-0450

CVE-2005-0450 : The vulnerability affects Sami HTTP Server 1.0.5. A directory traversal flaw lets remote attackers read arbitrary files by crafting HTTP requests containing ".." sequences or their URL-encoded form "%2e%2e". The incident is documented with a NVD CVSS v2.0 base score of 5.0 (Medium...

CVE-2005-0454

Vulnerability summary (CVE-2005-0454) : DCP-Port al 6.1.1 and earlier contain multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands. The issues are triggered via (1) index.php parameters lcat, doc, or uid, and (2) forums.php parameters mid or bid. The connecte...

CVE-2005-0410

CVE-2005-0410 affects CitrusDB up to version 0.3.6, where importcc.php is vulnerable to SQL injection via fields in uploaded CSV data. This allows remote attackers to inject data into the database through crafted CSV files. Evidence from multiple sources confirms the vulnerability exists in Citru...

CVE-2005-0453

Lighttpd 1.3.7 and earlier are affected by a vulnerability in buffer_urldecode that mishandles control characters, allowing a remote attacker to disclose the source code of CGI/FastCGI scripts via a URL containing a trailing %00 after the file extension. The issue is an information disclosure aff...

CVE-2005-0449

The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service kernel crash or bypass firewall rules via crafted packets, which are not properly handled by the skbchecksumhelp function...

CVE-2005-0176

The CVE-2005-0176 issue affects the Linux kernel (2.6.9 and earlier) where shmctl-based locking of System V shared memory could be misused by local unprivileged users to unlock memory from other processes. This could cause sensitive memory contents to be swapped to disk and read by others after r...

CVE-2005-0362

awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 "pluginmode", 2 "loadplugin", or 3 "noloadplugin" parameters...

CVE-2005-0449

Technical details beyond the CVE description are not provided in the connected documents; monitor for updates.

CVE-2005-0177

nlsascii.c in Linux before 2.6.8.1 uses an incorrect table size, which allows attackers to cause a denial of service kernel crash via a buffer overflow...

CVE-2005-0451

CVE-2005-0451 affects Sami HTTP Server 1.0.5. The vulnerability allows remote denial of service when processing an HTTP request containing two CRLF sequences, which triggers a NULL dereference. The issue is related to HTTP request handling and results in availability impact. No remediation or fix...

CVE-2005-0430

The CVE-2005-0430 entry covers the Quake 3 engine (as used in multiple game packages). The issue arises from processing a long infostring, which can allow remote attackers to cause a denial of service (shutdown/crash of the game server) potentially via a buffer overflow. The description specifies...

CVE-2005-0011

CVE-2005-0011 affects the KDE Education KDEedu KStars integration’s fliccd, where fliccd is installed as setuid root. The vulnerability stems from stack-based buffer overflows in fliccd, enabling root code execution via that binary when running with elevated privileges. Documents consistently des...