10533 matches found
CVE-2005-2830
CVE-2005-2830 is an information-disclosure vulnerability in Microsoft Internet Explorer 5.01/5.5/6 when using an HTTPS proxy that requires Basic Authentication, causing URLs to be sent in cleartext. The issue is documented in the HTTPS Proxy Vulnerability (CAN-2005-2830) and is addressed by Micro...
CVE-2005-4212
CVE-2005-4212 affects phpCOIN 1.2.2. A directory traversal vulnerability in coin_includes/db.php permits remote attackers to read arbitrary local files by supplying ".." sequences in the $_CCFG[_PKG_PATH_DBSE] variable. This is a server-side path traversal in the PHP include logic, enabling expos...
CVE-2005-4216
The vulnerability CVE-2005-4216 affects Macromedia Flash Media Server 2.0 r1145, specifically the Administration Service (FMSAdmin.exe). It allows remote attackers to trigger a denial-of-service (application crash) by sending a malformed request (one character) to TCP port 1111. The issue is caus...
CVE-2005-4214
CVE-2005-4214 concerns phpCOIN 1.2.2. Affected component: installation/config flow via config.php. Root cause: the _CCFG['_PKG_PATH_DBSE'] variable is not defined, causing an error message that leaks the installation path to remote attackers. Impact: partial disclosure of information (installatio...
CVE-2005-4229
The CVE-2005-4229 entry concerns EveryAuction before or at version 1.53, focusing on the auction.pl component. The vulnerability is an XSS flaw that allows a remote attacker to inject arbitrary web script or HTML through the searchstring parameter. The description notes that the provenance is unk...
CVE-2005-4217
The CVE-2005-4217 issue affects Perl in Apple Mac OS X Server 10.3.9, where privileges are not properly dropped when using the $
CVE-2005-4218
PHPWebThings 1.4 is affected by a SQL injection in forum.php via the msg parameter. The root cause is improper input sanitization in the forum.php handler, enabling an attacker to modify or exfiltrate data through crafted SQL. OpenVAS note indicates that remote attackers could potentially access ...
CVE-2005-4232
Jamit Job Board is affected: SQL injection in index.php via the cat parameter for versions 2.4.1 and earlier. The underlying issue is a vulnerable dynamic SQL path in index.php, allowing remote attackers to execute arbitrary SQL commands. The vendor disputes the issue, and CVE records note that s...
CVE-2005-2827
The CVE-2005-2827 window kernel vulnerability affects Windows NT 4.0 and Windows 2000 (NTOSKRNL.EXE) where a terminating thread’s APC handling can lead to memory corruption and control of kernel execution. Root cause: during thread exit, the APC free loop in PspExitThread and related KiMoveApcSta...
MySQL Auction XSS vuln.
MySQL Auction XSS vuln. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/mysql-auction-xss-vuln.html vendor:mysqlauction.com affected version: 3.0 and prior Product Description: Full featured, MySQL database driven online auction software. Features...
Computer Associates License Service GETCONFIG buffer overflow
Added: 12/14/2005 CVE: CVE-2005-0581 BID: 12705 OSVDB: 14389 Background The License service comes with most Computer Associates products and exchanges license information over ports 10202/tcp and 10203/tcp. Problem A buffer overflow vulnerability exists in the processing of GETCONFIG messages...
US-CERT Technical Cyber Security Alert TA05-347A -- Microsoft Internet Explorer Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Technical Cyber Security Alert TA05-347A Microsoft Internet Explorer Vulnerabilities Original release date: December 13, 2005 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows Microsoft Internet Explorer For more complete information...
Computer Associates License Service GETCONFIG buffer overflow
Added: 12/14/2005 CVE: CVE-2005-0581 BID: 12705 OSVDB: 14389 Background The License service comes with most Computer Associates products and exchanges license information over ports 10202/tcp and 10203/tcp. Problem A buffer overflow vulnerability exists in the processing of GETCONFIG messages...
CVE-2005-3352
Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...
CVE-2005-3352
Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...
CVE-2005-3352
Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...
CVE-2005-3352
The CVE-2005-3352 entry documents a cross-site scripting (XSS) vulnerability in the Apache httpd mod_imap (and mod_imagemap) module. The issue arises from improper handling of the Referer header when using image maps, allowing an attacker to inject arbitrary script or HTML. Affected software is A...
CVE-2005-3352
Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...
[SECURITY] [DSA 920-1] New ethereal packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 920-1 [email protected] http://www.debian.org/security/ Martin Schulze December 13th, 2005 http://www.debian.org/security/faq -...