10535 matches found
CVE-2005-3348
CVE-2005-3348 is a HTTP Response Splitting vulnerability in phpSysInfo (2.4 and earlier) used by phpGroupWare (0.9.16 and earlier) and eGroupWare (before 1.0.0.009). Exploitation via CRLF sequences in the charset parameter can cause web content spoofing and cache poisoning. OpenVAS entries (and D...
CVE-2005-3347
CVE-2005-3347 describes multiple directory traversal flaws in phpSysInfo 2.4 and earlier, impacting phpSysInfo itself and also affecting phpgroupware 0.9.16 and earlier, and egrouwpware prior to 1.0.0.009. The vulnerabilities allow remote attackers to include arbitrary files by supplying dot-dot ...
CVE-2005-3662
The CVE-2005-3662 issue affects netpbm’s pnmtopng utility. A specific off-by-one/buffer overflow occurs when converting 256-color PNM files, particularly with the -alpha option, which can crash pnmtopng and may allow arbitrary code execution according to multiple references. Affected products inc...
[Full-disclosure] [ GLSA 200511-15 ] Smb4k: Local unauthorized file access
Gentoo Linux Security Advisory GLSA 200511-15 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
KLA10379 ACE vulnerability in Veritas NetBackup Enterprise Server
A buffer overflow was found in Veritas NetBackup Enterprise Server. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packet. Original advisories Symantec bulletin Related products...
CVE-2005-3646
Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in 1 logout.php and 2 index.php...
CVE-2005-3644
PNPGetDeviceList upnpgetdevicelist in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service memory consumption via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and ...
CVE-2005-3648
Multiple SQL injection vulnerabilities in the getrecord function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 category.php and 2 info.php...
CVE-2005-3644
CVE-2005-3644 describes a memory exhaustion/DoS condition in the Windows Plug and Play (PnP) service. The issue arises in UPnP handling via RPC calls (PNP_GetDeviceList) in Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, where a remote attacker can request a large output bu...
CVE-2005-3650
The CVE-2005-3650 entry concerns the CodeSupport.ocx ActiveX control used by Sony to uninstall First4Internet XCP DRM. The vulnerability arises because the control’s “safe for scripting” setting enables remote attackers to call vulnerable methods (e.g., RebootMachine, IsAdministrator, ExecuteCode...
CVE-2005-3649
CVE-2005-3649 affects Moodle 1.5.2, where the script jumpto.php can be abused to redirect users to arbitrary external sites via the jump parameter. The issue is a server-side redirect vulnerability that can be triggered remotely, leading to potential phishing or user redirection scenarios. The pr...
CVE-2005-3645
CVE-2005-3645 affects phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions. The issue allows remote disclosure of the application installation path and other sensitive information via direct requests to create.php, and (if display_errors is enabled) to lib-updates.inc.php, lib-targetstats.i...
CVE-2005-3646
CVE-2005-3646 concerns multiple SQL injection flaws in lib-sessions.inc.php of phpAdsNew and phpPgAds 2.0.6 (and earlier) . The vulnerabilities allow remoto attackers to inject SQL via the sessionID parameter in both logout.php and index.php . The issue is documented with a high impact (CVSS base...
CVE-2005-3648
CVE-2005-3648 (Moodle 1.5.2) Multiple SQL injection vulnerabilities exist in the get_record function of datalib.php, allowing remote attackers to inject arbitrary SQL via the id parameter in category.php and info.php. Root cause is improper input handling in Moodle’s database queries. Documents d...
[SECURITY] [DSA 898-1] New phpgroupware packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 898-1 [email protected] http://www.debian.org/security/ Martin Schulze November 17th, 2005 http://www.debian.org/security/faq -...
DSA-898-1 phpgroupware - programming errors
Bulletin has no description...
gdk security update
CentOS Errata and Security Advisory CESA-2005:810-01 Updated gdk-pixbuf packages that fix several security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The gdk-pixbuf package contains an image loading library used...
CVE-2005-3637
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3530. Reason: This candidate is a duplicate of CVE-2005-3530. Notes: All CVE users should reference CVE-2005-3530 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...