CVE-2005-3282

CVE-2005-3282 affects Splatt Forum 3.0 to 3.2. The vulnerability allows remote attackers to bypass authentication via unknown vectors, with a CVSS v2 base score of 7.5 (HIGH) and network access/low complexity in the provided data. Affected component is the Splatt Forum authentication mechanism; r...

CVE-2005-3285

CVE-2005-3285 describes a Cross-site scripting (XSS) vulnerability in Comersus BackOffice Plus, specifically in comersus_backoffice_searchItemForm.asp. The issue allows remote attackers to inject arbitrary web script or HTML via the parameters forwardTo1, forwardTo2, nameFT1, or nameFT2. The vuln...

CVE-2005-3292

Affected software: Xeobook 0.93. Vulnerability: multiple cross-site scripting (XSS) vulnerabilities enabling remote attackers to inject arbitrary web script or HTML via Javascript events in tags such as . Impact: script execution in the victim’s browser; no exploit details are provided in the doc...

CVE-2005-3297

CVE-2005-3297 affects OpenWBEM on SuSE Linux 9, with multiple integer overflows identified as the root cause. The vulnerability can allow remote attackers to execute arbitrary code via unknown vectors. The available documents confirm the affected product/component (OpenWBEM) and the platform (SuS...

CVE-2005-3294

CVE-2005-3294 affects TYPSoft FTP Server 1.11 (and 1.10) with Sub Directory Include enabled, enabling remote DoS by sending multiple RETR commands that crash the server. Descriptions across CVE/NVD and multiple advisories/exploits confirm RETR-based denial of service; no remediation/patch details...

CVE-2005-3295

CVE-2005-3295 affects HP-UX B.11.23 on Itanium platforms. The vulnerability is a local denial of service caused by an issue related to the handling of a specific stack size in HP-UX. Exploitation details are not provided in the documents; no active exploit information is stated. Remediation in th...

CVE-2005-3287

CVE-2005-3287 concerns an incomplete blacklist vulnerability in Mailsite Express that allows remote upload of files via attachments with executable extensions (e.g., ASPX) which are not converted to .TXT and can be directly requested from the cache directory. The sources indicate the issue but do...

CVE-2005-3298

CVE-2005-3298 affects OpenWBEM running on SuSE Linux 9. The issue is described as multiple buffer overflows that enable remote attackers to execute arbitrary code via unknown vectors. Evidence from SUSE and NVD entries confirms OpenWBEM on SuSE Linux 9 as the affected component and the potential ...

CVE-2005-3283

The CVE-2005-3283 issue affects TikiWiki prior to version 1.9.1.1, where an XSS vulnerability exists due to improper input validation. The vulnerability could allow a remote attacker to inject arbitrary script/HTML via unknown vectors, potentially impacting a user’s browser and session data (e.g....

CVE-2005-3293

CVE-2005-3293 affects Xerver before v4.20. Two information-disclosure vectors are described: (1) appending a trailing dot to a script URL to obtain its source code, and (2) sending a request with a trailing null character (%00) to list directory contents. Evidence from NVD/CVE records confirms vu...

CVE-2005-3284

CVE-2005-3284 affects AhnLab V3 AntiVirus V3Pro 2004 before 6.0.0.488, V3Net for Windows Server 6.0 before 6.0.0.488, and MyV3. The issue arises from multiple buffer overflows when compressed file scanning is enabled, allowing remote attackers to execute arbitrary code via crafted archives (ALZ, ...

CVE-2005-3300

CVE-2005-3300 affects phpMyAdmin prior to 2.6.4-pl3. The issue is in the register_globals emulation layer (grab_globals.php): it does not perform safety checks on values in the _FILES array for uploaded files, which could allow a remote attacker to induce phpMyAdmin to include an arbitrary local ...

CVE-2005-3289

CVE-2005-3289 affects IBM AIX 5.2 and 5.3 where LSCFG fails to securely create temporary files, enabling local users to corrupt /etc/passwd and possibly other system files via the trace file. Connected sources corroborate the binary-level description but do not provide explicit patch/version reme...

CVE-2005-3282

Splatt Forum 3.0 to 3.2 allows remote attackers to bypass authentication via unknown vectors...

CVE-2005-3266

CVE-2005-3266 is rejected and not used; reference CVE-2005-3265 instead.

CVE-2005-3266

...

CVE-2005-2972

CVE-2005-2972 concerns AbiWord’s RTF import in versions prior to 2.2.11, where multiple stack-based buffer overflows can be triggered by a crafted RTF file. The flaws are located in the RTF parser code paths (ParseLevelText, getCharsInsideBrace, HandleLists, HandleAbiLists) in ie_imp_RTF.cpp, and...

CVE-2005-3279

CVE-2005-3279 reports a stack-based buffer overflow in the vgasco_printf function of Jan Kybic BitMap Viewer (BMV) 1.2 when built with M_UNIX and run setuid. A long filename passed via the -b option can overflow the stack and allow local privilege escalation. Affected: BMV 1.2 (vgasco_printf). Ro...

CVE-2005-3288

Mailsite Express is affected by CVE-2005-3288. Remote attackers can upload and execute files with executable extensions (e.g., ASP) by attaching the file via the compose page and then accessing it from the cache directory before saving or sending the message. The vulnerability is documented acros...

CVE-2005-3278

CVE-2005-3278 describes an integer overflow in the openpsfile function (gsinterf.c) of Jan Kybic BitMap Viewer (BMV) 1.2 that can allow local code execution via a specially crafted PostScript file with a large number of pages, causing a buffer overflow. Public references across Debian advisories ...