10535 matches found
CVE-2005-3215
Multiple interpretation error in unspecified versions of McAfee Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...
CVE-2005-3201
CVE-2005-3201 concerns Utopia News Pro (UNP) 1.1.3. The vulnerability is an SQL injection in news.php when magic_quotes_gpc is disabled and register_globals is enabled, allowing remote attackers to modify/obtain data via the newsid parameter. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH)...
CVE-2005-3200
Utopia News Pro (UNP) versions 1.1.3 and 1.1.4 are affected by multiple XSS vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via: (1) sitetitle parameter in header.php and (2) version and (3) query_count parameters in footer.php. The documents do not speci...
CVE-2005-3232
The CVE-2005-3232 description identifies a vulnerability in TheHacker (unspecified versions) where a specially crafted RAR archive with malformed central/local headers can bypass virus detection when opening a malicious executable. The issue is remotely exploitable and affects how certain archive...
CVE-2005-3215
CVE-2005-3215 describes a vulnerability in unspecified versions of McAfee Antivirus where a multiple interpretation error allows remote attackers to bypass virus detection. The issue occurs when processing a malicious executable embedded in a specially crafted RAR file with malformed central and ...
CVE-2005-3223
The CVE refers to a vulnerability in Rising Antivirus (unspecified versions) where a malware-laden executable in a specially crafted RAR file with malformed central and local headers can bypass virus detection. The issue arises during archive parsing, allowing the file to be opened by some tools ...
CVE-2005-3239
Technical details (affected products, vulnerable components, versions, exploit information, and fixes) are not provided in the connected documents. Monitor for updates.
CVE-2005-3204
CVE-2005-3204 is a Cross-site Scripting (XSS) vulnerability affecting Oracle XML DB 9iR2. According to the connected Nessus/NVD records, remote attackers could inject arbitrary web script or HTML via the query string in an HTTP request. The available documents do not specify the affected product ...
CVE-2005-3221
CVE-2005-3221 : Multiple interpretation errors in unspecified versions of Fortinet Antivirus allow remote attackers to bypass virus detection by presenting a malicious executable embedded in a specially crafted RAR file with malformed central and local headers. The crafted archive can be opened b...
CVE-2005-3202
Multiple cross-site scripting XSS vulnerabilities in Oracle HTML DB HTMLDB 1.3 through 1.3.6 allow remote attackers to inject arbitrary web script or HTML, and subsequently execute SQL statements via the 1 p or 2 pt02 parameters...
CVE-2005-3208
CVE-2005-3208 involves multiple SQL injection vulnerabilities in the products named aeNovo, aeNovoShop, and aeNovoWYSI. The flaws allow remote attackers to execute arbitrary SQL code via the password parameter in control.asp and the strSQL parameter in search.asp, with potential for XSS in result...
CVE-2005-3202
CVE-2005-3202 affects Oracle HTML DB (HTMLDB) versions 1.3 through 1.3.6. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML and, via the affected parameters, potentially execute SQL statements. The exploitation targets the (...
CVE-2005-3212
Multiple interpretation error in unspecified versions of NOD32 Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...
CVE-2005-3198
CVE-2005-3198 concerns Webroot Desktop Firewall prior to 1.3.0build52. The issue allows local users to disable the firewall, even when password protection is enabled, via certain DeviceIoControl commands. The CVSS vector indicates local access, low attack complexity, no authentication, with parti...
CVE-2005-3206
CVE-2005-3206 affects iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 (9.0.2.4). The issue enables remote attackers to cause a denial of service by sending an HTTP request with an sid parameter containing a STOP command, which can stop the TNS listener. The available connected documen...
CVE-2005-3210
CVE-2005-3210 involves a vulnerability in unspecified versions of Kaspersky Antivirus where remote attackers can bypass virus detection by delivering a malicious executable packed in a specially crafted RAR file with malformed central and local headers. The issue allows the payload to be opened b...
CVE-2005-3224
The CVE-2005-3224 entry concerns AntiVir Antivirus (unspecified versions) and a multiple interpretation error in its handling of RAR archives. The underlying issue allows remote attackers to bypass virus detection by supplying a malicious executable inside a specially crafted RAR file with malfor...
CVE-2005-3218
Multiple interpretation error in unspecified versions of Dr.Web Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...
CVE-2005-3211
CVE-2005-3211 affects BitDefender Antivirus and involves a multiple interpretation error in unspecified versions. A remote attacker can bypass virus detection by delivering a malicious executable in a specially crafted RAR file with malformed central and local headers. The crafted archive can be ...