CVE-2005-2608

CVE-2005-2608 concerns SafeHTML prior to version 1.3.5, where the library fails to properly filter script in UTF-7 and CSS comments, allowing remote XSS in applications that use SafeHTML. Affected component: SafeHTML (pre-1.3.5). Root cause: inadequate filtering of certain UTF-7 and CSS-comment c...

CVE-2005-2617

The syscall32setuppages function in syscall32.c for Linux kernel 2.6.12 and later, on the 64-bit x86 platform, does not check the return value of the insertvmstruct function, which allows local users to trigger a memory leak via a 32-bit application with crafted ELF headers...

CVE-2005-2617

The syscall32setuppages function in syscall32.c for Linux kernel 2.6.12 and later, on the 64-bit x86 platform, does not check the return value of the insertvmstruct function, which allows local users to trigger a memory leak via a 32-bit application with crafted ELF headers...

CVE-2005-2606

Unknown vulnerability in the "frontend authentication" in PHlyMail 3.02.00 has unknown impact and attack vectors...

CVE-2005-2590

CVE-2005-2590 is a cross-site scripting (XSS) vulnerability in Parlano MindAlign 5.0 and later. It allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NVD lists a CVSS2 base score of 4.3 (Medium) with network attack vector, no confidentiality impact, partial integr...

CVE-2005-2101

CVE-2005-2101 affects KDE kdeedu: specifically the langen2kvtml script in the kvoctrain component creates insecure temporary files in /tmp with predictable names, allowing a local attacker to overwrite arbitrary files. Multiple vendors/advisories (Debian DSA-818-1, Mandrake/MKSA-2005:159, SUSE, O...

CVE-2005-2595

CVE-2005-2595 is a cross-site scripting (XSS) vulnerability in Dada Mail (Perl) prior to 2.10 Alpha 1. An attacker could inject arbitrary JavaScript into archived messages, which would then execute in a user’s browser when viewed. The root cause is improper validation of user-submitted content be...

CVE-2005-2601

CVE-2005-2601 describes an SQL injection in MidiCart (ASP Shopping Cart). The vulnerability allows remote attackers to issue arbitrary SQL via the code_no parameter to Item_Show.asp or search_list.asp. This is a server-side data handling flaw that can impact confidentiality, integrity and availab...

CVE-2005-2600

CVE-2005-2600 is described in connected sources as a vulnerability in the tree view of FUD Forum Bulletin Board Software (also present in phpgroupware/egroupware imports) that allows remote attackers to read private posts by modifying the mid parameter. The OpenVAS entries reference this CVE with...

BELL-CVE-2005-2617 CVE-2005-2617 does not affect BellSoft software

Bulletin has no description...

CVE-2005-2599

CVE-2005-2599 affects Hummingbird FTP for Connectivity 10.0. The vulnerability arises from storing the user’s password in the FTP profile using weak encoding, enabling an attacker to gain privileges. The available sources (CVE entries and related records) describe the weakness in password storage...

CVE-2005-2613

CVE-2005-2613 : The vulnerability is listed for the CPAINT Ajax Toolkit before 1.3-SP . It is described as an unknown vulnerability that could allow an attacker to execute arbitrary PHP or ASP code or read files via unknown vectors . The NVD entry assigns a CVSSv2 base score of 6.4 (MEDIUM) with ...

CVE-2005-2614

CVE-2005-2614 affects Discuz!

CVE-2005-2592

Technical details for CVE-2005-2592 are not publicly available in the provided documents; monitor for updates.

CVE-2005-2603

The CVE-2005-2603 entry describes a Cross-site Scripting (XSS) vulnerability in index.php of My Image Gallery (Mig) 1.4.1. The vulnerability allows remote attackers to inject arbitrary web script or HTML by supplying the currDir or image parameters. The available references (NVD entry and CVE rec...

CVE-2005-2602

Mozilla Thunderbird 1.0 and Firefox 1.0.6 allows remote attackers to obfuscate URIs via a long URI, which causes the address bar to go blank and could facilitate phishing attacks...

CVE-2005-2597

CVE-2005-2597 concerns AOL Client Software 9.0, where insecure permissions on the installation path allow a local user to replace ACSD.exe with a malicious program, enabling arbitrary code execution with SYSTEM privileges. The vulnerability is local in scope and hinges on insufficient protection ...

CVE-2005-2600

FUDForum 2.6.15 with "Tree View" enabled, as used in other products such as phpgroupware and egroupware, allows remote attackers to read private posts via a modified mid parameter...

CVE-2005-2590

Cross-site scripting XSS vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-2611

CVE-2005-2611 affects VERITAS Backup Exec/NetWare components and NetBackup NetWare Media Server Option, where a static/hard-coded NDMP authentication credential enables remote attackers to read and write arbitrary files on the backup server. Products and versions implicated include VERITAS Backup...