10535 matches found
CVE-2005-2581
Grandstream BudgeTone 101 and 102 running firmware 1.0.6.7 and possibly earlier versions, allows remote attackers to cause a denial of service device hang or reboot via a large UDP packet to port 5060...
CVE-2005-2097
CVE-2005-2097 affects xpdf and variants such as gpdf (and related components like CUPS’ pdftops) where carefully crafted PDFs can cause a denial of service by exhausting disk space (creating a large temporary file). Public sources in the connected documents confirm heap-based overflows and DoS po...
CVE-2005-2587
PHPTB Topic Boards 2.0 is affected by a SQL injection in emailvalidate.php that allows remote attackers to execute arbitrary SQL commands via the mid parameter. Root cause is improper input handling in emailvalidate.php leading to SQL manipulation. Documented impact includes potential exposure or...
CVE-2005-2586
The CVE concerns a Mentor ADSL-FR4II router with firmware 2.00.0111 that stores the web administration password in cleartext inside the backup configuration file. This exposes sensitive credentials to local users who can access the backup config, enabling partial confidentiality impact as describ...
CVE-2005-2568
CVE-2005-2568 describes an eval-injection vulnerability in SysCP's template engine affecting SysCP 1.2.10 and earlier. An attacker can supply a string containing code inside { and } that is processed by PHP eval, enabling remote execution of arbitrary PHP. The NVD CVSS data rates impact as PARTIA...
CVE-2005-2561
MYFAQ 1.0 contains multiple SQL injection vulnerabilities reachable via the Theme, SousTheme, Faq, and question parameters across several PHP pages (affichagefaq.php3, choixsoustheme.php3, consultation.php3, insfaq.php3, inssoustheme.php3, instheme.php3, saisiefaqtotale.php3, saisiesoustheme.php3...
CVE-2005-2572
MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysql.func table to cause a denial of service server hang and possibly execute arbitrary code via 1 a request for a non-library file, which causes the Windows LoadLibraryEx function to block, or 2 a...
CVE-2005-2574
xmb.php in XMB Forum 1.9.1 extracts and defines all provided variables, which allows remote attackers to modify arbitrary server variables such as SERVERREMOTEADDR...
CVE-2005-2567
CVE-2005-2567 affects SysCP 1.2.10 and earlier. The vulnerability is a PHP remote file inclusion via the language parameter, enabling an attacker to execute arbitrary PHP code on the server. The issue is documented in the CVE entry and corroborated by related advisories; no explicit exploit detai...
CVE-2005-2558
Stack-based buffer overflow in the initsyms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long functionname field...
CVE-2005-2570
CVE-2005-2570 affects FunkBoard 0.66CF and possibly earlier releases. A direct request to forums.php can disclose sensitive information by revealing the path in an error message, enabling information disclosure. The available sources state the flaw but do not provide detailed exploit scenarios, a...
CVE-2005-2558
Stack-based buffer overflow in the initsyms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long functionname field...
CVE-2005-2562
CVE-2005-2562 is an SQL injection vulnerability in Gravity Board X (GBX) 1.1 that allows remote attackers to bypass authentication via the login field and execute arbitrary SQL commands. Multiple connected documents corroborate injections affecting GBX 1.1, enabling credential bypass and potentia...
CVE-2005-2574
The CVE-2005-2574 entry concerns XMB Forum 1.9.1 where the file xmb.php “extracts and defines all provided variables,” allowing a remote attacker to modify arbitrary server variables such as _SERVER[REMOTE_ADDR] . This is a direct impact on server environment data due to improper input handling. ...
CVE-2005-2572
CVE-2005-2572 affects MySQL running on Windows. A remote authenticated user with insert privileges on mysql.func can cause a denial of service (server hang) and possibly arbitrary code execution by requesting a non-library file (LoadLibraryEx blocks) or by invoking functions in a library that mat...
CVE-2005-2573
The CVE-2005-2573 issue affects Oracle MySQL Server on Windows (MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta). The mysql_create_function function in sql_udf.cc uses an incomplete blacklist in a directory traversal check, enabling an attacker to include arbitrary files via...
CVE-2005-2470
CVE-2005-2470 describes a buffer overflow in Adobe Reader/Acrobat core plug-ins (affecting Adobe Reader 5.1–7.0.2 and Acrobat 5.0–7.0.2) that can cause a denial of service (crash) and may allow arbitrary code execution via unknown vectors. Public advisories from Red Hat (RHSA-2005:750) and others...
CVE-2005-2560
CVE-2005-2560 is a cross-site scripting (XSS) vulnerability in CFBB 1.1.0, where an attacker can inject arbitrary script/HTML via the page parameter to index.cfm. The CVSS v2 base score is 4.3 (medium): network access, no authentication, with only partial integrity impact. Affected component: ind...
CVE-2005-2585
CVE-2005-2585 affects Mentor ADSL-FR4II router with firmware 2.00.0111. The issue is a denial-of-service condition caused by the router’s active TCP connections state table being consumed by a large number of connections (e.g., port scans). Other connected documents do not provide additional tech...