CVE-2005-2414

CVE-2005-2414 describes a race condition in the xpcom library (used by Firefox, Mozilla, Netscape, Galeon) that can crash the target browser. An attacker could trigger a hard crash by rendering a large HTML file that loads a DOM call from within nested DIV tags, causing parts of the currently ren...

CVE-2005-2422

CVE-2005-2422 describes a cross-site scripting (XSS) vulnerability in the Beehive Forum, specifically in index.php where the webtag parameter can be exploited to inject arbitrary script/HTML. The affected component is the Beehive Forum’s index.php handling the webtag parameter; the root cause is ...

CVE-2005-2452

libtiff up to 3.7.0 allows remote attackers to cause a denial of service application crash via a TIFF image header with a zero "YCbCr subsampling" value, which causes a divide-by-zero error in 1 tifstrip.c and 2 tiftile.c, a different vulnerability than CVE-2004-0804...

CVE-2005-2425

CVE-2005-2425 describes a stack-based buffer overflow in Ares FileShare 1.1 . An attacker can trigger the overflow via a (1) long history parameter in the configuration file (ares.conf) or (2) a long search string, potentially allowing remote code execution or elevation of privileges for local us...

CVE-2005-2132

RPC portmapper rpcbind in SCO UnixWare 7.1.1 m5, 7.1.3 mp5, and 7.1.4 mp2 allows remote attackers or local users to cause a denial of service lack of response via multiple invalid portmap requests...

CVE-2005-2427

CVE-2005-2427 describes a cross-site scripting (XSS) vulnerability in CartWIZ’s viewCart.asp, exploitable via the message parameter to inject arbitrary script/HTML. The connected documents confirm the affected component (viewCart.asp) and the vulnerability class (XSS) but do not provide product v...

CVE-2005-2452

libtiff up to 3.7.0 allows remote attackers to cause a denial of service application crash via a TIFF image header with a zero "YCbCr subsampling" value, which causes a divide-by-zero error in 1 tifstrip.c and 2 tiftile.c, a different vulnerability than CVE-2004-0804...

CVE-2005-2428

Lotus Domino R5/R6 WebMail with Generate HTML for all fields enabled can reveal sensitive data via names.nsf hidden fields. The connected nuclei template documents information disclosure: password hashes in HTTPPassword, password-change date in HTTPPasswordChangeDate, and client release in ClntBl...

CVE-2005-2418

CVE-2005-2418 is rejected/not used; duplicate of CVE-2005-2403.

CVE-2005-2415

Contrexx up to version 1.0.4 is affected by multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the poll module (value parameter) or the gallery module (pId parameter). The underlying issue is input unsanitization in these parameters, enabling ...

CVE-2005-2443

CVE-2005-2443 affects Kshout 2.x and 3.x, where settings.dat is stored under the web document root with inadequate access control. This misconfiguration allows remote access to sensitive data such as usernames and passwords. No patch or remediation details are provided in the supplied documents; ...

CVE-2005-2418

...

CVE-2005-2417

CVE-2005-2417 affects Contrexx before 1.0.5. The vulnerability allows remote attackers to obtain sensitive information by issuing a direct request to /config/version.xml, exposing partial confidentiality. The available documents do not specify impacted versions beyond 1.0.5, nor provide remediati...

CVE-2005-2442

CVE-2005-2442 concerns a Cross-Application Scripting (XAS) vulnerability in SPI Dynamics WebInspect 5.0.196. The connected documents confirm the issue arises in WebInspect and enables remote attackers to inject Javascript from one application into another (XAS), with remote exploitation described...

CVE-2005-2446

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2369. Reason: This candidate is a duplicate of CVE-2005-2369. Notes: All CVE users should reference CVE-2005-2369 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-2431

The 1 lost password and 2 account pending features in GForge 4.5 do not properly set a limit on the number of e-mails sent to an e-mail address, which allows remote attackers to send a large number of messages to arbitrary e-mail addresses aka mail bomb...

CVE-2005-2450

Multiple integer overflows in the 1 TNEF, 2 CHM, or 3 FSG file format processors in libclamav for Clam AntiVirus ClamAV 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message...

CVE-2005-2416

Contrexx prior to 1.0.5 contains client-side Cross-Site Scripting (XSS) vulnerabilities in two parameters: (1) term in the search module and (2) title in the blog aggregation module. These allow remote attackers to inject arbitrary web script or HTML. The CVE entry documents these two vectors but...

CVE-2005-2412

CVE-2005-2412 describes a PHP remote file inclusion vulnerability in PHP FirstPost’s block.php triggered via the Include parameter, allowing an attacker to execute arbitrary PHP code. The issue is network-exposed with low exploit complexity and no authentication required, resulting in partial int...

CVE-2005-2452

CVE-2005-2452 affects libtiff up to 3.7.0. A TIFF header with a zero value for YCbCr subsampling can trigger a divide-by-zero, causing an application crash (denial of service) via code paths in tif_strip.c and tif_tile.c. The issue is discussed in multiple advisories related to libtiff within Man...