CVE-2005-1743

CVE-2005-1743 affects BEA WebLogic Server/Express versions 8.1 (SP3) and 7.0 (SP5). The root cause: when a security provider throws an exception, WebLogic may use an incorrect thread identity and may fail to audit security exceptions. Implications noted: potential partial impact on confidentialit...

CVE-2005-1704

Integer overflow in the Binary File Descriptor BFD library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer...

CVE-2005-1717

The CVE-2005-1717 entry concerns ZyXEL Prestige 650R-31 routers running ZyNOS FW v3.40(KO.1). Affected component: the device’s IP stack handling of fragmented packets. Root cause: crafted fragmented IP packets that lead to denial of service via sustained CPU usage and network loss. Impact: remote...

CVE-2005-1716

The CVE refers to TOPo 2.2 (2.2.178), where data files are stored in the data directory under the web document root with insufficient access control. This could allow remote attackers to view sensitive information, such as client IP addresses. Connected documents (e.g., Red Hat advisory and CVE l...

CVE-2005-1747

CVE-2005-1747 describes multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express (BEA WebLogic 8.1/Express 8.1 up to SP4, and 7.0 up to SP6). The issues allow remote attackers to inject arbitrary script/HTML via login parameters (j_username, j_password), or through p...

CVE-2005-1698

CVE-2005-1698 affects PostNuke 0.750 and 0.760RC3, enabling remote attackers to obtain sensitive information through direct requests to a set of files across the Xanthia module, pnblocks directory, NS-Multisites module, and xmlrpc.php. The listed targets include theme.php, Xanthia.php, user.php, ...

CVE-2005-1700

CVE-2005-1700 affects PostNuke 0.760-RC3 via the Xanthia module. The vulnerability is an SQL injection in pnadmin.php exploitable by the riga[0] parameter, allowing remote administrators to execute arbitrary SQL commands. Connected sources corroborate SQL injection in Xanthia/Messages areas and P...

CVE-2005-1703

CVE-2005-1703 affects Warrior Kings: Battles versions 1.23 and earlier. The vulnerability allows remote attackers to cause a denial of service (server crash) via a partial join packet that triggers a NULL pointer dereference. The provided connected documents confirm this description but do not re...

CVE-2005-1702

CVE-2005-1702 affects Warrior Kings: Battles 1.23 and earlier and Warrior Kings 1.3 and earlier. It is a format string vulnerability in the nickname field that could allow remote attackers to execute arbitrary code. Root cause: improper handling of format string specifiers in a nickname. Impact: ...

CVE-2005-1740

Net-SNMP vulnerability CVE-2005-1740 arises from fixproc creating insecure temporary files, enabling a local user to modify file contents and potentially trigger arbitrary command execution, or overwrite files via a symlink attack. Affected component is the fixproc utility in Net-SNMP 5.x prior t...

CVE-2005-1695

CVE-2005-1695 affects PostNuke RSS module (versions 0.750, 0.760RC2/RC3). The vulnerability is described as multiple cross-site scripting (XSS) flaws allowing remote injection of script/HTML via parameters: rss_url in magpie_slashbox.php and url in magpie_simple.php/magpie_debug.php. Connected Op...

CVE-2005-1697

The CVE-2005-1697 issue affects PostNuke’s RSS module (versions 0.750 and 0.760 RC2/RC3). A direct request to simple_smarty.php exposes the installation path via an error message, enabling remote disclosure of sensitive information. Exploit details are not provided in the sources; no patch/versio...

CVE-2005-1718

CVE-2005-1718 describes a buffer overflow in LS Games War Times (version 1.03 and earlier) that allows remote attackers to crash the server by sending a long nickname. The issue is confirmed across multiple records (NVD/Red Hat/CVE listing). The connected documents do not provide a patched versio...

CVE-2005-1749

CVE-2005-1749 affects BEA WebLogic Server and WebLogic Express 6.1 Service Pack 4. A buffer overflow flaw allows remote attackers to trigger a denial of service via CPU consumption caused by a looping thread. The vulnerability is documented with a MEDIUM base score (CVSS v2.0) and network access ...

CVE-2005-1709

CVE-2005-1709 concerns Blue Coat Reporter before version 7.1.2. The connected documentation provides no exact root-cause or vulnerable component details beyond the vendor/product scope. The entry states that remote unauthenticated attackers can add a license, implying modification of licensing da...

CVE-2005-1744

The CVE concerns BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5, where a redeploy does not log out users. This allows continued access to the application without re-authentication, potentially violating newly changed security constraints or role mappings. The issue is documen...

CVE-2005-1737

CVE-2005-1737 affects PROMS 0.11, where multiple unknown vulnerabilities allow non-authorized users to view or modify the project member list and to modify the todos list. The connected documents do not provide explicit root cause, affected versions beyond 0.11, or remediation details. No in‑the‑...

CVE-2005-1736

Technical details about this CVE are not publicly available in the provided documents. Monitor for updates on affected versions, root cause specifics, and remediation.

CVE-2005-1745

The CVE-2005-1745 entry concerns BEA WebLogic Portal 8.1 with Service Pack 0?3 (Portal 8.1 SP3) where the UserLogin control prints the password to standard output after an incorrect login attempt. Affected component: BEA WebLogic Portal 8.1 (UserLogin control). Root cause: password leakage via st...

CVE-2005-1713

Serendipity 0.8 is affected by multiple XSS vulnerabilities described in CVE-2005-1713, exploitable via the templatedropdown and shoutbox plugins. The Red Hat and NVD entries corroborate that remote attackers could inject arbitrary web script or HTML through these plugins, enabling client-side sc...