CVE-2005-1715

CVE-2005-1715 describes a reflected cross-site scripting vulnerability in TOPo 2.2 (version 2.2.178), specifically in index.php. The issue allows remote attackers to inject arbitrary script/HTML via several inputs in the comments section and related fields: (1) m, (2) s, (3) ID, (4) t, and (5) fi...

CVE-2005-1704

CVE-2005-1704 is a heap-based overflow in the BFD library used by gdb, binutils, elfutils, caused by an integer overflow when a crafted object file specifies a large number of section headers. Connected advisories indicate Red Hat updates for elfutils/binutils/gdb (RHSA-2005/659, -673, -709) to r...

CVE-2005-1692

Format string vulnerability in gxine 0.4.1 through 0.4.4, and other versions down to 0.3, allows remote attackers to execute arbitrary code via a ram file with a URL whose hostname contains format string specifiers...

CVE-2005-1705

CVE-2005-1705 concerns gdb prior to 6.3 that searches the current working directory for a ".gdbinit" file, allowing a local attacker to execute arbitrary commands as the user running gdb. Multiple connected advisories confirm the issue alongside a separate overflow in gdb that is CVE-2005-1704, b...

CVE-2005-1737

Multiple unknown vulnerabilities in PROMS 0.11 allow "non-authorized users" to 1 view or modify the project member list or 2 modify the todos list...

CVE-2005-1739

The XWD Decoder in ImageMagick before 6.2.2.3, and GraphicsMagick before 1.1.6-r1, allows remote attackers to cause a denial of service infinite loop via an image with a zero color mask...

CVE-2005-1707

CVE-2005-1707 affects Gentoo webapp-config, where the fn_show_postinst function can be abused via a symlink attack on the temporary file postinst.txt. This race condition could let a local attacker overwrite arbitrary files with the privileges of the webapp-config user, potentially disrupting ope...

CVE-2005-1739

CVE-2005-1739 affects ImageMagick (XWD decoder) and GraphicsMagick per reports; a vulnerability allows a remote attacker to trigger a denial-of-service (infinite loop) by processing an image with a zero color mask. Technical details across sources: the issue arises in the XWD parsing path, leadin...

CVE-2005-1712

CVE-2005-1712 affects Serendipity 0.8; when used with multiple authors, unprivileged authors can upload arbitrary media files. The provided documents state the vulnerability and affected scenario but do not disclose root cause, exploit details, or a remediation. No explicit patch information is g...

CVE-2005-1746

The cluster cookie parsing code in BEA WebLogic Server 7.0 through Service Pack 5 attempts to contact any host or port specified in a cookie, even when it is not in the cluster, which allows remote attackers to cause a denial of service cluster slowdown via modified cookies...

CVE-2005-1738

The provided CVE-2005-1738 data describes a format-string vulnerability in the logPrintBadfile function of delbadfiles.c in Iron Bars SHell (ibsh) prior to version 0.3d. The flaw, triggered by certain inputs not properly handled in a syslog call, allows access to files outside the home directory ...

CVE-2005-1714

Cross-site scripting XSS vulnerability in NetWin SurgeMail 3.0c2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-1734

PROMS before 0.11 has multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL via unknown vectors. The connected Red Hat/CVE and CVE records confirm the issue but provide no further technical details, affected modules, exploit vectors, or a remediation within the...

CVE-2005-1742

CVE-2005-1742 affects BEA WebLogic Server and WebLogic Express 8.1 SP2/SP3. The vulnerability allows users with the Monitor security role to shrink or reset JDBC connection pools, indicating an authorization/privilege misuse issue affecting pool configuration. The provided documents confirm the a...

CVE-2005-1741

Technical details about CVE-2005-1741 are not publicly available in the provided documents. No specifics on affected components, versions, root cause, or exploit information are included here; monitor for official disclosures.

CVE-2005-1701

CVE-2005-1701 affects PortailPHP 1.3 and is a SQL injection vulnerability exploitable via the id parameter to the News, File, Liens, or Faq modules. The issue allows remote attackers to execute arbitrary SQL commands, as stated in the CVE entry. The connected records corroborate the same vulnerab...

CVE-2005-1735

Multiple cross-site scripting XSS vulnerabilities in PROMS before 0.11 allow remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-1736

PROMS 0.11 does not properly handle "certain combinations of rights," which gives more rights to users than intended...

[Full-disclosure] [ GLSA 200505-17 ] Qpopper: Multiple Vulnerabilities

Gentoo Linux Security Advisory GLSA 200505-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Important: Red Hat Security Advisory: mozilla security update

Updated mozilla packages that fix various security bugs are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 24 May 2005 This erratum now includes updated devhelp packages which are required to satisfy a dependancy on...