CVE-2005-1418

CVE-2005-1418 affects NetLeaf Limited NotJustBrowsing 1.0.3. The vulnerability arises because the View Lock Password is stored in plaintext in the notjustbrowsing.prf file, allowing local users to gain privileges. The NVD entry provides a base score of 4.6 (Medium) with local attack vector and lo...

CVE-2005-1422

Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to conduct administrator operations and cause a denial of service server or camera shutdown via a direct request to admin.html...

CVE-2005-1444

SitePanel 2.6.1 and earlier (SitePanel2) are affected by multiple cross-site scripting (XSS) vulnerabilities. The issues allow remote attackers to inject arbitrary web script/HTML via: (1) v, show, or sec_name parameters to main.php, (2) inadmin, newsev, or postid parameters to 5.php, or (3) id p...

CVE-2005-1429

CVE-2005-1429 describes a SQL injection vulnerability in login.asp of WWWguestbook 1.1. The vulnerability arises from unsafely handling the password parameter, allowing remote attackers to execute arbitrary SQL commands. Affects the WWWguestbook 1.1 web application (login.asp) and could enable un...

CVE-2005-1407

CVE-2005-1407 affects Skype for Windows versions 1.2.0.0 through 1.2.0.46. The issue allows a local user to bypass the identity check for an authorized application and then call arbitrary Skype API functions by modifying or replacing that application. The underlying impact is limited to a local e...

CVE-2005-1452

Technical details are not publicly available in the provided documents for CVE-2005-1452; no affected products, root cause, or remediation are specified beyond the description. Monitor for updates.

Immunity Canvas: RADEXECD

Name| radexecd ---|--- CVE| CVE-2005-1825 Exploit Pack| CANVAS Description| radexecd.exe Notes| CVE Name: CVE-2005-1825 VENDOR: HP Release Date: Apr 28, 2005 Reliability: This is a one-shot exploit. It's single threaded. CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1825 CVS...

CVE-2005-1451

The CVE-2005-1451 entry affects Serendipity’s media manager prior to version 0.8. The vulnerability allows remote attackers to upload and execute arbitrary files of type .php or .shtml, enabling possible remote code execution on the affected server. The available documents do not provide addition...

CVE-2005-1416

The CVE-2005-1416 entry concerns 04WebServer 1.81 with a directory traversal vulnerability that lets remote attackers read files outside the web root but inside the installation folder. The issue is remote, of low attack complexity, and does not require authentication (per CVSS metrics: AV NETWOR...

CVE-2005-1448

CVE-2005-1448 describes a cross-site scripting (XSS) vulnerability in the Serendipity BBCode plugin for Serendipity, prior to version 0.8. Remote attackers can inject arbitrary web script or HTML, which executes in a user’s browser when viewing malicious entries or comments. The affected componen...

CVE-2005-1420

CVE-2005-1420 affects Raysoft/Raybase Video Cam Server 1.0.0 beta. The vulnerability is an information disclosure where remote attackers can determine the full server pathname by requesting an invalid page using a hex-encoded space ("%20"). The provided documents do not specify exploit details be...

CVE-2005-1450

Technical details are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2005-1428

The CVE-2005-1428 entry concerns edit_image.asp in Uapplication Uphotogallery, where remote attackers can upload arbitrary files. The vulnerability enables an attacker to affect confidentiality, integrity, and availability (C/P/I/P), with a CVSSv2 base score of 7.5 (NETWORK vector, low attack com...

CVE-2005-1401

Format string vulnerability in the client for Mtp-Target 1.2.2 and earlier allows remote attackers to execute arbitrary code via game messages or other text...

CVE-2005-1386

PHP-Nuke 7.6 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 ipban.php, 2 db.php, 3 lang-norwegian.php, 4 lang-indonesian.php, 5 lang-greek.php, 6 a request to WebLinks with the portuguese language lang-portuguese.php, 7 a request to WebLinks with the...

CVE-2005-1410

The connected documents confirm CVE-2005-1410 affects the PostgreSQL tsearch2 module (versions 7.4–8.0.x). The root cause is misdeclaring several tsearch2 functions as internal when they do not take an internal argument, enabling SQL calls to other internal-argument functions and potentially caus...

Mac OS X Multiple Vulnerabilities (Security Update 2005-005)

The remote host is missing Security Update 2005-005. This security update contains fixes for the following applications : - Apache - AppKit - AppleScript - Bluetooth - Directory Services - Finder - Foundation - HelpViewer - LDAP - libXpm - lukemftpd - NetInfo - ServerAdmin - sudo - Terminal - VPN...

Immunity Canvas: GAPPLE_CLIENT

Name| gappleclient ---|--- CVE| CVE-2005-0045 Exploit Pack| CANVAS Description| GREENAPPLE MS05-011 Notes| CVE Name: CVE-2005-0045 VENDOR: Microsoft Pre-exploitation: Requires CANVAS to be run as root/administrator MSADV: MS05-011 MSRC:...

CVE-2005-1279

tcpdump 3.8.3 and earlier allows remote attackers to cause a denial of service infinite loop via a crafted 1 BGP packet, which is not properly handled by RTROUTINGINFO, or 2 LDP packet, which is not properly handled by the ldpprint function...

CVE-2005-1384

CVE-2005-1384 : The phpCoin project – version 1.2.2 or older – is affected by multiple SQL injection vulnerabilities. The issues arise from improper sanitization in user-supplied input and affect the following entry points/parameters: (1) search in index.php, (2) phpcoinsessid in login.php, (3) i...