10536 matches found
CVE-2005-0241
The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size...
CVE-2005-0386
Cross-site scripting XSS vulnerability in network.cgi in mailreader before 2.3.29 earlier allows remote attackers to inject arbitrary web script or HTML via MIME text/enriched or text/richtext messages...
CVE-2005-0401
FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka "Firescrolli...
CVE-2005-0990
unshar unshar.c in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file...
CVE-2005-0591
Firefox before 1.0.1 allows remote attackers to spoof the 1 security and 2 download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."...
CVE-2005-0586
Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to download via the Content-Disposition header, which could be used to trick users into downloading dangerous content...
CVE-2005-1322
Cross-site scripting XSS vulnerability in Horde Nag Task List Manager before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-1315
Cross-site scripting XSS vulnerability in Horde Turba module before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...
CVE-2005-0146
Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Javascript that generates a middle-click event on systems for which a middle-click performs a paste operation...
CVE-2005-1369
CVE-2005-1369 affects the it87 and via686a I2C drivers; prior to fixes in 2.6.11.8 and 2.6.12-rc2, these drivers created a writable sysfs file alarms, enabling a local attacker to cause CPU DoS by writing to it. Connected advisories indicate the issue is resolved by upgrading the kernel to a vers...
CVE-2005-1395
CVE-2005-1395 affects Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier. The vulnerability is a buffer overflow that can allow local users to gain privileges when a long environment variable (XAPPLRESLANGPATH or XAPPLRESDIR) is set or via a long command line argument. The Red Hat and NVD entries confirm...
Immunity Canvas: MAILENABLE_IMAP
Name| mailenableimap ---|--- CVE| CVE-2005-1015 Exploit Pack| CANVAS Description| mailenableimap Notes| CVE Name: CVE-2005-1015 VENDOR: MailEnable VersionsAffected: MailEnable Enterprise = 1.04 Repeatability: Repeatable. CVE Url: https://vulners.com/cve/CVE-2005-1015 CVSS: 10.0...
CVE-2005-1125
Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the libsafedie function call is completed...
CVE-2005-1379
CVE-2005-1379 affects the LAM runtime environment package lam-runtime-7.0.6-2mdk on Mandrake Linux, which installs the mpi user without a password, enabling local users to gain privileges. The connected documents provide a local privilege escalation path via an unprotected mpi account, but contai...
CVE-2005-1385
CVE-2005-1385 affects Safari 1.3. A remote attacker can trigger a denial of service (application crash) by supplying a long https URL that causes a NULL pointer dereference. The available records confirm the crash as the impact, with no additional exploit details or affected versions beyond the c...
CVE-2005-1373
Dream4 Koobi CMS 4.2.3 contains SQL injection flaws in index.php exploitable via the q and p parameters, allowing remote arbitrary SQL execution. Root cause: input validation flaw leading to SQL injection; no remediation details provided in the connected documents.
CVE-2005-1386
CVE-2005-1386 affects PHP-Nuke 7.6 and earlier. A remote attacker could obtain sensitive information via direct requests to specific PHP scripts (ipban.php, db.php, lang-norwegian.php, lang-indonesian.php, lang-greek.php, lang-portuguese.php, and related language/module pages) which disclose the ...
CVE-2005-1394
CVE-2005-1394 describes a format-string vulnerability in ESRI ArcInfo Workstation 9.0 where local users can escalate privileges via format string specifiers in the ARCHOME environment variable, affecting components such as wservice and lockmgr . The connected PT-2005-2391 entry confirms product/v...