CVE-2005-1166

The CVE-2005-1166 entry concerns DameWare NT Utilities (DNTUS26) and MiniRemote Control (DWRCS) up to version 4.9, where the username and password are stored in memory in plaintext. This in-memory credential exposure could allow a local attacker to obtain sensitive information. The connected sour...

CVE-2005-0093

...

CVE-2005-1160

CVE-2005-1160 affects Firefox before 1.0.3 and Mozilla Suite before 1.7.7. The vulnerability arises in the privileged chrome UI where an attacker could override certain properties or methods of DOM nodes, enabling privilege escalation. Attacks demonstrated via the eval function or the Script obje...

CVE-2005-0976

AppleWebKit-based browsers (WebCore/WebKit) are affected by CVE-2005-0976, which allows remote attackers to read local files via the XMLHttpRequest component. The vulnerability affects Safari 1.2+ and OmniWeb 5.1+ (and other WebKit-based apps using file: URLs), triggered by attacker‑supplied cont...

CVE-2005-1107

McAfee Internet Security Suite 2005 is affected by an insecure default file ACL vulnerability. According to iDEFENSE, the default ACL applied during installation allows non-Administrator users to modify installed files, enabling local privilege escalation to system level or to disable protection ...

CVE-2005-1155

CVE-2005-1155 affects Mozilla Firefox prior to 1.0.3 and Mozilla Suite prior to 1.7.7. The issue arises from favicon handling: a malicious page can supply a favicon LINK tag with a javascript: URL in the href, allowing remote code execution. Publicly documented in Red Hat/CentOS advisories RHSA-2...

CVE-2005-1157

CVE-2005-1157 affects Firefox < 1.0.3, Mozilla Suite

CVE-2005-1158

CVE-2005-1158 affects Mozilla Firefox prior to 1.0.3. The issue arises from missing security checks that allow an attacker to inject arbitrary JavaScript into privileged pages by abusing the sidebar’s _search target. This could enable code execution within the context of the affected site, as des...

CVE-2005-1162

CVE-2005-1162: Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary script/HTML via (1) sEmail in owContactUs.asp, (2) bSub in owListProduct.asp, or (3) Name, (4) Email, or (5) Comment in owProductDetail.asp. Affected software: OneWorldSt...

CVE-2005-1168

CVE-2005-1168 affects MusicMatch (DiagCollectionControl.dll) in version 10.00.2047 and earlier. The vulnerability allows remote attackers to overwrite arbitrary files via the bstrSavePath argument, exposing a network-exploitable path with no authentication and compromising integrity (per NVD: AV:...

CVE-2005-1171

CVE-2005-1171 is an XSS vulnerability affecting the phpBB datenbank module via mod.php, where the id parameter can be exploited to inject arbitrary script/HTML. The weakness stems from improper sanitization of user-supplied data, enabling remote attackers to execute script in the context of the v...

DEBIAN-CVE-2005-0753

Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code...

CVE-2005-1154

CVE-2005-1154 affects Firefox before 1.0.3 and Mozilla Suite before 1.7.7. A vulnerable global scope in the browser allows a malicious page to set a variable in the target domain, which is executed when the user visits that domain, enabling remote script execution in the context of the affected s...

CVE-2005-1159

CVE-2005-1159 affects Mozilla/Firefox: the native implementations of InstallTrigger and related JS access paths do not properly verify object types, allowing the JavaScript interpreter to run at an incorrect memory address. This can cause an application crash (DoS) and, in the worst case, may ena...

CVE-2005-1167

Technical details about CVE-2005-1167 are not publicly provided in the supplied documents. The materials only note that Musicmatch 10.00.2047 and earlier store logs in Program Files; no affected versions, exploit info, or fixes are listed. Monitor for updates.

SUSE-SA:2005:024: cvs

The remote host is missing the patch for the advisory SUSE-SA:2005:024 cvs. The Concurrent Versions System CVS offers tools which allow developers to share and maintain large software projects. The current maintainer of CVS reported various problems within CVS such as a buffer overflow and memory...

WheresJames Webcam Publisher Beta 2.0.0014 Remote Buffer Over

Exploit for unknown platform in category remote exploits ================================================================= WheresJames Webcam Publisher Beta 2.0.0014 Remote Buffer Overflow ================================================================= / WheresJames Webcam Publisher Beta 2.0.00...

[Full-disclosure] SUSE Security Announcement: cvs (SUSE-SA:2005:024)

-----BEGIN PGP SIGNED MESSAGE----- SUSE Security Announcement Package: cvs Announcement-ID: SUSE-SA:2005:024 Date: Monday, Apr 18st 2005 13:30 MEST Affected products: 8.2, 9.0, 9.1, 9.2, 9.3 SUSE CORE 9 for x86 SuSE Linux Enterprise Server 8, 9 UnitedLinux 1.0 School-Server 1 Open-Enterprise-Serv...

Solaris 8 (sparc) : 116950-15

SunOS 5.8: ufs patch. Date this patch was last updated by Sun : Nov/09/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit...

Solaris 8 (x86) : 116951-15

SunOS 5.8x86: ufs patch. Date this patch was last updated by Sun : Nov/09/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...