CVE-2005-0724

paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via 1 an invalid str parameter to pafiledb.php, or a direct request to 2 viewall.php, 3 stats.php, 4 search.php, 5 rate.php, 6 main.php, 7 license.php, 8 category.php, 9 download.php, 10 file.php, 11 email.php, or 12...

CVE-2005-0725

SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections wfsections 1.07 allows remote attackers to execute arbitrary SQL commands via the articleid parameter to article.php...

CVE-2005-0448

CVE-2005-0448 affects the Perl File::Path.rmtree code path in Perl before 5.8.4. The race condition in File::Path.pm (rmtree) may allow local users to create arbitrary setuid binaries in the directory tree being deleted. This entry is corroborated by multiple connected advisories and Nessus plugi...

CVE-2005-0722

CVE-2005-0722 affects eXPerience2. A remote attacker can trigger a PHP error by requesting modules.php with no parameters, causing the web root full path to be disclosed in the error message. This is a path disclosure vulnerability rather than code execution. The available documents do not specif...

CVE-2005-0718

CVE-2005-0718 affects Squid 2.5.STABLE7 and earlier; a remote attacker can cause a denial of service by aborting a PUT or POST, leading Squid to access freed memory and crash. Public advisories (RHSA-2005:415 for SLES/CentOS, USN-111-1 for Ubuntu) document a patched package upgrade to fix this is...

CVE-2005-0724

CVE-2005-0724 affects paFileDB versions 3.1 and earlier. Affected component: PHP application paFileDB; root cause is that an invalid str parameter to pafiledb.php or direct requests to viewall.php, stats.php, search.php, rate.php, main.php, license.php, category.php, download.php, file.php, email...

CVE-2005-0728

CVE-2005-0728 entry is rejected/not used; duplicate of CVE-2005-0736.

CVE-2005-0720

CVE-2005-0720 documents a PHP remote file inclusion vulnerability in the admin/header.php component of mcNews 1.3 . An attacker can cause the application to execute arbitrary PHP code by altering the skinfile parameter to reference a URL on a remote server that contains the code. The description ...

CVE-2005-0710

CVE-2005-0710: MySQL <= 4.0.23 and

CVE-2005-0711

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack...

CVE-2005-0709

CVE-2005-0709 affects MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10. The vulnerability arises from insufficient input validation in CREATE FUNCTION, allowing a remote authenticated user with INSERT and DELETE privileges to access libc calls (e.g., strcat, on_exit, exit) and potentially execute...

CVE-2005-0731

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to cause a denial of service CPU consumption via a direct request to Filelist.html...

CVE-2005-0707

Ipswitch Collaboration Suite's IMAP server (IMAP4d32.exe) is affected by a buffer overflow in the IMAP EXAMINE handler, allowing remote authenticated attackers to execute arbitrary code. The issue exists in ICS before 8.15 Hotfix 1; iDEFENSE describes a 259-byte malformed mailbox name causing sta...

CVE-2005-0703

The CVE-2005-0703 entry concerns Xerox MicroServer Web Server used by WorkCentre models (e.g., M35/M45/M55, Pro series, and others). The vulnerability arises from an unauthenticated account on the embedded web server that allows a remote attacker to modify device configuration, effectively bypass...

CVE-2005-0736

Integer overflow in sysepollwait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events...

CVE-2005-0701

Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\.\.." modified dot dot backslash sequences to UTLFILE functions such as 1 UTLFILE.FOPEN or 2 UTLFILE.frename...

CVE-2005-0699

Multiple buffer overflows in the dissecta11radius function in the CDMA A11 3G-A11 dissector packet-3g-a11.c for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values...

CVE-2005-0548

Sun AnswerBook2 (Solaris)

CVE-2005-0548

Cross-site scripting XSS vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search function...

CVE-2005-0207

CVE-2005-0207 corresponds to an unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x where NFS clients can trigger a denial of service via NFS client O_DIRECT error handling. The issue is documented in multiple advisories (RHSA-2005:366 / CESA-2005:366) and CentOS/Ubuntu/NVD entries. Aff...