CVE-2005-0687

Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service memory consumption and possibly execute arbitrary code via format string specifiers in a reply address, which is not properly handled when printing the header...

CVE-2005-0099

The SDL port of abuse abuse-SDL before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files...

CVE-2005-0696

Buffer overflow in ArGoSoft FTP Server 1.4.2.8 allows remote authenticated users to execute arbitrary code via a long DELE command. NOTE: this issue was later reported to also affect 1.4.3.5...

CVE-2005-0109

Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic key...

CVE-2005-0664

CVE-2005-0664 concerns a buffer overflow in libexif 0.6.9 due to improper validation of EXIF tag structures, enabling a crafted JPEG image to cause an application crash and potentially allow remote code execution. Publicly documented impact is a crash and possible arbitrary code execution, with e...

CVE-2005-0687

Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service memory consumption and possibly execute arbitrary code via format string specifiers in a reply address, which is not properly handled when printing the header...

CVE-2005-0697

CopperExport XP_Publish.PHP SQL Injection (CVE-2005-0697) affects CopperExport 0.2.1 via the xp_publish.php process_picture function. The vulnerability arises from unsanitized input used in a SQL query, potentially allowing an attacker to inject arbitrary SQL commands via the title, caption, or k...

CVE-2005-0723

Cross-site scripting XSS vulnerability in the jumpmenu function in functions.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL parameters, which is not properly cleansed in the $pageurl variable, as demonstrated using pafiledb.php...

CVE-2005-0725

SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections wfsections 1.07 allows remote attackers to execute arbitrary SQL commands via the articleid parameter to article.php...

CVE-2005-0626

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...

CVE-2005-0691

The CVE-2005-0691 issue is a PHP remote file inclusion in SocialMPN’s modules.php (article mode). The name parameter can reference a remote URL to execute arbitrary PHP code, enabling remote code execution on the server. The document set does not specify affected versions or a patch. NVD data lis...

CVE-2005-0686

CVE-2005-0686 affects mlterm versions 2.5.0 through 2.9.1 when compiled with gtk/gdk-pixbuf support. The issue is an integer overflow triggered by a specially crafted large background image, enabling remote code execution with user privileges. Public reports/entries consistently describe the vuln...

CVE-2005-0692

PHP-Fusion 5.x is affected by CVE-2005-0692 due to an XSS vulnerability in fusion_core.php. An attacker can inject arbitrary web script or HTML via a message containing an IMG BBCode that carries character-encoded Javascript, which will execute in the victim’s browser when the malicious BBCode is...

CVE-2005-0695

The password recovery feature forgotpassword.asp in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field...

CVE-2005-0692

Cross-site scripting XSS vulnerability in fusioncore.php for PHP-Fusion 5.x allows remote attackers to inject arbitrary web script or HTML via a message with IMG bbcode containing character-encoded Javascript...

CVE-2005-0691

PHP remote file inclusion vulnerability in article mode for modules.php in SocialMPN allows remote attackers to execute arbitrary PHP code by modifying the name parameter to reference a URL on a remote web server that contains the code...

CVE-2005-0689

includer.cgi in The Includer allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the URL or 2 the template parameter...

CVE-2005-0688

Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service CPU consumption via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability CVE-1999-0016...

CVE-2005-0099

The SDL port of abuse abuse-SDL before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files...

CVE-2005-0685

CVE-2005-0685 : Multiple access validation errors in OutStart Participate Enterprise (PE) allow remote attackers to perform unauthorized actions by manipulating parameters such as rootFolder, selectedObject, and selectedObjectsCSV across various views/commands (displaynavigator.jsp, renamepopup.j...