CVE-2005-0542

The CVE-2005-0542 entry concerns Cyclades AlterPath Manager (APM) Console Server 1.2.1. The flaw allows local privilege escalation by setting the adminUser parameter to true in saveUser.do. No exploitation details or patch/version remediation are provided in the connected documents; exploitation ...

CVE-2005-0160

The CVE-2005-0160 issue concerns the unace library’s handling of ACE archives, where multiple buffer overflows in the unpacking/extraction logic (and a vulnerability related to very long command-line arguments) can enable remote code execution. Several connected entries confirm a vulnerability in...

CVE-2005-0598

The RealServer RealSubscriber on Cisco devices running Application and Content Networking System ACNS 5.1 allow remote attackers to cause a denial of service CPU consumption via malformed packets...

CVE-2005-0535

Cross-site request forgery CSRF vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users...

CVE-2005-0544

phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server via direct requests to 1 sqlvalidator.lib.php, 2 sqlparser.lib.php, 3 selecttheme.lib.php, 4 selectlang.lib.php, 5 relationcleanup.lib.php, 6 headermetastyle.inc.php, 7 getforeign.lib.php, 8 displaytbllinks.lib.php, 9...

CVE-2005-0539

Unknown vulnerability in IBM Hardware Management Console HMC before 4.4 for POWER5 servers allows local users to gain privileges, related to the Guided Setup Wizard...

CVE-2005-0535

Cross-site request forgery CSRF vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users...

CVE-2005-0530

Signedness error in the copyfromreadbuf function in ntty.c for Linux kernel 2.6.10 and 2.6.11rc1 allows local users to read kernel memory via a negative argument...

CVE-2005-0529

Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the procfileread and locksreadproc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context...

CVE-2005-0529

CVE-2005-0529 concerns Linux kernel versions 2.6.10 and 2.6.11rc1-bk6, where proc_file_read and locks_read_proc use mismatched size types for offsets, causing a heap-based buffer overflow when a signed comparison yields negative values used in a positive context. Several connected advisories conf...

CVE-2005-0538

Technical details about CVE-2005-0538 are not publicly available in the provided connected documents. Current entries reiterate the directory-traversal description but do not specify affected versions beyond 0.22 or remediation. Monitor for official updates.

CVE-2005-0541

The CVE-2005-0541 issue affects Cyclades AlterPath Manager (APM) Console Server 1.2.1. The vulnerability is in consoleConnect.jsp, where an attacker can modify the consolename parameter to connect to arbitrary consoles. The NVD entry lists a high base score of 7.5 (NETWORK, LOW complexity, no aut...

CVE-2005-0537

CVE-2005-0537: Multiple SQL injection vulnerabilities in page.php of iGeneric (iG) Shop 1.2 allow remote attackers to inject arbitrary SQL via the parameters cats, l_price, or u_price. The connected records also describe a related SQL injection in iG Shop 1.4 (CVE-2007-2717) via the type_id[] par...

CVE-2005-0535

MediaWiki is affected by a CSRF vulnerability (CVE-2005-0535) in 1.3.x prior to 1.3.11 and 1.4 beta prior to 1.4 RC1, allowing remote attackers to perform actions as authenticated users. The issue is documented across multiple sources (NVD entry, Gentoo GLSA-200502-33, and related advisories), wi...

CVE-2005-0540

Technical details about CVE-2005-0540 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2005-0543

Cross-site scripting XSS vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via 1 the strServer, cfgBgcolorOne, or strServerChoice parameters in selectserver.lib.php, 2 the bgcolor or rowno parameters in displaytbllinks.lib.php, the leftfontfamily...

CVE-2005-0542

saveUser.do in Cyclades AlterPath Manager APM Console Server 1.2.1 allows local users to gain privileges by setting the adminUser parameter to true...

CVE-2005-0541

consoleConnect.jsp in Cyclades AlterPath Manager APM Console Server 1.2.1 allows remote attackers to connect to arbitrary consoles by modifying the consolename parameter...

CVE-2005-0540

Cyclades AlterPath Manager APM Console Server 1.2.1 allows remote attackers to obtain sensitive information via a direct request to the /about.html page...

CVE-2005-0533

CVE-2005-0533: Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI prior to 7.510, used across multiple Trend Micro products. An overly long ARJ header file name can overrun a buffer in the ARJ parsing path, enabling remote code execution when a crafted ARJ archive is scanned. Affec...