CVE-2005-0514

Cross-site scripting XSS vulnerability in Verity Ultraseek before 5.3.3 allows remote attackers to inject arbitrary HTML and web script via search parameters...

CVE-2005-0513

PHP remote file inclusion vulnerability in mailautocheck.php in the Email This Entry add-on for pMachine Pro 2.4, and possibly other versions including pMachine Free, allows remote attackers to execute arbitrary PHP code by directly requesting mailautocheck.php and modifying the pmpath parameter ...

CVE-2005-0518

Affected software: eXeem 0.21. Vulnerability: Credentials (proxy_user and proxy_password) are stored in plaintext in the Exeem registry key, enabling local users to gain privileges. Root cause: Insecure storage of sensitive credentials within the application’s registry entries. Impact: Local priv...

CVE-2005-0523

ProZilla: format-string vulnerability in Location header affecting 1.3.7.3 and earlier that enables remote code execution. Debian/DSA-719-1 fixes in prozilla available (1.3.7.4-1 and related) and advisories recommend upgrading.

CVE-2005-0516

CVE-2005-0516 affects the Twiki ImageGalleryPlugin (ImageGalleryPlugin.pm). The vulnerability is a remote command-injection flaw exposed via certain thumbnail-generation commands, potentially allowing an attacker to execute arbitrary commands on the server. Connected sources corroborate a shell-c...

CVE-2005-0519

ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut .LNK file, using SITE UNZIP to extract the .LNK file onto the server, then accessing the file, a different vulnerability than CVE-2005-0520...

CVE-2005-0517

The CVE-2005-0517 entry relates to PeerFTP_5: sensitive data (passwords) stored in plaintext in PeerFTP.ini, enabling local users to gain privileges. The available documents confirm the root cause as plaintext credential storage and local-privilege impact. No explicit patch/version details or exp...

CVE-2005-0521

CVE-2005-0521 affects SendLink 1.5. The issue arises because the product stores sensitive information—possibly passwords—in plaintext within the data.eat file, enabling local users to gain privileges. The available documentation does not disclose exploit vectors, in-the-wild exploitation, or conc...

CVE-2005-0518

eXeem 0.21 stores sensitive information such as passwords in plaintext in the Exeem registry key, which allows local users to gain privileges via the proxyuser and proxypassword values...

SUSE-SA:2005:008: squid

The remote host is missing the patch for the advisory SUSE-SA:2005:008 squid. Squid is an Open Source web proxy. A remote attacker was potentially able to crash the Squid web proxy if the logfqdn option was set to 'on' and the DNS replies were manipulated. This is tracked by the Mitre CVE ID...

CVE-2005-0504

CVE-2005-0504 is a buffer overflow in the MoxaDriverIoctl function of the MOXA serial driver (moxa.c) in Linux 2.2.x, 2.4.x, and 2.6.x prior to 2.6.22. This vulnerability could allow a local unprivileged user to execute arbitrary code via a modified length value. The CVE is referenced in multiple...

CVE-2005-0259

CVE-2005-0259 affects phpBB 2.0.11 (and possibly other versions) where enabling remote avatars and avatar uploading allows local users to read arbitrary files by providing both a local and remote avatar location and setting the “Upload Avatar from a URL:” field to reference the target file. Root ...

CVE-2005-0509

CVE-2005-0509 : The connected documents confirm a vulnerability in the Mono 1.0.5 implementation of ASP.NET (.Net) where Unicode representations for ASCII fullwidth characters (e.g., that are converted to normal ASCII like ">" and "

CVE-2005-0258

CVE-2005-0258 is a directory traversal vulnerability in phpBB 2.0.11 (and possibly later versions) affecting the avatar handling paths when Gallery avatars are enabled. The issue resides in the code paths for usercp_avatar.php and usercp_register.php , where remote input can be manipulated with “...

CVE-2005-0535

Cross-site request forgery CSRF vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users...

CVE-2005-0510

The CVE-2005-0510 issue affects the daemon for fallback-reboot and allows a denial of service (daemon exit) in versions prior to 0.995, possibly related to verbose debug messages when the daemon is not attached to a tty. The provided documents confirm the vulnerability description but do not supp...

CVE-2005-0510

The daemon for fallback-reboot before 0.995 allows attackers to cause a denial of service daemon exit, possibly related to verbose debug messages when the daemon is not on a tty...

CVE-2005-0505

Unknown vulnerability in Information Resource Manager IRM before 1.5.2.1 allows remote attackers to have "potentially serious" impact, related to LDAP logins...

CVE-2005-0507

CVE-2005-0507 describes a directory traversal vulnerability in SD Server 4.0.70 and earlier that allows remote attackers to read arbitrary files via .. sequences in an HTTP request. The affected software is SD Server (versions up to and including 4.0.70); the underlying issue is improper validati...

CVE-2005-0258

Directory traversal vulnerability in 1 usercpregister.php and 2 usercpavatar.php for phpBB 2.0.11, and possibly other versions, with gallery avatars enabled, allows remote attackers to delete unlink arbitrary files via "/../" sequences in the avatarselect parameter...