CVE-2005-2814

Cross-site scripting XSS vulnerability in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the usr parameter in a visreg operation to index.php...

CVE-2005-2814: Undefined Security Weakness

Cross-site scripting XSS vulnerability in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the usr parameter in a visreg operation to index.php...

CVE-2004-2479: Undefined Security Weakness

Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages...

CVE-2005-2115

Soldier of Fortune II 1.02x and 1.03 allows remote attackers to cause a denial of service server crash via a large ID value in the ignore command, which is used as an array index and causes an out-of-bounds operation...

CVE-2005-2115: Undefined Security Weakness

Soldier of Fortune II 1.02x and 1.03 allows remote attackers to cause a denial of service server crash via a large ID value in the ignore command, which is used as an array index and causes an out-of-bounds operation...

CVE-2002-1952: Undefined Security Weakness

phpRank 1.8 does not properly check the return codes for MySQL operations when authenticating users, which could allow remote attackers to authenticate using a NULL password when database errors occur or if the database is unavailable...

CVE-2002-1668

HP-UX 11.11 and earlier allows local users to cause a denial of service kernel deadlock, due to a "file system weakness" that is possibly via an mmap system call and performing an I/O operation using data from the mapped buffer on the file descriptor for the mapped file...

CVE-2005-0146

Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Javascript that generates a middle-click event on systems for which a middle-click performs a paste operation...

CVE-2005-0305

CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users and gain privileges via the line parameter in a docreate operation...

CVE-2005-1349

Buffer overflow in Convert-UUlib Convert::UUlib before 1.051 allows remote attackers to execute arbitrary code via a malformed parameter to a read operation...

GLSA-200504-26 : Convert-UUlib: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200504-26 Convert-UUlib: Buffer overflow A vulnerability has been reported in Convert-UUlib where a malformed parameter can be provided by an attacker allowing a read operation to overflow a buffer. The vendor credits Mark Martine...

Windows 2003 Server DoS vulnerabilities

DoS on network operation during high CPU load, on printing in terminal sessions...

CVE-2004-1751

Technical details about CVE-2004-1751 are not provided in the connected documents. The available sources restate the vulnerability description without specifics on affected products, root cause, versions, or fixes. Monitor for updates.

CVE-2004-1751: Undefined Security Weakness

Ground Control II: Operation Exodus 1.0.0.7 and earlier allows remote servers to cause a denial of service client or server crash via a large packet, which generates a "Message too long" socket error that is treated as a critical error...

CVE-2004-1608: Undefined Security Weakness

SQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL statements via the id parameter in a view operation...

CVE-2004-1529: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execute arbitrary web script via the 1 type, 2 day, 3 month, or 4 year parameters in a Preview operation, or 5 event comments...

Xpand Rally 1.0.0.0 (Server/Clients) - Crash

/ by Luigi Auriemma / include include include ifdef WIN32 include / inserted winerr.h /str0ke / / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 1000...

CVE-2005-0108

Apache modauthradius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to cause a denial of service crash via a RADIUSREPLYMESSAGE with a RADIUS attribute length of 1, which leads to a memcpy operation with a -1 length argument...

CVE-2005-0108

Apache modauthradius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to cause a denial of service crash via a RADIUSREPLYMESSAGE with a RADIUS attribute length of 1, which leads to a memcpy operation with a -1 length argument...

CVE-2004-1188

The pnmgetchunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the PREAMBLESIZE, which causes a read operation with a negative length that leads to a buffer overflow via 1 RMFTAG, 2 DATATAG,...