CVE-2005-2430

Affected software: GForge (notebook mentions GForge 4.5). Vulnerability: Multiple cross-site scripting (XSS) flaws in GForge that allow remote injection of web script/HTML via various parameters (forum_id, group_id, project_task_id, id, search text, qrs.php, form/rows/cols/wrap in notepad.php, an...

Netquery 3.1 - 'nqports2.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14373/info Netquery is affected by multiple remote vulnerabilities. These issues can allow remote attackers to execute arbitrary commands, disclose sensitive information and carry out cross-site scripting attacks. Netquery 3.1 is affected by these...

security flaw

The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly distinguish between user-generated events and untrusted synthetic events, which makes it easier for remote attackers to perform dangerous actions that normally could only be...

CVE-2005-1175

Heap-based buffer overflow in the Key Distribution Center KDC in MIT Kerberos 5 krb5 1.4.1 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a certain valid TCP or UDP request...

CVE-2005-2285

CVE-2005-2285 concerns WebEOC prior to version 6.0.2, where sensitive information was stored in insecure locations such as URIs, web pages, and configuration files. This could allow remote attackers to obtain credentials and other sensitive data (e.g., usernames, passwords, emergency and medical ...

CVE-2002-2020

Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26 uses a default administrator password and accepts admin logins on the external interface, which allows remote attackers to gain privileges if the password is not changed...

CVE-2001-1526

Cross-site scripting XSS vulnerability in the comments action in index.php in easyNews 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the zeit parameter...

CVE-2001-1552

CVE-2001-1552 affects Windows ME where the service ssdpsrv.exe can be triggered remotely to cause a denial of service by sending multiple newline characters in an SSDP message. The NVD/CVE records describe the vulnerability as a DoS condition without mentioning code-level details, impacted versio...

CVE-2000-1232

The CVE-2000-1232 entry concerns Phorum 3.0.7, where upgrade.php3 could allow remote attackers to modify certain Phorum database tables via an unknown method. The connected documents confirm the affected product/version and the basic impact (unauthorized modification of database tables), but they...

CVE-2001-1547

Outlook Express 6.0 vulnerability: when the setting to block potentially virus-laden attachments is enabled, forwarded messages may bypass this and allow remote code execution. Affected component is attachments handling in forwarded email. The provided documents state the issue but do not specify...

CVE-2001-1525

The CVE-2001-1525 vulnerability affects easyNews 1.5 and earlier, where the comments action is vulnerable to directory traversal. An attacker can modify files such as news.dat and template.dat by supplying a ".." in the cid parameter, indicating a path traversal through the comments functionality...

EUVD-2005-2096

optionsidentities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $POST variable, which allows remote attackers to modify or read the preferences of other users, conduct cross-site scripting XSS attacks, and write arbitrary files...

CVE-2004-2185

MediaWiki 1.3.5 is affected by multiple XSS vulnerabilities affecting the UnicodeConverter extension, raw page views, SpecialIpblocklist, SpecialEmailuser, SpecialMaintenance, and ImagePage. The connected documents confirm the flaws but do not provide explicit remediation steps or fixed versions....

PHPAUCTION Multiple Vulnerabilities

Binary data 3055.prm...

CVE-2005-2087

Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that...

CVE-2001-1505

tinc 1.0pre3 and 1.0pre4 allows remote attackers to inject data into user sessions by sniffing and replaying packets...

CVE-2002-1732

Multiple cross-site scripting XSS vulnerabilities in Actinic Catalog 4.7.0 allow remote attackers to inject arbitrary web script or HTML via 1 the query string argument to certain .pl files, 2 the REFPAGE parameter to ca000007.pl, 3 PRODREF parameter to ss000007.pl, or 4 hop parameter to...

CVE-2002-1755

tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on CBC...

CVE-2005-2011

paFAQ 1.0 Beta 4 contains multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML, demonstrated via the id parameter in a Question action. The CVE-2005-2011 entry is corroborated by multiple sources in the provided documents (NVD/CVE record, CVE list, and N...

CVE-2005-1306

Adobe Reader/Acrobat 7.0 and 7.0.1 are affected by an information-disclosure vulnerability (XML External Entity) that lets remote attackers determine the existence of local files via Javascript containing XML script. Affected component is the Adobe Reader control; root cause is XML External Entit...