CAN-2002-1132

SquirrelMail vulnerability CVE-2002-1132: versions up to 1.2.7 and earlier allow remote attackers to determine the absolute pathname of options.php via a malformed optpage argument, leading to information disclosure. Debian advisories state the fix is in version 1.2.6-1.2 for woody and 1.2.8-1.1 ...

CAN-2003-0972

Mode C: The CAN-2003-0972 entry corresponds to the Debian screen local vulnerability (integer overflow) affecting screen, a VT100/ANSI terminal multiplexer. The connected advisories describe an exploitable condition causing local privilege escalation by overflowing buffers through crafted escape ...

CAN-2004-1000

CVE-2004-1000 (lintian) concerns the Debian lintian checker: it removes the working directory even if it wasn’t created at program start, enabling a local attacker to delete arbitrary files via a symlink attack. This insecure temporary-directory behavior is the root cause. Remediations are provid...

CAN-2005-0016

CVE-2005-0016 describes a buffer overflow in the exported_display function of xatitv in gatos before 0.0.5, allowing local users to execute arbitrary code. The available sources (NVD/OSV/CVE lists and SUSE/OSVDebian/etc.) confirm the affected component and the local-code-execution impact. The pro...

CAN-2005-0021

CVE-2005-0021 and CVE-2005-0022 affect Exim MTA. The host_aton() function overflows a buffer when given an illegal IPv6 address with more than 8 components, potentially allowing local code execution. The spa_base64_to_bits() function (SPA authentication) overflows a buffer, potentially enabling a...

CAN-2005-0074

CAN-2005-0074 corresponds to a buffer overflow in xpcd’s SVGA viewer pcdsvgaview (part of xpcd). The vulnerability arises from a fixed-size buffer overflow that can allow a local user to execute arbitrary code with elevated privileges. Debian’s DSA-676-1 fixes this by updating xpcd-svga to a patc...

CAN-2005-0390

CVE-2005-0390 corresponds to a buffer overflow in Axel (an HTTP/HTTPS download accelerator). The connected documents clearly describe a vulnerability in Axel before version 1.0b where the program’s handling of remote input (specifically in the HTTP redirection/conn.c path) can overflow a buffer a...

CAN-2005-0814

The CVE entry CVE-2005-0814 is connected to multiple advisories and vulnerability checks for the LSH (LSH/Lsh) family. Publicly cited details describe a remote DoS vulnerability affecting lshd in Lysator LSH 1.x/2.x prior to 2.0.1, with reports of issues in various platforms (e.g., FreeBSD ports,...

CAN-2005-2654

CVE-2005-2654 affects phpldapadmin and allows anonymous access to the LDAP server via login.php with anonymous_bind, even when disable_anon_bind is configured. Related advisories (Debian DSA-790-1, Gentoo GLSA 2005-09-04) describe authentication bypass for phpldapadmin and note updates/upgrades (...

CAN-2005-1920

CVE-2005-1920 is linked to info disclosure in KDE's backup file handling (Kate/Kwrite) within the KDE libraries (kdelibs3; related kdebase components). The OpenVAS entries reference kdelibs3 and kdebase across multiple distributions (e.g., Debian DSA-804-2, Gentoo GLSA, and SLES/SUSE advisories),...

CAN-2005-2876

CVE-2005-2876 is not a reserved placeholder in connected docs; multiple advisories (Debian DSA-825-1, Debian DSA-823-1, Gentoo GLSA 200509-15, SLES9, Slackware advisory) describe a bug in util-linux related to the mount utility that could allow local users to bypass filesystem access restrictions...

CAN-2005-2871

Summary (CVE-2005-2871) : A buffer/heap overflow in IDN hostname handling affects Mozilla Firefox and derivatives (e.g., Thunderbird). Improper processing of international domain names (IDN) can allow a remote attacker to cause a crash or execute arbitrary code in the user’s security context. The...

CAN-2005-2498

The connected OpenVAS/Gentoo/SuSE Slackware advisories reference CVE-2005-2498 in multiple contexts (Gentoo GLSA 200508-14 and 200508-18 for tikiwiki/egroupware; SLES9 PHP4 update; Slackware SSA entries). Reported CVSS base 7.5 in these records; no concrete exploit details or vulnerable versions ...

CAN-2005-3118

CVE-2005-3118 (CAN-2005-3118) affects the Mason firewall configuration tool. The vulnerability is a programming error where Mason does not install the init script to load the firewall on boot, leaving the system without a firewall after reboot. Affected: Mason before 1.0.0; Debian/DSA-845-1 notes...

CAN-2005-2875

The CVE CAN-2005-2875 corresponds to Py2Play, a peer-to-peer game engine, where a design error allows remote code execution by processing untrusted pickled objects. Public advisories (Debian DSA-856-1 and related Debian/Nessus entries) describe that Py2Play can execute arbitrary code received fro...

CAN-2005-2958

The CVE-2005-2958 entry concerns the GNOME Data Access library libgda/libgda2. Two format string vulnerabilities in its logging routines could potentially allow arbitrary code execution in applications that use libgda. Diverse advisories (Debian DSA 871-1/871-2, Gentoo GLSA 200511-01, OpenVAS ent...

CVE-2021-44910

CVE-2021-44910 is described in the NUCLEI template as an information-leak issue in the SpringBlade framework. The root cause is a default SIGN_KEY used for JWT signing, which can be exploited to forge tokens and access sensitive data (e.g., user credentials, password hashes, and logs) within Spri...

CVE-2023-41605

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2202-3602

CVE-2022-3602 is an OpenSSL OpenSSL 3.x risk (X.509 certificate verification buffer overrun). It was addressed by fixes in OpenSSL 3.0.7 and is discussed alongside CVE-2022-3786. Microsoft guidance notes that OpenSSL 3.0.x remains affected until patched; affected products include OpenSSL consumer...

CVE-2023-37811

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...