CAN-2005-0021

CVE-2005-0021 and CVE-2005-0022 affect Exim MTA. The host_aton() function overflows a buffer when given an illegal IPv6 address with more than 8 components, potentially allowing local code execution. The spa_base64_to_bits() function (SPA authentication) overflows a buffer, potentially enabling a...

CAN-2005-0385

CVE-2005-0385 refers to a buffer overflow in luxman, an SVGA-based PacMan clone. The issue is a local root vulnerability triggered by an overly long -f argument, potentially allowing arbitrary code execution as root on affected systems. Debian’s DSA-693-1 describes the fix: version 0.41-17.2 (and...

CAN-2005-0870

CVE-2005-0870 is associated with phpsysinfo, a PHP-based host-information utility, as reflected in multiple advisories (e.g., Debian DSA-724/897/898 and OpenVAS entries). The connected documents describe several issues: cross-site scripting (XSS) vulnerabilities (CVE-2005-0870) and related proble...

CAN-2005-1858

This CVE affects FUSE (filesystem in userspace): FUSE 2.x before 2.3.0 fails to clear memory from unfilled pages after a read returns a short byte count, potentially allowing local users to disclose sensitive information. The Debian advisory (DSA-744-1) links CVE-2005-1858 to fuse and notes a fix...

CAN-2005-1686

CVE-2005-1686 is a format-string vulnerability in gedit (GNOME text editor) affecting multiple platforms. Connected advisories note a flaw in gedit’s filename handling that could permit arbitrary code execution. Public fixes exist across affected OS families, including Solaris patches (e.g., 1202...

CAN-2005-2277

CVE-2005-2277 affects Nokia Affix BTFTP (Bluetooth FTP client) in AS platforms; root cause is missing input sanitisation before executing shell commands, allowing remote attackers to run arbitrary commands via shell metacharacters in the PUT filename. Affected: Affix BTFTP 2.1.2 and 3.2.0. Mitiga...

CAN-2005-2772

CVE-2005-2772 affects the gopher client. Debian advisory DSA-832-1 reports remote buffer overflow vulnerabilities that can be triggered by a malicious Gopher server, with fixes applied in gopher 3.0.7sarge2 (and earlier 3.0.3woody4) across woody/sarge releases. The associated Nessus/NVD/OSV refer...

CAN-2005-2871

Summary (CVE-2005-2871) : A buffer/heap overflow in IDN hostname handling affects Mozilla Firefox and derivatives (e.g., Thunderbird). Improper processing of international domain names (IDN) can allow a remote attacker to cause a crash or execute arbitrary code in the user’s security context. The...

CAN-2005-2878

CVE-2005-2878 : A format-string vulnerability exists in GNU mailutils imap4d’s handling of IMAP SEARCH commands. An authenticated attacker could execute arbitrary code on the target system with the imap4d privileges. Affected products: mailutils imap4d (Debian, Gentoo GLSA, etc.). Root cause: ins...

CAN-2005-2661

CVE-2005-2661 affects up-imapproxy (IMAP Proxy). The vulnerability is a format-string error in ParseBannerAndCapability in main.c that affects up-imapproxy versions 1.2.3 and 1.2.4, allowing a remote attacker to execute arbitrary code via crafted banner or capability lines. Advisories indicate re...

CAN-2005-1279

The CAN-2005-1279 entry corresponds to tcpdump vulnerabilities in the BGP dissector (RT_ROUTING_INFO handling) that can cause a denial of service via an infinite loop when processing crafted packets. Public advisories and patches exist across multiple distributions: Debian DSA-850-1/DSA-850 fix t...

CAN-2005-2967

CVE-2005-2967 is a format-string vulnerability in the CDDB processing component of the xine-lib library. Across multiple distributions (Debian, Ubuntu, Gentoo, Mandrake/Mandriva, FreeBSD ports, etc.), advisories describe that an attacker can cause arbitrary code execution by pointing a vulnerable...

CVE-2023-51119

CVE-2023-51119 is connected to an improper access control flaw in the D-Link DIR-605L router. The exploit document describes that, once a legitimate admin is logged in, an attacker can perform actions on the web configuration panel without further authentication, effectively taking over the admin...

CVE-2023-977966

CVE-2023-3018 details (from connected documents): SourceCodester Lost and Found Information System 1.0 is affected. The vulnerability resides in an improper access control on the /admin/?page=user/list path, allowing remote attackers to access admin functionalities and potentially edit admin pass...

CVE-2023-24100

Technical details about CVE-2023-24100 are not publicly available in the provided documents. The initial entry is a placeholder/reserved. Monitor connected sources (e.g., CIRCL sighting, exploit references) for updates.

CVE-2023-24034

CVE-2023-24034 is an open redirect vulnerability in Nagios XI

CVE-2023-26025

Technical details for CVE-2023-26025 are not provided in the supplied documents. Public information appears reserved or missing; monitor for updates and new disclosures.

CVE-2023-47400

CVE-2023-47400 corresponds to Nagios XI, with exploitation details showing authenticated PHP remote code execution via arbitrary file write in the Custom Includes module (Nagios XI 5.11.0). The PoC demonstrates bypassing file upload filters by using a placeholder image, renaming it to .htaccess t...

CVE-2022-33079

CVE-2022-33079 entry is a reserved placeholder in the Initial document. Connected documents contain PoC-style exploits labeled for CVE-2022-33079 (e.g., a Python script with usage syntax targeting a Kerberos/serverName context and references to RC4). No concrete vendor/product/version details, ro...

CVE-2022-27414

CVE-2022-27414 maps to College Website CMS v1.0. PT-2022-18410 documents an SQL injection flaw in College Website v1.0 CMS (SQLi in departments/index.php via department_id) which can expose data (e.g., users table). The GitHub exploit page provides a PoC demonstrating a union-based payload to ext...