CVEs

343,083 total · page 6559 of 6,862

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2005-4648	Illustrate Dbpoweramp Music Converter		0.00	—	0.03	Dec 31, 2005	Buffer overflow in Illustrate dBpowerAMP Music Converter 11.5 and earlier, possibly including (1) MusicConverter.exe, (2) playlist.exe, and (3) amp.exe, allows user-assisted attackers to cause a denial of service or execute arbitrary code via a .m3u playlist with a long entry,…
CVE-2005-4649	Advanced Guestbook Advanced Guestbook		0.00	—	0.01	Dec 31, 2005	Multiple cross-site scripting (XSS) vulnerabilities in Advanced Guestbook 2.2 and 2.3.1 allow remote attackers to inject arbitrary web script or HTML via (1) the entry parameter in index.php and (2) the gb_id parameter in comment.php. NOTE: The index.php/entry vector might be…
CVE-2005-4650	Joomla Joomla!	Med	0.35	5.3	0.02	Dec 31, 2005	Joomla! 1.03 does not restrict the number of "Search" Mambots, which allows remote attackers to cause a denial of service (resource consumption) via a large number of Search Mambots.
CVE-2005-4651	Alstrasoft Epay		0.00	—	0.01	Dec 31, 2005	SQL injection vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the pmodule parameter.
CVE-2005-4652	Phlymail Phlymail		0.00	—	0.01	Dec 31, 2005	SQL injection vulnerability in PHlyMail 3.02.01 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
CVE-2005-4653	Al Caricatier Al Caricatier		0.00	—	0.02	Dec 31, 2005	Unspecified vulnerability in ss.php in AL-Caricatier 2.5 and earlier allows remote attackers to bypass login authentication by requesting view_caricatier.php, and then requesting any file in the admin directory with a cookie_username=admin argument.
CVE-2005-4654	Microfocus Oracle For Openview		0.00	—	0.04	Dec 31, 2005	Multiple unspecified vulnerabilities in Oracle for OpenView (OfO) 8.1.7, 9.1.01, and 9.2, and OfO for Linux, allow remote attackers to have an unknown impact via unknown attack vectors. NOTE: because of the lack of details in the vendor advisory, it is unclear which set of…
CVE-2005-4655	PHP-Fusion Phpfusion		0.00	—	0.01	Dec 31, 2005	Cross-site scripting (XSS) vulnerability in submit.php in PHP-Fusion 6.0.204 allows remote attackers to inject arbitrary web script or HTML via nested tags in the news_body parameter, as demonstrated by elements such as "<meta" and "<script>".
CVE-2005-4656	TClanPortal TClanPortal		0.03	—	0.01	Dec 31, 2005	SQL injection vulnerability in index.php in TClanPortal 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands, and retrieve all usernames and passwords, via the id parameter.
CVE-2005-4657	Ocean12 Calendar manager		0.03	—	0.03	Dec 31, 2005	Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2005-4658	Iisworks Aspknowledgebase		0.00	—	0.01	Dec 31, 2005	Multiple cross-site scripting (XSS) vulnerabilities in ASP-Programmers.com ASPKnowledgebase allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface.
CVE-2005-4659	Ipcop Ipcop		0.00	—	0.00	Dec 31, 2005	IPCop (aka IPCop Firewall) before 1.4.10 has world-readable permissions for the backup.key file, which might allow local users to overwrite system configuration files and gain privileges by creating a malicious encrypted backup archive owned by "nobody", then executing…
CVE-2005-4660	Ipcop Ipcop		0.00	—	0.00	Dec 31, 2005	Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window when the archive is owned by "nobody" but not yet encrypted, then executing…
CVE-2005-4661	Sourcefabric Campsite		0.00	—	0.01	Dec 31, 2005	The notifyendsubs cron job in Campsite before 2.3.3 sends an e-mail message containing a certain unencrypted MySQL password, which allows remote attackers to sniff the password.
CVE-2005-4662	Ocomon Ocomon		0.00	—	0.01	Dec 31, 2005	Multiple SQL injection vulnerabilities in OcoMon 1.20, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via unknown attack vectors in an unspecified input form, a different vulnerability than CVE-2005-4664.
CVE-2005-4663	Ocomon Ocomon		0.00	—	0.01	Dec 31, 2005	Cross-site scripting (XSS) vulnerability in OcoMon 1.20, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
CVE-2005-4664	Ocomon Ocomon		0.03	—	0.01	Dec 31, 2005	SQL injection vulnerability in OcoMon 1.21, and possibly other versions, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the logon page, a different vulnerability than CVE-2005-4662.
CVE-2005-4665	Punbb Punbb		0.00	—	0.02	Dec 31, 2005	Cross-site scripting (XSS) vulnerability in PunBB 1.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via Javascript contained in nested, malformed BBcode url tags.
CVE-2005-4666	Phlymail Phlymail		0.00	—	0.01	Dec 31, 2005	Cross-site scripting (XSS) vulnerability in PHlyMail before 3.3 Beta1 allows remote attackers to inject arbitrary Javascript via unknown attack vectors.
CVE-2005-4667	Info Zip Unzip		0.03	—	0.01	Dec 31, 2005	Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename command line argument. NOTE: since the overflow occurs in a non-setuid program, there are not many scenarios under which it poses a vulnerability, unless unzip…
CVE-2005-4668	Parosproxy Parosproxy		0.00	—	0.00	Dec 31, 2005	The embedded HSQLDB in ParosProxy before 3.2.7, when running with JDK 1.4.2 before 1.4.2_08, allows local users to execute arbitrary comands via crafted SQL commands that interact with HSQLDB through JDBC, a similar vulnerability to CVE-2003-0845.
CVE-2005-4669	RT Internet Solutions WebAdmin		0.00	—	0.01	Dec 31, 2005	SQL injection vulnerability in RT Internet Solutions (RTIS) WebAdmin allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields.
CVE-2005-4670	Citypost Automated Link Exchange (LNKX)		0.03	—	0.02	Dec 31, 2005	Cross-site scripting (XSS) vulnerability in message.php in CityPost Automated Link Exchange (LNKX) allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
CVE-2005-4671	Citypost Simple PHP Upload		0.03	—	0.02	Dec 31, 2005	Cross-site scripting (XSS) vulnerability in simple-upload-53.php in CityPost Simple PHP Upload 5.3 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
CVE-2005-4672	Citypost Simple Image Editor		0.00	—	0.01	Dec 31, 2005	Cross-site scripting (XSS) vulnerability in image-editor-52/index.php in CityPost Simple Image-Editor 0.52 allows remote attackers to inject arbitrary web script or HTML via the (1) m1, (2) m2, (3) m3, (4) imgsrc, and (5) m4 parameter.
CVE-2005-4673	InHand Networks Ioftpd		0.00	—	0.01	Dec 31, 2005	ioFTPD 0.5.84 u responds with different messages depending on whether or not a username exists, which allows remote attackers to enumerate valid usernames.
CVE-2005-4674	Complete PHP Counter Complete PHP Counter		0.03	—	0.01	Dec 31, 2005	Multiple SQL injection vulnerabilities in list.php in Complete PHP Counter allow remote attackers to execute arbitrary SQL commands via the (1) c or (2) s parameter.
CVE-2005-4675	Complete PHP Counter Complete PHP Counter		0.03	—	0.02	Dec 31, 2005	Cross-site scripting (XSS) vulnerability in list.php in Complete PHP Counter allows remote attackers to inject arbitrary web script or HTML via the c parameter.
CVE-2005-4676	Exiv2 Exiv2		0.03	—	0.04	Dec 31, 2005	Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a denial of service (application crash) via images with crafted IPTC metadata.
CVE-2005-4677	OsCommerce Additional Images module		0.00	—	0.01	Dec 31, 2005	SQL injection vulnerability in additional_images.php (aka the Additional Images module) before 1.14 in osCommerce allows remote attackers to execute arbitrary SQL commands via the products_id parameter to product_info.php.
CVE-2005-4678	Apple Inc. Safari		0.00	—	0.01	Dec 31, 2005	Apple Safari 2.0.2 (aka 416.12) allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site. NOTE: the provenance of this information is unknown; the details are obtained solely from third…
CVE-2005-4679	Microsoft Ie		0.01	—	0.08	Dec 31, 2005	Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site.
CVE-2005-4680	Sophos Anti Virus		0.01	—	0.08	Dec 31, 2005	Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which are not properly scanned.
CVE-2005-4681	Khaled Mardam Bey Mirc		0.00	—	0.01	Dec 31, 2005	Buffer overflow in mIRC 5.91, 6.03, 6.12, and 6.16 allows local users to execute arbitrary code via a long string that is entered after reaching the DCC Get Folder Dialog. NOTE: this issue has been disputed by the vendor, saying "as far as I can tell, this is neither an exploit…
CVE-2005-4682	Audienceview Audienceview		0.00	—	0.01	Dec 31, 2005	Cross-site scripting (XSS) vulnerability in error.asp in AudienceView allows remote attackers to inject arbitrary web script or HTML via the TSerrorMessage parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party…
CVE-2005-4683	Padl Software Migrationtools		0.00	—	0.00	Dec 31, 2005	PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file, and possibly other sensitive information in other temporary files, which are not properly managed by (1) migrate_all_online.sh, (2) migrate_all_offline.sh,…
CVE-2005-4684	Konqueror Konqueror		0.00	—	0.01	Dec 31, 2005	Konqueror can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the user, or…
CVE-2005-4685	Mozilla Corporation Mozilla		0.00	—	0.01	Dec 31, 2005	Firefox and Mozilla can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the…
CVE-2005-4686	Punbb Punbb		0.00	—	0.01	Dec 31, 2005	PunBB 1.2.9, when used alone or with F-ART BLOG:CMS, includes config.php before calling the unregister_globals function, which allows attackers to obtain unspecified sensitive information.
CVE-2005-4687	Punbb Punbb		0.00	—	0.01	Dec 31, 2005	PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header.
CVE-2005-4688	Punbb Punbb		0.00	—	0.01	Dec 31, 2005	PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an address change via a hijacked login session.
CVE-2005-4689	Movabletype Movabletype		0.00	—	0.01	Dec 31, 2005	Six Apart Movable Type 3.16 stores account names and password hashes in a cookie, which allows remote attackers to login to an account by sniffing the cookie.
CVE-2005-4690	Movabletype Movabletype		0.00	—	0.00	Dec 31, 2005	Six Apart Movable Type 3.16 allows local users with blog-creation privileges to create or overwrite arbitrary files of certain types (such as HTML and image files) by selecting an arbitrary directory as a blog's top-level directory. NOTE: this issue can be used in conjunction…
CVE-2005-4691	Xfree86 Xfree86		0.00	—	0.00	Dec 31, 2005	imake in NetBSD before 2.0.3, NetBSD-current before 12 September 2005, certain versions of X.Org, and certain versions of XFree86 allows local users to overwrite arbitrary files via a symlink attack on the temporary file for the file.0 target, which is used for a pre-formatted…
CVE-2005-4692	Mroovca Mroovca Stats		0.00	—	0.01	Dec 31, 2005	Unspecified vulnerability in mroovca stats (mroovcastats) before 0.4.5b has unknown attack vectors and impact, related to cookies.
CVE-2005-4693	Gaim Encryption Gaim Encryption		0.00	—	0.01	Dec 31, 2005	Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service (crash) via a crafted message from an ICQ buddy, possibly involving the GE_received_key function in keys.c.
CVE-2005-4694	Plain Black Webgui		0.04	—	0.09	Dec 31, 2005	Unspecified vulnerability in the www_add method in Asset.pm in Plain Black WebGUI 6.3.0 and other versions before 6.7.6 allows attackers to execute arbitrary code via unknown attack vectors.
CVE-2005-4695	Symantec Brightmail Antispam		0.00	—	0.03	Dec 31, 2005	Symantec Brightmail AntiSpam 6.0 build 1 and 2 allows remote attackers to cause a denial of service (bmserver component termination) via malformed MIME messages.
CVE-2005-4696	Microsoft Wireless Zero Configuration system		0.03	—	0.04	Dec 31, 2005	The Microsoft Wireless Zero Configuration system (WZCS) stores WEP keys and pair-wise Master Keys (PMK) of the WPA pre-shared key in plaintext in memory of the explorer process, which allows attackers with access to process memory to steal the keys and access the network.
CVE-2005-4697	Microsoft Wireless Zero Configuration system		0.00	—	0.02	Dec 31, 2005	The Microsoft Wireless Zero Configuration system (WZCS) allows local users to access WEP keys and pair-wise Master Keys (PMK) of the WPA pre-shared key via certain calls to the WZCQueryInterface API function in wzcsapi.dll.

CVE-2005-4648Dec 31, 2005
Illustrate
Dbpoweramp Music Converter
risk 0.00cvss —epss 0.03
Buffer overflow in Illustrate dBpowerAMP Music Converter 11.5 and earlier, possibly including (1) MusicConverter.exe, (2) playlist.exe, and (3) amp.exe, allows user-assisted attackers to cause a denial of service or execute arbitrary code via a .m3u playlist with a long entry,…
CVE-2005-4649Dec 31, 2005
Advanced Guestbook
Advanced Guestbook
risk 0.00cvss —epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in Advanced Guestbook 2.2 and 2.3.1 allow remote attackers to inject arbitrary web script or HTML via (1) the entry parameter in index.php and (2) the gb_id parameter in comment.php. NOTE: The index.php/entry vector might be…
CVE-2005-4650MedDec 31, 2005
Joomla
Joomla!
risk 0.35cvss 5.3epss 0.02
Joomla! 1.03 does not restrict the number of "Search" Mambots, which allows remote attackers to cause a denial of service (resource consumption) via a large number of Search Mambots.
CVE-2005-4651Dec 31, 2005
Alstrasoft
Epay
risk 0.00cvss —epss 0.01
SQL injection vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the pmodule parameter.
CVE-2005-4652Dec 31, 2005
Phlymail
Phlymail
risk 0.00cvss —epss 0.01
SQL injection vulnerability in PHlyMail 3.02.01 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
CVE-2005-4653Dec 31, 2005
Al Caricatier
Al Caricatier
risk 0.00cvss —epss 0.02
Unspecified vulnerability in ss.php in AL-Caricatier 2.5 and earlier allows remote attackers to bypass login authentication by requesting view_caricatier.php, and then requesting any file in the admin directory with a cookie_username=admin argument.
CVE-2005-4654Dec 31, 2005
Microfocus
Oracle For Openview
risk 0.00cvss —epss 0.04
Multiple unspecified vulnerabilities in Oracle for OpenView (OfO) 8.1.7, 9.1.01, and 9.2, and OfO for Linux, allow remote attackers to have an unknown impact via unknown attack vectors. NOTE: because of the lack of details in the vendor advisory, it is unclear which set of…
CVE-2005-4655Dec 31, 2005
PHP-Fusion
Phpfusion
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in submit.php in PHP-Fusion 6.0.204 allows remote attackers to inject arbitrary web script or HTML via nested tags in the news_body parameter, as demonstrated by elements such as "<meta" and "<script>".
CVE-2005-4656Dec 31, 2005
TClanPortal
TClanPortal
risk 0.03cvss —epss 0.01
SQL injection vulnerability in index.php in TClanPortal 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands, and retrieve all usernames and passwords, via the id parameter.
CVE-2005-4657Dec 31, 2005
Ocean12
Calendar manager
risk 0.03cvss —epss 0.03
Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2005-4658Dec 31, 2005
Iisworks
Aspknowledgebase
risk 0.00cvss —epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in ASP-Programmers.com ASPKnowledgebase allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface.
CVE-2005-4659Dec 31, 2005
Ipcop
Ipcop
risk 0.00cvss —epss 0.00
IPCop (aka IPCop Firewall) before 1.4.10 has world-readable permissions for the backup.key file, which might allow local users to overwrite system configuration files and gain privileges by creating a malicious encrypted backup archive owned by "nobody", then executing…
CVE-2005-4660Dec 31, 2005
Ipcop
Ipcop
risk 0.00cvss —epss 0.00
Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window when the archive is owned by "nobody" but not yet encrypted, then executing…
CVE-2005-4661Dec 31, 2005
Sourcefabric
Campsite
risk 0.00cvss —epss 0.01
The notifyendsubs cron job in Campsite before 2.3.3 sends an e-mail message containing a certain unencrypted MySQL password, which allows remote attackers to sniff the password.
CVE-2005-4662Dec 31, 2005
Ocomon
Ocomon
risk 0.00cvss —epss 0.01
Multiple SQL injection vulnerabilities in OcoMon 1.20, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via unknown attack vectors in an unspecified input form, a different vulnerability than CVE-2005-4664.
CVE-2005-4663Dec 31, 2005
Ocomon
Ocomon
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in OcoMon 1.20, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
CVE-2005-4664Dec 31, 2005
Ocomon
Ocomon
risk 0.03cvss —epss 0.01
SQL injection vulnerability in OcoMon 1.21, and possibly other versions, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the logon page, a different vulnerability than CVE-2005-4662.
CVE-2005-4665Dec 31, 2005
Punbb
Punbb
risk 0.00cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in PunBB 1.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via Javascript contained in nested, malformed BBcode url tags.
CVE-2005-4666Dec 31, 2005
Phlymail
Phlymail
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in PHlyMail before 3.3 Beta1 allows remote attackers to inject arbitrary Javascript via unknown attack vectors.
CVE-2005-4667Dec 31, 2005
Info Zip
Unzip
risk 0.03cvss —epss 0.01
Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename command line argument. NOTE: since the overflow occurs in a non-setuid program, there are not many scenarios under which it poses a vulnerability, unless unzip…
CVE-2005-4668Dec 31, 2005
Parosproxy
Parosproxy
risk 0.00cvss —epss 0.00
The embedded HSQLDB in ParosProxy before 3.2.7, when running with JDK 1.4.2 before 1.4.2_08, allows local users to execute arbitrary comands via crafted SQL commands that interact with HSQLDB through JDBC, a similar vulnerability to CVE-2003-0845.
CVE-2005-4669Dec 31, 2005
RT Internet Solutions
WebAdmin
risk 0.00cvss —epss 0.01
SQL injection vulnerability in RT Internet Solutions (RTIS) WebAdmin allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields.
CVE-2005-4670Dec 31, 2005
Citypost
Automated Link Exchange (LNKX)
risk 0.03cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in message.php in CityPost Automated Link Exchange (LNKX) allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
CVE-2005-4671Dec 31, 2005
Citypost
Simple PHP Upload
risk 0.03cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in simple-upload-53.php in CityPost Simple PHP Upload 5.3 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
CVE-2005-4672Dec 31, 2005
Citypost
Simple Image Editor
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in image-editor-52/index.php in CityPost Simple Image-Editor 0.52 allows remote attackers to inject arbitrary web script or HTML via the (1) m1, (2) m2, (3) m3, (4) imgsrc, and (5) m4 parameter.
CVE-2005-4673Dec 31, 2005
InHand Networks
Ioftpd
risk 0.00cvss —epss 0.01
ioFTPD 0.5.84 u responds with different messages depending on whether or not a username exists, which allows remote attackers to enumerate valid usernames.
CVE-2005-4674Dec 31, 2005
Complete PHP Counter
Complete PHP Counter
risk 0.03cvss —epss 0.01
Multiple SQL injection vulnerabilities in list.php in Complete PHP Counter allow remote attackers to execute arbitrary SQL commands via the (1) c or (2) s parameter.
CVE-2005-4675Dec 31, 2005
Complete PHP Counter
Complete PHP Counter
risk 0.03cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in list.php in Complete PHP Counter allows remote attackers to inject arbitrary web script or HTML via the c parameter.
CVE-2005-4676Dec 31, 2005
Exiv2
Exiv2
risk 0.03cvss —epss 0.04
Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a denial of service (application crash) via images with crafted IPTC metadata.
CVE-2005-4677Dec 31, 2005
OsCommerce
Additional Images module
risk 0.00cvss —epss 0.01
SQL injection vulnerability in additional_images.php (aka the Additional Images module) before 1.14 in osCommerce allows remote attackers to execute arbitrary SQL commands via the products_id parameter to product_info.php.
CVE-2005-4678Dec 31, 2005
Apple Inc.
Safari
risk 0.00cvss —epss 0.01
Apple Safari 2.0.2 (aka 416.12) allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site. NOTE: the provenance of this information is unknown; the details are obtained solely from third…
CVE-2005-4679Dec 31, 2005
Microsoft
Ie
risk 0.01cvss —epss 0.08
Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site.
CVE-2005-4680Dec 31, 2005
Sophos
Anti Virus
risk 0.01cvss —epss 0.08
Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which are not properly scanned.
CVE-2005-4681Dec 31, 2005
Khaled Mardam Bey
Mirc
risk 0.00cvss —epss 0.01
Buffer overflow in mIRC 5.91, 6.03, 6.12, and 6.16 allows local users to execute arbitrary code via a long string that is entered after reaching the DCC Get Folder Dialog. NOTE: this issue has been disputed by the vendor, saying "as far as I can tell, this is neither an exploit…
CVE-2005-4682Dec 31, 2005
Audienceview
Audienceview
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in error.asp in AudienceView allows remote attackers to inject arbitrary web script or HTML via the TSerrorMessage parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party…
CVE-2005-4683Dec 31, 2005
Padl Software
Migrationtools
risk 0.00cvss —epss 0.00
PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file, and possibly other sensitive information in other temporary files, which are not properly managed by (1) migrate_all_online.sh, (2) migrate_all_offline.sh,…
CVE-2005-4684Dec 31, 2005
Konqueror
Konqueror
risk 0.00cvss —epss 0.01
Konqueror can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the user, or…
CVE-2005-4685Dec 31, 2005
Mozilla Corporation
Mozilla
risk 0.00cvss —epss 0.01
Firefox and Mozilla can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the…
CVE-2005-4686Dec 31, 2005
Punbb
Punbb
risk 0.00cvss —epss 0.01
PunBB 1.2.9, when used alone or with F-ART BLOG:CMS, includes config.php before calling the unregister_globals function, which allows attackers to obtain unspecified sensitive information.
CVE-2005-4687Dec 31, 2005
Punbb
Punbb
risk 0.00cvss —epss 0.01
PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header.
CVE-2005-4688Dec 31, 2005
Punbb
Punbb
risk 0.00cvss —epss 0.01
PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an address change via a hijacked login session.
CVE-2005-4689Dec 31, 2005
Movabletype
Movabletype
risk 0.00cvss —epss 0.01
Six Apart Movable Type 3.16 stores account names and password hashes in a cookie, which allows remote attackers to login to an account by sniffing the cookie.
CVE-2005-4690Dec 31, 2005
Movabletype
Movabletype
risk 0.00cvss —epss 0.00
Six Apart Movable Type 3.16 allows local users with blog-creation privileges to create or overwrite arbitrary files of certain types (such as HTML and image files) by selecting an arbitrary directory as a blog's top-level directory. NOTE: this issue can be used in conjunction…
CVE-2005-4691Dec 31, 2005
Xfree86
Xfree86
risk 0.00cvss —epss 0.00
imake in NetBSD before 2.0.3, NetBSD-current before 12 September 2005, certain versions of X.Org, and certain versions of XFree86 allows local users to overwrite arbitrary files via a symlink attack on the temporary file for the file.0 target, which is used for a pre-formatted…
CVE-2005-4692Dec 31, 2005
Mroovca
Mroovca Stats
risk 0.00cvss —epss 0.01
Unspecified vulnerability in mroovca stats (mroovcastats) before 0.4.5b has unknown attack vectors and impact, related to cookies.
CVE-2005-4693Dec 31, 2005
Gaim Encryption
Gaim Encryption
risk 0.00cvss —epss 0.01
Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service (crash) via a crafted message from an ICQ buddy, possibly involving the GE_received_key function in keys.c.
CVE-2005-4694Dec 31, 2005
Plain Black
Webgui
risk 0.04cvss —epss 0.09
Unspecified vulnerability in the www_add method in Asset.pm in Plain Black WebGUI 6.3.0 and other versions before 6.7.6 allows attackers to execute arbitrary code via unknown attack vectors.
CVE-2005-4695Dec 31, 2005
Symantec
Brightmail Antispam
risk 0.00cvss —epss 0.03
Symantec Brightmail AntiSpam 6.0 build 1 and 2 allows remote attackers to cause a denial of service (bmserver component termination) via malformed MIME messages.
CVE-2005-4696Dec 31, 2005
Microsoft
Wireless Zero Configuration system
risk 0.03cvss —epss 0.04
The Microsoft Wireless Zero Configuration system (WZCS) stores WEP keys and pair-wise Master Keys (PMK) of the WPA pre-shared key in plaintext in memory of the explorer process, which allows attackers with access to process memory to steal the keys and access the network.
CVE-2005-4697Dec 31, 2005
Microsoft
Wireless Zero Configuration system
risk 0.00cvss —epss 0.02
The Microsoft Wireless Zero Configuration system (WZCS) allows local users to access WEP keys and pair-wise Master Keys (PMK) of the WPA pre-shared key via certain calls to the WZCQueryInterface API function in wzcsapi.dll.