CVE-2005-0767Race condition in the Radeon DRI driver for Linux kernel 2.6.8.1 allows local users with DRI privileges to execute arbitrary code as root.
6.9 MOYENNE
CVE-2005-0384Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via a pppd client.
5.0 MOYENNE
CVE-2005-0795HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite arbitrary files via a modified vote_filename parameter.
5.0 MOYENNE
CVE-2005-0791Cross-site scripting (XSS) vulnerability in adframe.php in phpAdsNew 2.0.4-pr1, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via…
4.3 MOYENNE
CVE-2005-0790phpAdsNew 2.0.4 allows remote attackers to obtain sensitive information via a direct request to (1) lib-xmlrpcs.inc.php, (2) maintenance-activation.php, (3) maintenance-cleantables…
5.0 MOYENNE
CVE-2005-0789Directory traversal vulnerability in LimeWire 3.9.6 through 4.6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in a magnet request.
5.0 MOYENNE
CVE-2005-0788LimeWire 4.1.2 through 4.5.6 allows remote attackers to read arbitrary files by specifying the full pathname in a Gnutella GET request.
5.0 MOYENNE
CVE-2005-0786Les livres d'or SimpGB sont affectés par une faille qui permet à des attaquants distants d'exécuter des commandes SQL arbitraires via la page guestbook.php. Un attaquant peut utili…
7.5 ÉLEVÉE
CVE-2005-0510The daemon for fallback-reboot before 0.995 allows attackers to cause a denial of service (daemon exit), possibly related to verbose debug messages when the daemon is not on a tty.
2.1 FAIBLE
CVE-2005-0509Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbitrary HTML or web script via Unicode rep…
4.3 MOYENNE
CVE-2005-0508Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a "script secu…
4.6 MOYENNE
CVE-2005-0507Directory traversal vulnerability in SD Server 4.0.70 and earlier allows remote attackers to read arbitrary files via .. sequences in an HTTP request.
5.0 MOYENNE
CVE-2005-0506The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users t…
5.0 MOYENNE
CVE-2005-0505Les versions d'Information Resource Manager (IRM) antérieures à la 1.5.2.1 sont affectées par une faille dans la manière dont le logiciel gère les connexions LDAP. Un attaquant dis…
7.5 ÉLEVÉE
CVE-2005-0504Buffer overflow in the MoxaDriverIoctl function for the moxa serial driver (moxa.c) in Linux 2.2.x, 2.4.x, and 2.6.x before 2.6.22 allows local users to execute arbitrary code via …
4.6 MOYENNE
CVE-2005-0473The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (application crash) via malformed HTML that causes "an invalid memory access," a…
5.0 MOYENNE
CVE-2005-0472Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC packets from (1) AIM or (2) ICQ.
5.0 MOYENNE
CVE-2005-0471Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style short names, which allows remote attackers …
5.0 MOYENNE
CVE-2005-0470Buffer overflow in wpa_supplicant before 0.2.7 allows remote attackers to cause a denial of service (segmentation fault) via invalid EAPOL-Key packet data.
5.0 MOYENNE
CVE-2005-0398The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.
5.0 MOYENNE
CVE-2005-0259phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by providing both a local and remote locatio…
6.4 MOYENNE
CVE-2005-0258Directory traversal vulnerability in (1) usercp_register.php and (2) usercp_avatar.php for phpBB 2.0.11, and possibly other versions, with gallery avatars enabled, allows remote at…
5.0 MOYENNE
CVE-2005-0780paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, (2) login.php, (3) category.php, (4) file.php, (5) team.php, …
5.0 MOYENNE
CVE-2005-0765Unknown vulnerability in the JXTA dissector in Ethereal 0.10.9 allows remote attackers to cause a denial of service (application crash).
5.0 MOYENNE
CVE-2005-0774PhotoPost PHP 5.0 RC3 est affecté par une faille qui permet à des attaquants distants d'exécuter des commandes SQL arbitraires via le paramètre `uid`. Un attaquant peut utiliser ce…
7.5 ÉLEVÉE
CVE-2005-0748Le gestionnaire de listes de diffusion WEBInsta Mailing list manager 1.3d est affecté par une faille dans son script d'installation qui permet à un attaquant distant d'exécuter du …
7.5 ÉLEVÉE
CVE-2005-0731PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to Filelist.html.
5.0 MOYENNE
CVE-2005-0745UTStarcom iAN-02EX VoIP Analog Terminal Adaptor (ATA) allows local users to bypass ATA access restrictions by dialing "*#26845#" and causing a device reset.
4.6 MOYENNE
CVE-2005-0736Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events.
2.1 FAIBLE
CVE-2005-0719Unknown vulnerability in the systems message queue in HP Tru64 Unix 4.0F PK8 through 5.1B-2/PK4 allows local users to cause a denial of service (process crash) for processes such a…
2.1 FAIBLE
CVE-2005-0747ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing the hidden ID field, as demonstrated using the id parameter to…
5.0 MOYENNE
CVE-2005-0741Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a usersrecentposts…
4.3 MOYENNE
CVE-2005-0725WF-Sections 1.07 est affecté par une faille dans la gestion des identifiants d'articles. Un attaquant distant peut envoyer des requêtes spécialement conçues au serveur pour exécute…
7.5 ÉLEVÉE
CVE-2005-0723Cross-site scripting (XSS) vulnerability in the jumpmenu function in functions.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via t…
4.3 MOYENNE
CVE-2005-0720La version 1.3 de PHP mcNews est affectée par une faille qui permet à un attaquant d'exécuter du code arbitraire sur votre serveur. En envoyant une URL spécialement conçue à la pag…
7.5 ÉLEVÉE
CVE-2005-0699Les versions 0.10.9 et antérieures d'Ethereal (désormais Wireshark) sont affectées lors de l'analyse de paquets d'authentification RADIUS CDMA A11. Un attaquant distant peut exécut…
7.5 ÉLEVÉE
CVE-2005-0696Les versions 1.4.2.8 et 1.4.3.5 du serveur FTP ArGoSoft sont sensibles à un dépassement de tampon (buffer overflow) lors du traitement de commandes DELE trop longues. Un attaquant …
7.5 ÉLEVÉE
CVE-2005-0685OutStart Participate Enterprise est affecté par un défaut de validation des accès dans plusieurs de ses commandes web. Un attaquant distant et non authentifié peut parcourir, renom…
7.5 ÉLEVÉE
CVE-2005-0626Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to ot…
2.6 FAIBLE
CVE-2005-0099The SDL port of abuse (abuse-SDL) before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files.
2.1 FAIBLE
CVE-2005-0098Multiple buffer overflows in the SDL port of abuse (abuse-SDL) before 2.00 allow local users to execute arbitrary code via the command line.
4.6 MOYENNE
CVE-2005-0722eXPerience2 allows remote attackers to obtain the full path for the web root via a direct request to modules.php without any parameters, which leaks the path in a PHP error message…
5.0 MOYENNE
CVE-2005-0703Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 t…
5.0 MOYENNE
CVE-2005-0702SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages.
5.0 MOYENNE
CVE-2005-0701Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\\.\\.." (modified dot dot backslash) sequence…
5.0 MOYENNE
CVE-2005-0700The export_index action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly by setting the ATK_ADMIN cookie.
5.0 MOYENNE
CVE-2005-0698PHP remote file inclusion vulnerability in PHPWebLog 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) G_PATH parameter to init.inc.php o…
4.6 MOYENNE
CVE-2005-0697CopperExport 0.2.1 est affecté par une faille qui permet à des attaquants distants d'exécuter des commandes SQL non autorisées. En envoyant des données spécialement conçues via les…
7.5 ÉLEVÉE
CVE-2005-0695The password recovery feature (forgotpassword.asp) in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a p…
5.0 MOYENNE
CVE-2005-0694Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obtain sensitive information via a direct request to HCDiskQuota…
5.0 MOYENNE