Total
27865 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2005-3262 | 1 Rarlab | 1 Winrar | 2008-09-10 | 7.5 HIGH | N/A |
Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when WinRAR displays diagnostic errors related to an invalid filename. | |||||
CVE-2005-3263 | 1 Rarlab | 1 Winrar | 2008-09-10 | 7.5 HIGH | N/A |
Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via an ACE archive containing a file with a long name. | |||||
CVE-2005-3322 | 2 Squid, Suse | 2 Squid, Suse Linux | 2008-09-10 | 5.0 MEDIUM | N/A |
Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of service (crash) via HTTPs (SSL). | |||||
CVE-2005-2994 | 1 Ibm | 1 Rational Clearquest | 2008-09-10 | 6.8 MEDIUM | N/A |
Unspecified vulnerability in the web client for IBM Rational ClearQuest 2002.05.00 and 2002.05.20, and 2003.06.00 through 2003.06.15 before SR5, allows remote attackers to execute XML Style Sheets (XSS). | |||||
CVE-2005-2927 | 1 Sco | 1 Unixware | 2008-09-10 | 7.2 HIGH | N/A |
Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argument to the (1) prompt or (2) defprompt command. | |||||
CVE-2005-2502 | 1 Apple | 2 Mac Os X, Mac Os X Server | 2008-09-10 | 5.1 MEDIUM | N/A |
Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2, as used in applications such as TextEdit, allows external user-assisted attackers to execute arbitrary code via a crafted Microsoft Word file. | |||||
CVE-2005-2659 | 1 Jed Wing | 1 Chm Lib | 2008-09-10 | 10.0 HIGH | N/A |
Buffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35, as used in products such as KchmViewer, has unknown impact and attack vectors. | |||||
CVE-2005-2503 | 1 Apple | 2 Mac Os X, Mac Os X Server | 2008-09-10 | 4.6 MEDIUM | N/A |
AppKit for Mac OS X 10.3.9 and 10.4.2 allows attackers with physical access to create local accounts by forcing a particular error to occur at the login window. | |||||
CVE-2005-2155 | 1 Easyphpcalendar | 1 Easyphpcalendar | 2008-09-10 | 7.5 HIGH | N/A |
PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrary code via the serverPath parameter. | |||||
CVE-2005-2213 | 1 Mms Ripper | 1 Mms Ripper | 2008-09-10 | 7.5 HIGH | N/A |
Buffer overflow in the mms_interp_header function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code via a file with more than 20 streams. | |||||
CVE-2005-2333 | 1 Seo-board | 1 Seo-board | 2008-09-10 | 4.3 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in smilies_popup.php in SEO-Board 1.0 allows remote attackers to inject arbitrary web script or HTML via the doc parameter. | |||||
CVE-2005-2134 | 1 Netbsd | 1 Netbsd | 2008-09-10 | 2.1 LOW | N/A |
The (1) clcs and (2) emuxki drivers in NetBSD 1.6 through 2.0.2 allow local users to cause a denial of service (kernel crash) by using the set-parameters ioctl on an audio device to change the block size and set the pause state to "unpaused" in the same ioctl, which causes a divide-by-zero error. | |||||
CVE-2005-1873 | 1 Crob | 1 Crob Ftp | 2008-09-10 | 7.5 HIGH | N/A |
Multiple buffer overflows in Crob FTP 3.6.1, and possibly earlier versions, allow remote attackers to execute arbitrary code via (1) an FTP command with a large string followed by the RMD command with a long string or (2) a globbing ("*") character followed by a long string. | |||||
CVE-2005-1801 | 1 Nokia | 1 9500 | 2008-09-10 | 2.6 LOW | N/A |
The vCard viewer in Nokia 9500 allows attackers to cause a denial of service (crash) via a vCard with a long Name field, which causes the crash when the user views it. | |||||
CVE-2005-1737 | 1 Electricmonk | 1 Proms | 2008-09-10 | 7.5 HIGH | N/A |
Multiple unknown vulnerabilities in PROMS 0.11 allow "non-authorized users" to (1) view or modify the project member list or (2) modify the todos list. | |||||
CVE-2005-1793 | 1 Microsoft | 1 Windows 98se | 2008-09-10 | 2.6 LOW | N/A |
User32.DLL in Microsoft Windows 98SE, and possibly other operating systems, allows local and remote attackers to cause a denial of service (crash) via an icon (.ico) bitmap file with large width and height values. | |||||
CVE-2005-1800 | 1 Clam Anti-virus | 1 Clamav | 2008-09-10 | 4.3 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the term parameter in a view or ViewTerm action to index.php. | |||||
CVE-2005-1783 | 1 W.m.r. Simpson | 1 Bookreview | 2008-09-10 | 5.0 MEDIUM | N/A |
BookReview beta 1.0 allows remote attackers to obtain the path of the web server via certain parameters to search.htm, possibly due to a search[string] parameter with a missing value or an incorrect submit[type] value, which reveals the path in the resulting error message. NOTE: it is not clear whether BookReview is available to the public. If not, then it should not be included in CVE. | |||||
CVE-2005-1430 | 1 Apple | 2 Mac Os X, Mac Os X Server | 2008-09-10 | 3.6 LOW | N/A |
Mac OS X 10.3.x and earlier uses insecure permissions for a pseudo terminal tty (pty) that is managed by a non-setuid program, which allows local users to read or modify sessions of other users. | |||||
CVE-2005-1546 | 1 Ht Editor | 1 Ht Editor | 2008-09-10 | 5.1 MEDIUM | N/A |
Buffer overflow in the PE parser in HT Editor before 0.8.0 allows remote attackers to execute arbitrary code via a crafted PE file. |