Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2005-0414
SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post action for index.php with (1) the t parameter or (2) the qu parameter.
Affected Products: n/a
References: [{'name': '20050124 Multiple vulnerabilities in MercuryBoard 1.1.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110661795632354&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.sunsite.dk/viewcvs.cgi/mercury/func/post.php.diff?r1=1.68&r2=1.70'}, {'name': '1013137', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013137'}, {'name': '20050209 Mercuryboard =?iso-8859-1?Q?<=3D?= 1.1.1 Working Sql Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110797495532358&w=2'}, {'name': 'mercuryboard-index-sql-injection(19051)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19051'}]
CVE State: PUBLISHED
Explain CVE-2005-0415
Multiple memory leaks in the MQL parser in Emdros before 1.1.22 allow remote attackers to cause a denial of service (memory consumption) via malformed MQL statements.
Affected Products: n/a
References: [{'name': 'emdros-mql-dos(19273)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19273'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/tracker/index.php?func=detail&aid=1116935&group_id=37219&atid=419458'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=303465'}]
CVE State: PUBLISHED
Explain CVE-2005-0416
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow.
Affected Products: n/a
References: [{'name': 'MS05-002', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002'}, {'name': '20050111 EEYE: Windows ANI File Parsing Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110547079218397&w=2'}, {'name': '20050112 Windows ANI File Parsing Proof Of Concept (MS05-002)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110556975827760&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://eeye.com/html/research/advisories/AD20050111.html'}, {'name': 'win-user32-aniheader-overflow(18879)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18879'}, {'name': '12233', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12233'}]
CVE State: PUBLISHED
Explain CVE-2005-0417
Unknown "high risk" vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors.  NOTE: due to the delayed disclosure of details for this issue, this candidate may be SPLIT in the future.  In addition, this may be a duplicate of other issues as reported by the vendor.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/db2-09-05-05.htm'}, {'name': '20050209 Patch available for high risk IBM DB2 Universal Database flaw', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110801212422825&w=2'}, {'name': '12508', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12508'}]
CVE State: PUBLISHED
Explain CVE-2005-0418
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06, on Mac OS X, allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file. NOTE: it is highly likely that this item will be MERGED with CVE-2005-0836.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2005-03-24', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Mar/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2005-0419
Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via long FTP commands, as demonstrated using the STAT command.
Affected Products: n/a
References: [{'name': '3cserver-multiple-command-bo(19250)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19250'}, {'name': '20050207 Vulnerability in 3Com 3CServer v1.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110780306326130&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-0420
Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application.
Affected Products: n/a
References: [{'name': '14144', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14144'}, {'name': '20050206 Microsoft Outlook Web Access URL Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/lists/fulldisclosure/2005/Feb/0106.html'}, {'name': 'owa-owalogonasp-url-redirect(19225)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19225'}, {'name': '12459', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12459'}, {'name': 'ADV-2005-0105', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0105'}]
CVE State: PUBLISHED
Explain CVE-2005-0421
DelphiTurk FTP 1.0 stores usernames and passwords in the profile.dat file, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '1013139', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013139'}, {'name': 'delphiturkcodebank-obtain-information(19248)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19248'}]
CVE State: PUBLISHED
Explain CVE-2005-0422
DelphiTurk CodeBank (aka KodBank) 3.1 and earlier stores usernames and passwords in the Codebank registry key, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '1013139', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013139'}, {'name': 'delphiturkcodebank-obtain-information(19248)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19248'}]
CVE State: PUBLISHED
Explain CVE-2005-0423
SQL injection vulnerability in login.asp in ASPjar Guestbook allows remote attackers to execute arbitrary SQL commands via the password field.
Affected Products: n/a
References: [{'name': '12521', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12521'}, {'name': 'aspjar-guest-login-sql-injection(19299)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19299'}, {'name': '20050210 ASPjar guestbook (Injection in login page)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110809687921701&w=2'}, {'name': '14225', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14225/'}]
CVE State: PUBLISHED
Explain CVE-2005-0424
Unknown vulnerability in the delete.asp program in certain versions of ASPjar Guestbook allows remote attackers to delete messages.  NOTE: there is insufficient information to know if this is the same issue as CVE-2002-1730.
Affected Products: n/a
References: [{'name': 'aspjar-delete-message-deletion(19301)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19301'}, {'name': '12521', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12521'}, {'name': '20050210 ASPjar guestbook (Injection in login page)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110809687921701&w=2'}, {'name': '14225', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14225/'}]
CVE State: PUBLISHED
Explain CVE-2005-0425
Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via a crafted URL that causes the page to be processed by the file serving servlet instead of the JSP engine.
Affected Products: n/a
References: [{'name': '14274', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14274'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg24008815'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg24008814'}]
CVE State: PUBLISHED
Explain CVE-2005-0426
Unknown vulnerability in Solaris 8 and 9 allows remote attackers to cause a denial of service (panic) via "Heavy UDP Usage" that triggers a NULL dereference.
Affected Products: n/a
References: [{'name': '57728', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57728-1'}, {'name': 'solaris-udp-end-point-dos(19119)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19119'}, {'name': '12385', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12385'}]
CVE State: PUBLISHED
Explain CVE-2005-0427
The ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file when building a tbz2 of the webmin package, which allows remote attackers to obtain and possibly crack the encrypted password.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=77731'}, {'name': 'GLSA-200502-12', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-12.xml'}, {'name': 'webmin-encrypted-password(19315)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19315'}]
CVE State: PUBLISHED
Explain CVE-2005-0428
The DNSPacket::expand method in dnspacket.cc in PowerDNS before 2.9.17 allows remote attackers to cause a denial of service by sending a random stream of bytes.
Affected Products: n/a
References: [{'name': 'powerdns-random-bytes-dos(19221)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19221'}, {'name': 'GLSA-200502-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-15.xml'}, {'name': '12446', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12446'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://doc.powerdns.com/changelog.html#CHANGELOG-2-9-17'}, {'tags': ['x_refsource_MISC'], 'url': 'http://ds9a.nl/cgi-bin/cvstrac/pdns/tktview?tn=21'}]
CVE State: PUBLISHED
Explain CVE-2005-0429
Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when showforumusers is enabled, allows remote attackers to execute inject arbitrary PHP commands via the comma parameter.
Affected Products: n/a
References: [{'name': '20050213 vbulletin 3.0.x PHP code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110840807415315&w=2'}, {'name': '12542', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12542'}]
CVE State: PUBLISHED
Explain CVE-2005-0430
The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (shutdown game server) and possibly crash the server via a long infostring, possibly triggering a buffer overflow.
Affected Products: n/a
References: [{'name': '12534', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12534'}, {'name': '20050212 Infostring crash and shutdown in the Quake 3 engine', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110824822224025&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/q3infoboom-adv.txt'}]
CVE State: PUBLISHED
Explain CVE-2005-0431
Barracuda Spam Firewall 3.1.10 and earlier does not restrict the domains that white-listed domains can send mail to, which allows members of white-listed domains to use Barracuda as an open mail relay for spam.
Affected Products: n/a
References: [{'name': '14243', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14243'}, {'name': 'barracuda-open-relay(19283)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19283'}, {'name': '20050210 Barracuda Spam Firewall <= 3.1.10 acts as open relay for whitelisted senders.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110805534732492&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-0432
BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates different login exceptions that suggest why an authentication attempt fails, which makes it easier for remote attackers to guess passwords via brute force attacks.
Affected Products: n/a
References: [{'name': '14298', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14298'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA05-74.00.jsp'}]
CVE State: PUBLISHED
Explain CVE-2005-0433
Php-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or missing arguments to (1) db.php, (2) mainfile.php, (3) Downloads/index.php, or (4) Web_Links/index.php, which lists the path in a PHP error message.
Affected Products: n/a
References: [{'name': '12561', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12561'}, {'name': 'phpnuke-multiple-scripts-path-disclosure(19344)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19344'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/advisory-40.html'}]
CVE State: PUBLISHED
Explain CVE-2005-0434
Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 7.5 allow remote attackers to inject arbitrary HTML or web script via (1) the newdownloadshowdays parameter in a NewDownloads operation or (2) the newlinkshowdays parameter in a NewLinks operation.
Affected Products: n/a
References: [{'name': '12561', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12561'}, {'name': 'phpnuke-downloads-weblinks-xss(19346)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19346'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.waraxe.us/advisory-40.html'}]
CVE State: PUBLISHED
Explain CVE-2005-0435
awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginmode parameters to rawlog.
Affected Products: n/a
References: [{'name': '14299', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14299'}, {'name': 'awstats-awstatpl-obtain-information(19333)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19333'}, {'name': '20050214 AWStats <= 6.4 Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/390368'}]
CVE State: PUBLISHED
Explain CVE-2005-0436
Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of Perl code via the PluginMode parameter.
Affected Products: n/a
References: [{'name': '14299', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14299'}, {'name': 'awstats-function-code-execution(19336)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19336'}, {'name': '20050214 AWStats <= 6.4 Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/390368'}, {'name': '13832', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/13832'}]
CVE State: PUBLISHED
Explain CVE-2005-0437
Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to include arbitrary Perl modules via .. (dot dot) sequences in the loadplugin parameter.
Affected Products: n/a
References: [{'name': '14299', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14299'}, {'name': '20050214 AWStats <= 6.4 Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/390368'}]
CVE State: PUBLISHED
Explain CVE-2005-0438
awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by setting the debug parameter.
Affected Products: n/a
References: [{'name': '14299', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14299'}, {'name': 'awstats-information-disclosure(19477)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19477'}, {'name': '20050214 AWStats <= 6.4 Multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/390368'}]
CVE State: PUBLISHED
Explain CVE-2005-0439
Buffer overflow in the decode_post function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via attachments with long file names.
Affected Products: n/a
References: [{'name': '12556', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12556'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?group_id=40505&release_id=304880'}, {'name': 'elog-weblog-bo(19313)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19313'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://midas.psi.ch/elogs/Forum/941'}]
CVE State: PUBLISHED
Explain CVE-2005-0440
ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a sensitive write password via a modified URL.
Affected Products: n/a
References: [{'name': '12556', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12556'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?group_id=40505&release_id=304880'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://midas.psi.ch/elogs/Forum/941'}]
CVE State: PUBLISHED
Explain CVE-2005-0441
Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users to execute arbitrary code via the (1) attrib_valid function, (2) covert function, (3) declare statement, or (4) a crafted query plan, or remote authenticated users with database owner or "sa" role privileges to execute arbitrary code via (5) a crafted install java statement.
Affected Products: n/a
References: [{'name': 'sybase-ase-convert-bo(19976)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19976'}, {'name': 'sybase-ase-install-java-bo(19980)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19980'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/sybase-ase.txt'}, {'name': 'sybase-adaptive-server(19354)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19354'}, {'name': '20050321 Details of Sybase ASE bugs withheld', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/393851'}, {'name': '20050405 Sybase ASE Multiple Security Issues (#NISR05042005)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111272918117194&w=2'}, {'name': 'sybase-ase-abstract-bo(19979)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19979'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sybase.com/detail/1%2C6904%2C1033894%2C00.html'}, {'name': '13632', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13632'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sybase.com/detail?id=1034520'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sybase.com/detail?id=1034752'}, {'name': '12080', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12080'}, {'name': 'sybase-ase-declare-bo(19978)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19978'}, {'name': 'sybase-ase-attribvalid-bo(19974)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19974'}, {'name': '20041222 Sybase ASE 12.5.2 vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.html'}]
CVE State: PUBLISHED
Explain CVE-2005-0442
Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via the language parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cubecart.com/site/forums/index.php?showtopic=5741'}, {'name': '20050406 RE: [NOBYTES.COM: #6] CubeCart 2.0.6 - Information Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111281888605580&w=2'}, {'name': '12549', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12549'}, {'name': '14272', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14272'}, {'name': '20050214 [NOBYTES.COM: #2] CubeCart 2.0.4 - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110842125901191&w=2'}, {'name': 'cubecart-dotdot-directory-traversal(19322)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19322'}]
CVE State: PUBLISHED
Explain CVE-2005-0443
index.php in CubeCart 2.0.4 allows remote attackers to (1) obtain the full path for the web server or (2) conduct cross-site scripting (XSS) attacks via an invalid language parameter, which echoes the parameter in a PHP error message.
Affected Products: n/a
References: [{'name': '14064', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/14064'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cubecart.com/site/forums/index.php?showtopic=5741'}, {'name': '12549', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12549'}, {'name': 'cubecart-index-xss(19328)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19328'}, {'name': '20050214 [NOBYTES.COM: #2] CubeCart 2.0.4 - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110842125901191&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-0444
VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writable temporary directory, which allows local users to execute arbitrary code.
Affected Products: n/a
References: [{'name': 'GLSA-200502-18', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200502-18.xml'}]
CVE State: PUBLISHED
Explain CVE-2005-0445
Cross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain name parameter (logindomain) in the login page.
Affected Products: n/a
References: [{'name': '14253', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14253'}, {'name': '12547', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12547'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://turtle.ee.ncku.edu.tw/openwebmail/download/cert/patches/SA-05:01/2.5x.patch'}, {'name': 'open-webmail-logindomain-xss(19335)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19335'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://turtle.ee.ncku.edu.tw/openwebmail/doc/changes.txt'}, {'name': '1013172', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013172'}]
CVE State: PUBLISHED
Explain CVE-2005-0446
Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.
Affected Products: n/a
References: [{'name': '20050221 [USN-84-1] Squid vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110901183320453&w=2'}, {'name': 'GLSA-200502-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-25.xml'}, {'name': '14271', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14271'}, {'name': 'squid-xstrndup-dos(19332)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19332'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE8-dns_assert.patch'}, {'name': 'RHSA-2005:201', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-201.html'}, {'name': '12551', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12551'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE8-dns_assert'}, {'name': 'FLSA-2006:152809', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://fedoranews.org/updates/FEDORA--.shtml'}, {'name': 'DSA-688', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-688'}, {'name': 'RHSA-2005:173', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-173.html'}, {'name': 'oval:org.mitre.oval:def:11264', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11264'}, {'name': 'CLA-2005:931', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931'}, {'name': 'MDKSA-2005:047', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:047'}]
CVE State: PUBLISHED
Explain CVE-2005-0447
Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (hang) via a flood of certain ARP packets.
Affected Products: n/a
References: [{'name': 'solaris-arp-dos(19331)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19331'}, {'name': '12553', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12553'}, {'name': '57673', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57673-1'}, {'name': '14286', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14286'}, {'name': '1013179', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013179'}]
CVE State: PUBLISHED
Explain CVE-2005-0448
Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.
Affected Products: n/a
References: [{'name': 'DSA-696', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-696'}, {'name': 'HPSBUX01208', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/8704'}, {'name': 'RHSA-2005:881', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-881.html'}, {'name': 'MDKSA-2005:079', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:079'}, {'name': '55314', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/55314'}, {'name': '18075', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18075'}, {'name': '12767', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12767'}, {'name': 'CLSA-2006:1056', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056'}, {'name': 'oval:org.mitre.oval:def:10475', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10475'}, {'name': '20060101-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U'}, {'name': 'FLSA-2006:152845', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://fedoranews.org/updates/FEDORA--.shtml'}, {'name': 'oval:org.mitre.oval:def:728', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A728'}, {'name': 'GLSA-200501-38', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml'}, {'name': '18517', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18517'}, {'name': 'RHSA-2005:674', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-674.html'}, {'name': '17079', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17079'}, {'name': '14531', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14531'}, {'name': 'USN-94-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/94-1/'}, {'name': 'SSRT5938', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/8704'}]
CVE State: PUBLISHED
Explain CVE-2005-0449
The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) or bypass firewall rules via crafted packets, which are not properly handled by the skb_checksum_help function.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:10753', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10753'}, {'name': 'RHSA-2005:366', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-366.html'}, {'name': 'RHSA-2005:283', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-283.html'}, {'name': '19369', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19369'}, {'name': 'SUSE-SA:2005:018', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_18_kernel.html'}, {'name': 'DSA-1018', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1018'}, {'name': '19607', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19607'}, {'name': 'USN-82-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/82-1/'}, {'name': '12598', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12598'}, {'name': 'MDKSA-2005:218', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:218'}, {'name': 'FLSA:152532', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532'}, {'name': '20060402-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U'}, {'name': '[netdev] 20050124 Re: skb_checksum_help', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://oss.sgi.com/archives/netdev/2005-01/msg01036.html'}, {'name': 'RHSA-2005:293', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-293.html'}, {'name': 'RHSA-2005:284', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-284.html'}, {'name': 'DSA-1017', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1017'}, {'name': '19374', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19374'}, {'name': 'CLA-2005:945', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945'}]
CVE State: PUBLISHED
Explain CVE-2005-0450
Directory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read arbitrary files via an HTTP request containing (1) .. (dot dot) or (2) "%2e%2e" (encoded dot dot) sequences.
Affected Products: n/a
References: [{'name': '1013191', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013191'}, {'name': '14283', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14283'}]
CVE State: PUBLISHED
Explain CVE-2005-0451
Sami HTTP Server 1.0.5 allows remote attackers to cause a denial of service via an HTTP request containing two CRLF sequences, which triggers a NULL dereference.
Affected Products: n/a
References: [{'name': '1013191', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013191'}, {'name': '14283', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14283'}]
CVE State: PUBLISHED
Explain CVE-2005-0452
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".
Affected Products: n/a
References: [{'name': '20050217 XSS vulnerabilty in ASP.Net [with details]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110867912714913&w=2'}, {'name': '14214', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14214'}, {'name': '12574', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12574'}, {'tags': ['x_refsource_MISC'], 'url': 'http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml'}]
CVE State: PUBLISHED
Explain CVE-2005-0453
The buffer_urldecode function in Lighttpd 1.3.7 and earlier does not properly handle control characters, which allows remote attackers to obtain the source code for CGI and FastCGI scripts via a URL with a %00 (null) character after the file extension.
Affected Products: n/a
References: [{'name': 'GLSA-200502-21', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200502-21.xml'}, {'name': '14297', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14297'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://article.gmane.org/gmane.comp.web.lighttpd/1171'}]
CVE State: PUBLISHED
Explain CVE-2005-0454
Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the lcat, doc, or uid parameters to index.php, or (2) the mid or bid parameters to forums.php.
Affected Products: n/a
References: [{'name': '20051211 [PHP-CHECKER] 99 potential SQL injection vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/419280/100/0/threaded'}, {'name': '12573', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12573'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hackgen.org/advisories/hackgen-2005-003.txt'}, {'name': '108', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/108'}, {'name': 'dcpportal-multiple-sql-injection(19361)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19361'}, {'tags': ['x_refsource_MISC'], 'url': 'http://glide.stanford.edu/yichen/research/sec.pdf'}, {'name': '20050216 [hackgen-2005-#003] - SQL injection bugs in DCP-Portal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110858497207809&w=2'}, {'name': '1013216', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013216'}]
CVE State: PUBLISHED
Explain CVE-2005-0455
Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value.
Affected Products: n/a
References: [{'name': '20050301 RealNetworks RealPlayer .smil Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=209&type=vulnerabilities'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://service.real.com/help/faq/security/050224_player'}, {'name': 'RHSA-2005:271', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-271.html'}, {'name': 'oval:org.mitre.oval:def:10926', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10926'}, {'name': 'RHSA-2005:265', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-265.html'}]
CVE State: PUBLISHED
Explain CVE-2005-0456
Opera 7.54 and earlier does not properly validate base64 encoded binary data in a data: (RFC 2397) URL, which causes the URL to be obscured in a download dialog, which may allow remote attackers to trick users into executing arbitrary code.
Affected Products: n/a
References: [{'name': 'VU#882926', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/882926'}, {'name': '13818', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13818/'}, {'name': 'SUSE-SA:2005:031', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_31_opera.html'}, {'name': 'opera-data-dialog-spoofing(18867)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18867'}, {'name': 'GLSA-200502-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.opera.com/linux/changelogs/754u2/'}]
CVE State: PUBLISHED
Explain CVE-2005-0457
Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privileges by inserting malicious libraries into the PORTAGE_TMPDIR (portage) temporary directory.
Affected Products: n/a
References: [{'name': 'GLSA-200502-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=81747'}]
CVE State: PUBLISHED
Explain CVE-2005-0458
Cross-site scripting (XSS) vulnerability in contact_us.php in osCommerce 2.2-MS2 allows remote attackers to inject arbitrary web script or HTML via the enquiry parameter.
Affected Products: n/a
References: [{'name': '20050215 [NOBYTES.COM: #3] osCommerce 2.2-MS2 - XSS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110851122614995&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-0459
phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct request to select_lang.lib.php, which reveals the path in a PHP error message.
Affected Products: n/a
References: [{'name': '1013210', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013210'}]
CVE State: PUBLISHED
Explain CVE-2005-0460
index.php in MercuryBoard 1.0.x and 1.1.x allows remote attackers to obtain sensitive information by setting the debug parameter.
Affected Products: n/a
References: [{'name': '13787', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/13787'}, {'name': '14284', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14284'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lostmon.blogspot.com/2005/02/mercuryboard-debug-information.html'}]
CVE State: PUBLISHED
Explain CVE-2005-0461
Unknown vulnerability in NewsBruiser 2.x before 2.6.1 allows remote attackers to "take actions on comments."
Affected Products: n/a
References: [{'name': '14262', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14262'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://newsbruiser.tigris.org/source/browse/newsbruiser/CHANGELOG?rev=1.283&content-type=text/x-cvsweb-markup'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://newsbruiser.tigris.org/servlets/NewsItemView?newsItemID=1016'}]
CVE State: PUBLISHED
Explain CVE-2005-0462
Cross-site scripting (XSS) vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers to inject arbitrary HTML and web script via the f parameter.
Affected Products: n/a
References: [{'name': '13937', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13937'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lostmon.blogspot.com/2005/02/mercuryboard-forumphp-f-variable-xss.html'}]
CVE State: PUBLISHED
Explain CVE-2005-0463
Unknown "major security flaws" in Ulog-php before 1.0, related to input validation, have unknown impact and attack vectors, probably related to SQL injection vulnerabilities in (1) host.php, (2) port.php, and (3) index.php.
Affected Products: n/a
References: [{'name': '12610', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12610'}, {'name': '14321', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14321'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.inl.fr/article.php3?id_article=7'}, {'name': '1013220', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013220'}, {'name': '13853', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/13853'}]
CVE State: PUBLISHED
Explain CVE-2005-0464
gr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode, which allows local users to read a line from arbitrary files via the -d and -D options, which prints the line as a formatting error.
Affected Products: n/a
References: [{'name': '15351', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15351'}, {'name': '1013662', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013662'}, {'name': '20050402-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20050402-01-P'}, {'name': '20050407 SGI IRIX gr_osview Information Disclosure Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=226&type=vulnerabilities'}, {'name': '14875', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14875'}]
CVE State: PUBLISHED
Explain CVE-2005-0465
gr_osview in SGI IRIX does not drop privileges before opening files, which allows local users to overwrite arbitrary files via the -s option.
Affected Products: n/a
References: [{'name': '1013662', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013662'}, {'name': '20050402-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20050402-01-P'}, {'name': '20050407 SGI IRIX gr_osview File Overwrite Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=225&type=vulnerabilities'}, {'name': '14875', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14875'}]
CVE State: PUBLISHED
Explain CVE-2005-0467
Multiple integer overflows in the (1) sftp_pkt_getstring and (2) fxp_readdir_recv functions in the PSFTP and PSCP clients for PuTTY 0.56, and possibly earlier versions, allow remote malicious web sites to execute arbitrary code via SFTP responses that corrupt the heap after insufficient memory has been allocated.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002414'}, {'name': 'putty-sftppktgetstring-bo(19403)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19403'}, {'name': '20050221 Multiple PuTTY SFTP Client Packet Parsing Integer Overflow Vulnerabilities', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=201&type=vulnerabilities'}, {'name': '14333', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14333'}, {'name': 'GLSA-200502-28', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-28.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002416'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-readdir.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-sftp-string.html'}, {'name': '17214', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17214'}]
CVE State: PUBLISHED
Explain CVE-2005-0470
Buffer overflow in wpa_supplicant before 0.2.7 allows remote attackers to cause a denial of service (segmentation fault) via invalid EAPOL-Key packet data.
Affected Products: n/a
References: [{'name': '[HostAP] 20050213 wpa_supplicant - new stable releases v0.3.8 and v0.2.7', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.shmoo.com/pipermail/hostap/2005-February/009465.html'}, {'name': 'wpasupplicant-bo(19357)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19357'}, {'name': 'GLSA-200502-22', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200502-22.xml'}, {'name': '14313', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14313'}, {'name': '1013226', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013226'}]
CVE State: PUBLISHED