Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2005-1495
Oracle Database 9i and 10g disables Fine Grained Audit (FGA) after the SYS user executes a SELECT statement on an FGA object, which makes it easier for attackers to escape detection.
Affected Products: n/a
References: [{'name': '16258', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16258'}, {'name': 'VU#777773', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/777773'}, {'name': 'oracle-audit-data-manipulation(20407)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20407'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.red-database-security.com/advisory/oracle-fine-grained-auditing-issue.html'}, {'name': '20050505 Oracle 9i / 10g Fine Grained Auditing Issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531683824209&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1496
The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.red-database-security.com/exploits/oracle_exploit_dbms_scheduler_select_user.html'}, {'name': '20050505 Oracle 10g DBMS_SCHEDULER SESSION_USER issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531740305049&w=2'}, {'name': '13509', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13509'}, {'name': 'oracle10g-gain-privileges(20410)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20410'}]
CVE State: PUBLISHED
Explain CVE-2005-1497
index.php in myBloggie 2.1.1 allows remote attackers to obtain sensitive information via an invalid post_id parameter, which reveals the path in an error message.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://mywebland.com/forums/viewtopic.php?t=180'}, {'name': 'mybloggie-postid-path-disclosure(20433)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20433'}, {'name': '20050505 Multiple vulnerabilities in myBloggie 2.1.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531904608224&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1498
Multiple cross-site scripting (XSS) vulnerabilities in myBloggie 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) year parameter in viewmode.php, or the (2) cat_id, (3) month_no, or (4) post_id parameter in index.php, which are not properly sanitized before they are displayed in an error message.  NOTE: issues 2, 3, and 4 may be due to a problem in associated products rather than myBloggie itself.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://mywebland.com/forums/viewtopic.php?t=180'}, {'name': 'mybloggie-script-injection(20436)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20436'}, {'name': '20050505 Multiple vulnerabilities in myBloggie 2.1.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531904608224&w=2'}, {'name': 'mybloggie-viewmodephp-xss(20434)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20434'}, {'name': '13507', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13507'}]
CVE State: PUBLISHED
Explain CVE-2005-1499
delcomment.php in myBloggie 2.1.1 allows remote attackers to delete arbitrary comments by modifying the comment_id parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://mywebland.com/forums/viewtopic.php?t=180'}, {'name': '20050505 Multiple vulnerabilities in myBloggie 2.1.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531904608224&w=2'}, {'name': '14980', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14980'}, {'name': '13507', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13507'}, {'name': 'mybloggie-delcomment-bypass-security(20437)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20437'}]
CVE State: PUBLISHED
Explain CVE-2005-1500
Multiple SQL injection vulnerabilities in myBloggie 2.1.1 allow remote attackers to execute arbitrary SQL commands via (1) the keyword parameter in search.php; or (2) the date_no parameter in viewdate mode, (3) the cat_id parameter in viewcat mode, the (4) month_no or (5) year parameter in viewmonth mode, or (6) post_id parameter in viewid mode to index.php.  NOTE: item (1) was discovered to affect 2.1.3 as well.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://mywebland.com/forums/viewtopic.php?t=180'}, {'name': '20050505 Multiple vulnerabilities in myBloggie 2.1.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531904608224&w=2'}, {'name': '20050527 SQL Injection Exploit for myBloggie 2.1.1 - 2.1.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111722848308367&w=2'}, {'name': '14980', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14980'}, {'name': '13507', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13507'}, {'name': 'mybloggie-sql-injection(20439)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20439'}, {'name': '15017', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/15017'}]
CVE State: PUBLISHED
Explain CVE-2005-1501
MidiCart PHP Shopping Cart allows remote attackers to obtain sensitive information via a direct request to (1) search_list.php, (2) item_list.php, or (3) item_show.php, which reveal the path in a PHP error message.
Affected Products: n/a
References: [{'name': '16172', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16172'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hackgen.org/advisories/hackgen-2005-004.txt'}, {'name': 'midicart-path-disclosure(20425)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20425'}, {'name': '20050505 [hackgen-2005-#004] - Multiple bugs in MidiCart PHP Shopping Cart', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111533057918993&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1502
Cross-site scripting (XSS) vulnerability in MidiCart PHP Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the (1) searchstring parameter to search_list.php or the (2) secondgroup or (3) maingroup parameters to item_list.php.
Affected Products: n/a
References: [{'name': '13516', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13516'}, {'name': 'midicart-xss(20427)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20427'}, {'name': '13517', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13517'}, {'name': '16173', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16173'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hackgen.org/advisories/hackgen-2005-004.txt'}, {'name': '16174', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16174'}, {'name': '13518', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13518'}, {'name': '15269', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15269'}, {'name': '20050505 [hackgen-2005-#004] - Multiple bugs in MidiCart PHP Shopping Cart', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111533057918993&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1503
Multiple SQL injection vulnerabilities in MidiCart PHP Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) searchstring parameter to search_list.php, the (2) maingroup or (3) secondgroup parameters to item_list.php, or (4) code_no parameter to item_show.php.
Affected Products: n/a
References: [{'name': '16176', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16176'}, {'name': '13512', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13512'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hackgen.org/advisories/hackgen-2005-004.txt'}, {'name': '13514', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13514'}, {'name': '13515', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13515'}, {'name': '16177', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16177'}, {'name': '15269', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15269'}, {'name': '13513', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13513'}, {'name': 'midicart-sql-injection(20428)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20428'}, {'name': '20050505 [hackgen-2005-#004] - Multiple bugs in MidiCart PHP Shopping Cart', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111533057918993&w=2'}, {'name': '16175', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16175'}]
CVE State: PUBLISHED
Explain CVE-2005-1504
GameSpy SDK CD-Key Validation Toolkit, as used by many online games, allows remote attackers to bypass the CD key validation by sending a spoofed \disc\ command, which tells the server the CD key is no longer in use.
Affected Products: n/a
References: [{'name': '15254', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15254/'}, {'name': 'gamespy-sdk-cdkey-gain-access(20422)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20422'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/gskeyinuse-adv.txt'}, {'name': '20050504 Gamespy cd-key validation system: Cd-key never in use', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111539740212818&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1505
The new account wizard in Mail.app 2.0 in Mac OS 10.4, when configuring an IMAP mail account and checking the credentials, does not prompt the user to use SSL until after the password has already been sent, which causes the password to be sent in plaintext.
Affected Products: n/a
References: [{'name': 'mailapp-account-wizard-plaintext-password(20670)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20670'}, {'name': '20050504 Mac OS 10.4: new-account-wizzard in Mail 2.0 sends clear-text passwords', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111539448630095&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1506
SQL injection vulnerability in out.php in CJ Ultra (CJUltra) Plus 1.0.3 and 1.0.4 allows remote attackers to execute arbitrary SQL commands via the perm parameter.
Affected Products: n/a
References: [{'name': '20050505 Sql Injection in CJ Ultra Plus v1.0.3-1.0.4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111539589013911&w=2'}, {'name': '15281', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15281'}]
CVE State: PUBLISHED
Explain CVE-2005-1507
Buffer overflow in the Tomcat plugin in 4d WebSTAR 5.33 and 5.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long URL.
Affected Products: n/a
References: [{'name': '16154', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16154'}, {'name': '13538', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13538'}, {'name': '4d-webstar-plugin-bo(20478)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20478'}, {'name': '15278', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15278'}, {'name': '20050506 4d WebSTAR 5.x Web Server Mac OS X Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111541709402784&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1508
Multiple cross-site scripting (XSS) vulnerabilities in PwsPHP 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) month or (2) annee parameters to the news module, (3) nbractif or (4) annee parameters to the stats module, (5) id parameter to profil.php, (6) mb_lettre or (7) lettre parameter to memberlist.php, or (8) chaine_search, or (9) auteur_search parameter to the recherche module.
Affected Products: n/a
References: [{'name': '16232', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16232'}, {'name': 'pwsphp-mulitple-scripts-xss(20500)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20500'}, {'name': '16228', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16228'}, {'name': '20050507 PwsPHP v1.2.2 Final - Multiples vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111565808024581&w=2'}, {'name': '16229', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16229'}, {'name': 'ADV-2005-0503', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0503'}, {'name': '15315', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15315'}, {'name': '16231', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16231'}, {'name': '16230', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16230'}]
CVE State: PUBLISHED
Explain CVE-2005-1509
SQL injection vulnerability in profil.php in PwsPHP 1.2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected Products: n/a
References: [{'name': '16233', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16233'}, {'name': '13563', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13563'}, {'name': '20050507 PwsPHP v1.2.2 Final - Multiples vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111565808024581&w=2'}, {'name': 'pwsphp-id-sql-injection(20501)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20501'}, {'name': '15315', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15315'}]
CVE State: PUBLISHED
Explain CVE-2005-1510
PwsPHP 1.2.2 allows remote attackers to obtain sensitive information via a direct request to the admin directory, which reveals the path in an error message.
Affected Products: n/a
References: [{'name': '16234', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16234'}, {'name': '20050507 PwsPHP v1.2.2 Final - Multiples vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111565808024581&w=2'}, {'name': '15315', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15315'}]
CVE State: PUBLISHED
Explain CVE-2005-1511
PwsPHP 1.2.2 allows remote attackers to bypass authentication and post arbitrary comments via the Pseudo cookie.
Affected Products: n/a
References: [{'name': '16235', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16235'}, {'name': '20050507 PwsPHP v1.2.2 Final - Multiples vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111565808024581&w=2'}, {'name': 'pwsphp-cookie-spoof-identity(20503)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20503'}, {'name': '15315', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15315'}]
CVE State: PUBLISHED
Explain CVE-2005-1512
The Admin panel in PwsPHP 1.2.2 does not properly verify uploaded picture files, which allows remote attackers to upload and possibly execute arbitrary files.
Affected Products: n/a
References: [{'name': '16236', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16236'}, {'name': 'pwsphp-admin-panel-file-upload(20508)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20508'}, {'name': '20050507 PwsPHP v1.2.2 Final - Multiples vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111565808024581&w=2'}, {'name': '15315', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15315'}]
CVE State: PUBLISHED
Explain CVE-2005-1513
Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large SMTP request.
Affected Products: n/a
References: [{'name': '20050506 64 bit qmail fun', 'tags': ['mailing-list'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0101.html'}, {'url': 'http://www.guninski.com/where_do_you_want_billg_to_go_today_4.html'}, {'name': '1013911', 'tags': ['vdb-entry'], 'url': 'http://securitytracker.com/id?1013911'}, {'name': '[oss-security] 20200519 Remote Code Execution in qmail (CVE-2005-1513)', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2020/05/19/8'}, {'name': '[oss-security] 20200520 Re: Remote Code Execution in qmail (CVE-2005-1513)', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2020/05/20/2'}, {'name': '[oss-security] 20200520 Re: Remote Code Execution in qmail (CVE-2005-1513)', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2020/05/20/5'}, {'name': '20200522 Remote Code Execution in qmail (CVE-2005-1513)', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2020/May/42'}, {'url': 'http://packetstormsecurity.com/files/157805/Qualys-Security-Advisory-Qmail-Remote-Code-Execution.html'}, {'name': 'DSA-4692', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2020/dsa-4692'}, {'name': '[debian-lts-announce] 20200604 [SECURITY] [DLA 2234-1] netqmail security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/06/msg00002.html'}, {'name': '[oss-security] 20200616 Re: Remote Code Execution in qmail (CVE-2005-1513)', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2020/06/16/2'}, {'name': '20200623 Re: Remote Code Execution in qmail (CVE-2005-1513)', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2020/Jun/27'}, {'url': 'http://packetstormsecurity.com/files/158203/Qmail-Local-Privilege-Escalation-Remote-Code-Execution.html'}, {'name': 'GLSA-202007-01', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202007-01'}, {'name': 'USN-4556-1', 'tags': ['vendor-advisory'], 'url': 'https://usn.ubuntu.com/4556-1/'}, {'name': '[oss-security] 20230606 LPE and RCE in RenderDoc: CVE-2023-33865, CVE-2023-33864, CVE-2023-33863', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2023/06/06/3'}, {'name': '20230607 LPE and RCE in RenderDoc: CVE-2023-33865, CVE-2023-33864, CVE-2023-33863', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2023/Jun/2'}, {'url': 'http://packetstormsecurity.com/files/172804/RenderDoc-1.26-Local-Privilege-Escalation-Remote-Code-Execution.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1514
commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SMTP command without a space character, which causes an array to be referenced with a negative index.
Affected Products: n/a
References: [{'name': '20050506 64 bit qmail fun', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0101.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.guninski.com/where_do_you_want_billg_to_go_today_4.html'}, {'name': '1013911', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013911'}, {'name': '[oss-security] 20200519 Remote Code Execution in qmail (CVE-2005-1513)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2020/05/19/8'}, {'name': '[oss-security] 20200520 Re: Remote Code Execution in qmail (CVE-2005-1513)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2020/05/20/2'}, {'name': '20200522 Remote Code Execution in qmail (CVE-2005-1513)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2020/May/42'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/157805/Qualys-Security-Advisory-Qmail-Remote-Code-Execution.html'}, {'name': 'DSA-4692', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2020/dsa-4692'}, {'name': '[debian-lts-announce] 20200604 [SECURITY] [DLA 2234-1] netqmail security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/06/msg00002.html'}, {'name': 'GLSA-202007-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202007-01'}, {'name': 'USN-4556-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4556-1/'}]
CVE State: PUBLISHED
Explain CVE-2005-1515
Integer signedness error in the qmail_put and substdio_put functions in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of SMTP RCPT TO commands.
Affected Products: n/a
References: [{'name': '20050506 64 bit qmail fun', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0101.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.guninski.com/where_do_you_want_billg_to_go_today_4.html'}, {'name': '1013911', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013911'}, {'name': '[oss-security] 20200519 Remote Code Execution in qmail (CVE-2005-1513)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2020/05/19/8'}, {'name': '[oss-security] 20200520 Re: Remote Code Execution in qmail (CVE-2005-1513)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2020/05/20/2'}, {'name': '20200522 Remote Code Execution in qmail (CVE-2005-1513)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2020/May/42'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/157805/Qualys-Security-Advisory-Qmail-Remote-Code-Execution.html'}, {'name': 'DSA-4692', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2020/dsa-4692'}, {'name': '[debian-lts-announce] 20200604 [SECURITY] [DLA 2234-1] netqmail security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/06/msg00002.html'}, {'name': 'GLSA-202007-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202007-01'}, {'name': 'USN-4556-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4556-1/'}]
CVE State: PUBLISHED
Explain CVE-2005-1516
DList (dlist.exe) in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a sendlog command with an incorrect password hash, which is not properly handled by the _cmd_sendlog function.
Affected Products: n/a
References: [{'name': '15242', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15242'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/dmail31a.html'}, {'name': 'dmail-dlist-bypass-authentication(20412)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20412'}, {'name': '13497', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13497'}]
CVE State: PUBLISHED
Explain CVE-2005-1517
Unknown vulnerability in Cisco Firewall Services Module (FWSM) 2.3.1 and earlier, when using URL, FTP, or HTTPS filtering exceptions, allows certain TCP packets to bypass access control lists (ACLs).
Affected Products: n/a
References: [{'name': '20050511 FWSM URL Filtering Solution TCP ACL Bypass Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20050511-url.shtml'}, {'name': 'ADV-2005-0527', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0527'}]
CVE State: PUBLISHED
Explain CVE-2005-1518
Unknown vulnerability in Solaris 7 through 9, when using Federated Naming Services (FNS), autofs, and FNS X.500 configuration, allows local users to cause a denial of service (automountd crash) when "accessing" /xfn/_x500.
Affected Products: n/a
References: [{'name': 'ADV-2005-0517', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0517'}, {'name': '57786', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57786-1'}]
CVE State: PUBLISHED
Explain CVE-2005-1519
Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups.
Affected Products: n/a
References: [{'name': '13592', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13592'}, {'name': 'oval:org.mitre.oval:def:9976', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9976'}, {'name': 'FEDORA-2005-373', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html'}, {'name': '15294', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15294'}, {'name': 'FLSA-2006:152809', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://fedoranews.org/updates/FEDORA--.shtml'}, {'name': 'DSA-751', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-751'}, {'name': 'RHSA-2005:489', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-489.html'}, {'name': 'ADV-2005-0521', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0521'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-dns_query'}]
CVE State: PUBLISHED
Explain CVE-2005-1520
Buffer overflow in the header_get_field_name function in header.c for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a crafted e-mail.
Affected Products: n/a
References: [{'name': '1014052', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014052'}, {'name': '13766', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13766'}, {'name': '15442', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15442'}, {'name': 'DSA-732', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-732'}, {'name': '20050525 GNU Mailutils 0.6 mail header_get_field_name() Buffer Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=249&type=vulnerabilities'}]
CVE State: PUBLISHED
Explain CVE-2005-1521
Integer overflow in the fetch_io function of the imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a partial message request with a large value in the END parameter, which leads to a heap-based buffer overflow.
Affected Products: n/a
References: [{'name': '1014052', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014052'}, {'name': '13763', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13763'}, {'name': '20050525 GNU Mailutils 0.6 imap4d fetch_io Heap overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=248&type=vulnerabilities'}, {'name': '15442', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15442'}, {'name': 'DSA-732', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-732'}]
CVE State: PUBLISHED
Explain CVE-2005-1522
The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large range value in the FETCH command.
Affected Products: n/a
References: [{'name': '20050525 GNU Mailutils 0.6 imap4d FETCH Commad Resource Consumption DoS Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=247&type=vulnerabilities'}, {'name': '1014052', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014052'}, {'name': '15442', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15442'}, {'name': '13765', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13765'}, {'name': 'DSA-732', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-732'}]
CVE State: PUBLISHED
Explain CVE-2005-1523
Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands.
Affected Products: n/a
References: [{'name': '1014052', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014052'}, {'name': '20050525 GNU Mailutils 0.6 imap4d Format String Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=246&type=vulnerabilities'}, {'name': '15442', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15442'}, {'name': 'DSA-732', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-732'}, {'name': '13764', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13764'}]
CVE State: PUBLISHED
Explain CVE-2005-1524
PHP file inclusion vulnerability in top_graph_header.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the config[library_path] parameter.
Affected Products: n/a
References: [{'name': '20050622 Multiple Vendor Cacti Remote File Inclusion Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=265&type=vulnerabilities&flashstatus=true'}, {'name': 'CLSA-2005:978', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com/atualizacoes/index.php?id=a&anuncio=000978'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cacti.net/release_notes_0_8_6e.php'}, {'name': 'cacti-topgraphheader-file-include(21118)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/21118'}, {'name': 'GLSA-200506-20', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200506-20.xml'}, {'name': 'DSA-764', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-764'}, {'name': '1014252', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014252'}, {'name': '15931', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15931'}, {'name': '15490', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15490'}, {'name': '17426', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17426'}, {'name': '16136', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/16136'}]
CVE State: PUBLISHED
Explain CVE-2005-1525
SQL injection vulnerability in config_settings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected Products: n/a
References: [{'name': 'cacti-configsettings-sql-injection(21120)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/21120'}, {'name': 'CLSA-2005:978', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com/atualizacoes/index.php?id=a&anuncio=000978'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cacti.net/release_notes_0_8_6e.php'}, {'name': '20050622 Multiple Vendor Cacti Multiple SQL Injection Vulnerabilities', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=267&type=vulnerabilities&flashstatus=true'}, {'name': '17424', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17424'}, {'name': 'GLSA-200506-20', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200506-20.xml'}, {'name': 'DSA-764', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-764'}, {'name': '1014252', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014252'}, {'name': '15931', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15931'}, {'name': '15490', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15490'}, {'name': '14027', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/14027'}]
CVE State: PUBLISHED
Explain CVE-2005-1526
PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the config[include_path] parameter.
Affected Products: n/a
References: [{'name': '20050622 Multiple Vendor Cacti config_settings.php Remote Code Execution Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=266&type=vulnerabilities'}, {'name': '17425', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/17425'}, {'name': 'CLSA-2005:978', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com/atualizacoes/index.php?id=a&anuncio=000978'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cacti.net/release_notes_0_8_6e.php'}, {'name': 'cacti-configsettings-file-include(21119)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/21119'}, {'name': 'GLSA-200506-20', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200506-20.xml'}, {'name': 'DSA-764', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-764'}, {'name': '1014252', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014252'}, {'name': '15931', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15931'}, {'name': '14028', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/14028'}, {'name': '15490', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15490'}]
CVE State: PUBLISHED
Explain CVE-2005-1527
Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call.
Affected Products: n/a
References: [{'name': '18696', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/18696'}, {'name': 'USN-167-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/167-1/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/unixfocus/5DP0J00GKE.html'}, {'name': 'SUSE-SR:2005:019', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_19_sr.html'}, {'name': 'DSA-892', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-892'}, {'name': '17463', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17463'}, {'name': 'awstats-eval-execute-commands(21769)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/21769'}, {'name': '20050809 AWStats ShowInfoURL Remote Command Execution Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=290&type=vulnerabilities&flashstatus=false'}, {'name': '16412', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/16412'}, {'name': '1014636', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014636'}, {'name': '14525', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/14525'}]
CVE State: PUBLISHED
Explain CVE-2005-1528
Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a LD_LIBRARY_PATH environment variable that references a malicious library.
Affected Products: n/a
References: [{'name': 'qnx-crttrap-privilege-elevation(24560)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24560'}, {'name': 'ADV-2006-0474', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0474'}, {'name': '18750', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18750'}, {'name': '1015599', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015599'}, {'name': '20060207 QNX Neutrino RTOS crttrap Arbitrary Library Loading Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/intelligence/vulnerabilities/display.php?id=379'}, {'name': '16539', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16539'}]
CVE State: PUBLISHED
Explain CVE-2005-1530
Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.
Affected Products: n/a
References: [{'name': '14270', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/14270'}, {'name': '20050714 Sophos Anti-Virus Zip File Handling DoS Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=283&type=vulnerabilities&flashstatus=true'}, {'name': '1014488', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014488'}, {'name': 'sophos-bzip2-dos(21373)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/21373'}]
CVE State: PUBLISHED
Explain CVE-2005-1531
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script injection, which allows remote attackers to execute script via "Wrapped" javascript: URLs, as demonstrated using (1) a javascript: URL in a view-source: URL, (2) a javascript: URL in a jar: URL, or (3) "a nested variant."
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:10351', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10351'}, {'name': 'oval:org.mitre.oval:def:100015', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100015'}, {'name': 'SCOSA-2005.49', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt'}, {'name': 'RHSA-2005:435', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-435.html'}, {'name': '13641', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13641'}, {'name': '15495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/15495'}, {'name': '1013963', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/mfsa2005-43.html'}, {'name': '1013962', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013962'}, {'name': 'ADV-2005-0530', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0530'}, {'name': 'RHSA-2005:434', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-434.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1532
Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/mfsa2005-44.html'}, {'name': 'SCOSA-2005.49', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt'}, {'name': 'RHSA-2005:435', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-435.html'}, {'name': '19823', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19823'}, {'name': '1013964', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013964'}, {'name': '15495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/15495'}, {'name': 'oval:org.mitre.oval:def:100014', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100014'}, {'name': 'RHSA-2005:601', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-601.html'}, {'name': '1013965', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013965'}, {'name': '13645', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13645'}, {'name': 'oval:org.mitre.oval:def:10791', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10791'}, {'name': 'ADV-2005-0530', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0530'}, {'name': 'SUSE-SA:2006:022', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006_04_25.html'}, {'name': 'RHSA-2005:434', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-434.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1543
Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and Server Management, ZENworks for Desktops 4.x, ZENworks for Servers 3.x, and Remote Management allows remote attackers to execute arbitrary code via (1) unspecified vectors, (2) type 1 authentication requests, and (3) type 2 authentication requests.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.rem0te.com/public/images/zen.pdf'}, {'name': '13678', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13678'}, {'name': 'novell-zenwork-remote-management-bo(20639)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20639'}, {'name': '1014005', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1014005'}, {'name': 'ADV-2005-0571', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0571'}, {'name': '20050518 NOVELL ZENWORKS MULTIPLE =?utf-8?Q?REM=C3=98TE?= STACK & HEAP OVERFLOWS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111645317713662&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097644.htm'}, {'name': 'novell-zenwork-remote-management-2-bo(20645)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20645'}, {'name': '15433', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15433'}, {'name': 'novell-zenwork-remote-management-1-bo(20644)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20644'}]
CVE State: PUBLISHED