Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2005-1454
SQL injection vulnerability in the radius_xlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via (1) group_membership_query, (2) simul_count_query, or (3) simul_verify_query configuration entries.
Affected Products: n/a
References: [{'name': 'SUSE-SR:2005:014', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_14_sr.html'}, {'name': '13540', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13540'}, {'name': 'oval:org.mitre.oval:def:9610', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9610'}, {'name': '1013909', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2005/May/1013909.html'}, {'name': '20050520 ERRATA: [ GLSA 200505-13 ] FreeRADIUS: SQL injection and Denial of Service vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-05/0492.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.freeradius.org/security.html'}, {'name': 'GLSA-200505-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200505-13.xml'}, {'name': 'RHSA-2005:524', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-524.html'}, {'name': 'freeradius-xlat-sql-injection(20449)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20449'}]
CVE State: PUBLISHED
Explain CVE-2005-1455
Buffer overflow in the sql_escape_func function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote attackers to cause a denial of service (crash).
Affected Products: n/a
References: [{'name': 'SUSE-SR:2005:014', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_14_sr.html'}, {'name': 'oval:org.mitre.oval:def:9579', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9579'}, {'name': '1013909', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2005/May/1013909.html'}, {'name': '20050520 ERRATA: [ GLSA 200505-13 ] FreeRADIUS: SQL injection and Denial of Service vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-05/0492.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.freeradius.org/security.html'}, {'name': 'GLSA-200505-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200505-13.xml'}, {'name': 'RHSA-2005:524', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-524.html'}, {'name': '13541', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13541'}, {'name': 'freeradius-sqlescapefunc-bo(20450)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20450'}]
CVE State: PUBLISHED
Explain CVE-2005-1456
Multiple unknown vulnerabilities in the (1) DHCP and (2) Telnet dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (abort).
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:9700', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9700'}, {'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1457
Multiple unknown vulnerabilities in the (1) AIM, (2) LDAP, (3) FibreChannel, (4) GSM_MAP, (5) SRVLOC, and (6) NTLMSSP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash).
Affected Products: n/a
References: [{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'name': 'oval:org.mitre.oval:def:9825', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9825'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1458
Multiple unknown "other problems" in the KINK dissector in Ethereal before 0.10.11 have unknown impact and attack vectors.
Affected Products: n/a
References: [{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}, {'name': 'oval:org.mitre.oval:def:11348', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11348'}]
CVE State: PUBLISHED
Explain CVE-2005-1459
Multiple unknown vulnerabilities in the (1) WSP, (2) BER, (3) SMB, (4) NDPS, (5) IAX2, (6) RADIUS, (7) TCAP, (8) MRDISC, (9) 802.3 Slow, (10) SMBMailslot, or (11) SMB PIPE dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error).
Affected Products: n/a
References: [{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'oval:org.mitre.oval:def:11494', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11494'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1460
Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error) via an invalid protocol tree item length.
Affected Products: n/a
References: [{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'oval:org.mitre.oval:def:9970', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9970'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1461
Multiple buffer overflows in the (1) SIP, (2) CMIP, (3) CMP, (4) CMS, (5) CRMF, (6) ESS, (7) OCSP, (8) X.509, (9) ISIS, (10) DISTCC, (11) FCELS, (12) Q.931, (13) NCP, (14) TCAP, (15) ISUP, (16) MEGACO, (17) PKIX1Explitit, (18) PKIX_Qualified, (19) Presentation dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
Affected Products: n/a
References: [{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'oval:org.mitre.oval:def:9853', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9853'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1462
Double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.
Affected Products: n/a
References: [{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'name': 'oval:org.mitre.oval:def:9713', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9713'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1463
Multiple format string vulnerabilities in the (1) DHCP and (2) ANSI A dissectors in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.
Affected Products: n/a
References: [{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'name': 'oval:org.mitre.oval:def:10713', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10713'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1464
Multiple unknown vulnerabilities in the (1) KINK, (2) L2TP, (3) MGCP, (4) EIGRP, (5) DLSw, (6) MEGACO, (7) LMP, and (8) RSVP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (infinite loop).
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:9534', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9534'}, {'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1465
Unknown vulnerability in the NCP dissector in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (long loop).
Affected Products: n/a
References: [{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'oval:org.mitre.oval:def:10224', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10224'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1466
Unknown vulnerability in the DICOM dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service (large memory allocation) via unknown vectors.
Affected Products: n/a
References: [{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'name': 'oval:org.mitre.oval:def:11024', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11024'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1467
Unknown vulnerability in the NDPS dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service (memory exhaustion) via unknown vectors.
Affected Products: n/a
References: [{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'oval:org.mitre.oval:def:9654', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9654'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1468
Multiple unknown vulnerabilities in the (1) WSP, (2) Q.931, (3) H.245, (4) KINK, (5) MGCP, (6) RPC, (7) SMBMailslot, and (8) SMB NETLOGON dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) via unknown vectors that lead to a null dereference.
Affected Products: n/a
References: [{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'name': 'oval:org.mitre.oval:def:10049', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10049'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1469
Unknown vulnerability in the GSM dissector in Ethereal before 0.10.11 allows remote attackers to cause the dissector to access an invalid pointer.
Affected Products: n/a
References: [{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'name': 'oval:org.mitre.oval:def:9598', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9598'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1470
Multiple unknown vulnerabilities in the (1) TZSP, (2) MGCP, (3) ISUP, (4) SMB, or (5) Bittorrent dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (segmentation fault) via unknown vectors.
Affected Products: n/a
References: [{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}, {'name': 'oval:org.mitre.oval:def:11804', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11804'}]
CVE State: PUBLISHED
Explain CVE-2005-1471
Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote attackers to execute arbitrary code via crafted chunked-encoding data.
Affected Products: n/a
References: [{'name': '20050506 [SEC-1 LTD] RSA SecurID Web Agent Heap Overflow', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=111537013104724&w=2'}, {'name': '15222', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15222'}]
CVE State: PUBLISHED
Explain CVE-2005-1472
Certain system calls in Apple Mac OS X 10.4.1 do not properly enforce the permissions of certain directories without the POSIX read bit set, but with the execute bits set for group or other, which allows local users to list files in otherwise restricted directories.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2005-05-19', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/May/msg00004.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1473
SecurityAgent in Apple Mac OS X 10.4.1 allows attackers with physical access to bypass the locked screensaver and launch background applications by opening a URL from a text input field.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2005-05-19', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/May/msg00004.html'}]
CVE State: PUBLISHED
Explain CVE-2005-1474
Dashboard in Apple Mac OS X 10.4.1 allows remote attackers to install widgets via Safari without prompting the user, a different vulnerability than CVE-2005-1933.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2005-05-19', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/May/msg00004.html'}, {'name': '13694', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13694'}]
CVE State: PUBLISHED
Explain CVE-2005-1475
The XMLHttpRequest object in Opera 8.0 Final Build 1095 allows remote attackers to bypass access restrictions and perform unauthorized actions on other domains via a redirect.
Affected Products: n/a
References: [{'name': '13970', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13970'}, {'name': '15008', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15008'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2005-4/advisory/'}]
CVE State: PUBLISHED
Explain CVE-2005-1476
Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.
Affected Products: n/a
References: [{'name': 'VU#534710', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/534710'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=292691'}, {'name': 'SCOSA-2005.49', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt'}, {'name': 'RHSA-2005:435', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-435.html'}, {'name': '1013913', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013913'}, {'name': '15292', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15292'}, {'name': '15495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/15495'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=293302'}, {'name': '20050508 Firefox Remote Compromise Technical Details', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=111556301530553&w=2'}, {'name': '13544', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13544'}, {'name': 'oval:org.mitre.oval:def:10045', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10045'}, {'tags': ['x_refsource_MISC'], 'url': 'http://greyhatsecurity.org/vulntests/ffrc.htm'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/mfsa2005-42.html'}, {'name': 'mozilla-javascript-code-execution(20443)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20443'}, {'name': 'oval:org.mitre.oval:def:100002', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100002'}, {'tags': ['x_refsource_MISC'], 'url': 'http://greyhatsecurity.org/firefox.htm'}, {'name': 'RHSA-2005:434', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-434.html'}, {'name': 'ADV-2005-0493', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0493'}, {'name': '20050508 Firefox Remote Compromise Leaked', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=111553138007647&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1477
The install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as update.mozilla.org or addon.mozilla.org, to execute arbitrary Javascript with chrome privileges, leading to arbitrary code execution on the system when combined with vulnerabilities such as CVE-2005-1476, as demonstrated using a javascript: URL as the package icon and a cross-site scripting (XSS) attack on a vulnerable whitelist site.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=292691'}, {'name': 'SCOSA-2005.49', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt'}, {'name': 'oval:org.mitre.oval:def:9231', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9231'}, {'name': 'RHSA-2005:435', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-435.html'}, {'name': '1013913', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013913'}, {'name': '15292', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15292'}, {'name': '15495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/15495'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=293302'}, {'name': '20050508 Firefox Remote Compromise Technical Details', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=111556301530553&w=2'}, {'name': 'oval:org.mitre.oval:def:100001', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100001'}, {'name': '13544', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13544'}, {'tags': ['x_refsource_MISC'], 'url': 'http://greyhatsecurity.org/vulntests/ffrc.htm'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/mfsa2005-42.html'}, {'name': 'mozilla-javascript-code-execution(20443)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20443'}, {'tags': ['x_refsource_MISC'], 'url': 'http://greyhatsecurity.org/firefox.htm'}, {'name': 'RHSA-2005:434', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-434.html'}, {'name': 'ADV-2005-0493', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0493'}, {'name': 'VU#648758', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/648758'}, {'name': '20050508 Firefox Remote Compromise Leaked', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=111553138007647&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1478
Format string vulnerability in dSMTP (dsmtp.exe) in DMail 3.1a allows remote attackers to execute arbitrary code via format string specifiers in the xtellmail command.
Affected Products: n/a
References: [{'name': '15242', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15242'}, {'name': '20050505 dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531804617905&w=2'}, {'name': 'dmail-dsmtpexe-format-string(20414)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20414'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/dmail31a.html'}, {'name': '1013885', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013885'}, {'name': '13505', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13505'}]
CVE State: PUBLISHED
Explain CVE-2005-1479
SQL injection vulnerability in jgs_portal.php in JGS-Portal 3.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected Products: n/a
References: [{'name': '15219', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15219'}, {'name': '1013866', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013866'}, {'name': '13451', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13451'}, {'name': 'jgsportal-sql-injection(20371)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20371'}, {'name': '20050516 [SePro Bugtraq] WBB Portal - JGS-Portal <= 3.0.2 - Multiple Vulnerabilities (09.05.05)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111627681218415&w=2'}, {'name': '20050430 JGS-Portal 3.0.1 SQL-Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111506870504598&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1480
Directory traversal vulnerability in RaidenFTPD before 2.4.2241 allows remote attackers to read arbitrary files via a "..\\" (dot dot backslash) in the urlget site command.
Affected Products: n/a
References: [{'name': '13292', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13292'}, {'name': '15713', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15713'}, {'name': '20050502 Directory Traversal Vuln - RaidenFTPD 2.4 < Build 2241', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111507556127582&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://forum.raidenftpd.com/showflat.php?Board=UBB13&Number=45685'}, {'name': 'raidenftpd-directory-traversal(20368)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20368'}, {'name': '15037', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15037'}]
CVE State: PUBLISHED
Explain CVE-2005-1481
Multiple SQL injection vulnerabilities in Aaron Outpost ASP Inline Corporate Calendar allow remote attackers to execute arbitrary SQL commands via the Event_ID parameter to (1) defer.asp or (2) details.asp.
Affected Products: n/a
References: [{'name': '1013884', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013884'}, {'name': '16192', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16192'}, {'name': '16193', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16193'}, {'name': '15239', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15239'}, {'name': 'asp-inline-corporate-calendar-sql-injection(20416)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20416'}, {'name': '20050503 [HSC Security Group] ASP Inline Corporate Calendar SQL injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530675909673&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1482
ArticleLive 2005 allows remote attackers to gain privileges by modifying the (1) auth and (2) userId fields in a cookie.
Affected Products: n/a
References: [{'name': '20050503 Authentication bypass, sql injections and xss in ArticleLive 2005', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530871724865&w=2'}, {'name': '13493', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13493'}, {'name': '15250', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15250'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalparadox.org/advisories/inal.txt'}, {'name': 'articlelive-bypass-security(20431)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20431'}, {'name': '1013895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013895'}]
CVE State: PUBLISHED
Explain CVE-2005-1483
Multiple cross-site scripting (XSS) vulnerabilities in ArticleLive 2005 allow remote attackers to inject arbitrary web script or HTML via the (1) Query, (2) Username, (3) LastName, (4) Biography, or (5) BlogId parameter.
Affected Products: n/a
References: [{'name': '20050503 Authentication bypass, sql injections and xss in ArticleLive 2005', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530871724865&w=2'}, {'name': '13493', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13493'}, {'name': '15250', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15250'}, {'name': 'articlelive-multiple-xss(20430)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20430'}, {'name': '16183', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16183'}, {'name': '1013895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013895'}]
CVE State: PUBLISHED
Explain CVE-2005-1484
Directory traversal vulnerability in Golden FTP server pro 2.52 allows remote attackers to read arbitrary files via a "\.." (backward slash dot dot) with a leading '"' (double quote) in the GET command.
Affected Products: n/a
References: [{'name': '13479', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13479'}, {'name': 'goldenftp-dotdot-directory-traversal(20668)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20668'}, {'name': '20050504 Golden Ftp Server Pro - Directory Traversal Vuln', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530871716145&w=2'}, {'name': '15175', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15175'}]
CVE State: PUBLISHED
Explain CVE-2005-1485
Golden FTP Server Pro 2.52 allows remote attackers to obtain sensitive information via a GET request for a file that does not exist, which reveals the absolute path of the FTP server in the resulting FTP error message.
Affected Products: n/a
References: [{'name': '15175', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15175/'}, {'name': 'goldenftp-information-disclosure(20674)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20674'}, {'name': '20050504 Golden Ftp Server Pro - Directory Traversal Vuln', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530871716145&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1486
Multiple cross-site scripting vulnerabilities in FishCart 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) trackingnum, (2) reqagree, or (3) m parameter to upstracking.php or (4) nlst parameter to display.php.  NOTE: the vendor was not able to reproduce some of the reported vectors but believes that they have been addressed.  The original researcher is known to be unreliable.
Affected Products: n/a
References: [{'name': '20050504 Multiple SQL injections and XSS in FishCart 3.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530799109755&w=2'}, {'name': '16280', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16280'}, {'name': '20070123 Re: Multiple SQL injections and XSS in FishCart 3.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/457754/100/200/threaded'}, {'name': '15232', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15232/'}, {'name': 'fishcart-multiple-xss(20384)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20384'}, {'name': '16281', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16281'}, {'name': '[fishcart] 20050521 Re: Concerned about security', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.fishcart.org/archives/200505/msg00028.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalparadox.org/advisories/fishc.txt'}, {'name': '13499', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13499'}]
CVE State: PUBLISHED
Explain CVE-2005-1487
Multiple SQL injection vulnerabilities in FishCart 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) cartid parameter to upstnt.php or (2) psku parameter to display.php.  NOTE: the vendor disputes this report, saying that they are forced SQL errors.  The original researcher is known to be unreliable
Affected Products: n/a
References: [{'name': '16283', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16283'}, {'name': '20050504 Multiple SQL injections and XSS in FishCart 3.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530799109755&w=2'}, {'name': '20070123 Re: Multiple SQL injections and XSS in FishCart 3.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/457754/100/200/threaded'}, {'name': '15232', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15232/'}, {'name': '16282', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16282'}, {'name': 'fishcart-multiple-sql-injection(20386)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20386'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalparadox.org/advisories/fishc.txt'}, {'name': '13499', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13499'}]
CVE State: PUBLISHED
Explain CVE-2005-1488
Multiple cross-site scripting (XSS) vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) the E-mail address, Note, or Public Certificate fields to address.html, (2) addressaction.html, (3) the Signature field to settings.html, or (4) the Shared calendars to calendarsettings.html.
Affected Products: n/a
References: [{'name': '20050504 Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530933016434&w=2'}, {'name': 'merak-icewarp-script-xss(20467)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20467'}]
CVE State: PUBLISHED
Explain CVE-2005-1489
Unknown vulnerability in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to obtain the full path of the server via certain requests to (1) calendar_addevent.html, (2) calendar_event.html, or (3) calendar_task.html.
Affected Products: n/a
References: [{'name': '20050504 Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530933016434&w=2'}, {'name': '15249', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15249'}, {'name': 'merak-icewarp-script-path-disclosure(20469)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20469'}]
CVE State: PUBLISHED
Explain CVE-2005-1490
Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist, allows remote authenticated users to determine if a file exists via the folder parameter to attachment.html.
Affected Products: n/a
References: [{'name': '20050504 Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530933016434&w=2'}, {'name': '15249', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15249'}, {'name': 'merak-icewarp-file-existence(20472)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20472'}]
CVE State: PUBLISHED
Explain CVE-2005-1491
Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to (1) move their home directory via viewaction.html or (2) move arbitrary files via the importfile parameter to importaction.html.
Affected Products: n/a
References: [{'name': '20050504 Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530933016434&w=2'}, {'name': '15249', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15249'}, {'name': 'merak-icewarp-directory-relocation(20471)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20471'}]
CVE State: PUBLISHED
Explain CVE-2005-1492
Cross-site scripting (XSS) vulnerability in user.cgi in Gossamer Threads Links SQL 2.x and 3.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter.
Affected Products: n/a
References: [{'name': '15253', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15253'}, {'name': '1013891', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013891'}, {'name': '16189', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16189'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.gossamer-threads.com/forum/Gossamer_Links_3.0.1_Released_P280986/'}, {'name': 'links-usercgi-addcgi-xss(20415)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20415'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gossamer-threads.com/perl/gforum/gforum.cgi?post=281029%3B'}, {'name': '13484', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13484'}, {'name': '20050504 Gossamer Threads Links SQL login XSS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531023916998&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1493
Directory traversal vulnerability in SimpleCam 1.2 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the URL.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.autistici.org/fdonato/advisory/SimpleCam1.2-adv.txt'}, {'name': 'simplecam-dotdot-directory-traversal(20411)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20411'}, {'name': '13495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13495'}, {'name': '1013888', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2005/May/1013888.html'}, {'name': '20050504 directory traversal in SimpleCam 1.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531466319161&w=2'}]
CVE State: PUBLISHED
Explain CVE-2005-1494
Multiple cross-site scripting (XSS) vulnerabilities in admin.cgi in MegaBook 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) entryid or (2) password parameter.
Affected Products: n/a
References: [{'name': 'megabook-admincgi-xss(20669)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20669'}, {'name': '13522', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13522'}, {'name': '20050508 Re: MegaBook V2.0 - Cross Site Scripting Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/397809'}, {'name': '20050505 MegaBook V2.0 - Cross Site Scripting Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531609618182&w=2'}]
CVE State: PUBLISHED