Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2004-1757
BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '10728', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10728'}, {'name': 'VU#350350', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/350350'}, {'name': 'weblogic-boot-password-disclosure(14957)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14957'}, {'name': '9501', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9501'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_50.00.jsp'}]
CVE State: PUBLISHED
Explain CVE-2004-1758
BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database username and password for an untargeted JDBC connection pool in plaintext in config.xml, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '1009764', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009764'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_53.00.jsp'}, {'name': 'VU#920238', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/920238'}, {'name': '5297', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5297'}, {'name': '10131', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10131'}, {'name': '11357', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11357'}, {'name': 'bea-configxml-plaintext-password(15860)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15860'}]
CVE State: PUBLISHED
Explain CVE-2004-1759
Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 14247, as demonstrated using port scanning.
Affected Products: n/a
References: [{'name': 'VU#721092', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/721092'}, {'name': '10696', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10696'}, {'name': 'ciscovoice-ibmservers-dos(14901)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14901'}, {'name': '1008814', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1008814'}, {'name': '20040121 Voice Product Vulnerabilities on IBM Servers', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml'}, {'name': '9469', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9469'}, {'name': '3691', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3691'}, {'name': 'O-066', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-066.shtml'}]
CVE State: PUBLISHED
Explain CVE-2004-1760
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.
Affected Products: n/a
References: [{'name': 'ciscovoice-ibmservers-admin-access(14900)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14900'}, {'name': '3692', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3692'}, {'name': '10696', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10696'}, {'name': 'VU#602734', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/602734'}, {'name': '1008814', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1008814'}, {'name': '20040121 Voice Product Vulnerabilities on IBM Servers', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml'}, {'name': '9468', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9468'}, {'name': 'O-066', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-066.shtml'}]
CVE State: PUBLISHED
Explain CVE-2004-1761
Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service (segmentation fault) via a malformed color filter file.
Affected Products: n/a
References: [{'name': 'VU#695486', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/695486'}, {'name': 'RHSA-2004:136', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-136.html'}, {'name': '11185', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11185'}, {'name': 'ethereal-colour-filter-dos(15572)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15572'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00013.html'}, {'name': 'oval:org.mitre.oval:def:10013', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10013'}]
CVE State: PUBLISHED
Explain CVE-2004-1762
Unknown vulnerability in F-Secure Anti-Virus (FSAV) 4.52 for Linux before Hotfix 3 allows the Sober.D worm to bypass FASV.
Affected Products: n/a
References: [{'name': 'fsecure-antivirus-protection-bypass(15432)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15432'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-linux-hotfixes.shtml'}, {'name': 'VU#415734', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/415734'}, {'name': '11089', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11089'}]
CVE State: PUBLISHED
Explain CVE-2004-1763
Buffer overflow in hsrun.exe for HAHTsite Scenario Server 5.1 Patch 06 (build 91) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long project name.
Affected Products: n/a
References: [{'name': '20040402 Buffer Overflow in HAHTsite Scenario Server 5.1', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=108091662105032&w=2'}, {'name': '11288', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11288'}, {'name': 'VU#705958', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/705958'}, {'name': 'hahtsite-long-request-bo(15717)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15717'}, {'name': '10033', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10033'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.protego.dk/advisories/200405.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1764
Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vectors.
Affected Products: n/a
References: [{'name': 'O-057', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/o-057.shtml'}, {'name': 'hp-libdtsvc-bo(14828)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14828'}, {'name': 'VU#406406', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/406406'}, {'name': 'oval:org.mitre.oval:def:5789', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5789'}, {'name': 'HPSBUX0401-308', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/6237'}]
CVE State: PUBLISHED
Explain CVE-2004-1765
Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests.
Affected Products: n/a
References: [{'name': '20040316 ModSecurity 1.7.4 for Apache 2.x remote off-by-one overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107945597331370&w=2'}, {'name': '9885', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9885'}, {'name': 'mod-security-offbyone-bo(15489)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15489'}, {'name': '11138', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11138'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.s-quadra.com/advisories/Adv-20040315.txt'}, {'name': 'VU#779438', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/779438'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.modsecurity.org/'}]
CVE State: PUBLISHED
Explain CVE-2004-1766
The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for communication with devices running ScreenOS 5.0, which allows remote attackers to obtain sensitive information via sniffing.
Affected Products: n/a
References: [{'name': 'VU#927630', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/927630'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/CRDY-5VEU8N'}, {'name': '9455', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9455'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.netscreen.com/services/security/alerts/1_19_04_58290.jsp'}, {'name': '10675', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10675'}, {'name': 'netscreen-information-disclosure(14886)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14886'}, {'name': '3613', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3613'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.juniper.net/support/security/alerts/58290.txt'}]
CVE State: PUBLISHED
Explain CVE-2004-1767
The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly involving the modload function.
Affected Products: n/a
References: [{'name': '57479', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57479-1'}, {'name': 'VU#702526', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/702526'}, {'name': '9477', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9477'}, {'name': 'solaris-kernel-module-gain-privilege(14917)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14917'}, {'name': 'oval:org.mitre.oval:def:4532', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4532'}]
CVE State: PUBLISHED
Explain CVE-2004-1768
The character converters in the Spamhunter and Language ID modules for Symantec Brightmail AntiSpam 6.0.1 before patch 132 allow remote attackers to cause a denial of service (crash) via messages with the ISO-8859-10 character set, which is not recognized by the converters.
Affected Products: n/a
References: [{'name': 'VU#697598', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/697598'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.symantec.com/public/english_us_canada/products/sba/sba_60x/updates/p132_notes.htm'}, {'name': '13489', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13489'}, {'name': 'symantec-brightmail-spamhunter-dos(18530)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18530'}, {'name': '12459', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/12459'}]
CVE State: PUBLISHED
Explain CVE-2004-1769
The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass.
Affected Products: n/a
References: [{'name': 'VU#831534', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/831534'}, {'name': '20040311 cPanel Secuirty Advisory CPANEL-2004:01-01', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107904890724201&w=2'}, {'name': 'cpanel-resetpass-execute-commands(15443)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15443'}, {'name': '20040311 Cpanel 8.*.* have a problem ?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/357064/2004-03-08/2004-03-14/0'}, {'name': '9848', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9848'}, {'name': '11111', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11111'}]
CVE State: PUBLISHED
Explain CVE-2004-1770
The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in the user parameter.
Affected Products: n/a
References: [{'name': 'VU#831534', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/831534'}, {'name': '20040312 Cpanel 9.1.0 have a problem ?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107911581732035&w=2'}, {'name': '9855', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9855'}, {'name': '11124', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11124'}, {'name': 'cpanel-login-execute-commands(15486)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15486'}]
CVE State: PUBLISHED
Explain CVE-2004-1771
Scalable OGo (SOGo) 1.0 allows remote authenticated users to bypass intended permissions and view private appointments of other users.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.opengroupware.org/bugzilla/show_bug.cgi?id=1060'}, {'name': 'ogo-permission-information-disclosure(19820)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19820'}, {'name': '1013553', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013553'}, {'name': '14675', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/14675'}]
CVE State: PUBLISHED
Explain CVE-2004-1772
Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.
Affected Products: n/a
References: [{'name': 'OpenPKG-SA-2004.011', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://marc.info/?l=bugtraq&m=108137386310299&w=2'}, {'name': 'FLSA:2155', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=2155'}, {'name': 'oval:org.mitre.oval:def:11722', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11722'}, {'name': '10066', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/10066'}, {'name': 'sharutils-shar-bo(15759)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15759'}, {'name': '20040406 GNU Sharutils buffer overflow vulnerability.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/359639'}, {'name': 'RHSA-2005:377', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-377.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1773
Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.
Affected Products: n/a
References: [{'name': 'FLSA:2155', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=2155'}, {'name': 'GLSA-200410-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200410-01.xml'}, {'name': '11298', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/11298'}, {'name': 'oval:org.mitre.oval:def:11093', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11093'}, {'name': 'RHSA-2005:377', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-377.html'}]
CVE State: PUBLISHED
Explain CVE-2004-1774
Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.appsecinc.com/resources/alerts/oracle/2004-0001/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/securitynews/5CP010KE0W.html'}, {'name': '20040902 [SHATTER Team Security Alert] Multiple vulnerabilities in Oracle Database Server', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/025984.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.frsirt.com/exploits/20050413.OracleExploit.sql.php'}, {'name': '13145', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13145'}, {'name': 'oracle-mdsysmd2sdocodesize-bo(20078)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20078'}]
CVE State: PUBLISHED
Explain CVE-2004-1775
Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers to read and modify device configuration via the read-write community string.
Affected Products: n/a
References: [{'name': 'cisco-snmp-vacm(6179)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6179'}, {'name': '5030', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5030'}, {'name': 'VU#645400', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/645400'}, {'name': '20041008 Cisco IOS Software Multiple SNMP Community String Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/ios-snmp-community-vulns-pub.shtml'}]
CVE State: PUBLISHED
Explain CVE-2004-1776
Cisco IOS 12.1(3) and 12.1(3)T allows remote attackers to read and modify device configuration data via the cable-docsis read-write community string used by the Data Over Cable Service Interface Specification (DOCSIS) standard.
Affected Products: n/a
References: [{'name': 'VU#840665', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/840665'}, {'name': '20041008 Cisco IOS Software Multiple SNMP Community String Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/ios-snmp-community-vulns-pub.shtml'}, {'name': 'cisco-ios-cable-docsis(6180)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6180'}]
CVE State: PUBLISHED
Explain CVE-2004-1777
A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of service (application crash) via long command line arguments or a long callto:// URL, a different vulnerability than CVE-2004-1114.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.skype.com/security/ssa-2004-01.html'}, {'name': '20040615 Skype URI callto username overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://lists.virus.org/bugtraq-0406/msg00221.html'}, {'name': '1010490', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1010490'}, {'name': '11860', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/11860'}]
CVE State: PUBLISHED
Explain CVE-2004-1778
Skype 0.92.0.12 and 1.0.0.1 for Linux, and possibly other versions, creates the /usr/share/skype/lang directory with world-writable permissions, which allows local users to modify language files and possibly conduct social engineering or other attacks.
Affected Products: n/a
References: [{'name': '20050216 Re: Permission problem in Skype BETA for linux', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110868557905786&w=2'}, {'name': '20041222 Permission problem in Skype BETA for linux', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=110374568916303&w=2'}, {'name': '12081', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12081'}, {'name': 'skype-lang-insecure-permissions(18644)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/18644'}]
CVE State: PUBLISHED
Explain CVE-2004-1779
Cross-site scripting (XSS) vulnerability in board.php for ThWboard before beta 2.84 allows remote attackers to inject arbitrary web script or HTML via the lastvisited parameter.
Affected Products: n/a
References: [{'name': '10546', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10546'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.sourceforge.net/viewcvs.py/thwb/thwb/board.php?r1=1.11&r2=1.12'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=207893'}, {'name': '3330', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3330'}, {'name': '1008617', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1008617'}, {'name': '9367', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9367'}, {'name': 'thwboard-board-xss(14143)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14143'}]
CVE State: PUBLISHED
Explain CVE-2004-1780
Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts.
Affected Products: n/a
References: [{'name': '9347', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9347'}]
CVE State: PUBLISHED
Explain CVE-2004-1781
Info Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating system via the CMD_CREDITCARD_CHARGE command.
Affected Products: n/a
References: [{'name': '9348', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9348'}]
CVE State: PUBLISHED
Explain CVE-2004-1782
athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass parameter.
Affected Products: n/a
References: [{'name': '9349', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9349'}, {'name': '16861', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16861'}]
CVE State: PUBLISHED
Explain CVE-2004-1783
Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary files via a /.. (slash dot dot).
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/windowsntfocus/5FP051FBPQ.html'}, {'name': '1008588', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1008588'}, {'name': '9350', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9350'}, {'name': '10522', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10522'}]
CVE State: PUBLISHED
Explain CVE-2004-1784
Buffer overflow in the web server of Webcam Watchdog 3.63 allows remote attackers to execute arbitrary code via a long HTTP GET request.
Affected Products: n/a
References: [{'name': '20040103 Webcam Watchdog Stack Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/348818'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.elitehaven.net/webcamwatchdog.txt'}, {'name': '9351', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9351'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.webcamsoft.com/en/watchdog_h.html'}, {'name': '3312', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3312'}, {'name': 'webcam-watchdog-get-bo(14131)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14131'}, {'name': '10527', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10527'}]
CVE State: PUBLISHED
Explain CVE-2004-1785
SQL injection vulnerability in calendar.php for Invision Power Board 1.3 allows remote attackers to execute arbitrary SQL commands via the m parameter, which sets the $this->chosen_month variable.
Affected Products: n/a
References: [{'name': '3319', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3319'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://forums.invisionpower.com/index.php?act=ST&f=1&t=108786'}, {'name': '9353', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9353'}, {'name': '20040103 [SCSA-025] Invision Power Board SQL Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/348821'}, {'name': '10530', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10530'}, {'name': '1008589', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1008589'}]
CVE State: PUBLISHED
Explain CVE-2004-1786
PortalApp places user credentials under the web root with insufficient access control, which allows remote attackers to gain access to sensitive information via a direct request to 8275.mdb.
Affected Products: n/a
References: [{'name': '1008627', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1008627'}, {'name': 'portalapp-url-access-database(14169)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14169'}, {'name': '9354', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9354'}]
CVE State: PUBLISHED
Explain CVE-2004-1787
SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search queries.
Affected Products: n/a
References: [{'name': 'postcalendar-search-sql-injection(14111)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14111'}, {'name': '9372', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9372'}, {'name': '10554', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10554'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2537'}, {'name': '1008621', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1008621'}, {'name': '3336', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3336'}]
CVE State: PUBLISHED
Explain CVE-2004-1788
ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to main.mdb.
Affected Products: n/a
References: [{'name': '9355', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9355'}]
CVE State: PUBLISHED
Explain CVE-2004-1789
Cross-site scripting (XSS) vulnerability in the web management interface in ZyWALL 10 4.07 allows remote attackers to inject arbitrary web script or HTML via the rpAuth_1 page.
Affected Products: n/a
References: [{'name': 'zywall-xss(14163)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14163'}, {'name': '1008644', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1008644'}, {'name': '9373', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9373'}, {'name': '3443', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3443'}, {'name': '10574', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10574'}, {'name': '12793', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/12793'}, {'name': '20040106 ZyXEL10 OF ZyWALL Series Router Cross Site Scripting Vulnerabillity', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/349085'}]
CVE State: PUBLISHED
Explain CVE-2004-1790
Cross-site scripting (XSS) vulnerability in the web management interface in Edimax AR-6004 ADSL Routers allows remote attackers to inject arbitrary web script or HTML via the URL.
Affected Products: n/a
References: [{'name': '20040106 EDIMAX AR-6004 Full Rate ADSL Router Cross Site Scripting Vulnerabillity', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/349089'}, {'name': '3435', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3435'}, {'name': '1008643', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1008643'}, {'name': 'edimax-ar6004-xss(14165)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14165'}, {'name': '9374', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9374'}, {'name': '10576', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10576'}]
CVE State: PUBLISHED
Explain CVE-2004-1791
The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password, which also appear as the default login text for the management interface, which allows remote attackers to gain access.
Affected Products: n/a
References: [{'name': '20040106 EDIMAX AR-6004 Full Rate ADSL Router Cross Site Scripting Vulnerabillity', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/349089'}, {'name': '3511', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3511'}, {'name': '1008643', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1008643'}]
CVE State: PUBLISHED
Explain CVE-2004-1792
swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a long packet with two CRLF sequences to the service management port (TCP 8000).
Affected Products: n/a
References: [{'name': '9339', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9339'}, {'name': 'switch-off-swnet-dos(14123)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14123'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.elitehaven.net/switchoff.txt'}, {'name': '20040102 Switch Off Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/348693'}, {'name': '1008581', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1008581'}, {'name': '10521', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10521'}]
CVE State: PUBLISHED
Explain CVE-2004-1793
Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm.
Affected Products: n/a
References: [{'name': '9340', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9340'}, {'name': 'switch-off-swnet-bo(14124)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14124'}, {'name': '3309', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3309'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.elitehaven.net/switchoff.txt'}, {'name': '20040102 Switch Off Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/348693'}, {'name': '1008581', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1008581'}, {'name': '10521', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10521'}]
CVE State: PUBLISHED
Explain CVE-2004-1794
Cross-site scripting (XSS) vulnerability in the VCard4J Toolkit allows remote attackers to inject arbitrary web script or HTML via the NICKNAME tag in a vCard.
Affected Products: n/a
References: [{'name': '20040101 Possible XSS vuln in VCard4J', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0006.html'}, {'name': '9343', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9343'}, {'name': 'vcard4j-nickname-xss(14120)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14120'}, {'name': '1008582', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1008582'}]
CVE State: PUBLISHED
Explain CVE-2004-1795
Info Touch Surfnet kiosk allows local users to access the underlying filesystem via a 'file://' URI.
Affected Products: n/a
References: [{'name': '9346', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9346'}]
CVE State: PUBLISHED
Explain CVE-2004-1796
PHP remote file inclusion vulnerability in HotNews 0.7.2 and earlier allows remote attackers to execute arbitrary PHP code via the (1) config[header] parameter to hotnews-engine.inc.php3 or (2) config[incdir] parameter to hnmain.inc.php3.
Affected Products: n/a
References: [{'name': '3332', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3332'}, {'name': '20040104 HotNews arbitary file inclusion', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/348840'}, {'name': '10551', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10551'}, {'name': '1008608', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1008608'}, {'name': '3405', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3405'}, {'name': 'hotnews-php-file-include(14140)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14140'}, {'name': '9357', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9357'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/forum/forum.php?forum_id=342594'}]
CVE State: PUBLISHED
Explain CVE-2004-1797
Cross-site scripting (XSS) vulnerability in search.php for FreznoShop 1.3.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Affected Products: n/a
References: [{'name': '9359', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9359'}, {'name': 'freznoshop-searchphp-xss(14147)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14147'}, {'name': '1008606', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1008606'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.freznoshop.com/changelog_en.htm'}, {'name': '10547', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10547'}, {'name': '3335', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3335'}]
CVE State: PUBLISHED
Explain CVE-2004-1798
RealOne player 6.0.11.868 allows remote attackers to execute arbitrary script in the "My Computer" zone via a Synchronized Multimedia Integration Language (SMIL) presentation with a "file:javascript:" URL, which is executed in the security context of the previously loaded URL, a different vulnerability than CVE-2003-0726.
Affected Products: n/a
References: [{'name': '9584', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/9584'}, {'name': '1008647', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1008647'}, {'name': '9378', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9378'}, {'name': '3826', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3826'}, {'name': '20040107 RealNetworks fails to address Cross-Site Scripting in RealOne Player', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/349086'}, {'name': 'realoneplayer-smil-xss(14168)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14168'}]
CVE State: PUBLISHED
Explain CVE-2004-1799
PF in certain OpenBSD versions, when stateful filtering is enabled, does not limit packets for a session to the original interface, which allows remote attackers to bypass intended packet filters via spoofed packets to other interfaces.
Affected Products: n/a
References: [{'name': '19105', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/19105'}, {'name': '20040105 firewall security bug?', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=107331321302113&w=2'}, {'name': '9362', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9362'}]
CVE State: PUBLISHED
Explain CVE-2004-1800
Unknown vulnerability in Sysbotz SimpleData 4.0.1 and possibly earlier versions allows remote attackers to gain access via a crafted URL and a certain cookie.
Affected Products: n/a
References: [{'name': '1008695', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1008695'}, {'name': 'simpledata-gain-unauth-access(14206)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/14206'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sysbotz.com/press/sdupdate402.htm'}, {'name': '9380', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9380'}, {'name': '10595', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/10595'}]
CVE State: PUBLISHED
Explain CVE-2004-1801
Directory traversal vulnerability in PWebServer 0.3.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
Affected Products: n/a
References: [{'name': '9817', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9817'}, {'name': '11057', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11057'}, {'name': 'pwebserver-dotdot-directory-traversal(15404)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15404'}, {'name': '20040308 directory traversal in PWebServer 0.3.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107876388211413&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.autistici.org/fdonato/advisory/PWebServer0.3.3-adv.txt'}]
CVE State: PUBLISHED
Explain CVE-2004-1802
Chat Anywhere 2.72 and earlier allows remote attackers to hide their IP address by using %00 before the nickname, which causes the IP address to be displayed as $IP$ on the administration web page.
Affected Products: n/a
References: [{'name': 'chat-anywhere-admin-bypass(15416)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15416'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/chatany-ghost-adv.txt'}, {'name': '9823', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9823'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.lionmax.com/chatanywhere.htm'}, {'name': '20040309 Ghost users in Chat Anywhere 2.72', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107885946220895&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1804
wMCam server 2.1.348 allows remote attackers to cause a denial of service (no new connections) via multiple malformed HTTP requests without the GET command.
Affected Products: n/a
References: [{'name': 'wmcam-multiple-connections-dos(15431)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15431'}, {'name': '9839', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9839'}, {'name': '20040310 DoS in wMCam server 2.1.348', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107894337524376&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1805
Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in class names.
Affected Products: n/a
References: [{'name': 'ut-class-format-string(15430)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15430'}, {'name': '20040310 Format string bug in EpicGames Unreal engine', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107893764406905&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/unrfs-adv.txt'}, {'name': '11108', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11108'}, {'name': '9840', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9840'}, {'name': '20040311 Re: Format string bug in EpicGames Unreal engine', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107902755204583&w=2'}]
CVE State: PUBLISHED
Explain CVE-2004-1806
SQL injection vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to execute SQL commands via the (1) category_id, (2) product_id, or (3) feature_id parameters.
Affected Products: n/a
References: [{'name': '20040312 Dogpatch Software CFWebstore 5.0 shopping cart software multiple security vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107911090901744&w=2'}, {'name': '1009403', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009403'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cfwebstore.com/whatsnewdetail.cfm?WhatsNew__WhatsNewID=43'}, {'name': 'cfwebstore-index-sql-injection(15447)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15447'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.s-quadra.com/advisories/Adv-20040312.txt'}, {'name': '4229', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4229'}, {'name': '9854', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9854'}, {'name': '11112', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11112'}]
CVE State: PUBLISHED
Explain CVE-2004-1807
Cross-site scripting (XSS) vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to inject arbitrary web script or HTML via the URL.
Affected Products: n/a
References: [{'name': '20040312 Dogpatch Software CFWebstore 5.0 shopping cart software multiple security vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107911090901744&w=2'}, {'name': '1009403', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009403'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cfwebstore.com/whatsnewdetail.cfm?WhatsNew__WhatsNewID=43'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.s-quadra.com/advisories/Adv-20040312.txt'}, {'name': '9856', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9856'}, {'name': '4230', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4230'}, {'name': 'cfwebstore-url-xss(15454)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15454'}, {'name': '11112', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11112'}]
CVE State: PUBLISHED
Explain CVE-2004-1808
Extcompose in metamail does not verify the output file before writing to it, which allows local users to overwrite arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'name': "20040312 Metamail 'extcompose' script Symlink Vulnerability", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107910934926062&w=2'}, {'name': '9850', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9850'}, {'name': 'metamail-extcompose-symlink(15460)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15460'}]
CVE State: PUBLISHED
Explain CVE-2004-1809
Cross-site scripting (XSS) vulnerability in phpBB 2.0.6d and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) postdays parameter to viewtopic.php or (2) topicdays parameter to viewforum.php.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.phpbb.com/support/documents.php?mode=changelog#206'}, {'name': '4259', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4259'}, {'name': '4257', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4257'}, {'name': '20040313 phpBB 2.0.6d && Earlier Security Issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=107920498205324&w=2'}, {'name': '11121', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11121'}, {'name': 'phpbb-viewforum-viewtopic-xss(15464)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15464'}, {'name': '9865', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9865'}, {'name': '9866', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9866'}]
CVE State: PUBLISHED