DuyTa/cve-kgrag-db huggingface dataset:
CVE-2005-2492
The raw_sendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service (change hardware state) or read from arbitrary memory via crafted input.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:P
Affected Products: enterprise_linux, ubuntu_linux, linux_kernel
Related CWEs: CWE-264
References: http://marc.info/?l=bugtraq&m=112690609622266&w=2, http://secunia.com/advisories/16747/, http://secunia.com/advisories/17073
CWE: CWE-264
CVE-2005-4377
Cross-site scripting (XSS) vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) PageID and (2) SiteNodeID parameters.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: baseline_cms
References: http://pridels0.blogspot.com/2005/12/baseline-cms-vuln.html, http://www.osvdb.org/21938, http://www.vupen.com/english/advisories/2005/2974
CVE-2005-1573
SQL injection vulnerability in admin_login.asp for ASP Virtual News Manager allows remote attackers to execute arbitrary SQL commands via the password parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: asp_virtual_news_manager
References: http://securitytracker.com/id?1013933, http://www.under9round.com/avn13.txt, http://securitytracker.com/id?1013933
CVE-2005-2344
The BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.0 to version 4.0 Service Pack 2 allows attackers to cause a denial of service via a malformed Portable Network Graphics (PNG) file that triggers a heap-based buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: blackberry_enterprise_server
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://secunia.com/advisories/18393, http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/728075/728850/728215/?nodeid=1167794, http://www.kb.cert.org/vuls/id/646976
CWE: CWE-119
CVE-2005-1459
Multiple unknown vulnerabilities in the (1) WSP, (2) BER, (3) SMB, (4) NDPS, (5) IAX2, (6) RADIUS, (7) TCAP, (8) MRDISC, (9) 802.3 Slow, (10) SMBMailslot, or (11) SMB PIPE dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ethereal
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963, http://www.ethereal.com/appnotes/enpa-sa-00019.html, http://www.ethereal.com/news/item_20050504_01.html
CVE-2005-2047
Multiple SQL injection vulnerabilities in DUware DUpaypal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iPro parameter to detail.asp, (3) iSub parameter to sub.asp, (4) iCat parameter to catEdit.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dupaypal_pro
References: http://echo.or.id/adv/adv19-theday-2005.txt, http://marc.info/?l=bugtraq&m=111945219205114&w=2, http://echo.or.id/adv/adv19-theday-2005.txt
CVE-2005-0564
Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: word
References: http://www.idefense.com/application/poi/display?id=281&type=vulnerabilities, http://www.kb.cert.org/vuls/id/218621, http://www.us-cert.gov/cas/techalerts/TA05-193A.html
CVE-2005-4657
Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: calendar_manager_pro
References: http://www.securityfocus.com/bid/15329, http://www.securityfocus.com/bid/15329
CVE-2005-4238
Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers to inject arbitrary web script or HTML via the target_field parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mantis
References: http://pridels0.blogspot.com/2005/12/mantis-bugtracking-system-xss-vuln.html, http://secunia.com/advisories/18018, http://secunia.com/advisories/18481
CVE-2005-2460
Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter or (2) name field when entering a session or sending a message.
CVSS v2.0 Score: 5.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Affected Products: liveresponse
References: http://marc.info/?l=bugtraq&m=112274359718863&w=2, http://secunia.com/advisories/16286, http://www.gulftech.org/?node=research&article_id=00092-07302005
CVE-2005-1000
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the bid parameter to the EmailStats op in banners.pgp, (2) the ratenum parameter in the TopRated and MostPopular actions in the Web_Links module, (3) the ttitle parameter in the viewlinkdetails, viewlinkeditorial, viewlinkcomments, and ratelink actions in the Web_Links module, or (4) the username parameter in the Your_Account module.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php-nuke
References: http://archives.neohapsis.com/archives/bugtraq/2005-04/0037.html, http://marc.info/?l=bugtraq&m=111263454308478&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/19952
CVE-2005-2017
Symantec AntiVirus 9 Corporate Edition allows local users to gain privileges via the "Scan for viruses" option, which launches a help window with raised privileges, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2002-1540.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: norton_antivirus
References: http://www.idefense.com/application/poi/display?id=298&type=vulnerabilities, http://www.symantec.com/avcenter/security/Content/2005.08.24.html, http://www.idefense.com/application/poi/display?id=298&type=vulnerabilities
CVE-2005-3575
SQL injection vulnerability in show.php in Cyphor 0.19 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cyphor
References: http://securityreason.com/securityalert/180, http://www.osvdb.org/20983, http://www.securiteam.com/unixfocus/6P00F1FEKC.html
CVE-2005-4247
Cross-site scripting (XSS) vulnerability in index.php in Plogger Beta 2 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: plogger
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://pridels0.blogspot.com/2005/12/plogger-sqlxss-vuln.html, http://www.osvdb.org/21711, http://www.securityfocus.com/bid/15839
CWE: CWE-79
CVE-2005-2947
Buffer overflow in KillProcess 2.20 and earlier allows user-assisted attackers to execute arbitrary code via an exe file with a long FileDescription in the version resource.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: killprocess
References: http://marc.info/?l=bugtraq&m=112629480300071&w=2, http://marc.info/?l=bugtraq&m=112629550418406&w=2, http://www.securityfocus.com/bid/14795
CVE-2005-0678
PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the script_root to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: form_mail_script
References: http://marc.info/?l=bugtraq&m=110996489800035&w=2, http://secunia.com/advisories/14505, http://securitytracker.com/id?1013378
CVE-2005-4432
Cross-site scripting (XSS) vulnerability in index.php in PlaySMS 0.8 allows remote attackers to inject arbitrary web script or HTML via the err parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: playsms
References: http://marc.info/?l=full-disclosure&m=113478814326427&w=2, http://marc.info/?l=full-disclosure&m=113970096305873&w=2, http://secunia.com/advisories/18148
CVE-2005-3448
Unspecified vulnerability in the OC4J Module in Oracle Application Server 9.0 up to 10.1.2.0.2 has unknown impact and attack vectors, as identified by Oracle Vuln# AS01.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: application_server
References: http://secunia.com/advisories/17250, http://www.kb.cert.org/vuls/id/210524, http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE-2005-4597
Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 1.7 allows remote attackers to inject arbitrary web script or HTML via the email parameter, as used by the email field, when signing a guestbook.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: ipei_guestbook
References: http://pridels0.blogspot.com/2005/12/ipei-guestbook-xss-vuln.html, http://secunia.com/advisories/18241, http://www.osvdb.org/22118
CVE-2005-2038
Fortibus CMS 4.0.0 allows remote attackers to modify information of other users, including Admin, via the "My info" page.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: fortibus_cms
References: http://securitytracker.com/id?1014242, http://securitytracker.com/id?1014242
CVE-2005-2918
The open_cmd_tube function in mount.c for gtkdiskfree 1.9.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the gtkdiskfree temporary file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: gtkdiskfree
References: http://bugs.gentoo.org/show_bug.cgi?id=104565, http://marc.info/?l=bugtraq&m=112680706715109&w=2, http://secunia.com/advisories/16951
CVE-2005-1463
Multiple format string vulnerabilities in the (1) DHCP and (2) ANSI A dissectors in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ethereal
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963, http://www.ethereal.com/appnotes/enpa-sa-00019.html, http://www.ethereal.com/news/item_20050504_01.html
CVE-2005-0930
Cross-site scripting (XSS) vulnerability in message.php in Chatness 2.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the user field or (2) the message parameter to message.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: chatness
References: http://securitytracker.com/id?1013604, http://www.persianhacker.net/news/news-2946.html, http://www.securityfocus.com/archive/1/394526
CVE-2005-0267
index.php in FlatNuke 2.5.1 allows remote attackers to create an administrator account via carriage returns and #10 in the url_avatar field, which is interpreted as a sensitive directive.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: flatnuke
References: http://marc.info/?l=bugtraq&m=110477752916772&w=2, http://www.securityfocus.com/bid/12150, https://exchange.xforce.ibmcloud.com/vulnerabilities/18741
CVE-2005-0791
Cross-site scripting (XSS) vulnerability in adframe.php in phpAdsNew 2.0.4-pr1, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the refresh parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpadsnew
References: http://marc.info/?l=bugtraq&m=111083286926490&w=2, http://secunia.com/advisories/14592, http://securityreason.com/adv/%5BphpAdsNew%202.0.4-pr1%20Multiple%20vulnerabilities%20cXIb8O3.9%5D.asc
CVE-2005-3548
Directory traversal vulnerability in Task Manager in Invision Power Board (IP.Board) 2.0.1 allows limited remote attackers to include files via a ..  (dot dot) in the "Task PHP File To Run" field.
CVSS v2.0 Score: 4.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N
Affected Products: invision_board
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://secunia.com/advisories/17443, http://www.osvdb.org/35429, http://www.securityfocus.com/archive/1/415798/30/0/threaded
CWE: CWE-22
CVE-2005-0760
The TIFF decoder in ImageMagick before 6.0 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: imagemagick
References: http://securitytracker.com/id?1013550, http://www.debian.org/security/2005/dsa-702, http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html
CVE-2005-0964
Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a malicious process that impersonates a legitimate process that has fewer restrictions.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: personal_firewall
References: http://secunia.com/advisories/14717, http://securitytracker.com/id?1013607, http://www.kerio.com/security_advisory.html#0503
CVE-2005-4666
Cross-site scripting (XSS) vulnerability in PHlyMail before 3.3 Beta1 allows remote attackers to inject arbitrary Javascript via unknown attack vectors.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phlymail
References: http://phlymail.de/forum/viewtopic.php?t=842, http://secunia.com/advisories/18536, http://www.osvdb.org/20975
CVE-2005-3128
Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: address_add_plugin
References: http://docs.info.apple.com/article.html?artnum=306172, http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html, http://marc.info/?l=bugtraq&m=112801672520766&w=2
CVE-2005-1589
The pkt_ioctl function in the pktcdvd block device ioctl handler (pktcdvd.c) in Linux kernel 2.6.12-rc4 and earlier calls the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space and allows local users to cause a denial of service and possibly execute arbitrary code, a similar vulnerability to CVE-2005-1264.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel
References: http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html, http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0046.html, http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0047.html
CVE-2005-3723
Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not allow the user to disable access to (1) SNMP or (2) TCP port 3390, which allows remote attackers to modify configuration using CVE-2005-3722, or access the Unidata Shell to obtain sensitive information or cause a denial of service.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ip5000_voip_wifi_phone
References: http://marc.info/?l=full-disclosure&m=113217425618951&w=2, http://secunia.com/advisories/17628, http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf
CVE-2005-0285
Webseries Payment Application does not properly restrict privileged operations, which allows remote authenticated users to gain privileges by directly accessing certain URLs.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webseries_payment_application
References: http://marc.info/?l=bugtraq&m=110547396124885&w=2, http://secunia.com/advisories/13821, http://securitytracker.com/id?1012854
CVE-2005-3556
Multiple cross-site scripting (XSS) vulnerabilities in PHPlist 2.10.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listname parameter in (a) admin/editlist.php, (2) title parameter in (b) admin/spageedit.php, (3) title field in (c) admin/template.php, (4) filter, (5) delete, and (6) start parameters in (d) admin/eventlog.php, (7) id parameter in (e) admin/configure.php, (8) find parameter in (f) admin/users.php, (9) start parameter in (g) admin/admin.php, and (10) action parameter in (h) admin/fckphplist.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phplist
References: http://osvdb.org/20570, http://osvdb.org/20571, http://osvdb.org/20572
CVE-2005-1763
Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel memory.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_desktop, suse_linux
References: http://secunia.com/advisories/17073, http://secunia.com/advisories/18056, http://www.debian.org/security/2005/dsa-922
CVE-2005-3233
Multiple interpretation error in unspecified versions of Trustix Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: antivirus
References: http://marc.info/?l=bugtraq&m=112879611919750&w=2, http://shadock.net/secubox/AVCraftedArchive.html, http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE-2005-4527
Multiple SQL injection vulnerabilities in Direct News 4.9 allow remote attackers to execute arbitrary SQL commands via (1) the setLang parameter in index.php and (2) unspecified search module parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: direct_news
References: http://pridels0.blogspot.com/2005/12/direct-news-sql-inj.html, http://www.osvdb.org/21854, http://www.osvdb.org/22340
CVE-2005-4326
The web interface for American Power Conversion (APC) PowerChute Network Shutdown performs all communication in cleartext (base64-encoded), which allows remote attackers to sniff authentication credentials.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: powerchute_network_shutdown
References: http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=7330, http://securitytracker.com/alerts/2005/Nov/1015250.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/23183
CVE-2005-3585
SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the forum parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpwebthings
References: http://glide.stanford.edu/yichen/research/sec.pdf, http://marc.info/?l=bugtraq&m=113122187101383&w=2, http://secunia.com/advisories/17410/
CVE-2005-1141
Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-based buffer overflow.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: optical_character_recognition
Related CWEs: CWE-190
Related CAPECs: CAPEC-92
References: http://marc.info/?l=bugtraq&m=111358557823673&w=2, http://www.overflow.pl/adv/gocr.txt, http://marc.info/?l=bugtraq&m=111358557823673&w=2
CWE: CWE-190
CVE-2005-2242
Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to cause a denial of service (memory consumption and restart) via crafted packets to (1) the CTI Manager (ctimgr.exe) or (2) the CallManager (ccm.exe).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: call_manager
References: http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml, http://www.securityfocus.com/bid/14251, http://www.securityfocus.com/bid/14252
CVE-2005-3055
Linux kernel 2.6.8 to 2.6.14-rc2 allows local users to cause a denial of service (kernel OOPS) via a userspace process that issues a USB Request Block (URB) to a USB device and terminates before the URB is finished, which leads to a stale pointer reference.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel, debian_linux
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://marc.info/?l=linux-kernel&m=112766129313883, http://secunia.com/advisories/17826, http://secunia.com/advisories/17917
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2005-1354
The forum.pl script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: forum.pl
References: http://marc.info/?l=bugtraq&m=111446056205059&w=2, http://marc.info/?l=bugtraq&m=111446056205059&w=2
CVE-2005-1928
Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 and possibly earlier versions, when running with Trend Micro Control Manager 2.5 and 3.0, and Damage Cleanup Server 1.1, allows remote attackers to cause a denial of service (CPU consumption) via a flood of crafted packets with a certain "magic value" to port 5005, which also leads to a memory leak.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: serverprotect_earthagent
Related CWEs: CWE-399
References: http://kb.trendmicro.com/solutions/search/main/search/solutionDetail.asp?solutionID=25254, http://secunia.com/advisories/18038, http://securityreason.com/securityalert/259
CWE: CWE-399
CVE-2005-4563
SQL injection vulnerability in main.php in Enterprise Heart Enterprise Connector 1.0.2 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the loginid parameter, a different vulnerability than CVE-2005-3875.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_connector
References: http://marc.info/?l=full-disclosure&m=113510305413525&w=2, http://secunia.com/advisories/17743, http://securityreason.com/securityalert/278
CVE-2005-4037
SQL injection vulnerability in functions.php in Web4Future Affiliate Manager PRO 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: affiliate_manager_professional
References: http://pridels0.blogspot.com/2005/12/web4future-affiliate-manager-pro-sql.html, http://secunia.com/advisories/17883, http://www.osvdb.org/21457
CVE-2005-1425
Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/guestbook.mdb.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: uguestbook
Related CWEs: CWE-264
References: http://securitytracker.com/id?1013830, http://www.osvdb.org/15995, http://www.securityfocus.com/archive/1/456240/100/0/threaded
CWE: CWE-264
CVE-2005-3808
Integer overflow in the invalidate_inode_pages2_range function in mm/truncate.c in Linux kernel 2.6.11 to 2.6.14 allows local users to cause a denial of service (hang) via 64-bit mmap calls that are not properly handled on a 32-bit system.
CVSS v2.0 Score: 4.9 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Affected Products: linux_kernel
References: http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html, http://seclists.org/lists/linux-kernel/2005/Nov/7839.html, http://secunia.com/advisories/18203
CVE-2005-1197
SQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in Oracle Database Server 10g allows remote attackers to execute arbitrary SQL commands via the CHANGE_SET_NAME parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: database_server
References: http://marc.info/?l=bugtraq&m=111385690419118&w=2, http://www.kb.cert.org/vuls/id/948486, http://www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf
CVE-2005-3962
Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: perl
Related CWEs: CWE-189
References: ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/007_perl.patch, ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/001_perl.patch, ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
CWE: CWE-189
CVE-2005-0755
Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allows remote attackers to execute arbitrary code via a long hostname in a RAM file.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: realplayer, realone_player, helix_player
References: http://marc.info/?l=bugtraq&m=111401615202987&w=2, http://pb.specialised.info/all/adv/real-ram-adv.txt, http://service.real.com/help/faq/security/050419_player/EN/
CVE-2005-2978
pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap (PNM) images to Portable Network Graphics (PNG), which might allow attackers to execute arbitrary code by modifying the stack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netpbm
References: http://secunia.com/advisories/17221, http://secunia.com/advisories/17222, http://secunia.com/advisories/17256
CVE-2005-4015
PHP Web Statistik 1.4 does not rotate the log database or limit the size of the referer field, which allows remote attackers to fill the log files via a large number of requests, as demonstrated using pixel.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: statistik
References: http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html, http://freewebstat.com/changelog-english.html, http://securityreason.com/securityalert/214
CVE-2005-0762
Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: imagemagick
References: http://rhn.redhat.com/errata/RHSA-2005-070.html, http://securitytracker.com/id?1013550, http://www.debian.org/security/2005/dsa-702
CVE-2005-0973
Unknown vulnerability in the setsockopt system call in Mac OS X 10.3.9 and earlier allows local users to cause a denial of service (memory exhaustion) via crafted arguments.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mac_os_x
References: http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html, http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html
CVE-2005-0819
The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: netware
References: http://securitytracker.com/id?1013460, http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971038.htm, http://www.securityfocus.com/bid/12831
CVE-2005-3021
image.php in vBulletin 3.0.9 and earlier allows remote attackers with access to the administrator panel to upload arbitrary files via the upload action.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: vbulletin
References: http://marc.info/?l=bugtraq&m=112715150320677&w=2, http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt, http://secunia.com/advisories/16873/
CVE-2005-3395
SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute arbitrary SQL commands via the st parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: invision_gallery
References: http://secunia.com/advisories/17375, http://www.osvdb.org/20419, http://www.securityfocus.com/archive/1/415297
CVE-2005-4234
SQL injection vulnerability in gallery.php in EncapsGallery 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: encapsgallery
References: http://pridels0.blogspot.com/2005/12/encapsgallery-sql-inj-vuln.html, http://secunia.com/advisories/18021, http://www.osvdb.org/21696
CVE-2005-0229
CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card information via a direct request to newfile.txt.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: citrusdb_customer_database
References: http://marc.info/?l=full-disclosure&m=110824766519417&w=2, http://securitytracker.com/id?1013040, http://www.citrusdb.org/forums/viewtopic.php?t=49
CVE-2005-1819
Cross-site scripting (XSS) vulnerability in NikoSoft WebMail before 0.11.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: webmail
References: http://secunia.com/advisories/15518, http://www.nikosoft.net/nswm/, http://secunia.com/advisories/15518
CVE-2005-2873
The ipt_recent kernel module (ipt_recent.c) in Linux kernel 2.6.12 and earlier does not properly perform certain time tests when the jiffies value is greater than LONG_MAX, which can cause ipt_recent netfilter rules to block too early, a different vulnerability than CVE-2005-2872.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://blog.blackdown.de/2005/05/09/fixing-the-ipt_recent-netfilter-module/, http://rhn.redhat.com/errata/RHBA-2007-0304.html, http://secunia.com/advisories/17826
CVE-2005-2653
Cross-site scripting (XSS) vulnerability in BBCaffe 2.0 allows remote attackers to inject arbitrary web script or HTML via e-mail data in a message.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: bbcaffe
References: http://rgod.altervista.org/bbcaffe.html, http://secunia.com/advisories/16503, http://securitytracker.com/id?1014733
CVE-2005-4849
Apache Derby before 10.1.2.1 exposes the (1) user and (2) password attributes in cleartext via (a) the RDBNAM parameter of the ACCSEC command and (b) the output of the DatabaseMetaData.getURL function, which allows context-dependent attackers to obtain sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: derby
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://db.apache.org/derby/releases/release-10.1.2.1.html, http://issues.apache.org/jira/browse/DERBY-530, http://issues.apache.org/jira/browse/DERBY-559
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-2005-1075
Multiple cross-site scripting (XSS) vulnerabilities in RadScripts RadBids Gold 2 allow remote attackers to inject arbitrary web script or HTML via (1) the farea parameter to faq.php or the (2) cat, (3) order, or (4) area parameters to index.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: radbids
References: http://secunia.com/advisories/14906, http://www.digitalparadox.org/advisories/rga.txt, http://www.osvdb.org/15430
CVE-2005-0432
BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates different login exceptions that suggest why an authentication attempt fails, which makes it easier for remote attackers to guess passwords via brute force attacks.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: weblogic_server
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA05-74.00.jsp, http://secunia.com/advisories/14298, http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA05-74.00.jsp
CVE-2005-2971
Heap-based buffer overflow in the KWord RTF importer for KOffice 1.2.0 through 1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: koffice
References: http://scary.beasts.org/security/CESA-2005-005.txt, http://secunia.com/advisories/17145/, http://secunia.com/advisories/17171
CVE-2005-1896
Directory traversal vulnerability in thumb.php in FlatNuke 2.5.3 allows remote attackers to read arbitrary images or obtain the installation path via the image parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: flatnuke
References: http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256, http://secunia.com/advisories/15603, http://securitytracker.com/id?1014114
CVE-2005-0360
The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote attackers to create or append to arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: log_sink_class_activex_control
References: http://www.kb.cert.org/vuls/id/165022, http://www.kb.cert.org/vuls/id/165022
CVE-2005-0005
Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: debian_linux, propack, suse_linux, linux, imagemagick
References: http://marc.info/?l=bugtraq&m=110608222117215&w=2, http://www.debian.org/security/2005/dsa-646, http://www.gentoo.org/security/en/glsa/glsa-200501-37.xml
CVE-2005-1561
Multiple cross-site scripting (XSS) vulnerabilities in post.asp in MaxWebPortal 1.3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mod, (2) M, or (3) type parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: maxwebportal
References: http://marc.info/?l=bugtraq&m=111584883727605&w=2, http://secunia.com/advisories/15329, http://www.hackerscenter.com/archive/view.asp?id=2542
CVE-2005-3042
miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters (line feed or carriage return).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: usermin, webmin
References: http://archives.neohapsis.com/archives/bugtraq/2005-09/0257.html, http://jvn.jp/jp/JVN%2340940493/index.html, http://secunia.com/advisories/16858
CVE-2005-1222
cat_for_gen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the ad_direct parameter to reference cat_for_gen.php, then including the code in the m_for_racine parameter, which is then written to cat_for_gen.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netref
References: http://marc.info/?l=bugtraq&m=111403947305600&w=2, http://secunia.com/advisories/15040, http://www.osvdb.org/15717
CVE-2005-3945
The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service (CPU consumption) via a flood of SYN packets that produce identical hash values, which slows down the hash table lookups.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: windows_2000, windows_2003_server
References: http://www.securityfocus.com/archive/1/417952/100/0/threaded, http://www.securityfocus.com/bid/15613, http://www.securityfocus.com/archive/1/417952/100/0/threaded
CVE-2005-0240
Format string vulnerability in chdev on IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command line argument, which is not properly handled when printing an error message.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://www-1.ibm.com/support/docview.wss?uid=isg1IY67455, http://www-1.ibm.com/support/docview.wss?uid=isg1IY67654, http://www.idefense.com/application/poi/display?type=vulnerabilities
CVE-2005-1647
Gurgens (GASoft) Guest Book 2.1 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and decrypt usernames and passwords.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gurgens_guest_book
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0351.html, http://secunia.com/advisories/15373, http://securitytracker.com/id?1013976
CVE-2005-4671
Cross-site scripting (XSS) vulnerability in simple-upload-53.php in CityPost Simple PHP Upload 5.3 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: simple_php_upload
References: http://securitytracker.com/id?1013749, http://www.securityfocus.com/bid/13261, https://exchange.xforce.ibmcloud.com/vulnerabilities/20164
CVE-2005-1264
Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel
References: http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html, http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0046.html, http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.10
CVE-2005-3423
Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the loginusername parameter or (2) cookies to (a) subdreamer.php, (b) ipb2.php, (c) phpbb2.php, (d) vbulletin2.php, and (e) vbulletin3.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: subdreamer
References: http://rst.void.ru/papers/advisory35.txt, http://secunia.com/advisories/17378, http://www.osvdb.org/20378
CVE-2005-3261
getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: versatilebulletinboard
References: http://marc.info/?l=bugtraq&m=112907535528616&w=2, http://rgod.altervista.org/versatile100RC2.html, http://secunia.com/advisories/17174/
CVE-2005-3914
Multiple SQL injection vulnerabilities in AFFcommerce 1.1.4 allow remote attackers to execute arbitrary SQL commands via (1) the cl parameter to SubCategory.php and the item_id parameter in (2) ItemInfo.php and (3) ItemReview.php.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: affcommerce
References: http://pridels0.blogspot.com/2005/11/affcommerce-multiple-sql-inj.html, http://secunia.com/advisories/17690, http://www.osvdb.org/21070
CVE-2005-2074
Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.0.105 allows remote attackers to inject arbitrary web script or HTML via a news or article post, possibly involving the (1) news_body, (2) article_description, or (3) article_body parameters to submit.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php_fusion
References: http://dark-assassins.com/forum/viewtopic.php?t=145, http://secunia.com/advisories/15830, http://www.securityfocus.com/bid/14066
CVE-2005-1692
Format string vulnerability in gxine 0.4.1 through 0.4.4, and other versions down to 0.3, allows remote attackers to execute arbitrary code via a ram file with a URL whose hostname contains format string specifiers.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gxine
References: http://cvs.sourceforge.net/viewcvs.py/xine/gnome-xine/ChangeLog?rev=HEAD&content-type=text/vnd.viewcvs-markup, http://marc.info/?l=bugtraq&m=111670637812128&w=2, http://secunia.com/advisories/15451
CVE-2005-1704
Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gdb
Related CWEs: CWE-189
References: ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc, http://bugs.gentoo.org/show_bug.cgi?id=91398, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001060
CWE: CWE-189
CVE-2005-0157
The confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail addresses by using a valid cookie that specifies an address other than the address for which the cookie was assigned.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: smartlist
References: http://www.debian.org/security/2005/dsa-720, http://www.debian.org/security/2005/dsa-720
CVE-2005-4788
resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, allows local users to bypass access control rules for USB devices via "alternate syntax for specifying USB devices."
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: suse_linux
References: http://www.novell.com/linux/security/advisories/2005_22_sr.html, http://www.securityfocus.com/bid/15037, http://www.novell.com/linux/security/advisories/2005_22_sr.html
CVE-2005-0307
Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) s, (2) l, (3) a, (4) t, (5) to, or (6) re parameters.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mercuryboard
References: http://marc.info/?l=bugtraq&m=110661795632354&w=2, http://www.securityfocus.com/bid/12359, https://exchange.xforce.ibmcloud.com/vulnerabilities/19050
CVE-2005-0873
Multiple cross-site scripting (XSS) vulnerabilities in test.jsp in Oracle Reports Server 10g (9.0.4.3.3) allow remote attackers to inject arbitrary web script or HTML via the (1) desname or (2) repprod parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: 10g_reports_server
References: http://marc.info/?l=bugtraq&m=111168323804203&w=2, http://secunia.com/advisories/17250, http://www.kb.cert.org/vuls/id/210524
CVE-2005-2806
client.cpp in BNBT EasyTracker 7.7r3.2004.10.27 and earlier allows remote attackers to cause a denial of service (application hang) via an HTTP header containing only a ":" (colon), possibly leading to an integer signedness error due to a missing field name or value.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: bnbt
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://marc.info/?l=bugtraq&m=112542080127451&w=2, http://secunia.com/advisories/16613/, http://secway.org/advisory/AD20050830.txt
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2005-4086
Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the beanFiles array parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: sugar_suite
References: http://rgod.altervista.org/sugar_suite_40beta.html, http://secunia.com/advisories/17948, http://securitytracker.com/id?1015322
CVE-2005-0363
awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: awstats
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=294488, http://www.debian.org/security/2005/dsa-682, http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=294488
CVE-2005-2342
Research in Motion (RIM) BlackBerry Router allows remote attackers to cause a denial of service (communication disruption) via crafted Server Routing Protocol (SRP) packets.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: blackberry_router, blackberry_enterprise_server
References: http://secunia.com/advisories/18277, http://securitytracker.com/id?1015427, http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/728075/728850/728215/?nodeid=1167898
CVE-2005-3936
PHP file include vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to include arbitrary local files via the __f parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: socketkb
References: http://pridels0.blogspot.com/2005/11/socketkb-11x-vuln.html, http://secunia.com/advisories/17807, http://www.osvdb.org/21251
CVE-2005-4713
Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors, probably involving the pam_mysql_sql_log function when being used in vsftpd, which does not include the IP address argument to an sprintf call.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pam_mysql
References: http://secunia.com/advisories/18598, http://secunia.com/advisories/20690, http://sourceforge.net/forum/forum.php?forum_id=499394