DuyTa/cve-kgrag-db huggingface dataset:
CVE-2005-2011
Multiple cross-site scripting (XSS) vulnerabilities in paFAQ 1.0 Beta 4 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the id parameter in a Question action.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: pafaq
References: http://marc.info/?l=bugtraq&m=111928841328681&w=2, http://www.gulftech.org/?node=research&article_id=00083-06202005, http://marc.info/?l=bugtraq&m=111928841328681&w=2
CVE-2005-1458
Multiple unknown "other problems" in the KINK dissector in Ethereal before 0.10.11 have unknown impact and attack vectors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ethereal
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963, http://www.ethereal.com/appnotes/enpa-sa-00019.html, http://www.ethereal.com/news/item_20050504_01.html
CVE-2005-0809
NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak encryption scheme (fixed byte reordering) to protect the key, which allows remote attackers to obtain the key via a brute force attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: notifylink
References: http://secunia.com/advisories/14617, http://www.kb.cert.org/vuls/id/581068, http://www.securityfocus.com/bid/12843
CVE-2005-3157
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to execute arbitrary SQL commands via the msg_send parameter, a different vulnerability than CVE-2005-3158 and CVE-2005-3159.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php_fusion
References: http://marc.info/?l=bugtraq&m=112793982604963&w=2, http://rgod.altervista.org/phpfusion600109.html, http://secunia.com/advisories/16994
CVE-2005-0294
minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service (infinite loop) via an HTTP request for a file that the web server does not have permission to read, as demonstrated using the month parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: minis
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030966.html, http://marc.info/?l=bugtraq&m=110599953704025&w=2, http://secunia.com/advisories/13866
CVE-2005-4047
Cross-site scripting (XSS) vulnerability in kb.asp in IISWorks ASPKnowledgeBase 2.0 allows remote attackers to inject arbitrary web script or HTML via the a parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: aspknowledgebase
References: http://pridels0.blogspot.com/2005/12/iisworks-asp-knowledgebase-2x-xss-vuln.html, http://secunia.com/advisories/17901, http://www.securityfocus.com/bid/15734
CVE-2005-1840
Directory traversal vulnerability in class.layout_phpcms.php in phpCMS 1.2.x before 1.2.1pl2 allows remote attackers to read or include arbitrary files, as demonstrated using a .. (dot dot) in the language parameter to parser.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpcms
References: http://cvs.sourceforge.net/viewcvs.py/phpcms/phpcms/parser/include/class.layout_phpcms.php?rev=1.12.2.37&view=markup, http://marc.info/?l=bugtraq&m=111773774916907&w=2, http://secunia.com/advisories/15586
CVE-2005-2010
Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the btitle parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: ublog_reload
References: http://echo.or.id/adv/adv18-theday-2005.txt, http://marc.info/?l=bugtraq&m=111928552304897&w=2, http://www.securityfocus.com/bid/13994
CVE-2005-2439
SQL injection vulnerability in UseBB 0.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search function.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: usebb
References: http://marc.info/?l=bugtraq&m=112264706213040&w=2, http://www.hardened-php.net/advisory_122005.60.html, http://www.securityfocus.com/bid/14413
CVE-2005-4803
graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files.  NOTE: this issue was originally associated with a different CVE identifier, CVE-2005-2965, which had been used for multiple different issues.  This is the correct identifier.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:P
Affected Products: graphviz
References: http://secunia.com/advisories/17121, http://secunia.com/advisories/17125, http://secunia.com/advisories/17207
CVE-2005-4149
Lyris ListManager 8.8 through 8.9b allows remote attackers to obtain sensitive information by causing errors in TML scripts, such as via direct requests, which leaks the installation path, SQL queries, or product code in diagnostic messages.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: listmanager
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html, http://metasploit.com/research/vulns/lyris_listmanager/, http://secunia.com/advisories/17943
CVE-2005-0231
Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which allows remote attackers to bypass the security model, aka "firetabbing."
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: firefox
References: http://marc.info/?l=bugtraq&m=110781134617144&w=2, http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml, http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml
CVE-2005-2475
Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:N/A:N
Affected Products: unzip
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.39/SCOSA-2005.39.txt, http://marc.info/?l=bugtraq&m=112300046224117&w=2, http://secunia.com/advisories/16309
CVE-2005-2231
High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: heartbeat
References: http://secunia.com/advisories/16039, http://www.debian.org/security/2005/dsa-761, http://secunia.com/advisories/16039
CVE-2005-3754
Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via the proxystylesheet variable, which will be executed in the resulting error message.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mini_search_appliance, search_appliance
References: http://metasploit.com/research/vulns/google_proxystylesheet/, http://secunia.com/advisories/17644, http://securitytracker.com/id?1015246
CVE-2005-4446
Cross-site scripting (XSS) vulnerability in index.asp in ASPBite 8.x allows remote attackers to inject arbitrary web script or HTML via the strSearch parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: aspbite
References: http://secunia.com/advisories/18132, http://www.securityfocus.com/bid/15991, http://secunia.com/advisories/18132
CVE-2005-2548
vlan_dev.c in the VLAN code for Linux kernel 2.6.8 allows remote attackers to cause a denial of service (kernel oops from null dereference) via certain UDP packets that lead to a function call with the wrong argument, as demonstrated using snmpwalk on snmpd.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
Related CWEs: CWE-399
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=309308, http://lists.osdl.org/pipermail/bridge/2004-September/000638.html, http://secunia.com/advisories/17826
CWE: CWE-399
CVE-2005-1254
Stack-based buffer overflow in the IMAP server for Ipswitch IMail 8.12 and 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to cause a denial of service (crash) via a SELECT command with a large argument.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: imail
References: http://securitytracker.com/id?1014047, http://www.idefense.com/application/poi/display?id=241&type=vulnerabilities, http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html
CVE-2005-1155
The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a <LINK rel="icon"> tag with a javascript: URL in the href attribute, aka "Firelinking."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mozilla, firefox
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt, http://secunia.com/advisories/14938, http://secunia.com/advisories/14992
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-2005-3586
content.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation path of the application via a URL that causes the application to return an error.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mambo
References: http://irannetjob.com/content/view/153/28/, http://marc.info/?l=bugtraq&m=113106195532404&w=2, http://irannetjob.com/content/view/153/28/
CVE-2005-0721
PHP remote file inclusion vulnerability in modules.php in eXPerience2 allows remote attackers to execute arbitrary PHP code by modifying the file parameter to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: experience2
References: http://marc.info/?l=bugtraq&m=111030766324600&w=2, http://marc.info/?l=bugtraq&m=111030766324600&w=2
CVE-2005-1652
message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to bypass authentication by modifying the email parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: postmaster
References: http://secunia.com/advisories/15268, http://www.securityfocus.com/bid/13597, http://secunia.com/advisories/15268
CVE-2005-0673
Cross-site scripting (XSS) vulnerability in usercp_register.php for phpBB 2.0.13 allows remote attackers to inject arbitrary web script or HTML by setting the (1) allowhtml, (2) allowbbcode, or (3) allowsmilies parameters to inject HTML into signatures for personal messages, possibly when they are processed by privmsg.php or viewtopic.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpbb
References: http://neosecurityteam.tk/index.php?pagina=advisories&id=8, http://secunia.com/advisories/14475, http://securitytracker.com/id?1013362
CVE-2005-1130
Cross-site scripting (XSS) vulnerability in index.php in Pinnacle Cart allows remote attackers to inject arbitrary web script or HTML via the pg parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: pinnacle_cart
References: http://secunia.com/advisories/14924, http://systemsecure.org/board/index.php?showtopic=8, http://www.osvdb.org/15485
CVE-2005-2719
Ventrilo 2.1.2 through 2.3.0 allows remote attackers to cause a denial of service (application crash) via a status packet that contains less data than specified in the packet header sent to UDP port 3784.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ventrilo
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/036407.html, http://marc.info/?l=bugtraq&m=112483407515020&w=2, http://secunia.com/advisories/16551/
CVE-2005-0646
SQL injection vulnerability in auth.php in paNews 2.0.4b allows remote attackers to execute arbitrary SQL via the mysql_prefix parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: panews
References: http://marc.info/?l=bugtraq&m=110969774502370&w=2, http://www.kernelpanik.org/docs/kernelpanik/panews.txt, http://marc.info/?l=bugtraq&m=110969774502370&w=2
CVE-2005-0936
Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: paypal_storefront
References: http://marc.info/?l=bugtraq&m=111221890614271&w=2, http://secunia.com/advisories/14711, http://securitytracker.com/id?1013563
CVE-2005-3695
Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the m parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: litespeed_web_server
References: http://secunia.com/advisories/17587, http://securitytracker.com/id?1015234, http://www.osvdb.org/20908
CVE-2005-1593
Cross-site scripting (XSS) vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: shoppingcart
References: http://lostmon.blogspot.com/2005/05/codethat-shoppingcart-critical.html, http://secunia.com/advisories/15251, http://securitytracker.com/id?1013924
CVE-2005-2590
Cross-site scripting (XSS) vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mindalign
References: http://secunia.com/advisories/16408, http://www.niscc.gov.uk/niscc/docs/br-20050812-00673.html?lang=en, http://www.osvdb.org/18755
CVE-2005-0800
PHP remote file inclusion vulnerability in install.php in mcNews 1.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the l parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2005-0720.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mcnews
References: http://marc.info/?l=bugtraq&m=111108900102438&w=2, http://secunia.com/advisories/14528, http://www.securityfocus.com/archive/1/445606/100/0/threaded
CVE-2005-3441
Unspecified vulnerability in Intelligent Agent in Oracle Database Server 9i up to 9.0.1.5 has unknown impact and attack vectors, aka Oracle Vuln# DB14.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: database_server
References: http://secunia.com/advisories/17250, http://www.kb.cert.org/vuls/id/210524, http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
CVE-2005-0628
Multiple cross-site scripting (XSS) vulnerabilities in Forumwa 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter in search.php or the (2) body or (3) subject of a forum message.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: forumwa
References: http://marc.info/?l=bugtraq&m=110971101826900&w=2, http://secunia.com/advisories/14418, http://www.securityfocus.com/bid/12689
CVE-2005-0885
Multiple cross-site scripting (XSS) vulnerabilities in XMB Forum 1.9.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Mood or (2) "Send To" fields.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: xmb
References: http://securitytracker.com/id?1013515, http://www.securityfocus.com/bid/12886, https://docs.xmbforum2.com/index.php?title=Security_Issue_History
CVE-2005-1252
Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote attackers to read arbitrary files via "..\" (dot dot backslash) sequences in the query string argument in a GET request to a non-existent .jsp file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: imail, imail_server
References: http://securitytracker.com/id?1014047, http://www.idefense.com/application/poi/display?id=242&type=vulnerabilities, http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html
CVE-2005-0935
Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the (1) idpages parameter to pages.php or the (2) id2 parameter to products1.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: paypal_storefront
References: http://marc.info/?l=bugtraq&m=111221890614271&w=2, http://secunia.com/advisories/14711, http://securitytracker.com/id?1013563
CVE-2005-2975
io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial of service (infinite loop) via a crafted XPM image with a large number of colors.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: gtk, gdkpixbuf
Related CWEs: CWE-399
References: http://secunia.com/advisories/17522, http://secunia.com/advisories/17538, http://secunia.com/advisories/17562
CWE: CWE-399
CVE-2005-3182
Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code via long headers such as (1) Host and (2) Accept in HTTP requests.  NOTE: the vendor suggests that this issues is "in an underlying Microsoft technology" which, if true, could mean that the overflow affects other products as well.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailsecurity
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0290.html, http://kbase.gfi.com/showarticle.asp?id=KBID002451, http://marc.info/?l=bugtraq&m=112914475508191&w=2
CVE-2005-3744
SQL injection vulnerability in index.php in phpComasy 0.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: an examination of the 0.7.5 source code suggests that there is no id parameter being handled directly by index.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpcomasy
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://pridels0.blogspot.com/2005/11/phpcomasy-id-sql-injection.html, http://secunia.com/advisories/17660, http://www.osvdb.org/20984
CWE: CWE-89
CVE-2005-1017
SQL injection vulnerability in the Update_Events function in events_functions.asp in MaxWebPortal 1.33 and earlier allows remote attackers to execute arbitrary SQL commands via the EVENT_ID parameter, as demonstrated using events.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: maxwebportal
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://secunia.com/advisories/14752, http://securitytracker.com/id?1013617, http://www.hackerscenter.com/archive/view.asp?id=1807
CWE: CWE-89
CVE-2005-2457
The driver for compressed ISO file systems (zisofs) in the Linux kernel before 2.6.12.5 allows local users and remote attackers to cause a denial of service (kernel crash) via a crafted compressed ISO file system.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5, http://secunia.com/advisories/16355/, http://secunia.com/advisories/16500
CVE-2005-0350
Heap-based buffer overflow in multiple F-Secure Anti-Virus and Internet Security products allows remote attackers to execute arbitrary code via a crafted ARJ archive.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: f-secure_personal_express, f-secure_internet_security, f-secure_anti-virus, internet_gatekeeper
References: http://www.f-secure.com/security/fsc-2005-1.shtml, http://xforce.iss.net/xforce/alerts/id/188, http://www.f-secure.com/security/fsc-2005-1.shtml
CVE-2005-1883
global.php in YaPiG 0.92b allows remote attackers to include arbitrary local files via the BASE_DIR parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: yapig
References: http://secunia.com/advisories/15600/, http://securitytracker.com/id?1014103, http://secwatch.org/advisories/secwatch/20050530_yapig.txt
CVE-2005-2462
Kayako liveResponse 2.x, when logging in a user, records the password in plaintext in the URL, which allows local users and possibly remote attackers to gain privileges.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: liveresponse
References: http://marc.info/?l=bugtraq&m=112274359718863&w=2, http://secunia.com/advisories/16286, http://www.gulftech.org/?node=research&article_id=00092-07302005
CVE-2005-1657
Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations via the Folder.Id parameter to (1) deletefolder.ctml, (2) deletemessage.ctml, (3) origmessage.ctml, or (4) readmessage.ctml, the Message.Id parameter to editmessage.ctml, or the (5) Message.Command parameter to messages.ctml.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mercur_messaging
References: http://secunia.com/advisories/15234, http://www.osvdb.org/16220, http://www.osvdb.org/16221
CVE-2005-2693
cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cvs
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:20.cvsbug.asc, http://secunia.com/advisories/16765, http://securitytracker.com/id?1014857
CVE-2005-3589
Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal crash) via a long USER ftp command.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: filezilla_server_terminal
References: http://ingehenriksen.blogspot.com/2005/11/filezilla-server-terminal-094d-dos-poc_21.html, http://ingehenriksen.blogspot.com/2005/11/work-in-progress-filezilla-server.html, http://marc.info/?l=bugtraq&m=113140190521377&w=2
CVE-2005-0234
The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: safari
References: http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html, http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031459.html, http://marc.info/?l=bugtraq&m=110782704923280&w=2
CVE-2005-4022
Cross-site scripting (XSS) vulnerability in the "Add Image From Web" feature in Gallery 2.0 before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: gallery
References: http://secunia.com/advisories/17747, http://www.osvdb.org/21221, http://www.securityfocus.com/archive/1/418200/100/0/threaded
CVE-2005-1136
Simple PHP Blog (sphpBlog) 0.4.0 stores the (1) password.txt and (2) config.txt files under the web document root, which allows remote attackers to obtain sensitive information and crack passwords via a direct request to these files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sphpblog
References: http://echo.or.id/adv/adv12-y3dips-2005.txt, http://marc.info/?l=bugtraq&m=111359320312609&w=2, http://www.waraxe.us/ftopict-651.html
CVE-2005-2174
Bugzilla 2.17.x, 2.18 before 2.18.2, 2.19.x, and 2.20 before 2.20rc1 inserts a bug into the database before it is marked private, which introduces a race condition and allows attackers to access information about the bug via buglist.cgi before MySQL replication is complete.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: bugzilla
References: http://securitytracker.com/id?1014428, http://www.bugzilla.org/security/2.18.1/, https://bugzilla.mozilla.org/show_bug.cgi?id=293159
CVE-2005-0359
The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which allows remote attackers to (1) cause a denial of service by using pmap_unset to un-register a NetWorker service, or (2) obtain sensitive information from NetWorker services by using pmap_set to register a new service.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Affected Products: storedge_enterprise_backup_software, solstice_backup, legato_networker
References: http://secunia.com/advisories/16464, http://secunia.com/advisories/16470, http://securitytracker.com/id?1014713
CVE-2005-4618
Buffer overflow in sysctl in the Linux Kernel 2.6 before 2.6.15 allows local users to corrupt user memory and possibly cause a denial of service via a long string, which causes sysctl to write a zero byte outside the buffer.  NOTE: since the sysctl is called from a userland program that provides the argument, this might not be a vulnerability, unless a legitimate user-assisted or setuid scenario can be identified.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:P
Affected Products: linux_kernel
References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15, http://secunia.com/advisories/18216, http://secunia.com/advisories/18527
CVE-2005-2465
Cross-site scripting (XSS) vulnerability in pm.php in PCXP/TOPPE CMS allows remote attackers to inject arbitrary web script or HTML via the msg variable.
CVSS v2.0 Score: 5.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Affected Products: toppe_cms, pc-experience
References: http://marc.info/?l=bugtraq&m=112274251601106&w=2, http://www.osvdb.org/18715, http://www.securityfocus.com/bid/14428
CVE-2005-2034
Cross-site scripting (XSS) vulnerability in folderview.asp for BlueCollar iGallery 3.3 allows remote attackers to inject arbitrary web script or HTML via the folder parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: i-gallery
References: http://marc.info/?l=bugtraq&m=111936111630489&w=2, http://www.vupen.com/english/advisories/2005/0825, http://marc.info/?l=bugtraq&m=111936111630489&w=2
CVE-2005-2731
Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated webmin users to read arbitrary files via a ..  (dot dot) in the wfe_download parameter to index.fpl.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: security_linux
References: http://marc.info/?l=bugtraq&m=112501186602731&w=2, http://marc.info/?l=bugtraq&m=112501186602731&w=2
CVE-2005-2430
Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id or (2) group_id parameter to forum.php, (3) project_task_id parameter to task.php, (4) id parameter to detail.php, (5) the text field on the search page, (6) group_id parameter to qrs.php, (7) form, (8) rows, (9) cols or (10) wrap parameter to notepad.php, or the login field on the login form.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: gforge
References: http://marc.info/?l=bugtraq&m=112259845904350&w=2, http://secunia.com/advisories/16253/, http://secunia.com/advisories/20622
CVE-2005-2276
Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded javascript URI (e.g. "j&#X41vascript" in an IMG tag.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: groupwise_webaccess
References: http://marc.info/?l=bugtraq&m=112181451014783&w=2, http://secunia.com/advisories/16098/, http://securitytracker.com/id?1014515
CVE-2005-1603
NiteEnterprises Remote File Manager 1.0 allows remote attackers to cause a denial of service (crash) via a crafted string to TCP port 7080.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: remote_file_manager
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0129.html, http://secunia.com/advisories/15299, http://www.osvdb.org/16158
CVE-2005-2844
Buffer overflow in MMClient.exe in Indiatimes Messenger 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long group name argument to the RenameGroup function in the MMClient.MunduMessenger.1 ActiveX object.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: indiatimes_messenger
References: http://marc.info/?l=bugtraq&m=112550635826169&w=2, http://secunia.com/advisories/16633/, http://securitytracker.com/id?1014842
CVE-2005-1479
SQL injection vulnerability in jgs_portal.php in JGS-Portal 3.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jgs-portal
References: http://marc.info/?l=bugtraq&m=111506870504598&w=2, http://marc.info/?l=bugtraq&m=111627681218415&w=2, http://secunia.com/advisories/15219
CVE-2005-0369
Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 earlier allows remote attackers to cause a denial of service (application crash) via a packet with a large (1) descriptor ID or (2) claim_id, which exceeds the boundaries of an array.
CVSS v3.1 Score: 5.3 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: armagetron, armagetron_advanced
Related CWEs: CWE-129
Related CAPECs: CAPEC-100
References: http://marc.info/?l=bugtraq&m=110811699206052&w=2, http://marc.info/?l=bugtraq&m=110811699206052&w=2
CWE: CWE-129
CVE-2005-0879
PHP remote file include vulnerability in (1) content.php and (2) index.php for Vortex Portal allows remote attackers to execute arbitrary PHP code via a URL in the act parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vortex_portal
References: http://archives.neohapsis.com/archives/bugtraq/2005-03/0405.html, http://secunia.com/advisories/14707, http://securitytracker.com/id?1013545
CVE-2005-0210
Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice.
CVSS v2.0 Score: 4.9 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Affected Products: linux_kernel
Related CWEs: CWE-399
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945, http://marc.info/?l=bugtraq&m=111091402626556&w=2, http://rhn.redhat.com/errata/RHSA-2005-366.html
CWE: CWE-399
CVE-2005-2620
grpWise.exe for Novell GroupWise client 5.5 through 6.5.2 stores the password in plaintext in memory, which allows attackers to obtain the password using a debugger or another mechanism to read process memory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: groupwise
References: http://archives.neohapsis.com/archives/bugtraq/2005-06/0158.html, http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0858.html, http://marc.info/?l=bugtraq&m=112431139225724&w=2
CVE-2005-2366
Unknown vulnerability in the BER dissector in Ethereal 0.10.11 allows remote attackers to cause a denial of service (abort or infinite loop) via unknown attack vectors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ethereal
References: http://secunia.com/advisories/16225/, http://secunia.com/advisories/17102, http://www.debian.org/security/2005/dsa-853
CVE-2005-0596
PHP 4 (PHP4) allows attackers to cause a denial of service (daemon crash) by using the readfile function on a file whose size is a multiple of the page size.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: php
References: http://www.linuxcompatible.org/story42495.html, http://www.securityfocus.com/bid/12665, http://www.linuxcompatible.org/story42495.html
CVE-2005-3248
Unspecified vulnerability in the X11 dissector in Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service (divide-by-zero) via unknown vectors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ethereal
References: http://secunia.com/advisories/17254, http://secunia.com/advisories/17286, http://secunia.com/advisories/17327
CVE-2005-4508
Nexus Concepts Dev Hound 2.24 and earlier allows remote attackers to obtain the installation path via a URL containing a non-existent .dll file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: dev_hound
References: http://secunia.com/advisories/18164, http://www.exploitlabs.com/files/advisories/EXPL-A-2005-017-devhound.txt, http://www.vupen.com/english/advisories/2005/3047
CVE-2005-2072
The runtime linker (ld.so) in Solaris 8, 9, and 10 trusts the LD_AUDIT environment variable in setuid or setgid programs, which allows local users to gain privileges by (1) modifying LD_AUDIT to reference malicious code and possibly (2) using a long value for LD_AUDIT.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
Related CWEs: CWE-264
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034730.html, http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034731.html, http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034738.html
CWE: CWE-264
CVE-2005-0747
ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing the hidden ID field, as demonstrated using the id parameter to ApplicantDecision.asp.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: i-class
References: http://securitytracker.com/id?1013400, http://securitytracker.com/id?1013400
CVE-2005-4391
Cross-site scripting (XSS) vulnerability in damoon allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the q parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: damoon
References: http://pridels0.blogspot.com/2005/12/damoon-xss-vuln.html, http://secunia.com/advisories/18118, http://www.osvdb.org/21817
CVE-2005-1990
Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, including (1) devenum.dll, (2) diactfrm.dll, (3) wmm2filt.dll, (4) fsusd.dll, (5) dmdskmgr.dll, (6) browsewm.dll, (7) browseui.dll, (8) shell32.dll, (9) mshtml.dll, (10) inetcfg.dll, (11) infosoft.dll, (12) query.dll, (13) syncui.dll, (14) clbcatex.dll, (15) clbcatq.dll, (16) comsvcs.dll, and (17) msconf.dll, which causes memory corruption, aka "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2087.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: ie, internet_explorer
References: http://secunia.com/advisories/16373/, http://securitytracker.com/id?1014643, http://www.kb.cert.org/vuls/id/959049
CVE-2005-4820
SMC Wireless Router model SMC7904WBRA allows remote attackers to cause a denial of service (reboot) by flooding the router with traffic.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: smc7904wbra
References: http://www.securityfocus.com/bid/14809, https://exchange.xforce.ibmcloud.com/vulnerabilities/40019, http://www.securityfocus.com/bid/14809
CVE-2005-4083
Directory traversal vulnerability in xs_edit.php in the eXtreme Styles phpBB module 2.2.1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the edit parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: extreme_styles_phpbb_module
References: http://www.securityfocus.com/archive/1/418518/100/0/threaded, http://www.securityfocus.com/archive/1/418518/100/0/threaded
CVE-2005-1132
LG U8120 mobile phone allows remote attackers to cause a denial of service (device crash) via a malformed MIDI file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: lg_mobile_phone
References: http://securitytracker.com/id?1013777, http://www.securityfocus.com/archive/1/395714, http://www.securityfocus.com/bid/13154
CVE-2005-3401
Multiple interpretation error in TheHacker 5.8.4.128 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: thehacker
References: http://marc.info/?l=bugtraq&m=113026417802703&w=2, http://marc.info/?l=bugtraq&m=113036131526435&w=2, http://securityreason.com/securityalert/114
CVE-2005-1983
Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_xp
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0384.html, http://secunia.com/advisories/16372, http://securitytracker.com/id?1014640
CVE-2005-1771
Unknown vulnerability in HP-UX trusted systems B.11.00 through B.11.23 allows remote attackers to gain unauthorized access, possibly involving remshd and/or telnet -t.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://marc.info/?l=bugtraq&m=111713178014478&w=2, http://securitytracker.com/id?1014060, http://marc.info/?l=bugtraq&m=111713178014478&w=2
CVE-2005-4840
The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of service (NULL dereference and browser crash) by creating the OutlookExpress.AddressBook COM object, which is not intended for use within Internet Explorer.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Affected Products: outlook_express_book_control, internet_explorer
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://browserfun.blogspot.com/2006/07/mobb-3-outlookexpressaddressbook_02.html, http://www.osvdb.org/26836, http://www.securityfocus.com/archive/1/391803
CWE: CWE-119
CVE-2005-0196
Cisco IOS 12.0 through 12.3YL, with BGP enabled and running the bgp log-neighbor-changes command, allows remote attackers to cause a denial of service (device reload) via a malformed BGP packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ios
References: http://secunia.com/advisories/14034, http://securitytracker.com/id?1013013, http://www.cisco.com/warp/public/707/cisco-sa-20050126-bgp.shtml
CVE-2005-2339
Cross-site scripting (XSS) vulnerability in the Unicode version of msearch (unicode-msearch) 1.51(U1)-beta1, 1.51(U1), and 1.52(U1) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: unicode_msearch
References: http://jvn.jp/jp/JVN%2379925E6F/index.html, http://jvn.jp/jp/JVN%2379925E6F/index.html
CVE-2005-4355
Multiple cross-site scripting (XSS) vulnerabilities in UStore allow remote attackers to inject arbitrary web script or HTML via the (1) Cat parameter in default.asp and the (2) accessdenied parameter in admin/default.asp.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: ustore
References: http://secunia.com/advisories/18026, http://www.osvdb.org/21979, http://www.osvdb.org/21980
CVE-2005-1584
Cross-site scripting (XSS) vulnerability in index.php for Quick.Forum 2.1.6 allows remote attackers to inject arbitrary web script or HTML via the topic field in a NewTopic action.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: quick.forum
References: http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html, http://secunia.com/advisories/15200, http://www.osvdb.org/16327
CVE-2005-3130
SQL injection vulnerability in lucidCMS 1.0.11 allows remote attackers to execute arbitrary SQL commands via the login field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lucidcms
References: http://marc.info/?l=bugtraq&m=112803020415743&w=2, http://rgod.altervista.org/lucidcms1011.html, http://securityreason.com/securityalert/33
CVE-2005-4273
Multiple unspecified vulnerabilities in (1) getShell and (2) getCommand in IBM AIX 5.3 allow local users to append to arbitrary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: aix
References: http://secunia.com/advisories/18088, http://www.securityfocus.com/archive/1/419577/100/0/threaded, http://www.securityfocus.com/archive/1/419634/100/0/threaded
CVE-2005-0047
Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows attackers to execute arbitrary code, aka the "COM Structured Storage Vulnerability."
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_xp, windows_2003_server
References: http://marc.info/?l=bugtraq&m=111755870828817&w=2, http://www.argeniss.com/research/SSExploit.c, http://www.kb.cert.org/vuls/id/597889
CVE-2005-4397
SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute arbitrary SQL commands via the Event_ID parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: icms
References: http://secunia.com/advisories/18085, http://www.osvdb.org/21810, http://secunia.com/advisories/18085
CVE-2005-1951
Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the (1) products_id or (2) pid parameter to index.php or (3) goto parameter to banner.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: oscommerce
References: http://marc.info/?l=bugtraq&m=111842744205117&w=2, http://marc.info/?l=bugtraq&m=111936255011735&w=2, http://secunia.com/advisories/15670
CVE-2005-4078
Multiple cross-site scripting (XSS) vulnerabilities in Ideal BB.NET 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) forumID, (2) boardID, and (3) topicRepeater1-p parameters in topics.aspx, (4) boardID parameter in categoryindex.aspx, (5) postID parameter in posts.aspx, (6) catID parameter in forums.aspx, and (7) memberID parameter in member.aspx.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: ideal_bb.net
References: http://pridels0.blogspot.com/2005/12/ideal-bbnet-13-xss-vuln.html, http://secunia.com/advisories/17906, http://www.osvdb.org/21511
CVE-2005-2392
Cross-site scripting (XSS) vulnerability in index.php for CMSimple 2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in the search function.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: cms_made_simple
References: http://lostmon.blogspot.com/2005/07/cmsimple-search-variable-xss.html, http://secunia.com/advisories/16147, http://securitytracker.com/id?1014556
CVE-2005-0978
Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. (dot dot) in a PUSH command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: bluesoleil
References: http://marc.info/?l=bugtraq&m=111238511206503&w=2, http://secunia.com/advisories/14790/, http://www.digitalmunition.com/DMA%5B2005-0401a%5D.txt
CVE-2005-4027
SQL injection vulnerability in SimpleBBS 1.1 allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: simplebbs
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://pridels0.blogspot.com/2005/11/simplebbs-v11-sql-inj-vuln.html, http://www.osvdb.org/21399, http://www.securityfocus.com/bid/15594
CWE: CWE-89
CVE-2005-1185
Unquoted Windows search path vulnerability in Musicmatch Jukebox 10.00.2047 and earlier allows local users to gain privileges via a malicious C:\program.exe file, which is run by MMFWLaunch.exe when it attempts to execute launch.exe.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jukebox
References: http://marc.info/?l=bugtraq&m=111352290711509&w=2, http://securitytracker.com/id?1013718, http://www.hyperdose.com/advisories/H2005-05.txt
CVE-2005-4373
Adaptive Website Framework (AWF) 2.10 and earlier allows remote attackers to obtain the full path of the application via an invalid mode parameter to community.html, which leaks the path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: adaptive_website_framework
References: http://pridels0.blogspot.com/2005/12/awf-adaptive-website-framework-vuln.html, http://www.awf-cms.org/news.html, http://www.osvdb.org/21915
CVE-2005-0707
Buffer overflow in the IMAP daemon (IMAP4d32.exe) for Ipswitch Collaboration Suite (ICS) before 8.15 Hotfix 1 allows remote authenticated users to execute arbitrary code via a long EXAMINE command.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ipswitch_collaboration_suite
References: http://secunia.com/advisories/14546, http://securitytracker.com/id?1013410, http://www.idefense.com/application/poi/display?id=216&type=vulnerabilities
CVE-2005-0692
Cross-site scripting (XSS) vulnerability in fusion_core.php for PHP-Fusion 5.x allows remote attackers to inject arbitrary web script or HTML via a message with IMG bbcode containing character-encoded Javascript.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php_fusion
References: http://marc.info/?l=bugtraq&m=111022851900028&w=2, http://secunia.com/advisories/14492, http://www.php-fusion.co.uk/news.php?readmore=183