Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
m/advisories/17368 - http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html - http://www.osvdb.org/20431 - http://www.securityfocus.com/bid/15252
CVE ID: CVE-2005-2753 State: PUBLISHED Published: 2005-11-05T11:00:00 Last Updated: 2024-08-07T22:45:02.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file that causes a sign extension of the length element in a Pascal style string. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20475 - http://www.securityfocus.com/archive/1/415712/30/0/threaded - http://securitytracker.com/id?1015152 - http://docs.info.apple.com/article.html?artnum=302772 - http://secunia.com/advisories/17428 - http://pb.specialised.info/all/adv/q
s.info.apple.com/article.html?artnum=302772 - http://secunia.com/advisories/17428 - http://pb.specialised.info/all/adv/quicktime-mov-io1-adv.txt - http://www.vupen.com/english/advisories/2005/2293 - http://www.securityfocus.com/bid/15306
CVE ID: CVE-2005-2754 State: PUBLISHED Published: 2005-11-05T11:00:00 Last Updated: 2024-08-07T22:45:02.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file with "Improper movie attributes." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/415709/30/0/threaded - http://www.osvdb.org/20476 - http://www.securityfocus.com/bid/15308 - http://pb.specialised.info/all/adv/quicktime-mov-io2-adv.txt - http://securitytracker.com/id?1015152 - http://docs.info.apple.com/article.html?artnum=302772 - http://secuni
-adv.txt - http://securitytracker.com/id?1015152 - http://docs.info.apple.com/article.html?artnum=302772 - http://secunia.com/advisories/17428 - http://www.vupen.com/english/advisories/2005/2293
CVE ID: CVE-2005-2755 State: PUBLISHED Published: 2005-11-05T11:00:00 Last Updated: 2024-08-07T22:45:02.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime Player before 7.0.3 allows user-assisted attackers to cause a denial of service (crash) via a crafted file with a missing movie attribute, which leads to a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/145 - http://www.securityfocus.com/bid/15307 - http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0102.html - http://pb.specialised.info/all/adv/quicktime-mov-dos-adv.txt - http://securitytracker.com/id?1015152 - http://docs.i
l - http://pb.specialised.info/all/adv/quicktime-mov-dos-adv.txt - http://securitytracker.com/id?1015152 - http://docs.info.apple.com/article.html?artnum=302772 - http://www.securityfocus.com/archive/1/415717/30/0/threaded - http://secunia.com/advisories/17428 - http://www.osvdb.org/20477 - http://www.vupen.com/english/advisories/2005/2293
CVE ID: CVE-2005-2756 State: PUBLISHED Published: 2005-11-05T11:00:00 Last Updated: 2024-08-07T22:45:01.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime before 7.0.3 allows user-assisted attackers to overwrite memory and execute arbitrary code via a crafted PICT file that triggers an overflow during expansion. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/855118 - http://www.osvdb.org/20478 - http://securitytracker.com/id?1015152 - http://docs.info.apple.com/article.html?artnum=302772 - http://secunia.com/advisories/17428 - http://securityreason.com/securityalert/144 - http://pb.specialised.info/all/adv/quicktim
secunia.com/advisories/17428 - http://securityreason.com/securityalert/144 - http://pb.specialised.info/all/adv/quicktime-pict-adv.txt - http://www.securityfocus.com/archive/1/415714/30/0/threaded - http://www.vupen.com/english/advisories/2005/2293 - http://www.securityfocus.com/bid/15309
CVE ID: CVE-2005-2757 State: PUBLISHED Published: 2005-12-01T02:02:00 Last Updated: 2024-08-07T22:45:02.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in CoreFoundation in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to execute arbitrary code via unknown attack vectors involving "validation of URLs." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17813 - http://www.vupen.com/english/advisories/2005/2659 - http://securitytracker.com/id?1015285 - http://docs.info.apple.com/article.html?artnum=302847 - http://www.osvdb.org/21271 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
o.apple.com/article.html?artnum=302847 - http://www.osvdb.org/21271 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23329 - http://www.securityfocus.com/bid/15647
CVE ID: CVE-2005-2758 State: PUBLISHED Published: 2005-10-05T04:00:00 Last Updated: 2024-08-07T22:45:02.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute arbitrary code via crafted HTTP headers with negative values, which lead to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22519 - http://www.idefense.com/application/poi/display?id=314&type=vulnerabilities - http://www.securityfocus.com/bid/15001 - http://www.kb.cert.org/vuls/id/849209 - ht
isplay?id=314&type=vulnerabilities - http://www.securityfocus.com/bid/15001 - http://www.kb.cert.org/vuls/id/849209 - http://www.osvdb.org/19854 - http://www.vupen.com/english/advisories/2005/1954 - http://secunia.com/advisories/17049 - http://securitytracker.com/id?1015001 - http://www.symantec.com/avcenter/security/Content/2005.10.04.html - http://securityreason.com/securityalert/48
CVE ID: CVE-2005-2759 State: PUBLISHED Published: 2005-10-20T04:00:00 Last Updated: 2024-08-07T22:45:02.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: ** SPLIT ** The jlucaller program in LiveUpdate for Symantec Norton AntiVirus 9.0.3 on Macintosh runs setuid when executing Java programs, which allows local users to gain privileges. NOTE: due to a CNA error, this candidate was also originally assigned to an issue in DiskMountNotify. Use CVE-2005-3270 for the DiskMountNotify issue, and CVE-2005-2759 for the LiveUpdate issue. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015083 - http://www.idefense.com/application/poi/display?
rogram Container: References: - http://securitytracker.com/id?1015083 - http://www.idefense.com/application/poi/display?id=324&type=vulnerabilities - http://www.symantec.com/avcenter/security/Content/2005.10.19a.html - http://secunia.com/advisories/17268 - http://www.securityfocus.com/bid/15142
CVE ID: CVE-2005-2761 State: PUBLISHED Published: 2005-08-31T04:00:00 Last Updated: 2024-08-07T22:45:02.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpGroupWare 0.9.16.000 allows administrators to inject arbitrary web script or HTML by modifying the main screen message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16558 - http://securitytracker.com/id?1014832 - http://www.debian.org/security/2005/dsa-798 - http://savannah.gnu.org/bugs/?func=detailitem&item_id=13863
CVE ID: CVE-2005-2762 State: PUBLISHED Published: 2006-01-09T18:00:00Z Last Updated: 2024-09-16T20:47:11.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avaya VPNRemote before 4.2.33 stores credentials in cleartext in process memory, which allows attackers to obtain the VPN user's credentials. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2005-230.pdf
CVE ID: CVE-2005-2763 State: PUBLISHED Published: 2005-09-06T04:00:00 Last Updated: 2024-08-07T22:45:02.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in OpenTTD before 0.4.0.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/1640 - http://bugs.gentoo.org/show_bug.cgi?id=102631 - http://www.gentoo.org/security/en/glsa/glsa-200509-03.xml
CVE ID: CVE-2005-2764 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:45:02.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in OpenTTD before 0.4.0.1 allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/1640 - http://bugs.gentoo.org/show_bug.cgi?id=102631 - http://www.gentoo.org/security/en/glsa/glsa-200509-03.xml
CVE ID: CVE-2005-2765 State: PUBLISHED Published: 2005-09-01T04:00:00Z Last Updated: 2024-09-16T20:57:47.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user interface in the Windows Firewall does not properly display certain malformed entries in the Windows Registry, which makes it easier for attackers with administrator privileges to hide activities if the administrator only uses the Windows Firewall interface to monitor exceptions. NOTE: the vendor disputes this issue, saying that since administrative privileges are already required, it is not a vulnerability. CVE has not yet formally decided if such "information hiding" issues should be included. Additional Analyst No
rability. CVE has not yet formally decided if such "information hiding" issues should be included. Additional Analyst Notes: - CVE Program Container: References: - http://www.microsoft.com/technet/security/advisory/897663.mspx
CVE ID: CVE-2005-2766 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec AntiVirus Corporate Edition 9.0.1.x and 9.0.4.x, and possibly other versions, when obtaining updates from an internal LiveUpdate server, stores sensitive information in cleartext in the Log.Liveupdate log file, which allows attackers to obtain the username and password to the internal LiveUpdate server. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112552401413998&w=2
CVE ID: CVE-2005-2767 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in LeapFTP allows remote attackers to execute arbitrary code via a long Host string in a Site Queue (.lsq) file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/21974 - http://www.securityfocus.com/bid/14655 - http://www.leapware.com/security/2005082301.txt - http://marc.info/?l=bugtraq&m=112491089723070&w=2 - http://securitytracker.com/id?1014785 - http://secway.org/advisory/AD20050824.txt - http://secunia.com/advisories/16552/
CVE ID: CVE-2005-2768 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailMonitor, and other products, allows remote attackers to execute arbitrary code via a Visio file with a crafted sub record length. Additional Analyst Notes: - CVE Program Container: References: - http://www.rem0te.com/public/images/sophos.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/21608 - http://secunia.com/advisories/16245/ - http://www.securityfocus.com/bid/14362 - http://www.sophos.com/support/knowledgeba
ttp://secunia.com/advisories/16245/ - http://www.securityfocus.com/bid/14362 - http://www.sophos.com/support/knowledgebase/article/3409.html - http://marc.info/?l=bugtraq&m=112511873420953&w=2
CVE ID: CVE-2005-2769 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attackers to inject arbitrary web script or HTML via an HTML e-mail containing tags with strings that contain ">" or other special characters, which is not properly sanitized by SqWebMail. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16600/ - http://seclists.org/fulldisclosure/2005/Aug/975 - http://secunia.com/secunia_research/2005-39/advisory/ - http://www.securityfocus.com/bi
rg/fulldisclosure/2005/Aug/975 - http://secunia.com/secunia_research/2005-39/advisory/ - http://www.securityfocus.com/bid/14676 - http://secunia.com/advisories/17156 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22043 - http://www.ubuntu.com/usn/usn-201-1 - http://marc.info/?l=bugtraq&m=112534112715638&w=2
CVE ID: CVE-2005-2770 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) does not properly handle when the Windows Administrator or Guest accounts are renamed after SSH key authentication has been configured, which allows remote attackers to use the original names during login. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014835 - http://support.wrq.com/techdocs/1910.html - http://www.kb.cert.org/vuls/id/902110 - http://secunia.com/advisories/16649/
CVE ID: CVE-2005-2771 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) processes access and deny lists in a case-sensitive manner, when previous versions were case-insensitive, which might allow remote attackers to bypass intended restrictions and login to accounts that should be denied. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014835 - http://www.kb.cert.org/vuls/id/758054 - http://support.wrq.com/techdocs/1910.html - http://secunia.com/advisories/16649/
CVE ID: CVE-2005-2772 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to execute arbitrary code via (1) a long "+VIEWS:" reply, which is not properly handled in the VIfromLine function, and (2) certain arguments when launching third party programs such as a web browser from a web link, which is not properly handled in the FIOgetargv function. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112559902931614&w=2 - http://www.kb.cert.org/v
tes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112559902931614&w=2 - http://www.kb.cert.org/vuls/id/619812 - http://www.debian.org/security/2005/dsa-832 - http://www.securityfocus.com/bid/14693 - http://secunia.com/advisories/16614/ - http://secunia.com/advisories/17016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22053
CVE ID: CVE-2005-2773 State: PUBLISHED Published: 2005-09-02T04:00:00.000Z Last Updated: 2025-10-22T00:05:57.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://marc.info/?l=bugtraq&m=112499121725662&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21999 - http://www.securityfocus.com/advisories/9150 - http://www.securityfocus.com/bid/1466
bmcloud.com/vulnerabilities/21999 - http://www.securityfocus.com/advisories/9150 - http://www.securityfocus.com/bid/14662 - http://secunia.com/advisories/16555/ - http://www.securityfocus.com/advisories/9150
CVE ID: CVE-2005-2774 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in the nickname. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14664 - http://marc.info/?l=bugtraq&m=112500372617684&w=2 - http://secunia.com/advisories/16585/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22013
CVE ID: CVE-2005-2775 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:01.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: php_api.php in phpWebNotes 2.0.0 uses the extract function to modify key variables such as $t_path_core, which leads to a PHP file inclusion vulnerability that allows remote attackers to execute arbitrary PHP code via the t_path_core parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14679 - http://www.securitytracker.com/alerts/2005/Aug/1014807.html - http://marc.info/?l=bugtraq&m=112516693300371&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22040
CVE ID: CVE-2005-2776 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Looking Glass 20040427 allow remote attackers to inject arbitrary web script or HTML via the (1) version[fullname], (2) version[homepage], or (3) version[no] parameter to footer.php, or the (4) version[fullname], (5) version[no], (6) version[author], (7) version[email] parameter to header.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16607/ - http://de-neef.net/articles.php?id=2&page=2 - http://rgod.altervista.org/looki
- http://secunia.com/advisories/16607/ - http://de-neef.net/articles.php?id=2&page=2 - http://rgod.altervista.org/lookingglass.html - http://marc.info/?l=bugtraq&m=112516327607001&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22044 - http://www.securityfocus.com/bid/14680
CVE ID: CVE-2005-2777 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Looking Glass 20040427 allows remote attackers to execute arbitrary commands via shell metacharacters in the DNS lookup query field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16607/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22045 - http://de-neef.net/articles.php?id=2&page=2 - http://rgod.altervista.org/lookingglass.html - http://www.securityfocus.com/bid/14682 - http://marc.info/?l=bugtraq&m=112516327607001&w=2
CVE ID: CVE-2005-2778 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL statements via the fid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14684 - http://marc.info/?l=bugtraq&m=112535137320050&w=2
CVE ID: CVE-2005-2779 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iTAN Online-Banking Security System allows remote attackers to obtain TAN numbers via a man-in-the-middle (MITM) attack while the transaction is taking place, which facilitates a "phishing" attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.redteam-pentesting.de/advisories/rt-sa-2005-014.txt - http://marc.info/?l=bugtraq&m=112498693231687&w=2
CVE ID: CVE-2005-2780 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) allows remote attackers to inject arbitrary web script or HTML via a signature. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112534018805818&w=2 - http://www.securityfocus.com/bid/14677
CVE ID: CVE-2005-2781 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Avatar upload feature in FUD Forum before 2.7.0 does not properly verify uploaded files, which allows remote attackers to execute arbitrary PHP code via a file with a .php extension that contains image data followed by PHP code. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112534235403406&w=2 - http://secunia.com/advisories/16627/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22076 - http://secunia.com/advisories/20203 - http://fudforum.org/forum/index.php?t=msg&th
.ibmcloud.com/vulnerabilities/22076 - http://secunia.com/advisories/20203 - http://fudforum.org/forum/index.php?t=msg&th=5470&start=0& - http://www.securityfocus.com/bid/14678 - http://www.debian.org/security/2006/dsa-1063 - http://www.securityfocus.com/archive/1/500406/100/0/threaded
CVE ID: CVE-2005-2782 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in al_initialize.php for AutoLinks Pro 2.1 allows remote attackers to execute arbitrary PHP code via an "ftp://" URL in the alpath parameter, which bypasses the incomplete blacklist that only checks for "http" and "https" URLs. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112535379716486&w=2 - http://www.securityfocus.com/bid/14686 - http://secunia.com/advisories/16620/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22061
CVE ID: CVE-2005-2783 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.00.107 and earlier allows remote attackers to inject arbitrary web script or HTML via nested, malformed URL BBCode tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22056 - http://marc.info/?l=bugtraq&m=112533836103267&w=2 - http://secunia.com/advisories/16632/
CVE ID: CVE-2005-2784 State: PUBLISHED Published: 2005-09-02T04:00:00 Last Updated: 2024-08-07T22:45:02.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the login function for the administration login panel in cosmoshop 8.10.78 allows remote attackers to execute arbitrary SQL commands and bypass authentication via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16625/ - http://marc.info/?l=bugtraq&m=112534390600093&w=2 - http://www.securityfocus.com/bid/14689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22079