Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
re.oval%3Adef%3A3322 - http://www.kb.cert.org/vuls/id/866472 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10267 - http://rhn.redhat.com/errata/RHSA-2004-350.html - http://www.trustix.net/errata/2004/0045/ - http://www.debian.org/security/2004/dsa-543 - http://www.us-cert.gov/cas/techalerts/TA04-247A.html - http://www.gentoo.org/security/en/glsa/glsa-200409-09.xml - http://marc.info/?l=bugtraq&m=109508872524753&w=2 - http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt - http://www.securityfocus.com/bid/11078
CVE ID: CVE-2004-0644 State: PUBLISHED Published: 2004-09-10T04:00:00 Last Updated: 2024-08-08T00:24:26.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17160 - http://www.securityfocus.com/bid/11079 - http://www.kb.cert.org/vuls/id/550464 - http://rhn.redhat.com/errata/RHSA-2004-350.html - https:
tyfocus.com/bid/11079 - http://www.kb.cert.org/vuls/id/550464 - http://rhn.redhat.com/errata/RHSA-2004-350.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2139 - http://www.trustix.net/errata/2004/0045/ - http://www.debian.org/security/2004/dsa-543 - http://www.us-cert.gov/cas/techalerts/TA04-247A.html - http://www.gentoo.org/security/en/glsa/glsa-200409-09.xml - http://marc.info/?l=bugtraq&m=109508872524753&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10014 - http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-003-asn1.txt
CVE ID: CVE-2004-0645 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:26.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-579 - http://www.freebsd.org/ports/portaudit/7a5430df-d562-11d8-b479-02e0185c0b53.html - http://www.osvdb.org/7761 - http://security.gentoo.org/glsa/glsa-200407-11.xml - http://www.mandrakesecure.net/en/advisories/advisory.ph
.org/7761 - http://security.gentoo.org/glsa/glsa-200407-11.xml - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:077 - http://www.idefense.com/application/poi/display?id=115&type=vulnerabilities - https://exchange.xforce.ibmcloud.com/vulnerabilities/16660 - http://cpan.cybercomm.nl/pub/gentoo-portage/app-text/wv/files/wv-1.0.0-fix_overflow.patch - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000863 - https://bugzilla.fedora.us/show_bug.cgi?id=1906
CVE ID: CVE-2004-0646 State: PUBLISHED Published: 2004-11-19T05:00:00 Last Updated: 2024-08-08T00:24:27.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/377194 - http://secunia.com/advisories/12647/ - http://www.securityfocus.com/bid/11245 - http://www.kb.cert.org/vuls/id/990200 - https://exchange.
m/advisories/12647/ - http://www.securityfocus.com/bid/11245 - http://www.kb.cert.org/vuls/id/990200 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17485 - http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html - http://www.macromedia.com/devnet/security/security_zone/mpsb04-09.html
CVE ID: CVE-2004-0647 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16651 - http://lists.shorewall.net/pipermail/shorewall-announce/2004-June/000385.html - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:080 - http://www.gentoo.org/security/en/glsa/glsa-200407-07.xml
CVE ID: CVE-2004-0648 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbitrary programs via a URI referencing the shell: protocol. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/projects/security/known-vulnerabilities.html - http://www.kb.cert.org/vuls/id/927014 - http://www.ciac.org/ciac/bulletins/o-175.shtml - http://www.mozilla.org/security/shell.html - http://secunia.com/advisories/12027 - http://lists.grok.org.uk/pipermail/full-disclosur
ozilla.org/security/shell.html - http://secunia.com/advisories/12027 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023573.html - http://marc.info/?l=bugtraq&m=108938712815719&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16655
CVE ID: CVE-2004-0649 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in write_packet in control.c for l2tpd may allow remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-530 - http://marc.info/?l=bugtraq&m=108640917925735&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16326 - http://security.gentoo.org/glsa/glsa-200407-17.xml
CVE ID: CVE-2004-0650 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:26.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: UploadServlet in Cisco Collaboration Server (CCS) running ServletExec before 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/718896 - http://www.cisco.com/warp/public/707/cisco-sa-20040630-CCS.shtml - http://www.securityfocus.com/bid/10639 - http://secunia.com/advisories/11979/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/16553
CVE ID: CVE-2004-0651 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:26.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Sun Java Runtime Environment (JRE) 1.4.2 through 1.4.2_03 allows remote attackers to cause a denial of service (virtual machine hang). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10301 - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57555 - http://marc.info/?l=bugtraq&m=108559041910233&w=2 - http://www.kb.cert.org/vuls/id/118558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16085 - http://www.securityfocus.com/advisories/6773
CVE ID: CVE-2004-0652 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:26.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly accessing certain internal methods. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10133 - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_55.00.jsp - http://www.osvdb.org/5296 - http://securitytracker.com/id?1009766 - https://exchange.xforce.ibmcloud.com/vulnera
0.jsp - http://www.osvdb.org/5296 - http://securitytracker.com/id?1009766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15865 - http://secunia.com/advisories/11359 - http://www.kb.cert.org/vuls/id/352110
CVE ID: CVE-2004-0653 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" module with the debug feature enabled, records passwords in plaintext, which could allow local users to gain other user's passwords by reading log files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10606 - http://www.ciac.org/ciac/bulletins/o-172.shtml - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101519-1 - https://oval.cisecurity.org/repository/se
72.shtml - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101519-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2065 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A255 - http://secunia.com/advisories/11940/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/16450 - http://www.kb.cert.org/vuls/id/523710 - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57587
CVE ID: CVE-2004-0654 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:26.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the Basic Security Module (BSM), when configured to audit either the Administrative (ad) or the System-Wide Administration (as) audit class in Solaris 7, 8, and 9, allows local users to cause a denial of service (kernel panic). Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2426 - http://www.kb.cert.org/vuls/id/901582 - http://www.securityfocus.com/bid/10594 - https://exchange.xforce.ibmcloud.com/vu
http://www.kb.cert.org/vuls/id/901582 - http://www.securityfocus.com/bid/10594 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16483 - http://secunia.com/advisories/11930/ - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57497
CVE ID: CVE-2004-0655 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: eupdatedb in esearch 0.6.1 and earlier allows local users to create arbitrary files via a symlink attack on the esearchdb.py.tmp temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10644 - http://www.gentoo.org/security/en/glsa/glsa-200407-01.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/16584
CVE ID: CVE-2004-0656 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The accept_client function in PureFTPd 1.0.18 and earlier allows remote attackers to cause a denial of service by exceeding the maximum number of connections. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16611 - http://www.pureftpd.org/ - http://www.gentoo.org/security/en/glsa/glsa-200407-04.xml
CVE ID: CVE-2004-0657 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15406 - http://www.kb.cert.org/vuls/id/584606 - http://marc.info/?l=bugtraq&m=108922292425219&w=2
CVE ID: CVE-2004-0658 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:26.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the hpsb_alloc_packet function (incorrectly reported as alloc_hpsb_packet) in IEEE 1394 (Firewire) driver 2.4 and 2.6 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via the functions (1) raw1394_write, (2) state_connected, (3) handle_remote_request, or (4) hpsb_make_writebpacket. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16480 - http://marc.info/?l=bugtraq&m=108793792820740
CVE ID: CVE-2004-0659 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16532 - http://www.gentoo.org/security/en/glsa/glsa-200408-01.xml - http://www.securityfocus.com/bid/10615 - http://marc.info/?l=bugtraq&m=108844316930791&w=2
CVE ID: CVE-2004-0660 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:26.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in CuteNews 1.3.1 allows remote attackers to inject arbitrary script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16525 - http://www.swp-zone.org/archivos/advisory-06.txt - http://marc.info/?l=bugtraq&m=108844000409449&w=2
CVE ID: CVE-2004-0661 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers to cause a denial of service (IP lease depletion) via a DHCP request with the LEASETIME option set to -1, which makes the DHCP lease valid for thirteen or more years. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10621 - http://marc.info/?l=bugtraq&m=108844250013785&w=2 - http://www.osvdb.org/7294 - http://secunia.com/advisories/12018 - https://exchange.xforce.ibmcloud
108844250013785&w=2 - http://www.osvdb.org/7294 - http://secunia.com/advisories/12018 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16531 - http://www.securityfocus.com/archive/1/367485
CVE ID: CVE-2004-0662 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:26.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerPortal 1.x allows remote attackers to gain sensitive information via invalid or missing parameters in HTTP requests to (1) resize.php or (2) modules.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.swp-zone.org/archivos/advisory-07.txt - http://www.securityfocus.com/bid/10622 - http://marc.info/?l=bugtraq&m=108844362627811&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16529
CVE ID: CVE-2004-0663 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules.php in PowerPortal 1.x allows remote attackers to inject arbitrary script or HTML via the (1) id parameter to the (a) private_messages module; (2) search parameter to the (b) links and (c) content modules; and (3) files parameter to the gallery module. Additional Analyst Notes: - CVE Program Container: References: - http://www.swp-zone.org/archivos/advisory-07.txt - http://marc.info/?l=bugtraq&m=108844362627811&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16528
CVE ID: CVE-2004-0664 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in modules.php in PowerPortal 1.x allows remote attackers to list arbitrary directories via a .. (dot dot) in the files parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.swp-zone.org/archivos/advisory-07.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16530 - http://www.securityfocus.com/bid/10622 - http://marc.info/?l=bugtraq&m=108844362627811&w=2
CVE ID: CVE-2004-0665 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which reveals the path to the web server in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.swp-zone.org/archivos/advisory-08.txt - http://marc.info/?l=bugtraq&m=108844203121238&w=2 - http://www.securityfocus.com/bid/10618 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16526
CVE ID: CVE-2004-0666 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the POP3_readmsg function in popclient 3.0b6 allows remote attackers to cause a denial of service (application crash) via an e-mail message with a certain line length, which leads to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108852915403293&w=2 - http://www.securityfocus.com/bid/10625 - http://www.grok.org.uk/advisories/popclient.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16538 - http://lists.grok.org.uk/pipermail/full-
s/popclient.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16538 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/023147.html
CVE ID: CVE-2004-0667 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rule Set Based Access Control (RSBAC) 1.2.2 through 1.2.3 allows access to sys_creat, sys_open, and sys_mknod inside jails, which could allow local users to gain elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108879977120430&w=2 - http://marc.info/?l=bugtraq&m=108861182906067&w=2 - http://www.securityfocus.com/bid/10640 - http://www.rsbac.org/download/bugfixes/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/16552
CVE ID: CVE-2004-0668 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Access in Lotus Domino 6.5.1 allows remote attackers to cause a denial of service (server crash) via a large e-mail message, as demonstrated using a large image attachment. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108871093704307&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16596 - http://www.securityfocus.com/bid/10641
CVE ID: CVE-2004-0669 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino 6.5.0 and 6.5.1, with IMAP enabled, allows remote authenticated users to change their quota by using the IMAP setquota command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16575 - http://marc.info/?l=bugtraq&m=108869022708571&w=2 - http://www.securityfocus.com/bid/10642
CVE ID: CVE-2004-0670 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prestige 650HW-31 running Rompager 4.7 software allows remote attackers to cause a denial of service (device reboot) via a long password. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108862133005952&w=2 - http://www.securityfocus.com/bid/10638 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16547 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/023196.html
CVE ID: CVE-2004-0671 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brightmail Spamfilter 6.0 and earlier beta releases allows remote attackers to read mail from other users by modifying the id parameter in a viewMsgDetails.do request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108880205115802&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16609 - http://marc.info/?l=bugtraq&m=108981452101353&w=2 - http://www.securityfocus.com/bid/10657
CVE ID: CVE-2004-0672 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6 allows remote attackers to execute script as other users via (1) script that starts with %00 in the numOfExpressions parameter or (2) the mobjtype parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10645 - http://marc.info/?l=bugtraq&m=108881203114336&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16618
CVE ID: CVE-2004-0673 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:26.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers to execute arbitrary web script as other users via an invalid request that is echoed in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16602 - http://marc.info/?l=bugtraq&m=108880460730833&w=2 - http://www.securityfocus.com/bid/10648
CVE ID: CVE-2004-0674 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:26.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Enterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based Routing, allow remote attackers to cause a denial of service (crash) via a packet with the IP record route option set. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16616 - http://marc.info/?l=bugtraq&m=108886995627906&w=2 - http://www.enterasys.com/support/security/incidents/2004/07/11036.html
CVE ID: CVE-2004-0675 State: PUBLISHED Published: 2004-07-13T04:00:00 Last Updated: 2024-08-08T00:24:27.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote attackers to execute arbitrary web script via the cart32 parameter to a GetLatestBuilds command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16535 - http://www.securityfocus.com/bid/10617 - http://marc.info/?l=bugtraq&m=108887778628398&w=2 - http://drponidi.5u.com/advisory.htm