Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-2088 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Notification (DSN) where the original email is not included in the bounce message. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1009042 - http://secunia.com/advisories/10855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15192 - http://www.sophos.com/support/news/#mime-378 - http://www.securityfocus.com/bid/9650
CVE ID: CVE-2004-2089 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Matrix FTP Server allows remote attackers to cause a denial of service (crash) by logging in using four spaces as the username and password and then issuing a LIST command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15075 - http://securitytracker.com/id?1008970
CVE ID: CVE-2004-2090 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPicture method, which returns an error code if the file does not exist. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9611 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016881.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15078 - http://secunia.com/advisories/10820
CVE ID: CVE-2004-2091 State: PUBLISHED Published: 2005-05-19T04:00:00Z Last Updated: 2024-09-16T17:49:25.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Baseline Security Analyzer (MBSA) 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit until the system is rebooted, possibly giving the administrator a false sense of security. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9634 - http://www.securityfocus.com/archive/1/353324
CVE ID: CVE-2004-2092 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: eTrust InoculateIT for Linux 6.0 uses insecure permissions for multiple files and directories, including the application's registry and tmp directories, which allows local users to delete, modify, or examine sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10833 - http://www.excluded.org/advisories/advisory10.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/15103 - http://marc.info/?l=bugtraq&m=107635584431518&w=2 - http://www.osvdb.org/3896 - http:
mcloud.com/vulnerabilities/15103 - http://marc.info/?l=bugtraq&m=107635584431518&w=2 - http://www.osvdb.org/3896 - http://www.securityfocus.com/bid/9616
CVE ID: CVE-2004-2093 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the open_socket_out function in socket.c for rsync 2.5.7 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long RSYNC_PROXY environment variable. NOTE: since rsync is not setuid, this issue does not provide any additional privileges beyond those that are already available to the user. Therefore this issue may be REJECTED in the future. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vuln-dev/20
ure. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vuln-dev/2004-q1/0091.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15108
CVE ID: CVE-2004-2094 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebcamXP 1.06.945 allows remote attackers to inject arbitrary HTML or web script as other users via a URL that contains the script. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14904 - http://marc.info/?l=bugtraq&m=107471195326270&w=2 - http://www.securityfocus.com/bid/9465
CVE ID: CVE-2004-2095 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Honeyd before 0.8 replies to TCP packets with the SYN and RST flags set, which allows remote attackers to identify IP addresses that are being simulated by Honeyd. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1008818 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14905 - http://secunia.com/advisories/10695 - http://www.osvdb.org/3690 - http://marc.info/?l=bugtraq&m=107471181426047&w=2 - http://www.securityfocus.com/bid/9464 - http://marc.info/?l=bugtraq&m=1074730951
info/?l=bugtraq&m=107471181426047&w=2 - http://www.securityfocus.com/bid/9464 - http://marc.info/?l=bugtraq&m=107473095118505&w=2 - http://secunia.com/advisories/10694
CVE ID: CVE-2004-2096 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mephistoles httpd 0.6.0 final allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the URL. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107470433714179&w=2 - http://www.osvdb.org/3689 - http://www.securityfocus.com/bid/9470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14899 - http://secunia.com/advisories/10693
CVE ID: CVE-2004-2097 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple scripts on SuSE Linux 9.0 allow local users to overwrite arbitrary files via a symlink attack on (1) /tmp/fvwm-bug created by fvwm-bug, (2) /tmp/wmmenu created by wm-oldmenu2new, (3) /tmp/rates created by x11perfcomp, (4) /tmp/xf86debug.1.log created by xf86debug, (5) /tmp/.winpopup-new created by winpopup-send.sh, or (6) /tmp/initrd created by lvmcreate_initrd. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107478920006258&w=2 - http://marc.info/?l=bugtraq&m=10746158241
m Container: References: - http://marc.info/?l=bugtraq&m=107478920006258&w=2 - http://marc.info/?l=bugtraq&m=107461582413923&w=2 - http://securitytracker.com/id?1008781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14963 - http://www.securityfocus.com/bid/9457
CVE ID: CVE-2004-2098 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the banner engine (TBE) 5.0 allows remote attackers to execute arbitrary script as other users via the HTML banner view/preview capability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14911 - http://marc.info/?l=bugtraq&m=107479071808330&w=2 - http://www.securityfocus.com/bid/9472
CVE ID: CVE-2004-2099 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (servers) to execute arbitrary code via long (1) gamename, (2) gamever, (3) hostname, (4) gametype, (5) mapname or (6) gamemode commands. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14909 - http://marc.info/?l=bugtraq&m=107479094508691&w=2 - http://aluigi.altervista.org/adv/nfshp2cbof-adv.txt - http://www.securityfocus.com/bid/9473
CVE ID: CVE-2004-2100 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: GeoHttpServer, when configured to authenticate users, allows remote attackers to bypass authentication and access unauthorized files via a URL that contains %0a%0a (encoded newlines). Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107480261825214&w=2
CVE ID: CVE-2004-2101 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sysinfo script in GeoHttpServer allows remote attackers to cause a denial of service (crash) via a long pwd parameter, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14913 - http://securitytracker.com/id?1008807 - http://marc.info/?l=bugtraq&m=107480261825214&w=2
CVE ID: CVE-2004-2102 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in FREESCO 2.05, a modified version of thttpd, allows remote attackers to inject arbitrary web script or HTML via the test parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107480309925905&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14916
CVE ID: CVE-2004-2103 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to process arbitrary script or HTML as other users via (1) a malformed request for a Perl program with script in the filename, (2) the User.id parameter to the webacc servlet, (3) the GWAP.version parameter to webacc, or (4) a URL request for a .bas file with script in the filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4949 - https://exchange.xforce.ibmcloud.com/v
Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14919 - http://marc.info/?l=bugtraq&m=107487862304440&w=2 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10091529.htm
CVE ID: CVE-2004-2104 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, via a direct request to (1) snoop.jsp, (2) SnoopServlet, (3) env.bas, or (4) lcgitest.nlm. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3720 - http://marc.info/?l=bugtraq&m=107487862304440&w=2 - http://secunia.com/advisories/10711 - http://www.osvdb.org/3721 - http://www.osvdb.org/4952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1
s/10711 - http://www.osvdb.org/3721 - http://www.osvdb.org/4952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14921 - http://www.osvdb.org/3722 - http://www.securityfocus.com/bid/9479 - http://www.osvdb.org/3715
CVE ID: CVE-2004-2105 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: The webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to read arbitrary .htt files via a full pathname in the error parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107487862304440&w=2
CVE ID: CVE-2004-2106 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to list directories via a direct request to (1) /com/, (2) /com/novell/, (3) /com/novell/webaccess, or (4) /ns-icons/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/21749 - http://www.osvdb.org/13404 - http://marc.info/?l=bugtraq&m=107487862304440&w=2 - http://www.osvdb.org/13403 - http://www.osvdb.org/13402
CVE ID: CVE-2004-2107 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Finjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands on TCP port 3141, which allows remote attackers to use the finjan-parameter-type header to (1) restart the service, (2) use the getlastmsg command to view log information, or (3) use the online command to force a policy update from the database server. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10714 - http://marc.info/?l=bugtraq&m=107522480913629&w=2 - http://archives.neohapsis.co
- http://secunia.com/advisories/10714 - http://marc.info/?l=bugtraq&m=107522480913629&w=2 - http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0929.html - http://marc.info/?l=bugtraq&m=107487999406339&w=2 - http://www.securityfocus.com/bid/9478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14934
CVE ID: CVE-2004-2108 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute arbitrary SQL commands via certain parameters to (1) search.asp, (2) browse.asp, (3) details.asp, (4) showcat.asp, (5) users.asp, (6) addtomylist.asp, (7) modline.asp, (8) cart.asp, or (9) newuser.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9481 - http://www.osvdb.org/3702 - http://www.osvdb.org/3701 - http://marc.info/?l=bugtraq&m=107488132208229&w=2 - http://securitytracker.co
vdb.org/3702 - http://www.osvdb.org/3701 - http://marc.info/?l=bugtraq&m=107488132208229&w=2 - http://securitytracker.com/alerts/2004/Jan/1008837.html - http://www.osvdb.org/3699 - http://www.osvdb.org/3706 - http://secunia.com/advisories/10704 - http://www.osvdb.org/3705 - http://www.s-quadra.com/advisories/Adv-20040123.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/14922 - http://www.osvdb.org/3703 - http://www.osvdb.org/3698 - http://www.osvdb.org/3704 - http://www.osvdb.org/3700
CVE ID: CVE-2004-2109 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) imagezoom.asp or (2) recommend.asp in Q-Shop allow remote attackers to execute arbitrary script and steal the user session ID via Javascript in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9480 - http://www.osvdb.org/3697 - http://marc.info/?l=bugtraq&m=107488132208229&w=2 - http://secunia.com/advisories/10704 - http://www.osvdb.org/3696 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14923
CVE ID: CVE-2004-2110 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in register.php in Phorum before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the hide_email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://phorum.org/ - http://marc.info/?l=bugtraq&m=107487971405960&w=2
CVE ID: CVE-2004-2111 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14931 - http://www.securityfocus.com/bid/9483 - http://securitytracker.com/id?1008841 - http://www.securityfocus.com/bid/9675 - http://marc.info/?l=bugtraq&m=107513654005840&w=2 - http://archives.neohapsis.com/archives/bugtraq/2004-01/0249.html
CVE ID: CVE-2004-2112 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in BremsServer 1.2.4 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14954 - http://www.osvdb.org/3755 - http://marc.info/?l=bugtraq&m=107513747107031&w=2 - http://secunia.com/advisories/10731 - http://www.securityfocus.com/bid/9493 - http://www.securitytracker.com/id?1008853
CVE ID: CVE-2004-2113 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in BremsServer 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9491 - http://marc.info/?l=bugtraq&m=107513747107031&w=2 - http://www.osvdb.org/3754 - http://secunia.com/advisories/10731 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14953 - http://www.securitytracker.com/id?1008853
CVE ID: CVE-2004-2114 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based and heap-based buffer overflows in ProxyNow! 2.75 and earlier allow remote attackers to execute arbitrary code via a GET request with a long ftp:// URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14955 - http://marc.info/?l=bugtraq&m=107515550931508&w=2 - http://www.securityfocus.com/bid/9500
CVE ID: CVE-2004-2115 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14930 - http://marc.info/?l=bugtraq&m=107496560106967&w=2 - http://www.securityfocus.com/bid/9484
CVE ID: CVE-2004-2116 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Tiny Server 1.1 allows remote attackers to read or download arbitrary files via a .. (dot dot) in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/99048 - http://secunia.com/advisories/10707 - http://marc.info/?l=bugtraq&m=107496530806730&w=2 - http://www.autistici.org/fdonato/advisory/tinyServer1.1%5B1.0.5%5D-adv.txt - http://packetstormsecurity.com/files/129320/Tiny-Server-1.1.9-Arbitrary-File-Disclosure.html -
1.1%5B1.0.5%5D-adv.txt - http://packetstormsecurity.com/files/129320/Tiny-Server-1.1.9-Arbitrary-File-Disclosure.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/14927 - http://www.osvdb.org/3708 - http://www.securityfocus.com/bid/9485
CVE ID: CVE-2004-2117 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via malformed HTTP requests such as (1) a GET request without the HTTP version (HTTP/1.1), or (2) a request without GET or the HTTP version. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10707 - http://marc.info/?l=bugtraq&m=107496530806730&w=2 - http://www.autistici.org/fdonato/advisory/tinyServer1.1%5B1.0.5%5D-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/14928 - http://www.osvdb.org/
ry/tinyServer1.1%5B1.0.5%5D-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/14928 - http://www.osvdb.org/3709 - http://www.securityfocus.com/bid/9485
CVE ID: CVE-2004-2118 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via a GET request with a long filename, possibly due to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10707 - http://marc.info/?l=bugtraq&m=107496530806730&w=2 - http://www.autistici.org/fdonato/advisory/tinyServer1.1%5B1.0.5%5D-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/14928 - http://www.securityfocus.com/bid/9485
CVE ID: CVE-2004-2119 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Tiny Server 1.1 allows remote attackers to inject arbitrary web script or HTML via the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3710 - http://secunia.com/advisories/10707 - http://marc.info/?l=bugtraq&m=107496530806730&w=2 - http://www.autistici.org/fdonato/advisory/tinyServer1.1%5B1.0.5%5D-adv.txt - http://www.securityfocus.com/bid/9485 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14929
CVE ID: CVE-2004-2120 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reptile Web Server allows remote attackers to cause a denial of service (CPU consumption) via multiple incomplete GET requests without the HTTP version. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1008842 - http://marc.info/?l=bugtraq&m=107497355713434&w=2 - http://www.securityfocus.com/bid/9482 - http://www.autistici.org/fdonato/advisory/reptilewsDailyVersion-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/14932
CVE ID: CVE-2004-2121 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to read and download arbitrary files via (1) multi-dot "......" sequences, or (2) "%5c%2e%2e" (encoded "\..") sequences, in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9486 - http://securitytracker.com/id?1008840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14948 - http://marc.info/?l=bugtraq&m=107497413413907&w=2
CVE ID: CVE-2004-2122 State: PUBLISHED Published: 2005-05-27T04:00:00 Last Updated: 2024-08-08T01:15:01.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in intraforum_db.cgi in Intra Forum allows remote attackers to inject arbitrary web script or HTML via the (1) use_last_read or (2) forum parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1008839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14933 - http://marc.info/?l=bugtraq&m=107497803617071&w=2