Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-2665 State: PUBLISHED Published: 2006-09-14T21:00:00 Last Updated: 2024-08-08T01:36:25.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport software in HP-UX B.11.00, B.11.04, and B.11.11 before 20040628 allows local users to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=PSD_HPSBUX01054 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5694 - http://h20000.www2.hp.com/bizsupport/TechSupport
y.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5694 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=PSD_HPSBUX01054 - http://secunia.com/advisories/11970
CVE ID: CVE-2004-2666 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-08T01:36:25.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mantis before 20041016 provides a complete Issue History (Bug History) in the web interface regardless of view_history_threshold, which allows remote attackers to obtain sensitive information (private bug details) by visiting a bug's web page. Additional Analyst Notes: - CVE Program Container: References: - http://mantisbt.cvs.sourceforge.net/mantisbt/mantisbt/history_inc.php?r1=1.24&r2=1.25 - http://mantisbt.cvs.sourceforge.net/mantisbt/mantisbt/history_inc.php?view=log - http://bugs.mantisbugtracker.com/view.php?id=4724
CVE ID: CVE-2004-2667 State: PUBLISHED Published: 2006-12-29T11:00:00Z Last Updated: 2024-09-16T21:56:36.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Lotus Domino 6.0.x before 6.0.4 and 6.5.x before 6.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/displayvuln.php?osvdb_id=7268 - http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21171253 - http://secunia.com/advisories/11925
CVE ID: CVE-2004-2668 State: PUBLISHED Published: 2006-12-29T11:00:00Z Last Updated: 2024-09-16T17:38:33.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Interchange before 4.8.9 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/7140 - http://ftp.icdevgroup.org/interchange/4.8/WHATSNEW
CVE ID: CVE-2004-2669 State: PUBLISHED Published: 2006-12-29T11:00:00 Last Updated: 2024-08-08T01:36:25.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote attackers to execute arbitrary SQL commands or obtain the installation path via parameters including (1) s, w, and d in users.php, (2) id in comments.php, (3) rusername in auth.php, or (4) h in plug.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17912 - http://www.neocrome.net/index.php?m=single&id=91 - http://www.osvdb.org/11300 - http://www.securityfocus.com/bid/11569 -
http://www.neocrome.net/index.php?m=single&id=91 - http://www.osvdb.org/11300 - http://www.securityfocus.com/bid/11569 - http://secunia.com/advisories/13034 - http://www.osvdb.org/11299 - http://www.osvdb.org/11301 - http://securitytracker.com/id?1012015 - http://www.neocrome.net/page.php?id=1573 - http://www.ptsecurity.ru/advisory.asp - http://www.osvdb.org/11302
CVE ID: CVE-2004-2670 State: PUBLISHED Published: 2007-01-05T02:00:00 Last Updated: 2024-08-08T01:36:25.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in mod.php in eNdonesia 8.3 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter in a viewcat operation or (2) the query parameter in a search operation in the publisher module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/370855 - http://secunia.com/advisories/12231 - http://echo.or.id/adv/adv02-y3dips-2004.txt - http://securitytracker.com/id?1010864 - http://www.securityfocus.com/b
1 - http://echo.or.id/adv/adv02-y3dips-2004.txt - http://securitytracker.com/id?1010864 - http://www.securityfocus.com/bid/8506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13041 - http://www.securityfocus.com/bid/10856
CVE ID: CVE-2004-2671 State: PUBLISHED Published: 2007-01-05T02:00:00 Last Updated: 2024-08-08T01:36:25.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod.php in eNdonesia 8.3 allows remote attackers to obtain sensitive information via certain direct requests, and certain requests with invalid parameter values, which reveal the path in various error messages, as demonstrated by the (1) mod and (2) cid parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/370855 - http://secunia.com/advisories/12231 - http://echo.or.id/adv/adv02-y3dips-2004.txt - http://securitytracker.com/id?1010864 - http://www.securityfocus.com/
31 - http://echo.or.id/adv/adv02-y3dips-2004.txt - http://securitytracker.com/id?1010864 - http://www.securityfocus.com/bid/8507 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13042
CVE ID: CVE-2004-2672 State: PUBLISHED Published: 2007-01-09T20:00:00Z Last Updated: 2024-09-16T19:14:52.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ArGoSoft FTP server before 1.4.2.2 allows attackers to upload .lnk files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx
CVE ID: CVE-2004-2673 State: PUBLISHED Published: 2007-01-09T21:00:00 Last Updated: 2024-08-08T01:36:25.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in ArGoSoft FTP Server before 1.4.1.6 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a SITE ZIP command with a long first or second argument, or (2) a SITE COPY with a long argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/11334 - http://www.securityfocus.com/bid/9770 - http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx - http://secunia.com/advisories/11002 - http://www.securiteam.com/wind
.argosoft.com/rootpages/FtpServer/ChangeList.aspx - http://secunia.com/advisories/11002 - http://www.securiteam.com/windowsntfocus/5RP010KCAO.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15410
CVE ID: CVE-2004-2674 State: PUBLISHED Published: 2007-01-09T21:00:00 Last Updated: 2024-08-08T01:36:25.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to determine the existence of arbitrary files via ".." sequences in the SITE UNZIP argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15411 - http://www.securityfocus.com/bid/9770 - http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx - http://secunia.com/advisories/11002 - http://www.securiteam.com/windowsntfocus/5RP010KCAO.html - http://w
ngeList.aspx - http://secunia.com/advisories/11002 - http://www.securiteam.com/windowsntfocus/5RP010KCAO.html - http://www.osvdb.org/11333
CVE ID: CVE-2004-2675 State: PUBLISHED Published: 2007-01-09T21:00:00 Last Updated: 2024-08-08T01:36:25.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service (crash) via a SITE PASS command with a long password parameter, which causes the database to be corrupted. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9770 - http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx - http://secunia.com/advisories/11002 - http://www.securiteam.com/windowsntfocus/5RP010KCAO.html - http://www.osvdb.org/11332 - https://exchange.xforce.ibmcloud.c
tp://www.securiteam.com/windowsntfocus/5RP010KCAO.html - http://www.osvdb.org/11332 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15412
CVE ID: CVE-2004-2676 State: PUBLISHED Published: 2007-01-29T16:00:00 Last Updated: 2024-08-08T01:36:25.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Spy Sweeper Enterprise Client (SpySweeperTray.exe) in WebRoot Spy Sweeper before 2.0 does not drop privileges when using the help functionality, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2004-14/advisory/ - http://secunia.com/advisories/13187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18628 - http://securitytracker.com/id?1012652 - http://www.osvdb.org/12534
CVE ID: CVE-2004-2677 State: PUBLISHED Published: 2007-02-22T22:00:00 Last Updated: 2024-08-08T01:36:25.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variables, possibly involving HELO and hostname arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11572 - http://securitytracker.com/id?1012016 - http://unl0ck.info/advisories/qwik-smtpd.txt - http://secunia.com/advisories/13037 - https://ex
tracker.com/id?1012016 - http://unl0ck.info/advisories/qwik-smtpd.txt - http://secunia.com/advisories/13037 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17917 - http://www.vupen.com/english/advisories/2007/0687 - http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch - http://www.securityfocus.com/archive/1/460600/100/0/threaded
CVE ID: CVE-2004-2678 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-08T01:36:25.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP Tru64 UNIX 5.1B PK2(BL22) and PK3(BL24), and 5.1A PK6(BL24), when using IPsec/IKE (Internet Key Exchange) with Certificates, allows remote attackers to gain privileges via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/tru64/2004-q1/0004.html - http://securitytracker.com/id?1009329 - http://www.securityfocus.com/bid/9803 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15397 - http://archives.neohapsis.com/arc
urityfocus.com/bid/9803 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15397 - http://archives.neohapsis.com/archives/tru64/2004-q1/0004.html
CVE ID: CVE-2004-2679 State: PUBLISHED Published: 2007-02-27T02:00:00 Last Updated: 2024-08-08T01:36:25.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Exchange (IKE) with a certain Vendor ID payload that causes Firewall-1 to return a response containing version and other information. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0477.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16434 - http://www.nta-monitor.com/news/checkpoint2004/index.htm - h
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/16434 - http://www.nta-monitor.com/news/checkpoint2004/index.htm - http://www.securityfocus.com/bid/10558
CVE ID: CVE-2004-2680 State: PUBLISHED Published: 2007-03-04T23:00:00 Last Updated: 2024-08-08T01:36:25.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_python (libapache2-mod-python) 3.1.4 and earlier does not properly handle when output filters process more than 16384 bytes, which can cause filter.read to return portions of previously freed memory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24424 - http://www.ubuntu.com/usn/usn-430-1 - http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3cEB279100-9000-11D8-8B4E-000A95B0D772%40pixar.com%3e - http://www.securityfocus.com/archive/1/462185/100/0/threaded
ox/%3cEB279100-9000-11D8-8B4E-000A95B0D772%40pixar.com%3e - http://www.securityfocus.com/archive/1/462185/100/0/threaded - http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3c6DCA8C14-8FFA-11D8-8B4E-000A95B0D772%40pixar.com%3e - http://www.vupen.com/english/advisories/2007/0846 - http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3cCD485B27-8F3E-11D8-934B-000A95B0D772%40pixar.com%3e - https://launchpad.net/bugs/89308 - http://svn.apache.org/viewvc/httpd/mod_python/trunk/src/filterobject.c?r1=102649&r2=103561&pathrev=103561 - https://issues.rpath.com/browse/RPL-1105 - http://secunia.com/advisories/24418 - http://www.securityfocus.com/bid/22849 - https:
issues.rpath.com/browse/RPL-1105 - http://secunia.com/advisories/24418 - http://www.securityfocus.com/bid/22849 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14751
CVE ID: CVE-2004-2681 State: PUBLISHED Published: 2007-07-05T20:00:00 Last Updated: 2024-08-08T01:36:25.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: PeerSec MatrixSSL before 1.1 caches session keys for an indefinitely long time, which might make it easier for remote attackers to hijack a session. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40483 - http://www.matrixssl.org/archives/000076.html
CVE ID: CVE-2004-2682 State: PUBLISHED Published: 2007-07-05T20:00:00Z Last Updated: 2024-09-16T18:38:51.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: PeerSec MatrixSSL before 1.1 does not implement RSA blinding, which allows context-dependent attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal), a related issue to CVE-2003-0147. Additional Analyst Notes: - CVE Program Container: References: - http://www.matrixssl.org/archives/000075.html
CVE ID: CVE-2004-2683 State: PUBLISHED Published: 2007-08-20T19:00:00Z Last Updated: 2024-09-16T16:23:46.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the %XML.Utils.SchemaServer class in InterSystems Cache' 5.0 allows attackers to access arbitrary files on a server. Additional Analyst Notes: - CVE Program Container: References: - http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/809f96becb84b6da/938000c0f3d48a48 - http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/53db65fbb73fc254/37358d45de1cc583
CVE ID: CVE-2004-2684 State: PUBLISHED Published: 2007-08-20T19:00:00Z Last Updated: 2024-09-16T22:51:26.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the %template package in InterSystems Cache' 5.0 allows attackers to access certain files on a server, including (1) cache.key and (2) cache.dat, related to .csp files under (a) Dev\studio\templates and (b) Devuser\studio\templates. Additional Analyst Notes: - CVE Program Container: References: - http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/7af3237a57e97f14/da52318590c68c75 - http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/cda052864061
7a57e97f14/da52318590c68c75 - http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/cda052864061faf7/b1c4ad61ca27c514
CVE ID: CVE-2004-2685 State: PUBLISHED Published: 2007-09-06T19:00:00 Last Updated: 2024-08-08T01:36:25.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long address in a ping (p) command to the Telnet proxy service, a different vector than CVE-2004-2416. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/621 - https://www.exploit-db.com/exploits/4360 - http://secunia.com/advisories/13085 - http://www.youngzsoft.net/ccproxy/whatsnew.htm
CVE ID: CVE-2004-2686 State: PUBLISHED Published: 2007-09-23T23:00:00 Last Updated: 2024-08-08T01:36:25.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the vfs_getvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load arbitrary kernel modules via crafted (1) mount or (2) sysfs system calls. NOTE: this might be the same issue as CVE-2004-1767, but there are insufficient details to be sure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9962 - http://seclists.org/bugtraq/2004/Apr/0081.html - http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-04/0297.html - https://ova
.org/bugtraq/2004/Apr/0081.html - http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-04/0297.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1381 - http://www.immunitysec.com/downloads/solaris_kernel_vfs.sxw.pdf - http://securitytracker.com/id?1008833
CVE ID: CVE-2004-2687 State: PUBLISHED Published: 2007-09-23T23:00:00Z Last Updated: 2024-09-16T18:40:06.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2005-03/0183.html - http://www.osvdb.org/13378 - http://lists.samba.org/archive/distcc/2004q3/002562.html - http://www.metasploit.org/projects/Framework/exploits.html#distcc_ex
lists.samba.org/archive/distcc/2004q3/002562.html - http://www.metasploit.org/projects/Framework/exploits.html#distcc_exec - http://distcc.samba.org/security.html - http://lists.samba.org/archive/distcc/2004q3/002550.html
CVE ID: CVE-2004-2688 State: PUBLISHED Published: 2007-10-06T20:00:00 Last Updated: 2024-08-08T01:36:25.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter. NOTE: this issue might overlap vector 3 in CVE-2006-3358. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11346 - http://securitytracker.com/alerts/2004/Apr/1009740.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15837 - http://archives.neohapsis.com/archives/bugtraq/2004-04/0161.html
CVE ID: CVE-2004-2689 State: PUBLISHED Published: 2007-10-06T20:00:00 Last Updated: 2024-08-08T01:36:25.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autorized=admin; root=admin" value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15836 - http://secunia.com/advisories/11346 - http://securitytracker.com/alerts/2004/Apr/1009740.html - http://archives.neohapsis.com/archives/bugtraq/2004-04/0161.html
CVE ID: CVE-2004-2690 State: PUBLISHED Published: 2007-10-06T20:00:00 Last Updated: 2024-08-08T01:36:25.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbitrary code instead of video files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15838 - http://securitytracker.com/alerts/2004/Apr/1009740.html - http://archives.neohapsis.com/archives/bugtraq/2004-04/0161.html
CVE ID: CVE-2004-2691 State: PUBLISHED Published: 2007-10-06T20:00:00 Last Updated: 2024-08-08T01:36:25.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of service (device reset) via a crafted request to the web management interface. NOTE: the provenance of this information is unknown; details are obtained from third party reports. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16497 - http://www.osvdb.org/7246 - http://secunia.com/advisories/11934
CVE ID: CVE-2004-2692 State: PUBLISHED Published: 2007-10-06T20:00:00 Last Updated: 2024-08-08T01:36:25.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands via a backtick operator, which is not handled using the php_escape_shell_cmd function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16498 - http://seclists.org/fulldisclosure/2004/Jul/0347.html - http://www.osvdb.org/7243 - http://secunia.com/advisories/11928 - http://seclists.org/fulldisclosure/20
/Jul/0347.html - http://www.osvdb.org/7243 - http://secunia.com/advisories/11928 - http://seclists.org/fulldisclosure/2004/Jul/0357.html - http://kyberdigi.cz/projects/execdir/english.html - http://seclists.org/fulldisclosure/2004/Jul/0350.html - http://www.securityfocus.com/bid/10598
CVE ID: CVE-2004-2693 State: PUBLISHED Published: 2007-10-06T20:00:00 Last Updated: 2024-08-08T01:36:25.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP-UX B.11.00 and B.11.11 with B6848AB GTK+ Support Libraries installed uses insecure directory permissions, which allows local users to gain privileges via files in /opt/gnome/src/GLib/. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6105 - http://secunia.com/advisories/11615 - http://www.osvdb.org/6120 - http://marc.info/?l=bugtraq&m=108455531606056&w=2 - http://www.hp.com/products1/unix/java/mozilla/HPSBUX01034.html
CVE ID: CVE-2004-2694 State: PUBLISHED Published: 2007-10-06T20:00:00 Last Updated: 2024-08-08T01:36:25.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitrary sources into the Outlook context, and facilitate phishing attacks via a "BASE HREF" with the target set to "_top". Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108448627120764&w=2 - http://secunia.com/advisories/11607 - http://www.osvdb.org/6121
CVE ID: CVE-2004-2695 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T01:36:25.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in Jelsoft vBulletin 3.0 through 3.0.3 allows remote attackers to execute arbitrary SQL statements via the x_invoice_num parameter. NOTE: this issue might be related to CVE-2006-4267. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12531/ - http://www.securityfocus.com/bid/11193 - http://www.vbulletin.com/forum/showthread.php?t=124876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
d/11193 - http://www.vbulletin.com/forum/showthread.php?t=124876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17365 - http://www.vbulletin.com/forum/bugs.php?do=view&bugid=3379 - http://www.securiteam.com/unixfocus/5BP0E15E0M.html