Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-1981 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T23:21:00.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the (1) sp_MSSetServerProperties or (2) sp_MSsetalertinfo stored procedures, which allows attackers to modify configuration including SQL server startup and alert settings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5604 - http://www.iss.net/security_center/static/10012.php - http://www.ngssoftware.com/advisories/mssql-sp_MSSetServerProperties.txt - http://seclists.org/lists/bugtraq/
0012.php - http://www.ngssoftware.com/advisories/mssql-sp_MSSetServerProperties.txt - http://seclists.org/lists/bugtraq/2002/Sep/0009.html
CVE ID: CVE-2002-1982 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T23:16:26.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote attackers to determine if a directory exists via a .. (dot dot) in the GET request, which returns different error messages depending on whether the directory exists or not. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5189 - http://www.iss.net/security_center/static/9530.php - http://www.securityfocus.com/archive/82/281274
CVE ID: CVE-2002-1983 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:33.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: The timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service (hang) and possibly execute arbitrary code by creating multiple timers with a 1-ms tick. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/298689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10550 - http://www.securityfocus.com/bid/6114
CVE ID: CVE-2002-1984 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T00:01:20.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.0.1 through 6.0 on Windows 2000 or Windows XP allows remote attackers to cause a denial of service (crash) via an OBJECT tag that contains a crafted CLASSID (CLSID) value of "CLSID:00022613-0000-0000-C000-000000000046". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5094 - http://seclists.org/bugtraq/2002/Jun/0303.html
CVE ID: CVE-2002-1985 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T20:02:12.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: iSMTP 5.0.1 allows remote attackers to cause a denial of service via a long "MAIL FROM" command, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.nii.co.in/vuln/ismtp.html - http://online.securityfocus.com/archive/1/299232 - http://www.iss.net/security_center/static/10577.php - http://www.securityfocus.com/bid/6151
CVE ID: CVE-2002-1986 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T04:00:18.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing dot ("."). Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0074.html - http://www.iss.net/security_center/static/10635.php - http://www.securityfocus.com/bid/6188
CVE ID: CVE-2002-1987 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T17:38:48.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in view_source.jsp in Resin 2.1.2 allows remote attackers to read arbitrary files via a "\.." (backslash dot dot). Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/277225 - http://www.securityfocus.com/bid/5031 - http://www.iss.net/security_center/static/9351.php
CVE ID: CVE-2002-1988 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T22:10:31.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Resin 2.1.1 allows remote attackers to cause a denial of service (memory consumption and hang) via a URL with long variables for non-existent resources. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/277232 - http://www.securityfocus.com/bid/5032 - http://www.iss.net/security_center/static/9352.php
CVE ID: CVE-2002-1989 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T20:51:43.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Resin 2.1.1 allows remote attackers to cause a denial of service (thread and connection consumption) via multiple URL requests containing the DOS 'CON' device name and a registered file extension such as .jsp or .xtp. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0108.html
CVE ID: CVE-2002-1990 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-17T00:05:41.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Resin 2.0.5 through 2.1.2 allows remote attackers to reveal physical path information via a URL request for the example Java class file HelloServlet. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9419.php - http://www.securityfocus.com/bid/5095 - http://online.securityfocus.com/archive/1/278747
CVE ID: CVE-2002-1991 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T03:43:33.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP file inclusion vulnerability in osCommerce 2.1 execute arbitrary commands via the include_file parameter to include_once.php. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/277312 - http://www.securityfocus.com/bid/5037 - http://www.iss.net/security_center/static/9369.php - http://www.oscommerce.com/about.php/news%2C72
CVE ID: CVE-2002-1992 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-17T04:14:57.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of service in IIS via (1) a long template file name or (2) a long HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9460.php - http://www.securityfocus.com/bid/5121 - http://www.macromedia.com/v1/handlers/index.cfm?ID=23161
CVE ID: CVE-2002-1993 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T22:30:44.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: webbbs_post.pl in WebBBS 4 and 5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the followup parameter. Additional Analyst Notes: - CVE Program Container: References: - http://cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00232.html - http://www.iss.net/security_center/static/9378.php - http://www.securityfocus.com/bid/5048
CVE ID: CVE-2002-1994 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T20:32:56.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: advserver.exe in Advanced Web Server (AdvServer) Professional 1.030000 allows remote attackers to cause a denial of service via multiple HTTP requests containing a single carriage return/line feed (CRLF) sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9410.php - http://elaboration.8bit.co.uk/projects/texts/advisories/AdvServer.DoS.txt - http://www.securityfocus.com/bid/5080 - http://online.securityfocus.com/archive/1/278181
CVE ID: CVE-2002-1995 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T20:17:42.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phptonuke.php for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the filnavn parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0048.html - http://www.iss.net/security_center/static/7837.php - http://www.securityfocus.com/bid/3807
CVE ID: CVE-2002-1996 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T03:43:33.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PostNuke 0.71 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name parameter in modules.php and (2) catid parameter in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8605.php - http://archives.neohapsis.com/archives/bugtraq/2002-03/0288.html - http://www.securityfocus.com/bid/4350 - http://archives.neohapsis.com/archives/bugtraq/2002-03/0299.html - http://sourceforge.net/trac
urityfocus.com/bid/4350 - http://archives.neohapsis.com/archives/bugtraq/2002-03/0299.html - http://sourceforge.net/tracker/index.php?func=detail&aid=524777&group_id=27927&atid=392228
CVE ID: CVE-2002-1997 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T03:43:33.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute arbitrary code via email attachments containing a trailing dot after the file extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/265387 - http://www.securityfocus.com/bid/4407 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8744
CVE ID: CVE-2002-1998 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-17T00:46:05.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary commands via a long parameter to rtable_create (procedure 21). Additional Analyst Notes: - CVE Program Container: References: - ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.12/CSSA-2002-SCO.12.txt - http://www.iss.net/security_center/static/8597.php - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-01/0127.html - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-01
ing-Lists/securityfocus/bugtraq/2002-01/0127.html - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-01/0129.html
CVE ID: CVE-2002-1999 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T17:43:56.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Praesidium Webproxy 1.0 running on HP-UX 11.04 VVOS could allow remote attackers to cause Webproxy to forward requests to the internal network via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4342 - http://archives.neohapsis.com/archives/hp/2002-q1/0092.html - http://www.iss.net/security_center/static/8606.php - http://www.ciac.org/ciac/bulletins/m-061.shtml
CVE ID: CVE-2002-20001 State: PUBLISHED Published: 2021-11-11T00:00:00.000Z Last Updated: 2025-02-13T16:27:06.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only commun
o select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Balasys/dheater - https://www.researchgate.net/profile/Anton-Stiglic-2/publication/2401745_Security_Issues_in_the_Diffie-Hellman_Key_Agreement_Protocol - https://www.reddit.com/r/netsec/comments/qdoosy/server_overload_by_enforcing_dhe_key_exchange/ - https://github.com/mozilla/ssl-config-generator/issues/162 - https://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdf - https://www.suse.com/support/kb/doc/?id=000020510 - htt
https://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdf - https://www.suse.com/support/kb/doc/?id=000020510 - https://www.openssl.org/blog/blog/2022/10/21/tls-groups-configuration/ - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-004.txt - https://support.f5.com/csp/article/K83120834 - https://dheatattack.com - https://gitlab.com/dheatattack/dheater - https://dheatattack.gitlab.io/ - https://ieeexplore.ieee.org/document/10374117
CVE ID: CVE-2002-20002 State: PUBLISHED Published: 2025-01-02T00:00:00 Last Updated: 2025-01-06T21:08:29.156Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: n/a Problem Types: CWE-338 Description: The Net::EasyTCP package before 0.15 for Perl always uses Perl's builtin rand(), which is not a strong random number generator, for cryptographic keys. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://metacpan.org/release/MNAGUIB/EasyTCP-0.26/changes - https://github.com/briandfoy/cpan-security-advisory/issues/184 - https://metacpan.org/release/MNAGUIB/EasyTCP-0.15/view/EasyTCP.pm
CVE ID: CVE-2002-2000 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-17T02:01:06.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: ACMS 4.3 and 4.4 in OpenVMS Alpha 7.2 and 7.3 does not properly use process privileges, which allows attackers to access data. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.support.compaq.com/patches/.new/html/SSRT0813.shtml - http://www.securityfocus.com/bid/4184 - http://www.iss.net/security_center/static/8306.php
CVE ID: CVE-2002-2001 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T03:43:33.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local users to overwrite arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3940 - http://www.iss.net/security_center/static/7980.php - http://www.mandriva.com/security/advisories?name=MDKSA-2002:008
CVE ID: CVE-2002-2002 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T23:01:24.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via long (1) LANG and (2) LOCPATH environment variables. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml - http://www.securityfocus.com/bid/4544 - http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml - http://www.lac.co.jp/security/english/snsadv_e/51_e.html - http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00219.html - http
ac.co.jp/security/english/snsadv_e/51_e.html - http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00219.html - http://www.iss.net/security_center/static/8863.php
CVE ID: CVE-2002-2003 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T16:38:38.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: ypbind in Compaq Tru64 4.0F, 4.0G, 5.0A, 5.1 and 5.1A allows remote attackers to cause the process to core dump via certain network packets generated by nmap. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml
CVE ID: CVE-2002-2004 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T23:11:38.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: portmapper in Compaq Tru64 4.0G and 5.0A allows remote attackers to cause a denial of service via a flood of packets. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml
CVE ID: CVE-2002-2005 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T03:51:16.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Java web start 1.0.1_01, 1.0.1, 1.0 and 1.0.1.01 (HP-UX 11.x only) allows attackers to gain access to restricted resources via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/hp/2002-q1/0084.html - http://www.securityfocus.com/bid/4310 - http://cert.uni-stuttgart.de/archive/bugtraq/2002/03/msg00279.html - http://www.iss.net/security_center/static/8483.php
CVE ID: CVE-2002-2006 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T03:51:16.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://secunia.com/advisories/30908 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1 - http://secunia.com/advisories/30899 - http://www.vupen.com/english/advisories/
arch/document.do?assetkey=1-26-239312-1 - http://secunia.com/advisories/30899 - http://www.vupen.com/english/advisories/2008/1979/references - http://archives.neohapsis.com/archives/bugtraq/2002-04/0311.html - http://www.securityfocus.com/bid/4575 - http://www.iss.net/security_center/static/8932.php - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2002-2007 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-17T00:21:13.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for Java Server Pages (JSP) in the (1) test/jsp, (2) samples/jsp and (3) examples/jsp directories, or the (4) test/realPath.jsp servlet, which leaks pathnames in error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/116963 - http://www.securityfocus.com/bid/4876 - http://www.p
am Container: References: - http://www.kb.cert.org/vuls/id/116963 - http://www.securityfocus.com/bid/4876 - http://www.procheckup.com/security_info/vuln_pr0206.html - http://www.procheckup.com/security_info/vuln_pr0205.html - http://www.iss.net/security_center/static/9208.php - http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00275.html - http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00272.html - http://www.procheckup.com/security_info/vuln_pr0207.html - http://www.securityfocus.com/bid/4877 - http://www.securityfocus.com/bid/4878
CVE ID: CVE-2002-2008 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T03:51:16.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 4.0.3 for Windows allows remote attackers to obtain the web root path via an HTTP request for a resource that does not exist, such as lpt9, which leaks the information in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://www.securityfocus.com/bid/5054 - http://www.iss.net/security_center/static/9394.php - http://archives.neohapsis.com/archives/bugtraq/2002-06/0225.html - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756
rchives.neohapsis.com/archives/bugtraq/2002-06/0225.html - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2002-2009 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T03:51:16.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 4.0.1 allows remote attackers to obtain the web root path via HTTP requests for JSP files preceded by (1) +/, (2) >/, (3) </, and (4) %20/, which leaks the pathname in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://tomcat.apache.org/security-4.html - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0286.html - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0297.html - http://www.securityfocus.com/bid/4557 - https://exchange.xforc
m/Mailing-Lists/securityfocus/bugtraq/2002-04/0297.html - http://www.securityfocus.com/bid/4557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42915 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2002-2010 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T19:56:32.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in htsearch.cgi in htdig (ht://Dig) 3.1.5, 3.1.6, and 3.2 allows remote attackers to inject arbitrary web script or HTML via the words parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-06/0321.html - http://www.iss.net/security_center/static/9433.php - http://www.securityfocus.com/bid/5091
CVE ID: CVE-2002-2011 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T17:08:45.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the fom CGI program (fom.cgi) in Faq-O-Matic 2.711 and 2.712 allows remote attackers to inject arbitrary web script or HTML via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8906.php - http://www.securityfocus.com/bid/4565 - http://archives.neohapsis.com/archives/bugtraq/2002-04/0287.html
CVE ID: CVE-2002-2012 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T20:32:49.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0 allows remote attackers to cause "unexpected results" via an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/advisories/3761 - http://www.securityfocus.com/bid/3796 - http://www.iss.net/security_center/static/7810.php