Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0757 State: PUBLISHED Published: 2005-05-18T04:00:00 Last Updated: 2024-08-07T21:28:27.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xattr file system code, as backported in Red Hat Enterprise Linux 3 on 64-bit systems, does not properly handle certain offsets, which allows local users to cause a denial of service (system crash) via certain actions on an ext3 file system with extended attributes enabled. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18056 - http://secunia.com/advisories/18059 - http://www.securityfocus.com/bid/13680 - http://www.redhat.com/support/errata/RHSA-2005-294.html - http://www.de
18059 - http://www.securityfocus.com/bid/13680 - http://www.redhat.com/support/errata/RHSA-2005-294.html - http://www.debian.org/security/2005/dsa-922 - http://www.debian.org/security/2005/dsa-921 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11406
CVE ID: CVE-2005-0758 State: PUBLISHED Published: 2005-05-13T04:00:00 Last Updated: 2024-08-07T21:28:27.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-158-1 - http://www.osvdb.org/16371 - http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html - http://www.vupen.com/english/advisories/2007/2732 - http://www.mandriva.com/security/advisories?name=MDKSA-200
es.html - http://www.vupen.com/english/advisories/2007/2732 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:027 - http://secunia.com/advisories/22033 - http://rhn.redhat.com/errata/RHSA-2005-357.html - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9797 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1107 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20539 - http://docs.info.apple.com/article.html?artnum=306172 - http://www.gentoo.org/security/en
ud.com/vulnerabilities/20539 - http://docs.info.apple.com/article.html?artnum=306172 - http://www.gentoo.org/security/en/glsa/glsa-200505-05.xml - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt - ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc - http://www.securityfocus.com/bid/25159 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1081 - http://www.securityfocus.com/bid/13582 - http://secunia.com/advisories/18100 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852 - http://secunia.com/advisories/19183 - http://securitytracker.com/id?1013928 - http://www.man
slackware-security.555852 - http://secunia.com/advisories/19183 - http://securitytracker.com/id?1013928 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:026 - http://www.redhat.com/support/errata/RHSA-2005-474.html - http://bugs.gentoo.org/show_bug.cgi?id=90626 - http://secunia.com/advisories/26235
CVE ID: CVE-2005-0759 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:27.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick before 6.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image with an invalid tag. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013550 - http://www.securityfocus.com/bid/12875 - http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11022 - https://rhn.redhat.com/errata/RHSA-2005-070.html - http://www.debian.org/security/
oval%3Aorg.mitre.oval%3Adef%3A11022 - https://rhn.redhat.com/errata/RHSA-2005-070.html - http://www.debian.org/security/2005/dsa-702
CVE ID: CVE-2005-0760 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:27.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TIFF decoder in ImageMagick before 6.0 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013550 - http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11184 - https://rhn.redhat.com/errata/RHSA-2005-070.html - http://www.debian.org/security/2005/dsa-702
CVE ID: CVE-2005-0761 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:27.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in ImageMagick before 6.1.8 allows remote attackers to cause a denial of service (application crash) via a crafted PSD file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2005-070.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11150 - http://securitytracker.com/id?1013550 - http://www.securityfocus.com/bid/12876 - http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html
CVE ID: CVE-2005-0762 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-07T21:28:27.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9736 - http://rhn.redhat.com/errata/RHSA-2005-070.html - http://securitytracker.com/id?1013550 - http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html - http://www.debian.org/security/2005/dsa-702
CVE ID: CVE-2005-0763 State: PUBLISHED Published: 2005-03-29T05:00:00 Last Updated: 2024-08-07T21:28:27.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Midnight Commander (mc) 4.5.55 and earlier may allow attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-698 - http://www.redhat.com/support/errata/RHSA-2005-512.html
CVE ID: CVE-2005-0764 State: PUBLISHED Published: 2005-03-22T05:00:00 Last Updated: 2024-08-07T21:28:28.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in command.C for rxvt-unicode before 5.3 allows remote attackers to execute arbitrary code via a crafted file containing long escape sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200503-23.xml - http://bugs.gentoo.org/show_bug.cgi?id=84680
CVE ID: CVE-2005-0765 State: PUBLISHED Published: 2005-03-18T05:00:00 Last Updated: 2024-08-07T21:28:28.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the JXTA dissector in Ethereal 0.10.9 allows remote attackers to cause a denial of service (application crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2005:053 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10048 - http://www.ethereal.com/appnotes/enpa-sa-00018.html - http://www.securityfocus.com/bid/12762
CVE ID: CVE-2005-0766 State: PUBLISHED Published: 2005-03-18T05:00:00 Last Updated: 2024-08-07T21:28:27.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the sFlow dissector in Ethereal 0.9.14 through 0.10.9 allows remote attackers to cause a denial of service (application crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200503-16.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2005:053 - http://www.ethereal.com/appnotes/enpa-sa-00018.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9866 - http://www.securityfocus.com/bid/12762
CVE ID: CVE-2005-0767 State: PUBLISHED Published: 2005-03-18T05:00:00 Last Updated: 2024-08-07T21:28:28.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the Radeon DRI driver for Linux kernel 2.6.8.1 allows local users with DRI privileges to execute arbitrary code as root. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-366.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10431 - https://usn.ubuntu.com/95-1/ - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945
CVE ID: CVE-2005-0768 State: PUBLISHED Published: 2005-03-18T05:00:00 Last Updated: 2024-08-07T21:28:27.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows remote attackers to execute arbitrary code via a long string to port 2380. Additional Analyst Notes: - CVE Program Container: References: - http://unsecure.altervista.org/security/goodtechtelnet.htm - http://marc.info/?l=bugtraq&m=111092012415193&w=2
CVE ID: CVE-2005-0769 State: PUBLISHED Published: 2005-03-18T05:00:00 Last Updated: 2024-08-07T21:28:28.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19683 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:055 - http://secunia.com/advisories/14561 - http://www.securityfocus.com/archive/1/447537/100/0/threaded - http://www.securityfocus.com/bid/12792 - http://www.gentoo.org/security/en/
yfocus.com/archive/1/447537/100/0/threaded - http://www.securityfocus.com/bid/12792 - http://www.gentoo.org/security/en/glsa/glsa-200503-25.xml - http://www.novell.com/linux/security/advisories/2005_15_openslp.html - http://www.vupen.com/english/advisories/2006/3879 - http://www.securityfocus.com/archive/1/447537/100/0/threaded - https://usn.ubuntu.com/98-1/
CVE ID: CVE-2005-0770 State: PUBLISHED Published: 2005-03-18T05:00:00 Last Updated: 2024-08-07T21:28:27.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in DataRescue Interactive Disassembler and Debugger (IDA) Pro 4.7.0.830 allows remote attackers or local users to cause a denial of service (CPU consumption or application crash) and possibly execute arbitrary code via format string specifiers in a dynamic link library (DLL) name. Additional Analyst Notes: - CVE Program Container: References: - http://pb.specialised.info/all/adv/ida-debugger-adv.txt - http://www.datarescue.com/cgi-local/ultimatebb.cgi?ubb=get_topic%3Bf=2%3Bt=000155%3Bp=0 - http://se
a-debugger-adv.txt - http://www.datarescue.com/cgi-local/ultimatebb.cgi?ubb=get_topic%3Bf=2%3Bt=000155%3Bp=0 - http://secunia.com/advisories/14610 - http://marc.info/?l=bugtraq&m=111100269512216&w=2
CVE ID: CVE-2005-0771 State: PUBLISHED Published: 2005-06-29T04:00:00 Last Updated: 2024-08-07T21:28:28.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014273 - http://www.kb.cert.org/vuls/id/584505 - http://www.idefense.com/application/poi/display?id=269&type=vulnerabilities&flashstatus=true - http://www.us-cert.gov/cas/techalerts/TA05-180A.html - http://secunia.com/advisories/15789 - http://
&flashstatus=true - http://www.us-cert.gov/cas/techalerts/TA05-180A.html - http://secunia.com/advisories/15789 - http://seer.support.veritas.com/docs/277429.htm - http://seer.support.veritas.com/docs/276605.htm
CVE ID: CVE-2005-0772 State: PUBLISHED Published: 2005-06-26T04:00:00 Last Updated: 2024-08-07T21:28:28.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a denial of service (Remote Agent crash) via (1) a crafted packet in NDMLSRVR.DLL or (2) a request packet with an invalid (non-0) "Error Status" value, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014273 - http://seer.support.veritas.com/docs/276533.htm - http://www.idefense.com/application/poi/display?id=270&ty
id?1014273 - http://seer.support.veritas.com/docs/276533.htm - http://www.idefense.com/application/poi/display?id=270&type=vulnerabilities&flashstatus=true - http://www.idefense.com/application/poi/display?id=271&type=vulnerabilities - http://seer.support.veritas.com/docs/277485.htm - http://secunia.com/advisories/15789
CVE ID: CVE-2005-0773 State: PUBLISHED Published: 2005-06-29T04:00:00 Last Updated: 2024-08-07T21:28:28.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers to execute arbitrary code via a CONNECT_CLIENT_AUTH request with authentication method type 3 (Windows credentials) and a long password argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/492105 - http://securitytracker.com/id?1014273 - http://www.osvdb.org/17624 - http://www.securityfocus.com/bid/14022 - http://seer.
tp://securitytracker.com/id?1014273 - http://www.osvdb.org/17624 - http://www.securityfocus.com/bid/14022 - http://seer.support.veritas.com/docs/277429.htm - http://seer.support.veritas.com/docs/276604.htm - http://www.idefense.com/application/poi/display?id=272&type=vulnerabilities&flashstatus=true - http://www.us-cert.gov/cas/techalerts/TA05-180A.html - http://secunia.com/advisories/15789
CVE ID: CVE-2005-0774 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in member.php and possibly other scripts in PhotoPost PHP 5.0 RC3 allows remote attackers to execute arbitrary SQL commands via the uid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12779 - http://marc.info/?l=bugtraq&m=111065868402859&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19675 - http://secunia.com/advisories/14576
CVE ID: CVE-2005-0775 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:27.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: The reportpost action in misc.php for PhotoPost PHP 5.0 RC3 does not limit the logging data that is sent to the administrator, which allows remote attackers to send large amounts of email to the administrator. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19676 - http://marc.info/?l=bugtraq&m=111065868402859&w=2 - http://secunia.com/advisories/14576
CVE ID: CVE-2005-0776 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: adm-photo.php in PhotoPost PHP 5.0 RC3 does not properly verify administrative privileges before manipulating photos, which could allow remote attackers to manipulate other users' photos. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12779 - http://marc.info/?l=bugtraq&m=111065868402859&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19677 - http://secunia.com/advisories/14576
CVE ID: CVE-2005-0777 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:29.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP 5.0 RC3 allow remote attackers to inject arbitrary web script or HTML via (1) the check_tags function or (2) the editbio field in the user profile. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12779 - http://marc.info/?l=bugtraq&m=111065868402859&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19678 - http://secunia.com/advisories/14576
CVE ID: CVE-2005-0778 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:29.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhotoPost PHP 5.0 RC3 does not fully verify that an uploaded file is an image file, which allows remote attackers to inject arbitrary Javascript by uploading non-image files with an image extension such as .gif. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19679 - http://marc.info/?l=bugtraq&m=111065868402859&w=2 - http://secunia.com/advisories/14576
CVE ID: CVE-2005-0779 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: PlatinumFTP 1.0.18, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via multiple connection attempts with a \ (backslash) in the username. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455609/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/19674 - http://www.securityfocus.com/bid/12790 - http://marc.info/?l=bugtraq&m=111066232415249&w=2
CVE ID: CVE-2005-0780 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, (2) login.php, (3) category.php, (4) file.php, (5) team.php, (6) license.php, (7) custom.php, (8) admins.php, or (9) backupdb.php, which reveal the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111066293914977&w=2
CVE ID: CVE-2005-0781 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter to pafiledb.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19688 - http://marc.info/?l=bugtraq&m=111065796525043&w=2 - http://www.securityfocus.com/bid/12788
CVE ID: CVE-2005-0782 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the start parameter to pafiledb.php. Additional Analyst Notes: - CVE Program Container: References: - http://digitalparadox.org/advisories/pafdb.txt - http://marc.info/?l=bugtraq&m=111065796525043&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19690 - http://www.securityfocus.com/bid/12788 - http://marc.info/?l=bugtraq&m=111221940107161&w=2
CVE ID: CVE-2005-0783 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:27.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Phorum before 5.0.14a allows remote attackers to inject arbitrary web script or HTML via the filename of an attached file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12800 - http://secunia.com/advisories/14554 - http://marc.info/?l=bugtraq&m=111083279031544&w=2
CVE ID: CVE-2005-0784 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary web script or HTML via (1) the subject line to follow.php or (2) the subject line in the user's personal control panel. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12800 - http://secunia.com/advisories/14554 - http://marc.info/?l=bugtraq&m=111083279031544&w=2
CVE ID: CVE-2005-0785 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in usersrecentposts in YaBB 2.0 rc1 allows remote attackers to inject arbitrary web script or HTML via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013420 - http://marc.info/?l=bugtraq&m=111083400601759&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19671 - http://www.securityfocus.com/bid/12756
CVE ID: CVE-2005-0786 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in gb_new.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the quote parameter to guestbook.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19694 - http://secunia.com/advisories/14583 - http://marc.info/?l=bugtraq&m=111082702422979&w=2
CVE ID: CVE-2005-0787 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wine 20050211 and earlier creates temp files with world readable permissions and predictable file names, which allows local users to obtain sensitive information, such as passwords. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111082537009842&w=2 - http://bugs.winehq.org/show_bug.cgi?id=2715 - http://www.securityfocus.com/bid/12791 - http://www.zone-h.org/advisories/read/id=7300 - http://securitytracker.com/id?1013428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19697
CVE ID: CVE-2005-0788 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:27.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: LimeWire 4.1.2 through 4.5.6 allows remote attackers to read arbitrary files by specifying the full pathname in a Gnutella GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200503-37.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/19693 - http://secunia.com/advisories/14555/ - http://marc.info/?l=bugtraq&m=111082448213238&w=2