Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
er: References: - http://secunia.com/advisories/17564 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1977 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1800 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1838 - http://www.vupen.com/english/advisories/2006/2319 - http://securitytracker.com/id?1016291 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1985 - http://www.hacker.co.il/security/ie/css_import.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1556 - https://oval.cisecurity.org/
tps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1556 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1914 - http://www.securityfocus.com/bid/15660 - http://www.vupen.com/english/advisories/2005/2804 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021
CVE ID: CVE-2005-4090 State: PUBLISHED Published: 2005-12-08T11:00:00 Last Updated: 2024-08-07T23:31:49.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP-UX B.11.00 to B.11.23, when IPSEC is running, allows remote attackers to have unknown impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15759 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5617 - http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000081817276 - http://securitytracker.com/id?1015319 - http://secunia.com/advisories/17593 - http://www.securityfocus.com/advisorie
6 - http://securitytracker.com/id?1015319 - http://secunia.com/advisories/17593 - http://www.securityfocus.com/advisories/9812 - http://www.vupen.com/english/advisories/2005/2801
CVE ID: CVE-2005-4091 State: PUBLISHED Published: 2005-12-08T11:00:00 Last Updated: 2024-08-07T23:31:48.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17862 - http://www.securityfocus.com/bid/15712 - http://pridels0.blogspot.com/2005/12/1-search-xss-vuln.html - http://www.vupen.com/english/advisories/2005/2739
CVE ID: CVE-2005-4092 State: PUBLISHED Published: 2005-12-08T11:00:00 Last Updated: 2024-08-07T23:31:49.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 (3) and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a .mov file with (1) a Movie Resource atom with a large size value, or (2) an stsd atom with a modified Sample Description Table size value, and possibly other vectors involving media files. NOTE: item 1 was originally identified by CVE-2005-4127 for a pre-patch announcement, and item 2 was originally identified by CVE-2
1 was originally identified by CVE-2005-4127 for a pre-patch announcement, and item 2 was originally identified by CVE-2005-4128 for a pre-patch announcement. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18370 - http://www.security-protocols.com/modules.php?name=News&file=article&sid=3133 - http://www.us-cert.gov/cas/techalerts/TA06-011A.html - http://www.securityfocus.com/archive/1/421635/100/0/threaded - http://docs.info.apple.com/article.html?artnum=303101 - http://www.securityfocus.com/bid/15732 - http://securitytracker.com/id?1015356 - http://securityreason.com/securityalert/336 - http://security-protocols.com/advisory/sp-x21-advisory.tx
com/id?1015356 - http://securityreason.com/securityalert/336 - http://security-protocols.com/advisory/sp-x21-advisory.txt - http://www.vupen.com/english/advisories/2006/0128 - http://www.security-protocols.com/advisory/sp-x21-advisory.txt - http://www.eeye.com/html/research/upcoming/20051117b.html - http://securityreason.com/securityalert/334 - http://securitytracker.com/id?1015396 - http://www.kb.cert.org/vuls/id/921193 - http://www.securityfocus.com/archive/1/421569/100/0/threaded - http://secunia.com/advisories/18149 - http://www.security-protocols.com/modules.php?name=News&file=article&sid=3109 - http://www.eeye.com/html/research/upcoming/20051117a.html - http://www.securityfocus.com/arc
ews&file=article&sid=3109 - http://www.eeye.com/html/research/upcoming/20051117a.html - http://www.securityfocus.com/archive/1/421547/100/0/threaded - http://www.vupen.com/english/advisories/2005/3012 - http://securitytracker.com/id?1015397
CVE ID: CVE-2005-4093 State: PUBLISHED Published: 2005-12-08T11:00:00 Last Updated: 2024-08-07T23:31:49.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to bypass security policies by modifying the local copy of the local.scv policy file after it has been downloaded from the VPN Endpoint. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15757 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039634.html - http://www.mail-archive.com/swinog%40lists.swinog.ch/msg00799.html - http://www.us.debian.org/se
-December/039634.html - http://www.mail-archive.com/swinog%40lists.swinog.ch/msg00799.html - http://www.us.debian.org/security/2006/dsa-1237 - http://secunia.com/advisories/17837 - http://securitytracker.com/id?1015326 - http://www.mail-archive.com/swinog%40lists.swinog.ch/msg00798.html - http://secunia.com/advisories/23395 - http://www.vupen.com/english/advisories/2005/2808
CVE ID: CVE-2005-4094 State: PUBLISHED Published: 2005-12-08T11:00:00 Last Updated: 2024-08-07T23:31:49.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload command to upload a file that appears to be an image but contains PHP script. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2771 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23519 - http://secunia.com/advisories/17896 - http://www.securityfocus.com/bid/15744 - http://rgod.altervista.org/docebo204_xpl.html - http://www.osvdb
sories/17896 - http://www.securityfocus.com/bid/15744 - http://rgod.altervista.org/docebo204_xpl.html - http://www.osvdb.org/21465 - http://secunia.com/advisories/1015308 - http://securitytracker.com/id?1015308
CVE ID: CVE-2005-4095 State: PUBLISHED Published: 2005-12-08T11:00:00 Last Updated: 2024-08-07T23:31:49.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to list arbitrary files and directories via ".." sequences in the Type parameter in a GetFoldersAndFiles command. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2771 - http://www.securityfocus.com/bid/15742 - http://secunia.com/advisories/17896 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23518 - http://rgod.altervista.org/docebo204_xpl
advisories/17896 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23518 - http://rgod.altervista.org/docebo204_xpl.html - http://secunia.com/advisories/1015308 - http://www.osvdb.org/21464 - http://securitytracker.com/id?1015308
CVE ID: CVE-2005-4096 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4097 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4098 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4099 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4100 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4101 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4102 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4103 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4104 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4105 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4106 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4107 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4108 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4109 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4110 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4111 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4112 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4113 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4114 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4115 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4116 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4117 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4118 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4119 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4120 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4121 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4122 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4123 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4124 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4125 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-4126 State: PUBLISHED Published: 2005-12-09T11:00:00 Last Updated: 2024-08-07T23:31:49.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: ** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows attackers to execute arbitrary code. NOTE: the information regarding this issue is extremely vague and does not provide any verifiable information. It has been posted by a reliable reporter with a prerelease disclosure policy. This item has only been assigned a CVE identifier for tracking purposes, and to serve as a concre
ase disclosure policy. This item has only been assigned a CVE identifier for tracking purposes, and to serve as a concrete example for discussion of the newly emerging UNVERIFIABLE and PRERELEASE content decisions in CVE, which must be discussed by the Editorial Board. Without additional details or independent verification by reliable sources, it is possible that this item might be RECAST or REJECTED. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15691 - http://www.eeye.com/html/research/upcoming/20051130.html
CVE ID: CVE-2005-4127 State: REJECTED Published: 2005-12-09T11:00:00 Last Updated: 2006-01-12T10:00:00 Description: No description available.
CVE ID: CVE-2005-4128 State: REJECTED Published: 2005-12-09T11:00:00 Last Updated: 2006-01-12T10:00:00 Description: No description available.
CVE ID: CVE-2005-4129 State: REJECTED Published: 2005-12-09T11:00:00Z Last Updated: 2024-09-17T00:01:45.089Z Description: No description available.
CVE ID: CVE-2005-4130 State: PUBLISHED Published: 2005-12-09T11:00:00Z Last Updated: 2024-09-16T20:59:07.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: ** UNVERIFIABLE, PRERELEASE ** NOTE: this issue describes a problem that can not be independently verified as of 20051208. Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows remote attackers to execute arbitrary code. NOTE: it is not known whether this issue should be MERGED with CVE-2005-4126. The information regarding this issue is extremely vague and does not provide any verifiable information. It has been posted by a reliable reporter with a prerelease disclosure policy. This item has onl
verifiable information. It has been posted by a reliable reporter with a prerelease disclosure policy. This item has only been assigned a CVE identifier for tracking purposes, and to serve as a concrete example for discussion of the newly emerging UNVERIFIABLE and PRERELEASE content decisions in CVE, which must be discussed by the Editorial Board. Without additional details or independent verification by reliable sources, it is possible that this item might be RECAST or REJECTED. Additional Analyst Notes: - CVE Program Container: References: - http://www.eeye.com/html/research/upcoming/20051116.html
CVE ID: CVE-2005-4131 State: PUBLISHED Published: 2005-12-09T11:00:00 Last Updated: 2024-08-07T23:31:49.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to the msvcrt.memmove function, aka "Brand new Microsoft Excel Vulnerability," as originally placed for sale on eBay as item number 7203336538. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabili
36538. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23537 - http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=7203336538 - http://www.securityfocus.com/bid/15780 - http://www.eweek.com/article2/0%2C1759%2C1899697%2C00.asp?kc=EWRSS03129TX1K0000614 - http://securityreason.com/securityalert/584 - http://informationweek.com/story/showArticle.jhtml?articleID=174910198 - http://www.vupen.com/english/advisories/2006/0950 - http://news.zdnet.com/2100-1009_22-5989078.html - http://www.theage.com.au/news/breaking/excel-flaw-up-for-sale-on-ebay/2005/12/09/1134086783318.html - http://support.avaya.com/elmodocs2/security/ASA-2006-0
ng/excel-flaw-up-for-sale-on-ebay/2005/12/09/1134086783318.html - http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm - http://securityreason.com/securityalert/591 - http://secunia.com/advisories/19238 - http://www.theregister.co.uk/2005/12/10/ebay_pulls_excel_vulnerability_auction/ - http://www.us-cert.gov/cas/techalerts/TA06-073A.html - http://secunia.com/advisories/19138 - http://www.osvdb.org/blog/?p=71 - http://securitytracker.com/id?1015333 - http://www.securityfocus.com/archive/1/427635/100/0/threaded - http://www.dicks-blog.com/archives/2005/12/08/excel-vulnerability-for-sale/ - http://securitytracker.com/id?1015766 - http://www.kb.cert.org/vuls/id/642428 - http://www.securi
nerability-for-sale/ - http://securitytracker.com/id?1015766 - http://www.kb.cert.org/vuls/id/642428 - http://www.securityfocus.com/archive/1/427698/100/0/threaded - http://www.securityfocus.com/news/11363 - http://news.com.com/2061-10789_3-5988086.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012
CVE ID: CVE-2005-4132 State: PUBLISHED Published: 2005-12-09T11:00:00 Last Updated: 2024-08-07T23:31:49.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified "security leak" vulnerability in Contenido before 4.6.4, when register_globals is on and allow_url_fopen is true, has unspecified impact and attack vectors. NOTE: it is likely that this is a PHP remote file include vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/apps/freshmeat/2005-12/0008.html - http://www.securityfocus.com/bid/15790 - http://www.vupen.com/english/advisories/2005/2819 - http://www.osvdb.org/21566 - http://www.contenido.org/open
d/15790 - http://www.vupen.com/english/advisories/2005/2819 - http://www.osvdb.org/21566 - http://www.contenido.org/opensourcecms/en/index-b-21-1616.html
CVE ID: CVE-2005-4133 State: PUBLISHED Published: 2005-12-09T15:00:00 Last Updated: 2024-08-07T23:31:49.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Update Connection in Sun Solaris 10, when configured to use a web proxy, allows local users to obtain the proxy authentication password via (1) an unspecified vector and (2) proxy log files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15772 - http://www.vupen.com/english/advisories/2005/2803 - http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102090-1 - http://securitytracker.com/id?1015331 - http://secunia.com/advisories/17931
CVE ID: CVE-2005-4134 State: PUBLISHED Published: 2005-12-09T15:00:00 Last Updated: 2024-08-07T23:31:49.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup. NOTE: despite initial reports, the Mozilla vendor does not believe that this issue can be used to trigger a crash or buffer overflow in Firefox. Also, it has been independently reported that Netscape 8.1 does not have this issue. Additional An
overflow in Firefox. Also, it has been independently reported that Netscape 8.1 does not have this issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:036 - https://usn.ubuntu.com/275-1/ - http://secunia.com/advisories/19902 - http://www.osvdb.org/21533 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:037 - http://secunia.com/advisories/17944 - http://www.securityfocus.com/archive/1/438730/100/0/threaded - http://secunia.com/advisories/19941 - http://secunia.com/advisories/17946 - http://marc.info/?l=full-disclosure&m=113405896025702&w=2 - http://www.redhat.com/archives/fedora-announce-list/2006-Feb
http://marc.info/?l=full-disclosure&m=113405896025702&w=2 - http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00005.html - http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml - http://secunia.com/advisories/21622 - http://secunia.com/advisories/19862 - http://secunia.com/advisories/19230 - http://secunia.com/advisories/18704 - http://www.networksecurity.fi/advisories/netscape-history.html - http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm - http://www.debian.org/security/2006/dsa-1051 - http://secunia.com/advisories/18709 - https://usn.ubuntu.com/271-1/ - http://secunia.com/advisories/18705 - http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml - htt
buntu.com/271-1/ - http://secunia.com/advisories/18705 - http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml - http://www.securityfocus.com/bid/16476 - http://www.vupen.com/english/advisories/2006/0413 - http://www.mozilla.org/security/announce/mfsa2006-03.html - http://securitytracker.com/id?1015328 - http://secunia.com/advisories/19746 - http://secunia.com/advisories/21033 - http://secunia.com/advisories/18700 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1 - http://secunia.com/advisories/19759 - http://www.redhat.com/support/errata/RHSA-2006-0200.html - http://secunia.com/advisories/18706 - http://secunia.com/advisories/17934 - http://www.securityfocus.com/archiv
0.html - http://secunia.com/advisories/18706 - http://secunia.com/advisories/17934 - http://www.securityfocus.com/archive/1/438730/100/0/threaded - http://www.securityfocus.com/bid/15773 - http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00006.html - http://www.mozilla.org/security/history-title.html - http://www.redhat.com/support/errata/RHSA-2006-0199.html - http://secunia.com/advisories/19863 - http://www.securityfocus.com/archive/1/425978/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11382 - ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.
tp://patches.sgi.com/support/free/security/advisories/20060201-01-U - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt - http://secunia.com/advisories/18708 - http://www.vupen.com/english/advisories/2005/2805 - http://www.securityfocus.com/archive/1/425975/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1619 - http://marc.info/?l=full-disclosure&m=113404911919629&w=2 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1 - http://secunia.com/advisories/19852 - http://www.vupen.com/english/advisories/2006/3391 - http://www.debian.org/security/2006/dsa-1046 - http://www.debian.org/security/2006/dsa-1044
CVE ID: CVE-2005-4135 State: PUBLISHED Published: 2005-12-09T15:00:00 Last Updated: 2024-08-07T23:31:49.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header (possibly the name parameter or variable), which is then written to data/topics.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015323 - http://www.securityfocus.com/archive/1/418838/100/0/threaded - http://www.vupen.com/english/advisories/2005/2807 - http://www.securityfocus.com/bid
m/archive/1/418838/100/0/threaded - http://www.vupen.com/english/advisories/2005/2807 - http://www.securityfocus.com/bid/15764 - http://secunia.com/advisories/17949