Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-2635 State: PUBLISHED Published: 2005-12-04T22:00:00 Last Updated: 2024-08-08T01:36:24.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: An ActiveX control for McAfee Security Installer Control System 4.0.0.81 allows remote attackers to access the Windows registry via web pages that use the control's RegQueryValue() method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/alerts/2004/Apr/1009956.html - http://archives.neohapsis.com/archives/ntbugtraq/2004-q2/0026.html - http://secunia.com/advisories/11493 - http://www.osvdb.org/5713 - http://www.securityfocus.com/bid/10236 - https://exchange.xforce.ibmcloud.com/vul
es/11493 - http://www.osvdb.org/5713 - http://www.securityfocus.com/bid/10236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15994
CVE ID: CVE-2004-2636 State: PUBLISHED Published: 2005-12-04T22:00:00 Last Updated: 2024-08-08T01:36:24.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: TinyWeb 1.9 allows remote attackers to read source code of scripts via "/./" in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/6517 - http://www.securityfocus.com/bid/10445/info - http://secunia.com/advisories/11731 - http://securitytracker.com/alerts/2004/May/1010346.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16275
CVE ID: CVE-2004-2637 State: PUBLISHED Published: 2005-12-04T22:00:00 Last Updated: 2024-08-08T01:36:24.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound connections to the IP address of the router, which allows remote attackers to bypass intended security restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10225 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16005 - http://securitytracker.com/id?1009967 - http://www.osvdb.org/5716 - http://secunia.com/advisories/11499 - http://marc.info/?l=full-
ritytracker.com/id?1009967 - http://www.osvdb.org/5716 - http://secunia.com/advisories/11499 - http://marc.info/?l=full-disclosure&m=108324905314026&w=2
CVE ID: CVE-2004-2638 State: PUBLISHED Published: 2005-12-04T22:00:00 Last Updated: 2024-08-08T01:36:24.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files in the "admin/" directory by modifying the in_login parameter to a non-zero value. Additional Analyst Notes: - CVE Program Container: References: - http://secwatch.org/advisories/1007857 - http://secunia.com/advisories/11473 - http://www.securityfocus.com/bid/10235 - http://www.osvdb.org/5717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16009
CVE ID: CVE-2004-2639 State: PUBLISHED Published: 2005-12-04T22:00:00 Last Updated: 2024-08-08T01:36:25.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Journalness 3.0.7 and earlier allows remote attackers to create or modify posts via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15923 - http://www.osvdb.org/5572 - http://secunia.com/advisories/11431 - http://securitytracker.com/alerts/2004/Apr/1009909.html - https://sourceforge.net/project/shownotes.php?release_id=232566&group_id=101583
CVE ID: CVE-2004-2640 State: PUBLISHED Published: 2005-12-04T22:00:00 Last Updated: 2024-08-08T01:36:24.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers to read arbitrary files via (1) .. (dot dot) sequences or (2) absolute paths to the template parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17833 - http://sourceforge.net/project/shownotes.php?release_id=277371 - http://www.securityfocus.com/bid/11517 - http://securitytracker.com/id?1011920 - http://www.osvdb.org/11103 - http://secunia.com/advisories/
ocus.com/bid/11517 - http://securitytracker.com/id?1011920 - http://www.osvdb.org/11103 - http://secunia.com/advisories/12963
CVE ID: CVE-2004-2641 State: PUBLISHED Published: 2005-12-04T22:00:00 Last Updated: 2024-08-08T01:36:24.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Fire 3800/4800/4810/6800, Sun Fire V1280, and Netra 1280 allows remote attackers to cause a denial of service (system controller hang) via IP Packets With Type of Service (TOS) Bits set. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5577 - http://secunia.com/advisories/11439 - http://www.securityfocus.com/bid/10189 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15925 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57544-1 - http://secur
rce.ibmcloud.com/vulnerabilities/15925 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57544-1 - http://securitytracker.com/id?1009888
CVE ID: CVE-2004-2642 State: PUBLISHED Published: 2005-12-04T22:00:00 Last Updated: 2024-08-08T01:36:24.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yeemp 0.9.9 and earlier does not properly encrypt inbound files, which allows remote attackers to spoof the identity of the sender. Additional Analyst Notes: - CVE Program Container: References: - http://deekoo.net/technocracy/yeemp/#advisory - http://securitytracker.com/id?1011586 - http://deekoo.net/technocracy/yeemp/changes.html - http://www.osvdb.org/10671 - http://secunia.com/advisories/12795 - http://www.securityfocus.com/bid/11353 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17692
CVE ID: CVE-2004-2643 State: PUBLISHED Published: 2005-12-04T22:00:00 Last Updated: 2024-08-08T01:36:24.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Microsoft cabarc allows remote attackers to overwrite files via "../" sequences in file names in a CAB archive. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1011626 - http://www.securityfocus.com/bid/11376 - http://www.osvdb.org/10714 - http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0341.html - http://secunia.com/advisories/12816 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17693 - http://marc.info/?l=bugtraq&m=10975
.com/advisories/12816 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17693 - http://marc.info/?l=bugtraq&m=109759710121018&w=2 - http://packetstormsecurity.org/0410-exploits/cabarc.txt
CVE ID: CVE-2004-2644 State: PUBLISHED Published: 2005-12-04T22:00:00 Last Updated: 2024-08-08T01:36:25.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ASN.1 Compiler (asn1c) before 0.9.7 has unknown impact and attack vectors when processing "ANY" type tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11370 - http://www.osvdb.org/10685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17695 - http://securitytracker.com/id?1011622 - http://secunia.com/advisories/12794 - http://sourceforge.net/project/shownotes.php?group_id=103893&release_id=274592
CVE ID: CVE-2004-2645 State: PUBLISHED Published: 2005-12-04T22:00:00 Last Updated: 2024-08-08T01:36:24.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ASN.1 Compiler (asn1c) before 0.9.7 has unknown impact and attack vectors when processing "CHOICE" types with "indefinite length structures." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11370 - http://www.osvdb.org/10684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17696 - http://securitytracker.com/id?1011622 - http://secunia.com/advisories/12794 - http://sourceforge.net/project/shownotes.php?group_id=103893&release_id=274592
CVE ID: CVE-2004-2646 State: PUBLISHED Published: 2005-12-04T22:00:00 Last Updated: 2024-08-08T01:36:25.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: The addUser function in UserManager.java in Free Web Chat 2.0 allows remote attackers to cause a denial of service (uncaught NullPointerException) via unknown attack vectors that cause the usrName variable to be null. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109164397601049&w=2 - http://www.securityfocus.com/bid/10863 - http://securitytracker.com/alerts/2004/Aug/1010851.html - http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0102.html - http://www.osvdb.org/836
04/Aug/1010851.html - http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0102.html - http://www.osvdb.org/8369 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16893
CVE ID: CVE-2004-2647 State: PUBLISHED Published: 2005-12-04T22:00:00 Last Updated: 2024-08-08T01:36:24.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Free Web Chat 2.0 allows remote attackers to cause a denial of service (CPU consumption) via multiple connections from the same user. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109164397601049&w=2 - http://www.securityfocus.com/bid/10863 - http://securitytracker.com/alerts/2004/Aug/1010851.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16901 - http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0102.html - http://www.osvdb.org/8370
CVE ID: CVE-2004-2648 State: PUBLISHED Published: 2005-12-04T22:00:00 Last Updated: 2024-08-08T01:36:24.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreezeX 1.00.100.0666 allows local users with administrator privileges to cause a denial of service (FreezeX application) by overwriting the db.fzx file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0458.html - http://securitytracker.com/id?1012699 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18643 - http://www.osvdb.org/12659
CVE ID: CVE-2004-2649 State: PUBLISHED Published: 2005-12-04T22:00:00 Last Updated: 2024-08-08T01:36:24.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eudora 6.1.0.6 allows remote attackers to obfuscate URLs displayed in the status bar by inserting a large number of characters (e.g. spaces coded as "&#32") in the middle of the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10305 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16105 - http://www.osvdb.org/6009 - http://archives.neohapsis.com/archives/bugtraq/2004-05/0066.html - http://secunia.com/advisories/11581 - http://www.eudora.com/download/eudora/windows/6.1
ives/bugtraq/2004-05/0066.html - http://secunia.com/advisories/11581 - http://www.eudora.com/download/eudora/windows/6.1.2/RelNotes.txt - http://securitytracker.com/alerts/2004/May/1010117.html
CVE ID: CVE-2004-2650 State: PUBLISHED Published: 2005-12-09T15:00:00Z Last Updated: 2024-09-17T03:03:36.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spooler in Apache Foundation James 2.2.0 allows local users to cause a denial of service (memory consumption) by triggering various error conditions in the retrieve function, which prevents a lock from being released and causes a memory leak. Additional Analyst Notes: - CVE Program Container: References: - http://issues.apache.org/jira/browse/JAMES-268 - http://james.apache.org/changelog.html - http://www.securityfocus.com/bid/15765
CVE ID: CVE-2004-2651 State: PUBLISHED Published: 2005-12-18T22:00:00 Last Updated: 2024-08-08T01:36:24.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in YaCy before 0.32 allow remote attackers to inject arbitrary web script or HTML via the (1) urlmaskfilter parameter to index.html or the (2) page parameter to Wiki.html. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1012686 - http://www.osvdb.org/12630 - http://www.osvdb.org/12629 - http://archives.neohapsis.com/archives/bugtraq/2004-12/0413.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18688 - http://www.yacy.n
.com/archives/bugtraq/2004-12/0413.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18688 - http://www.yacy.net/yacy/News.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18690 - http://www.securityfocus.com/bid/12104
CVE ID: CVE-2004-2652 State: PUBLISHED Published: 2005-12-18T22:00:00 Last Updated: 2024-08-08T01:36:24.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remote attackers to cause a denial of service (crash) via packets with invalid TCP/IP options, which trigger a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1012656 - http://www.frsirt.com/exploits/20041222.angelDust.c.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/18689 - http://www.securityfocus.com/bid/12084 - ht
gelDust.c.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/18689 - http://www.securityfocus.com/bid/12084 - http://www.securiteam.com/exploits/6X00L20C0S.html - http://www.osvdb.org/12578 - http://www.snort.org/arc_news/ - http://secunia.com/advisories/13664 - http://taosecurity.blogspot.com/2004/12/details-on-snort-dos-condition-you-may.html
CVE ID: CVE-2004-2653 State: PUBLISHED Published: 2006-01-09T18:00:00Z Last Updated: 2024-09-17T03:42:37.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in PD9 Software MegaBBS 2.0 and 2.1 allows attackers to gain privileges via unknown vectors involving (1) admin/userlevelmembers-edit.asp and (2) admin/edit-groups.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.pd9soft.com/megabbs/forums/thread-view.asp?tid=4924
CVE ID: CVE-2004-2654 State: PUBLISHED Published: 2006-02-24T11:00:00 Last Updated: 2024-08-08T01:36:24.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors that trigger a null dereference. NOTE: in a followup advisory, a researcher claimed that the issue was a buffer overflow that was not fixed in STABLE6. However, the vendor's bug report clearly shows that the researcher later retracted this claim, because the tested product was actually STABLE5. Additional Analyst Notes: - CVE Program Containe
retracted this claim, because the tested product was actually STABLE5. Additional Analyst Notes: - CVE Program Container: References: - http://www.squid-cache.org/bugs/show_bug.cgi?id=972 - http://securitytracker.com/id?1011214 - http://www.osvdb.org/9801 - http://www.attrition.org/pipermail/vim/2006-February/000570.html - http://secunia.com/advisories/12754 - http://secunia.com/advisories/12508 - http://www.securitylab.ru/47881.html
CVE ID: CVE-2004-2655 State: PUBLISHED Published: 2006-04-08T01:00:00 Last Updated: 2024-08-08T01:36:24.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen. Additional Analyst Notes: - CVE Program Container: References: - http://www.jwz.org/xscreensaver/changelog.html - http://support.avaya.com/elmodocs2/security/ASA-2006-107.htm - http://www.derkeiler.com/Newsgroups/comp.os.linux.security/2004-08/0018.htm
ya.com/elmodocs2/security/ASA-2006-107.htm - http://www.derkeiler.com/Newsgroups/comp.os.linux.security/2004-08/0018.html - http://www.novell.com/linux/security/advisories/2006_23_sr.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:071 - http://secunia.com/advisories/20782 - http://www.redhat.com/support/errata/RHSA-2006-0498.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10096 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188149 - ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc - http://secunia.com/advisories/22080 - http://secunia.com/advisories/20456 - http://securitytracker.com/id?1016151 -
sc - http://secunia.com/advisories/22080 - http://secunia.com/advisories/20456 - http://securitytracker.com/id?1016151 - http://www.securityfocus.com/bid/17471 - https://usn.ubuntu.com/269-1/ - http://securitytracker.com/id?1016150 - http://secunia.com/advisories/20226
CVE ID: CVE-2004-2656 State: PUBLISHED Published: 2006-04-13T10:00:00 Last Updated: 2024-08-08T01:36:24.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) before R_2_5_0_41 allow remote attackers to inject arbitrary web script or HTML via (1) the topic parameter in search.pl and (2) the filter parameter in submit.pl. Additional Analyst Notes: - CVE Program Container: References: - http://www.slashcode.com/slash/04/12/20/1946225.shtml?tid=11&tid=5&tid=4 - http://www.osvdb.org/21874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18508 - http://www.os
11&tid=5&tid=4 - http://www.osvdb.org/21874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18508 - http://www.osvdb.org/21875 - http://secunia.com/advisories/13491 - http://archives.neohapsis.com/archives/bugtraq/2004-12/0170.html - http://www.securityfocus.com/bid/11993
CVE ID: CVE-2004-2657 State: PUBLISHED Published: 2006-04-20T22:00:00 Last Updated: 2024-08-08T01:36:25.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some records of user activity even after uninstalling, which allows local users who share a Windows profile to view the records after a new installation of Firefox, as reported for the list of Passwords Never Saved web sites. NOTE: The vendor has disputed this issue, stating that "The uninstaller is primarily there to uninstall the application. It is not there to uninstall user data. For the moment I will stick by my module-owner decision. Additional Analyst Notes
t is not there to uninstall user data. For the moment I will stick by my module-owner decision. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431063/100/0/threaded - https://bugzilla.mozilla.org/show_bug.cgi?id=330884 - http://www.securityfocus.com/archive/1/431021/100/0/threaded - https://bugzilla.mozilla.org/show_bug.cgi?id=234680
CVE ID: CVE-2004-2658 State: PUBLISHED Published: 2006-04-26T22:00:00 Last Updated: 2024-08-08T01:36:24.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: resmgr in SUSE CORE 9 does not properly identify terminal names, which allows local users to spoof terminals and login types. Additional Analyst Notes: - CVE Program Container: References: - http://support.novell.com/techcenter/psdb/fa6c6a3e792bf79b1d85821c689ea578.html
CVE ID: CVE-2004-2659 State: PUBLISHED Published: 2006-04-29T10:00:00 Last Updated: 2024-08-08T01:36:25.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera offers an Open button to verify that a user wishes to execute a downloaded file, which allows user-assisted remote attackers to construct a race condition that tricks a user into clicking Open via a request for a different mouse or keyboard action very shortly before the Open dialog appears. NOTE: this is a different issue than CVE-2005-2407. Additional Analyst Notes: - CVE Program Container: References: - http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/ - http://archives.neohapsis.com/archives/f
: - http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/ - http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.html
CVE ID: CVE-2004-2660 State: PUBLISHED Published: 2006-05-26T22:00:00 Last Updated: 2024-08-08T01:36:25.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in direct-io.c in Linux kernel 2.6.x before 2.6.10 allows local users to cause a denial of service (memory consumption) via certain O_DIRECT (direct IO) write requests. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10165 - http://www.redhat.com/support/errata/RHSA-2006-0617.html - http://secunia.com/advisories/21605 - http://secunia.com/advisories/22174 - http://linux.bkbits.net:8080/linux-2.6/cset%404182a613oV
ia.com/advisories/21605 - http://secunia.com/advisories/22174 - http://linux.bkbits.net:8080/linux-2.6/cset%404182a613oVsK0-8eCWpyYFrUf8rhLA - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.10 - http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm - http://www.securityfocus.com/bid/19665 - http://secunia.com/advisories/22093 - http://www.debian.org/security/2006/dsa-1184
CVE ID: CVE-2004-2661 State: PUBLISHED Published: 2006-08-17T23:00:00 Last Updated: 2024-08-08T01:36:24.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Soft3304 04WebServer before 1.41 does not properly check file names, which allows remote attackers to obtain sensitive information (CGI source code). Additional Analyst Notes: - CVE Program Container: References: - http://www.soft3304.net/04WebServer/Security.html
CVE ID: CVE-2004-2662 State: PUBLISHED Published: 2006-08-17T23:00:00 Last Updated: 2024-08-08T01:36:25.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Soft3304 04WebServer before 1.41 allows remote attackers to cause a denial of service (resource consumption or crash) via certain data related to OpenSSL, which causes a thread to terminate but continue to hold resources. Additional Analyst Notes: - CVE Program Container: References: - http://www.soft3304.net/04WebServer/Security.html
CVE ID: CVE-2004-2663 State: PUBLISHED Published: 2006-08-18T19:55:00 Last Updated: 2024-08-08T01:36:24.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) SetDebugging and (2) RunEgatherer methods in IBM Access Support eGatherer ActiveX control 2.0.0.16 allow remote attackers to create files with arbitrary content, as demonstrated by creating a .hta file in a Startup folder. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16428 - http://www.eeye.com/html/research/advisories/AD20040615B.html - http://marc.info/?l=bugtraq&m=108746693619324&w=2 - http://secunia.com/advisories/11072 - http://marc.info/?l=f
B.html - http://marc.info/?l=bugtraq&m=108746693619324&w=2 - http://secunia.com/advisories/11072 - http://marc.info/?l=full-disclosure&m=108741557604568&w=2 - http://www.osvdb.org/7090 - http://research.eeye.com/html/advisories/published/AD20040615B.html - http://www.securityfocus.com/bid/10562
CVE ID: CVE-2004-2664 State: PUBLISHED Published: 2006-09-07T00:00:00Z Last Updated: 2024-09-16T16:18:32.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: John Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive information via direct requests to certain scripts that result in an undefined value of ADODB_DIR, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://phplens.com/lens/adodb/docs-adodb.htm#changes