Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-1473 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17470 - http://secunia.com/advisories/12635 - http://securityresponse.symant
xchange.xforce.ibmcloud.com/vulnerabilities/17470 - http://secunia.com/advisories/12635 - http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html - http://marc.info/?l=bugtraq&m=109588376426070&w=2 - http://www.securityfocus.com/bid/11237 - http://www.osvdb.org/10205 - http://www.kb.cert.org/vuls/id/329230
CVE ID: CVE-2004-1474 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:24.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12635 - http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html - http://www.kb.cert.org/vuls/id/173910 - http://marc.info/?l=bugtr
mantec.com/avcenter/security/Content/2004.09.22.html - http://www.kb.cert.org/vuls/id/173910 - http://marc.info/?l=bugtraq&m=109588376426070&w=2 - http://www.osvdb.org/10206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17471 - http://www.securityfocus.com/bid/11237
CVE ID: CVE-2004-1475 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via (1) long VideoCD vcd:// MRLs or (2) long subtitle lines. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11206 - http://xinehq.de/index.php/security/XSA-2004-4 - http://www.securityfocus.com/archive/1/375485/2004-09-02/2004-09-08/0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17432 - http://security.gentoo.org/glsa/glsa-200408-18.xml - https://exchange.x
ange.xforce.ibmcloud.com/vulnerabilities/17432 - http://security.gentoo.org/glsa/glsa-200408-18.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17430 - http://www.gentoo.org/security/en/glsa/glsa-200409-30.xml
CVE ID: CVE-2004-1476 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11206 - http://xinehq.de/index.php/security/XSA-2004-4 - http://www.securityfocus.com/archive/1/375485/2004-09-02/2004-09-08/0 - http://www.gentoo.org/security/en/glsa/glsa-200409-30.xml - https://exchange.xforce.ibmcloud.com/vulner
2/2004-09-08/0 - http://www.gentoo.org/security/en/glsa/glsa-200409-30.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17431
CVE ID: CVE-2004-1477 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:24.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Management Console in JRun 4.0 allows remote attackers to execute arbitrary web script or HTML and possibly hijack a user's session. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/668206 - http://marc.info/?l=bugtraq&m=109621995623823&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17483 - http://www.securityfocus.com/bid/11245 - http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html - http://secunia.com/
curityfocus.com/bid/11245 - http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html - http://secunia.com/advisories/12638/
CVE ID: CVE-2004-1478 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack a user's HTTP session. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17481 - http://marc.info/?l=bugtraq&m=109621995623823&w=2 - http://www.securityfocus.com/bid/11245 - http://www.kb.cert.org/vuls/id/584958 - http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html - http://secunia.com/advisories/12638/
CVE ID: CVE-2004-1479 State: REJECTED Published: 2005-02-13T05:00:00 Last Updated: 2005-02-21T10:00:00 Description: No description available.
CVE ID: CVE-2004-1480 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:24.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the management station in HP StorageWorks Command View XP 1.8B and earlier allows remote attackers to bypass access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBST01071 - http://securitytracker.com/id?1011407 - http://www.securityfocus.com/bid/11249 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17490
CVE ID: CVE-2004-1481 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11309 - http://marc.info/?l=ntbugtraq&m=109708374115061&w=2 - http://www.service.real.com/help/faq/security/040928_play
/11309 - http://marc.info/?l=ntbugtraq&m=109708374115061&w=2 - http://www.service.real.com/help/faq/security/040928_player/EN/ - http://secunia.com/advisories/12672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17549
CVE ID: CVE-2004-1482 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:24.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sbuf_getmsg function in BNC incorrectly handles backspace characters, which could allow remote attackers to bypass authentication and gain access to arbitrary scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11355 - http://secunia.com/advisories/12770/ - http://www.gentoo.org/security/en/glsa/glsa-200410-13.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/17672 - http://www.osvdb.org/10596 - http://www.gotbnc.com/changes.html#2.8.9
CVE ID: CVE-2004-1483 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:24.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unknown vulnerabilities in the ActiveX and HTML file browsers in Symantec Clientless VPN Gateway 4400 Series 5.0 have unknown attack vectors and unknown impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10903 - http://www.kb.cert.org/vuls/id/760256 - http://www.osvdb.org/8508 - ftp://ftp.symantec.com/public/english_us_canada/products/sym_clientless_vpn/sym_clientless_vpn_5/updates/hf3-readme.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16933 - http:
ess_vpn/sym_clientless_vpn_5/updates/hf3-readme.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16933 - http://secunia.com/advisories/12254/
CVE ID: CVE-2004-1484 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:23.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the _msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy client and run with the -ly option, allows remote attackers or local users to execute arbitrary code via format string specifiers in a syslog message. Additional Analyst Notes: - CVE Program Container: References: - http://www.nosystem.com.ar/advisories/advisory-07.txt - http://secunia.com/advisories/12936/ - http://www.dest-unreach.org/socat/advisory/socat-adv-1.html - http://www.securityfocus.com/bid/11505 - h
sories/12936/ - http://www.dest-unreach.org/socat/advisory/socat-adv-1.html - http://www.securityfocus.com/bid/11505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17822 - http://www.gentoo.org/security/en/glsa/glsa-200410-26.xml
CVE ID: CVE-2004-1485 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:24.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11527 - http://marc.info/?l=bugtraq&m=109882085912915&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17878
CVE ID: CVE-2004-1486 State: PUBLISHED Published: 2005-02-13T05:00:00 Last Updated: 2024-08-08T00:53:24.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Serviceguard A.11.13 through A.11.16.00 and Cluster Object Manager A.01.03 and B.01.04 through B.03.00.01 on HP-UX, Serviceguard A.11.14.04 and A.11.15.04 and Cluster Object Manager B.02.01.02 and B.02.02.02 on HP Linux, allow remote attackers to gain privileges via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11507 - http://secunia.com/advisories/12946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17867 - http://marc
d/11507 - http://secunia.com/advisories/12946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17867 - http://marc.info/?l=bugtraq&m=109893515704267&w=2
CVE ID: CVE-2004-1487 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-08T00:53:24.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-771.html - http://www.securityfocus.com/bid/11871 - http://marc.info/?l=bugtraq&m=110269474112384&w=2 - https://usn.ubuntu.com/145-1/ - https://exchange.xforce.ibmcloud.com/vulnerabiliti
fo/?l=bugtraq&m=110269474112384&w=2 - https://usn.ubuntu.com/145-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18420 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11682 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755 - http://securitytracker.com/id?1012472
CVE ID: CVE-2004-1488 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-08T00:53:23.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-771.html - http://www.securityfocus.com/bid/11871 - http://marc.info/?l=bugtraq&m=110269474112384&w=2 - https://usn.ubuntu.com/145-1/ - http://www.novell.com/linux/security/advisories/2006_16_sr.htm
q&m=110269474112384&w=2 - https://usn.ubuntu.com/145-1/ - http://www.novell.com/linux/security/advisories/2006_16_sr.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18421 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9750 - http://secunia.com/advisories/20960 - http://securitytracker.com/id?1012472
CVE ID: CVE-2004-1489 State: PUBLISHED Published: 2005-02-17T05:00:00 Last Updated: 2024-08-08T00:53:24.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 7.54 and earlier does not properly limit an applet's access to internal Java packages from Sun, which allows remote attackers to gain sensitive information, such as user names and the installation directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/linux/changelogs/754u1/ - http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029044.html - http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml
CVE ID: CVE-2004-1490 State: PUBLISHED Published: 2005-02-17T05:00:00 Last Updated: 2024-08-08T00:53:24.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via dots and non-breaking spaces (ASCII character code 160) in the (1) Content-Disposition or (2) Content-Type headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.opera.com/linux/changelogs/754u1/ - http://www.securityfocus.com/bid/11883 - http://secunia.com/advisories/12981 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18423 - http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml - http://sec
hange.xforce.ibmcloud.com/vulnerabilities/18423 - http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml - http://secunia.com/secunia_research/2004-19/advisory/
CVE ID: CVE-2004-1491 State: PUBLISHED Published: 2005-02-17T05:00:00 Last Updated: 2024-08-08T00:53:24.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a shortcut or launcher that contains an Exec entry. Additional Analyst Notes: - CVE Program Container: References: - http://lists.suse.com/archive/suse-security-announce/2005-Mar/0007.html - http://www.securityfocus.com/bid/11901 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18457 - http://www.zone-h.org/advisories/read/id=6503 - http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml
ities/18457 - http://www.zone-h.org/advisories/read/id=6503 - http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml - http://secunia.com/advisories/13447/ - http://www.opera.com/linux/changelogs/754u2/
CVE ID: CVE-2004-1492 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (game exit) via a data packet that contains a large size specifier, which causes a large memory allocation to fail. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109889705116038&w=2 - http://www.securityfocus.com/bid/11550 - http://secunia.com/advisories/13008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17908
CVE ID: CVE-2004-1493 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (server crash) via multiple connections with long nicknames, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109889705116038&w=2 - http://www.securityfocus.com/bid/11550 - http://secunia.com/advisories/13008 - http://packetstormsecurity.nl/0410-advisories/masterOrionIII.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/17884
CVE ID: CVE-2004-1494 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Screen Fetch option in XDICT 2002 through 2005 allows remote attackers to cause a denial of service ( CPU consumption or application exit) and possibly execute arbitrary code via a long string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17929 - http://marc.info/?l=bugtraq&m=109933696831725&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028241.html - http://secway.org/Advisory/Ad20041026EN.txt
CVE ID: CVE-2004-1495 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Repair Archive command in WinRAR 3.40 allows remote attackers to cause a denial of service (application crash) via a corrupt ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109941351432699&w=2 - http://secunia.com/advisories/13070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17937 - http://www.rarlabs.com/rarnew.htm - http://www.securityfocus.com/bid/11581
CVE ID: CVE-2004-1496 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Web Forums Server 1.6 and 2.0 Power Pack allows remote attackers to read arbitrary files via a URL containing (1) "..\" (dot dot backslash), (2) "../" (dot dot slash), (3) "/%2E%2E%5C" (encoded dot dot backslash), or (4) "%2E%2E%2F" (encoded dot dot slash). Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109943267328552&w=2
CVE ID: CVE-2004-1497 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109943267328552&w=2
CVE ID: CVE-2004-1498 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary SQL commands via the messageToUserAccNum parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13079 - http://marc.info/?l=bugtraq&m=109943858026542&w=2 - http://www.hat-squad.com/en/000077.html - http://www.securityfocus.com/bid/11586
CVE ID: CVE-2004-1499 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary web script or HTML via the Subject field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13079 - http://marc.info/?l=bugtraq&m=109943858026542&w=2 - http://www.hat-squad.com/en/000077.html - http://www.securityfocus.com/bid/11586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17943
CVE ID: CVE-2004-1500 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:23.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service (application crash) via format string specifiers in (1) a nickname or (2) a message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11610 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17972 - http://secunia.com/advisories/17317 - http://aluigi.altervista.org/adv/lithfs-adv.txt - http://secunia.com/advisories/13116/ - http://marc
/advisories/17317 - http://aluigi.altervista.org/adv/lithfs-adv.txt - http://secunia.com/advisories/13116/ - http://marc.info/?l=bugtraq&m=109969394601331&w=2
CVE ID: CVE-2004-1501 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: The webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) by sending a POST request with a large Content-Length value, then disconnecting without sending that amount of data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17977 - http://marc.info/?l=bugtraq&m=109976745017459&w=2
CVE ID: CVE-2004-1502 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (socket exhaustion) via a Telnet request to an IP address of the proxy's network interface, which causes a loop. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17979 - http://marc.info/?l=bugtraq&m=109976745017459&w=2
CVE ID: CVE-2004-1503 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the InitialDirContext in Java Runtime Environment (JRE) 1.4.2, 1.5.0 and possibly other versions allows remote attackers to cause a denial of service (Java exception and failed DNS requests) via a large number of DNS requests, which causes the xid variable to wrap around and become negative. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13142 - http://marc.info/?l=bugtraq&m=109994063331773&w=2 - http://www.securityfocus.com/bid/11619 - https://exchange.xforce
2 - http://marc.info/?l=bugtraq&m=109994063331773&w=2 - http://www.securityfocus.com/bid/11619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17990
CVE ID: CVE-2004-1504 State: PUBLISHED Published: 2005-02-19T05:00:00 Last Updated: 2024-08-08T00:53:24.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: The displaycontent function in config.php for Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to gain sensitive information via a blank show parameter, which reveals the installation path in an error message, as demonstrated using index.php. Additional Analyst Notes: - CVE Program Container: References: - http://echo.or.id/adv/adv08-y3dips-2004.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/18006 - http://marc.info/?l=bugtraq&m=110004150430309&w=2