Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-2728 State: PUBLISHED Published: 2007-10-09T10:00:00 Last Updated: 2024-08-08T01:36:25.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the FTP server of Hummingbird Connectivity 7.1 and 9.0 allows remote, authenticated users to cause a denial of service (application crash) via a long argument to the XCWD command. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/11133 - http://www.securityfocus.com/bid/11542 - http://securitytracker.com/id?1011942 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17855 - http://secunia.com/advisories/12984 - http://www.uniras.gov.uk/vuls/2004/841713/index.htm
CVE ID: CVE-2004-2729 State: PUBLISHED Published: 2007-10-09T10:00:00 Last Updated: 2024-08-08T01:36:25.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inetd32 Administration Tool of Hummingbird Connectivity 7.1 and 9.0 allows local users to execute arbitrary code by changing the program for handling incoming connections. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17854 - http://www.osvdb.org/11132 - http://securitytracker.com/id?1011942 - http://www.securityfocus.com/bid/11539 - http://secunia.com/advisories/12984 - http://www.uniras.gov.uk/vuls/2004/841713/index.htm
CVE ID: CVE-2004-2730 State: PUBLISHED Published: 2007-10-09T10:00:00 Last Updated: 2024-08-08T01:36:25.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before 1.26, (6) PsLoglist before 2.51, (7) PsPasswd before 1.21, (8) PsService before 2.12, (9) PsSuspend before 1.05, and (10) PsShutdown before 2.32, does not properly disconnect from remote IPC$ and ADMIN$ shares, which allows local users to access the shares with elevated privileges by using the existing share mapping. Additional Analyst Notes: - CVE Program Container: Re
ares with elevated privileges by using the existing share mapping. Additional Analyst Notes: - CVE Program Container: References: - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=28304 - http://www.securityfocus.com/bid/10759 - http://secunia.com/advisories/12108 - http://securitytracker.com/id?1010737 - http://www.osvdb.org/8140 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16743
CVE ID: CVE-2004-2731 State: PUBLISHED Published: 2007-10-09T10:00:00 Last Updated: 2024-08-08T01:36:25.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Sbus PROM driver (drivers/sbus/char/openprom.c) for the Linux kernel 2.4.x up to 2.4.27, 2.6.x up to 2.6.7, and possibly later versions, allow local users to execute arbitrary code by specifying (1) a small buffer size to the copyin_string function or (2) a negative buffer size to the copyin function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11981 - http://www.osvdb.org/7345 - http://securitytracker.com/id?1010617 - http://www.osvdb.org/8363 -
.com/advisories/11981 - http://www.osvdb.org/7345 - http://securitytracker.com/id?1010617 - http://www.osvdb.org/8363 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0463.html - http://www.debian.org/security/2008/dsa-1503 - http://secunia.com/advisories/29058 - http://www.securiteam.com/unixfocus/5GP0515DFW.html - http://www.securityfocus.com/bid/10632
CVE ID: CVE-2004-2732 State: PUBLISHED Published: 2007-10-09T10:00:00 Last Updated: 2024-08-08T01:36:25.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: nbmember.cgi in Netbilling 2.0 allows remote attackers to obtain sensitive information via the cmd=test option, which can be leveraged to determine the access key. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11504 - http://securitytracker.com/id?1011881 - http://web.archive.org/web/20041106200147/http://www.it-helpnet.de/bugless/bugs.php?mode=show&id=8&SID= - http://www.osvdb.org/10902 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17865
CVE ID: CVE-2004-2733 State: PUBLISHED Published: 2007-10-09T10:00:00 Last Updated: 2024-08-08T01:36:25.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to (1) block arbitrary IP addresses via pop_up_ip_blocking.asp or (2) modify topics via pop_up_topic_admin.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1010012 - http://www.osvdb.org/5751 - http://www.securityfocus.com/bid/10255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16030 - http://secunia.com/advisories/11525 - http://www.osvdb.org/5750 - https://exchange.xfo
cloud.com/vulnerabilities/16030 - http://secunia.com/advisories/11525 - http://www.osvdb.org/5750 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16031 - http://archives.neohapsis.com/archives/fulldisclosure/2004-04/1119.html
CVE ID: CVE-2004-2734 State: PUBLISHED Published: 2007-10-09T10:00:00 Last Updated: 2024-08-08T01:36:25.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: webadmin-apache.conf in Novell Web Manager of Novell NetWare 6.5 uses an uppercase Alias tag with an inconsistent lowercase directory tag for a volume, which allows remote attackers to bypass access control to the WEB-INF folder. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40478 - http://www.osvdb.org/9103 - http://www.securityfocus.com/bid/11000 - http://securitytracker.com/id?1011012 - http://secunia.com/advisories/12049 - http://support.novell.com/cgi
/bid/11000 - http://securitytracker.com/id?1011012 - http://secunia.com/advisories/12049 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10094233.htm
CVE ID: CVE-2004-2735 State: PUBLISHED Published: 2007-10-09T10:00:00 Last Updated: 2024-08-08T01:36:25.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in P4DB 2.01 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) SET_PREFERENCES parameter in SetPreferences.cgi; (2) BRANCH parameter in branchView.cgi; (3) FSPC and (4) COMPLETE parameters in changeByUsers.cgi; (5) FSPC, (6) LABEL, (7) EXLABEL, (8) STATUS, (9) MAXCH, (10) FIRSTCH, (11) CHOFFSETDISP, (12) SEARCHDESC, (13) SEARCH_INVERT, (14) USER, (15) GROUP, and (16) CLIENT parameters in changeList.cgi; (17) CH parameter in changeView.cgi; (18) USER para
(14) USER, (15) GROUP, and (16) CLIENT parameters in changeList.cgi; (17) CH parameter in changeView.cgi; (18) USER parameter in clientList.cgi; (19) CLIENT parameter in clientView.cgi; (20) FSPC parameter in depotTreeBrowser.cgi; (21) FSPC parameter in depotStats.cgi; (22) FSPC, (23) REV, (24) ACT, (25) FSPC2, (26) REV2, (27) CH, and (28) CONTEXT parameters in fileDiffView.cgi; (29) FSPC and (30) REV parameters in fileDownLoad.cgi; (31) FSPC, (32) LISTLAB, and (33) SHOWBRANCH parameters in fileLogView.cgi; (34) FSPC and (35) LABEL parameters in fileSearch.cgi; (36) FSPC, (37) REV, and (38) FORCE parameters in fileViewer.cgi; (39) FSPC parameter in filesChangedSince.cgi; (40) GROUP parameter
37) REV, and (38) FORCE parameters in fileViewer.cgi; (39) FSPC parameter in filesChangedSince.cgi; (40) GROUP parameter in groupView.cgi; (41) TYPE, (42) FSPC, and (43) REV parameters in htmlFileView.cgi; (44) CMD parameter in javaDataView.cgi; (45) JOBVIEW and (46) FLD parameters in jobList.cgi; (47) JOB parameter in jobView.cgi; (48) LABEL1 and (49) LABEL2 parameters in labelDiffView.cgi; (50) LABEL parameter in labelView.cgi; (51) FSPC parameter in searchPattern.cgi; (52) TYPE, (53) FSPC, and (54) REV parameters in specialFileView.cgi; (55) GROUPSONLY parameter in userList.cgi; or (56) USER parameter in userView.cgi. Additional Analyst Notes: - CVE Program Container: References: - http:/
ist.cgi; or (56) USER parameter in userView.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5901 - http://securitytracker.com/id?1010078 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16070 - http://secunia.com/advisories/11559 - http://www.weak.org/~jammer/p4db_v2.01_patch_4.txt - http://archives.neohapsis.com/archives/bugtraq/2004-05/0046.html - http://www.securityfocus.com/bid/10286
CVE ID: CVE-2004-2736 State: PUBLISHED Published: 2007-10-09T10:00:00 Last Updated: 2024-08-08T01:36:25.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Polar HelpDesk 3.0 allows remote attackers to bypass authentication by setting the UserId and UserType values in a cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16778 - http://www.securityfocus.com/bid/10775 - http://www.osvdb.org/8168 - http://www.securiteam.com/windowsntfocus/5OP0K0ADGA.html - http://secunia.com/advisories/12120
CVE ID: CVE-2004-2737 State: PUBLISHED Published: 2007-10-09T10:00:00 Last Updated: 2024-08-08T01:36:25.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in problist.asp in NetSupport DNA HelpDesk 1.01 allows remote attackers to execute arbitrary SQL commands via the where parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16782 - http://www.securiteam.com/windowsntfocus/5PP0L0ADGE.html - http://secunia.com/advisories/12119 - http://www.osvdb.org/8169 - http://www.securityfocus.com/bid/10772
CVE ID: CVE-2004-2738 State: PUBLISHED Published: 2007-10-09T10:00:00 Last Updated: 2024-08-08T01:36:25.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in check_user_id.php in ZeroBoard 4.1pl4 and earlier allows remote attackers to inject arbitrary web script or HTML via the user_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110391024404947&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030224.html - http://www.osvdb.org/12582 - http://secunia.com/advisories/13649 - http://www.securityfocus.com/bid/12103 - https://exchange.xforce.ibmcloud.com/vulnera
p://secunia.com/advisories/13649 - http://www.securityfocus.com/bid/12103 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18680 - http://securitytracker.com/id?1012677
CVE ID: CVE-2004-2739 State: PUBLISHED Published: 2007-10-09T10:00:00 Last Updated: 2024-08-08T01:36:25.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setup routine (setup.php) in PHProjekt 4.2.1 and earlier allows remote attackers to modify system configuration via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18320 - http://www.securityfocus.com/bid/11797 - http://www.gentoo.org/security/en/glsa/glsa-200412-06.xml - http://www.novell.com/linux/security/advisories/2004_04_sr.html - http://securitytracker.com/id?1012369 - http://secunia.com/advisories/13355 - http://www.osvdb.
sories/2004_04_sr.html - http://securitytracker.com/id?1012369 - http://secunia.com/advisories/13355 - http://www.osvdb.org/12174 - http://www.phprojekt.com/modules.php?op=modload&name=News&file=article&sid=189&mode=thread&order=0
CVE ID: CVE-2004-2740 State: PUBLISHED Published: 2007-10-09T10:00:00 Last Updated: 2024-08-08T01:36:25.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in authform.inc.php in PHProjekt 4.2.3 and earlier allows remote attackers to include arbitrary PHP code via a URL in the path_pre parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200412-27.xml - http://secunia.com/advisories/13660 - http://www.osvdb.org/12613 - http://www.securityfocus.com/bid/12116 - http://securitytracker.com/id?1012708 - http://www.phprojekt.com/modules.php?op=modload&name=News&file=article&sid=19
- http://securitytracker.com/id?1012708 - http://www.phprojekt.com/modules.php?op=modload&name=News&file=article&sid=193 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18683
CVE ID: CVE-2004-2741 State: PUBLISHED Published: 2007-10-09T10:00:00 Last Updated: 2024-08-08T01:36:25.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "help window" (help.php) in Horde Application Framework 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) module, (2) topic, or (3) module parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/11164 - http://www.securityfocus.com/bid/11546 - http://secunia.com/advisories/12992 - http://lists.horde.org/archives/announce/2004/000107.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17881 - http://c
sts.horde.org/archives/announce/2004/000107.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17881 - http://cvs.horde.org/diff.php/horde/templates/help/index.inc?r1=1.9.2.4&r2=1.9.2.5&ty=u - http://securitytracker.com/id?1011959
CVE ID: CVE-2004-2742 State: PUBLISHED Published: 2007-10-09T10:00:00 Last Updated: 2024-08-08T01:36:25.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the report viewer in Crystal Enterprise 8.5, 9, and 10 allows remote attackers to inject arbitrary web script or HTML via script in the URL to a report (RPT) file. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1012703 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18684 - http://www.osvdb.org/12596 - http://www.securityfocus.com/bid/12107 - http://support.businessobjects.com/library/kbase/articles/c2016559.asp - http://secunia.
w.securityfocus.com/bid/12107 - http://support.businessobjects.com/library/kbase/articles/c2016559.asp - http://secunia.com/advisories/13644
CVE ID: CVE-2004-2743 State: PUBLISHED Published: 2007-10-09T10:00:00 Last Updated: 2024-08-08T01:36:25.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: upload.cgi in Mega Upload Progress Bar before 1.45 allows remote attackers to copy or overwrite arbitrary files via unspecified parameters related to names of uploaded files. Additional Analyst Notes: - CVE Program Container: References: - http://www.raditha.com/blog/archives/000547.html - http://securitytracker.com/id?1011960 - http://www.securityfocus.com/bid/11547 - http://secunia.com/advisories/12993 - http://sourceforge.net/project/shownotes.php?release_id=277989 - http://www.osvdb.org/11171 - https://exchange.xforce.ibmc
tp://sourceforge.net/project/shownotes.php?release_id=277989 - http://www.osvdb.org/11171 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17882
CVE ID: CVE-2004-2744 State: PUBLISHED Published: 2007-10-09T10:00:00 Last Updated: 2024-08-08T01:36:25.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Tincan Limited PHPlist before 2.8.12 has unknown impact and attack vectors, related to a "security update release." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12994 - http://sourceforge.net/project/shownotes.php?release_id=277981 - http://securitytracker.com/id?1011958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17883 - http://www.osvdb.org/11172
CVE ID: CVE-2004-2745 State: PUBLISHED Published: 2007-10-31T22:00:00 Last Updated: 2024-08-08T01:36:25.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Anteco Visual Technologies OwnServer 1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9461 - http://securityreason.com/securityalert/3329 - http://www.securityfocus.com/archive/1/350421/30/21610/threaded - http://www.securitytracker.com/id?1008800
CVE ID: CVE-2004-2746 State: PUBLISHED Published: 2007-11-08T20:00:00 Last Updated: 2024-08-08T01:36:25.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/350028/30/21640/threaded - http://www.securityfocus.com/bid/9438 - http://securitytracker.com/id?1008745 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14860 - http://www.pensacolawebdesigns.com/xtremeasp/readmore.asp - http://www.osv
e.xforce.ibmcloud.com/vulnerabilities/14860 - http://www.pensacolawebdesigns.com/xtremeasp/readmore.asp - http://www.osvdb.org/3585 - http://securityreason.com/securityalert/3346 - http://www.tripbit.org/advisories/TA-150104.txt - http://secunia.com/advisories/10659
CVE ID: CVE-2004-2747 State: PUBLISHED Published: 2007-11-08T20:00:00 Last Updated: 2024-08-08T01:36:25.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and possibly earlier versions, allows remote authenticated users to determine the existence of arbitrary files via a .. (dot dot) in the DEL command, which triggers different error messages depending on whether the file exists or not. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1008756 - http://www.securityfocus.com/archive/1/350224/30/21640/threaded - http://secunia.com/advisories
tracker.com/id?1008756 - http://www.securityfocus.com/archive/1/350224/30/21640/threaded - http://secunia.com/advisories/10661 - http://www.securityfocus.com/bid/9443 - http://www.osvdb.org/3574
CVE ID: CVE-2004-2748 State: PUBLISHED Published: 2007-11-08T20:00:00 Last Updated: 2024-08-08T01:36:25.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the installation path via an invalid profileid parameter, which leaks the pathname in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/350419/30/21610/threaded - http://secunia.com/advisories/10689 - http://www.securitytracker.com/id?1008799 - http://www.osvdb.org/3680 - http://securityreason.com/securityalert/3354 - http://www.securityfocus.com/
om/id?1008799 - http://www.osvdb.org/3680 - http://securityreason.com/securityalert/3354 - http://www.securityfocus.com/bid/9460
CVE ID: CVE-2004-2749 State: PUBLISHED Published: 2007-11-14T02:00:00 Last Updated: 2024-08-08T01:36:25.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as used in HomePortal and other product lines, allows remote attackers to read arbitrary files via a .. (dot dot) in the return parameter. NOTE: this issue was reported as XSS, but this might be a terminology error. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14894 - http://secunia.com/advisories/10666 - http://www.securityfocus.com/bid/9463 - http://www.osvdb.org/3683 -
ities/14894 - http://secunia.com/advisories/10666 - http://www.securityfocus.com/bid/9463 - http://www.osvdb.org/3683 - http://securitytracker.com/id?1008798 - http://archives.neohapsis.com/archives/bugtraq/2004-01/0179.html
CVE ID: CVE-2004-2750 State: PUBLISHED Published: 2007-11-14T02:00:00Z Last Updated: 2024-09-17T01:56:08.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in browser.php in JBrowser 1.0 through 2.1 allows remote attackers to read arbitrary files via the directory parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9535 - http://securitytracker.com/id?1008909
CVE ID: CVE-2004-2751 State: PUBLISHED Published: 2007-11-14T02:00:00 Last Updated: 2024-08-08T01:36:25.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the members_list module in PostNuke 0.726, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the sortby parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3334 - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0117.html - http://securitytracker.com/id?1008629 - http://lists.postnuke.com/pipermail/postnuke-security/2004q1/000001.html - http://community.postnuke.com/Article2535.htm - http://www.derkeiler.com/Ma
rmail/postnuke-security/2004q1/000001.html - http://community.postnuke.com/Article2535.htm - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0015.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11500 - http://www.gulftech.org/01032004.php
CVE ID: CVE-2004-2752 State: PUBLISHED Published: 2007-11-14T02:00:00Z Last Updated: 2024-09-17T02:21:24.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Downloads module in PostNuke up to 0.726, and possibly later versions, allows remote attackers to inject arbitrary HTML and web script via the ttitle parameter in a viewdownloaddetails action. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1008629 - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0015.html - http://www.gulftech.org/01032004.php
CVE ID: CVE-2004-2753 State: PUBLISHED Published: 2007-11-14T11:00:00 Last Updated: 2024-08-08T01:36:25.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SharedX in HP-UX B.11.00, B.11.11, and B.11.22 allows local users to access unspecified files or cause a denial of service via unknown vectors related to handling of "files in a potentially insecure manner." Additional Analyst Notes: - CVE Program Container: References: - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0401-307 - http://www.securitytracker.com/id?1008712 - http://www.ciac.org/ciac/bulletins/o-058.shtml - http://www.securityfocus.com/bid/9420 - http://www1.itrc.hp.com/
8712 - http://www.ciac.org/ciac/bulletins/o-058.shtml - http://www.securityfocus.com/bid/9420 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0401-307 - http://secunia.com/advisories/10657 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14838
CVE ID: CVE-2004-2754 State: PUBLISHED Published: 2007-11-15T23:00:00 Last Updated: 2024-08-08T01:36:25.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SSI.php in YaBB SE 1.5.4, 1.5.3, and possibly other versions before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the ID_MEMBER parameter to the (1) recentTopics and (2) welcome functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/350244 - http://sourceforge.net/project/shownotes.php?release_id=210608&group_id=57105 - http://www.osvdb.org/3618 - http://www.securityfocus.com/bid/9449 - http://securityreason.com/sec
10608&group_id=57105 - http://www.osvdb.org/3618 - http://www.securityfocus.com/bid/9449 - http://securityreason.com/securityalert/3371 - http://www.securitytracker.com/id?1008764 - http://www.yabbse.org/community/index.php?thread=27122