Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-1605 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Admin, teams=ADMIN!, and usertype=Administrator. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12883 - http://marc.info/?l=bugtraq&m=109811852218478&w=2 - http://securitytracker.com/id?1011769 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17749 - http://www.securityfocus.com/bid/11450 - http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html - http:
http://www.securityfocus.com/bid/11450 - http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html - http://www.osvdb.org/10942
CVE ID: CVE-2004-1606 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: slxweb.dll in SalesLogix 6.1 allows remote attackers to cause a denial service (application crash) via an invalid HTTP request, which might also leak sensitive information in the ErrorLogMsg cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17750 - http://www.osvdb.org/10943 - http://secunia.com/advisories/12883 - http://marc.info/?l=bugtraq&m=109811852218478&w=2 - http://securitytracker.com/id?1011769 - http://www.securityfocus.com/bid/11450 - http://
bugtraq&m=109811852218478&w=2 - http://securitytracker.com/id?1011769 - http://www.securityfocus.com/bid/11450 - http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html
CVE ID: CVE-2004-1607 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: slxweb.dll in SalesLogix 6.1 allows remote attackers to obtain sensitive information via a (1) Library or (2) Attachment request with an invalid file parameter, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12883 - http://marc.info/?l=bugtraq&m=109811852218478&w=2 - http://www.osvdb.org/10944 - http://securitytracker.com/id?1011769 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17751 - http://www.securityfocus.com/bid/11450 - h
com/id?1011769 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17751 - http://www.securityfocus.com/bid/11450 - http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html
CVE ID: CVE-2004-1608 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL statements via the id parameter in a view operation. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17752 - http://www.osvdb.org/10945 - http://secunia.com/advisories/12883 - http://marc.info/?l=bugtraq&m=109811852218478&w=2 - http://securitytracker.com/id?1011769 - http://www.securityfocus.com/bid/11450 - http://archives.neohapsis.com/archives/fulldisclosure/2004
ker.com/id?1011769 - http://www.securityfocus.com/bid/11450 - http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html
CVE ID: CVE-2004-1609 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: SalesLogix 6.1 includes usernames, passwords, and other sensitive information in the headers of an HTTP response, which could allow remote attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/10946 - http://secunia.com/advisories/12883 - http://marc.info/?l=bugtraq&m=109811852218478&w=2 - http://securitytracker.com/id?1011769 - http://www.securityfocus.com/bid/11450 - http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html - https://exchange.xforce.ibmc
s.com/bid/11450 - http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17753
CVE ID: CVE-2004-1610 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: SalesLogix 6.1 uses client-specified pathnames for writing certain files, which might allow remote authenticated users to create arbitrary files and execute code via the (1) vMME.AttachmentPath or (2) vMME.LibraryPath variables. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109811852218478&w=2
CVE ID: CVE-2004-1611 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1) execute arbitrary SLX commands on the server or spoof the server via a man-in-the-middle (MITM) attack, or (2) obtain the database password via a GetConnection request to TCP port 1707. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12883 - http://marc.info/?l=bugtraq&m=109811852218478&w=2 - http://www.osvdb.org/10948 - http://www.osvdb.org/1
visories/12883 - http://marc.info/?l=bugtraq&m=109811852218478&w=2 - http://www.osvdb.org/10948 - http://www.osvdb.org/10947 - http://securitytracker.com/id?1011769 - http://www.securityfocus.com/bid/11450 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17754 - http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html
CVE ID: CVE-2004-1612 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SalesLogix 6.1 allows remote attackers to upload arbitrary files via a .. (dot dot) in a ProcessQueueFile request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12883 - http://www.osvdb.org/10949 - http://marc.info/?l=bugtraq&m=109811852218478&w=2 - http://securitytracker.com/id?1011769 - http://www.securityfocus.com/bid/11450 - http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html - https://exchange.xforce.ibmcloud.com/vuln
50 - http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17765
CVE ID: CVE-2004-1613 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG tag followed by a null character and some trailing characters, as demonstrated by mangleme. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109811406620511&w=2 - http://www.securityfocus.com/bid/11439 - http://www.redhat.com/support/errata/RHSA-2005-323.html - https://exchange.xforce.
p://www.securityfocus.com/bid/11439 - http://www.redhat.com/support/errata/RHSA-2005-323.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/17805 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10227 - http://securitytracker.com/id?1011810 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html - http://lcamtuf.coredump.cx/mangleme/gallery/
CVE ID: CVE-2004-1614 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla allows remote attackers to cause a denial of service (application crash from invalid memory access) via an "unusual combination of visual elements," including several large MARQUEE tags with large height parameters, as demonstrated by mangleme. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109811406620511&w=2 - http://securitytracker.com/id?1011810 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html - http://lcamtuf.coredump.cx/mangleme/gallery/
tp://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html - http://lcamtuf.coredump.cx/mangleme/gallery/ - http://www.securityfocus.com/bid/11440
CVE ID: CVE-2004-1615 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera allows remote attackers to cause a denial of service (invalid memory reference and application crash) via a web page or HTML email that contains a TBODY tag with a large COL SPAN value, as demonstrated by mangleme. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109811406620511&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17806 - http://www.securityfocus.com/bid/11441 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html - http://lcamtuf
curityfocus.com/bid/11441 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html - http://lcamtuf.coredump.cx/mangleme/gallery/
CVE ID: CVE-2004-1616 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Links allows remote attackers to cause a denial of service (memory consumption) via a web page or HTML email that contains a table with a td element and a large rowspan value,as demonstrated by mangleme. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109811406620511&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html - http://securitytracker.com/id?1011808 - http://www.securityfocus.com/bid/11442 - https://exchange.xforce.ibmcloud.com/vulnerabilities
tytracker.com/id?1011808 - http://www.securityfocus.com/bid/11442 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17803 - http://lcamtuf.coredump.cx/mangleme/gallery/
CVE ID: CVE-2004-1617 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of service (infinite loop) via a web page or HTML email that contains invalid HTML including (1) a TEXTAREA tag with a large COLS value and (2) a large tag name in an element that is not terminated, as demonstrated by mangleme. NOTE: a followup suggests that the relevant trigger for this issue is the large COLS value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11443 - http://marc.info/?
tional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11443 - http://marc.info/?l=bugtraq&m=109811406620511&w=2 - http://www.debian.org/security/2006/dsa-1077 - http://securitytracker.com/id?1011809 - http://www.securityfocus.com/archive/1/435689/30/4740/threaded - http://www.debian.org/security/2006/dsa-1076 - http://www.debian.org/security/2006/dsa-1085 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html - http://lcamtuf.coredump.cx/mangleme/gallery/ - http://secunia.com/advisories/20383 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17804
CVE ID: CVE-2004-1618 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vypress Tonecast 1.3 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed mp2 stream. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/toneboom-adv.txt - http://marc.info/?l=bugtraq&m=109820344806472&w=2 - http://secunia.com/advisories/12890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17775 - http://www.securityfocus.com/bid/11462
CVE ID: CVE-2004-1619 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Privateer's Bounty: Age of Sail II allows remote attackers to execute arbitrary code via a long nickname. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17791 - http://secunia.com/advisories/12905 - http://marc.info/?l=bugtraq&m=109829017407842&w=2 - http://www.securityfocus.com/bid/11479
CVE ID: CVE-2004-1620 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in (1) index.php and (2) exit.php, or (3) the HTTP Referer field in comment.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109841283115808&w=2 - http://www.s9y.org/5.html - http://www.securityfocus.com/bid/11497 - http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/exit.php?re
5.html - http://www.securityfocus.com/bid/11497 - http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/exit.php?rev=1.10&view=markup - http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/index.php?rev=1.52&view=markup - https://exchange.xforce.ibmcloud.com/vulnerabilities/17798 - http://www.osvdb.org/11039 - http://securitytracker.com/id?1011864 - http://www.osvdb.org/11038 - http://secunia.com/advisories/12909/ - http://sourceforge.net/project/shownotes.php?release_id=276694 - http://www.osvdb.org/11013 - http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/comment.php?rev=1.49&view=markup
CVE ID: CVE-2004-1621 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:35.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of (1) computed for display, (2) computed when composed, or (3) computed text element fields. NOTE: the vendor has disputed this issue, saying that it is not a problem with Notes/Domino itself, but with the applications that do not properly handle this feature Add
hat it is not a problem with Notes/Domino itself, but with the applications that do not properly handle this feature Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/404382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17758 - http://marc.info/?l=bugtraq&m=109841682529328&w=2 - http://secunia.com/advisories/12891 - http://www.securityfocus.com/bid/11458 - http://marc.info/?l=bugtraq&m=109812960023736&w=2 - http://securitytracker.com/id?1011779 - http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21187833
CVE ID: CVE-2004-1622 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in dosearch.php in UBB.threads 3.4.x allows remote attackers to execute arbitrary SQL statements via the Name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11502 - http://marc.info/?l=bugtraq&m=109839925207038&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17821
CVE ID: CVE-2004-1623 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service (infinite loop in Explorer) via a WAV file with an invalid file header whose fmt chunk length is set to 0xFFFFFFFF. Additional Analyst Notes: - CVE Program Container: References: - http://www.hexview.com/docs/20041021-1.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/17864 - http://marc.info/?l=bugtraq&m=109846319313443&w=2 - http://www.securityfocus.com/bid/11503 - http://securitytracker.com/id?1011880 - http://www.
raq&m=109846319313443&w=2 - http://www.securityfocus.com/bid/11503 - http://securitytracker.com/id?1011880 - http://www.osvdb.org/11053
CVE ID: CVE-2004-1624 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, which allows local users to gain privileges via (1) the help topic interface in CCW32.exe, which launches Notepad, or (2) the help button in the Carbon Copy Scheduler (CCSched.exe). Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109846296406459&w=2 - http://www.securityfocus.com/bid/11500 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17838 - http://secuni
=2 - http://www.securityfocus.com/bid/11500 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17838 - http://secunia.com/advisories/12962
CVE ID: CVE-2004-1625 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: pGina 1.7.6 and possibly older versions, when the Restart or Shutdown options are enabled on the login screen, allows remote attackers to cause a denial of service by connecting via Remote Desktop and clicking restart or shutdown. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17836 - http://marc.info/?l=bugtraq&m=109849689808245&w=2 - http://www.lovebug.org/pgina_dos.txt
CVE ID: CVE-2004-1626 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long STOR command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17823 - http://www.kb.cert.org/vuls/id/857846 - http://marc.info/?l=bugtraq&m=109850947508816&w=2 - http://www.osvdb.org/11030 - http://secunia.com/advisories/12941 - http://www.securityfocus.com/bid/11508
CVE ID: CVE-2004-1627 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Ability Server 2.25, 2.32, 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long APPE command. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/12347 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18405 - http://lists.virus.org/dw-0day-0412/msg00004.html - http://secunia.com/advisories/12941 - http://securitytracker.com/id?1012464 - http://www.securityfocus.com/bid/11508
CVE ID: CVE-2004-1628 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in log.c in rssh before 2.2.2 allows remote authenticated users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.pizzashack.org/rssh/ - http://www.gentoo.org/security/en/glsa/glsa-200410-28.xml - http://marc.info/?l=bugtraq&m=109855982425122&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17831 - http://secunia.com/advisories/12954
CVE ID: CVE-2004-1629 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Dwc_articles 1.6 and earlier allow remote attackers to execute arbitrary SQL statements. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17830 - http://marc.info/?l=bugtraq&m=109855895702903&w=2 - http://www.securityfocus.com/bid/11509
CVE ID: CVE-2004-1630 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login form in Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to execute arbitrary web script or HTML via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11514 - http://secunia.com/advisories/12970 - http://marc.info/?l=bugtraq&m=109876304705234&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17853
CVE ID: CVE-2004-1631 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to conduct port scans of remote hosts by specifying the target in an rmi:// Worklist URL, then using the response times to infer the results. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11514 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17852 - http://secunia.com/advisories/12970 - http://marc.info/?l=bugtraq&m=109876304705234&w=2
CVE ID: CVE-2004-1632 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wiki.php in MoniWiki 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the arguments to wiki.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12975 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17835 - http://marc.info/?l=bugtraq&m=109873622006103&w=2 - http://www.securityfocus.com/bid/11516
CVE ID: CVE-2004-1633 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:36.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: process_bug.cgi in Bugzilla 2.9 through 2.18rc2 and 2.19 from CVS does not check edit permissions on the keywords field, which allows remote authenticated users to modify the keywords in a bug via the keywordaction parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109872095201238&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17840 - https://bugzilla.mozilla.org/show_bug.cgi?id=252638
CVE ID: CVE-2004-1634 State: PUBLISHED Published: 2005-02-20T05:00:00 Last Updated: 2024-08-08T01:00:37.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and attachment summaries which are marked as private, which allows remote attackers to gain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109872095201238&w=2 - https://bugzilla.mozilla.org/show_bug.cgi?id=263780 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17841 - http://www.securityfocus.com/bid/11511