Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-4321 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:51.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Key Exchange version 1 (IKEv1) implementation in Apani Networks EpiForce 1.9 and earlier running IPSec, allow remote attackers to cause a denial of service (crash) via certain IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/alerts/2005/Dec/1015340.html
tional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/alerts/2005/Dec/1015340.html - http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en - http://www.vupen.com/english/advisories/2005/2855 - http://www.securityfocus.com/bid/15797/ - http://www.securityfocus.com/archive/1/419104/100/0/threaded - http://secunia.com/advisories/17985/ - http://www.kb.cert.org/vuls/id/226364
CVE ID: CVE-2005-4322 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:51.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web Client 07-00 through 07-10-/A allow remote attackers to inject arbitrary web script or HTML via the (1) Schedule and (2) Calendar components. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/alerts/2005/Nov/1015241.html - http://www.osvdb.org/20969 - http://secunia.com/advisories/1763
ttp://securitytracker.com/alerts/2005/Nov/1015241.html - http://www.osvdb.org/20969 - http://secunia.com/advisories/17634/ - http://www.securityfocus.com/bid/15498 - http://securitytracker.com/alerts/2005/Nov/1015242.html - http://www.osvdb.org/22126 - http://www.hitachi-support.com/security_e/vuls_e/HS05-023_e/01-e.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/23197
CVE ID: CVE-2005-4323 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:51.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web Client 07-00 through 07-10-/A allow remote attackers to cause a denial of service of unspecified impact via repeated invalid requests to the Schedule component. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/alerts/2005/Nov/1015241.html - http://secunia.com/advisories/17634/ - http://securitytracker.com/aler
ecuritytracker.com/alerts/2005/Nov/1015241.html - http://secunia.com/advisories/17634/ - http://securitytracker.com/alerts/2005/Nov/1015242.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/23193 - http://www.hitachi-support.com/security_e/vuls_e/HS05-023_e/01-e.html - http://www.securityfocus.com/bid/15500/
CVE ID: CVE-2005-4324 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:52.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hitachi Groupmax Mail SMTP 06-50 through 06-52-/A and 07-00 through 07-20 allows remote attackers to cause a denial of service (service stop) via an e-mail message with an "invalid format." Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20968 - http://securitytracker.com/alerts/2005/Nov/1015243.html - http://www.vupen.com/english/advisories/2005/2492 - http://secunia.com/advisories/17635/ - http://www.securityfocus.com/bid/15499/ - http://www.hitachi-support.com/security_e/vuls_e/HS05-024
/advisories/17635/ - http://www.securityfocus.com/bid/15499/ - http://www.hitachi-support.com/security_e/vuls_e/HS05-024_e/01-e.html
CVE ID: CVE-2005-4325 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:51.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Driverse before 0.56b have unknown impact and attack vectors, related to (1) a "ptrace exploit" and (2) "some other potential security problems." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2508 - http://freshmeat.net/projects/driverse/?branch_id=61426&release_id=212356 - http://securitytracker.com/alerts/2005/Nov/1015252.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/23204 - http://www.osvdb.org/20982
CVE ID: CVE-2005-4326 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:51.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface for American Power Conversion (APC) PowerChute Network Shutdown performs all communication in cleartext (base64-encoded), which allows remote attackers to sniff authentication credentials. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/alerts/2005/Nov/1015250.html - http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=7330 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23183
CVE ID: CVE-2005-4327 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:51.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject arbitrary web script or HTML via the (1) function, (2) year, and (3) date parameters to webcal.cgi, (4) new calendar entries, and (5) notes for entries. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/419655/100/0/threaded - http://securityreason.com/securityalert/267 - http://secunia.com/advisories/18017 - http://www.securityfocus.com/bid/15917
CVE ID: CVE-2005-4328 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:51.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15916 - http://pridels0.blogspot.com/2005/12/webglimpse-xss-vuln.html - http://www.vupen.com/english/advisories/2005/2966 - http://www.osvdb.org/21791 - http://secunia.com/advisories/18076
CVE ID: CVE-2005-4329 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:51.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) newsid and (2) id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/268 - http://www.vupen.com/english/advisories/2005/2961 - http://www.securityfocus.com/bid/15912 - http://pridels0.blogspot.com/2005/12/pafiledb-extreme-edition-sql-inj.html - http://www.osvdb.org/21822
CVE ID: CVE-2005-4330 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:51.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL commands via the (1) id, (2) store, and (3) step parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21830 - http://www.securityfocus.com/bid/15910 - http://pridels0.blogspot.com/2005/12/ihtml-merchant-mall-sql-inj.html - http://secunia.com/advisories/18073 - http://www.vupen.com/english/advisories/2005/2968
CVE ID: CVE-2005-4331 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:51.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in merchant.ihtml in iHTML Merchant Version 2 Pro allows remote attackers to execute arbitrary SQL commands via the (1) step, (2) id, and (3) pid parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15911 - http://www.osvdb.org/21808 - http://secunia.com/advisories/18089 - http://pridels0.blogspot.com/2005/12/ihtml-merchant-version-2-pro-sql-inj.html - http://www.vupen.com/english/advisories/2005/2967
CVE ID: CVE-2005-4332 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:52.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service or upload files via direct requests to obsolete JSP files including (1) admin/uploadclient.jsp, (2) apply_firmware_action.jsp, and (3) file.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/3007 - http://www.securityfocus.com/archive/1/419645/100/0/threaded - http://www.osvdb.org/21957 - http://www.awarenetwork.org/forum/
/www.securityfocus.com/archive/1/419645/100/0/threaded - http://www.osvdb.org/21957 - http://www.awarenetwork.org/forum/viewtopic.php?p=2236 - http://www.cisco.com/warp/public/707/cisco-response-20051221-CCA.shtml - http://www.osvdb.org/21958 - http://www.securityfocus.com/archive/1/420008/100/0/threaded - http://www.securityfocus.com/bid/15909 - http://securityreason.com/securityalert/265 - http://secunia.com/advisories/18103 - http://www.osvdb.org/21956 - http://securitytracker.com/id?1015375
CVE ID: CVE-2005-4333 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:51.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) inreplyto, (2) article, and (3) board parameters to reply.pl, (4) branch, (5) board, and (6) stats.pl parameters to (b) stats.pl, and (7) board parameter to (c) toc.pl. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21895 - http://pridels0.blogspot.com/2005/12/binary-board-system-xss-vuln.html - http://www.osvdb.org/21
//www.osvdb.org/21895 - http://pridels0.blogspot.com/2005/12/binary-board-system-xss-vuln.html - http://www.osvdb.org/21894 - http://www.osvdb.org/21893 - http://www.securityfocus.com/bid/15913
CVE ID: CVE-2005-4334 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:51.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the H_ID parameter to (1) zixforum/forum.asp, as used in (2) Headforums.asp and (3) Subject.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2006-April/000687.html - http://securitytracker.com/id?1015359 - http://www.securityfocus.com/bid/16406 - http://www.osvdb.org/22096
CVE ID: CVE-2005-4335 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:51.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProjectForum 4.7.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted pageid parameter to admin/versions.html. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/projectforum-470-vuln.html - http://www.osvdb.org/21732 - http://secunia.com/advisories/18071
CVE ID: CVE-2005-4336 State: PUBLISHED Published: 2005-12-17T11:00:00 Last Updated: 2024-08-07T23:38:51.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ProjectForum 4.7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) fwd parameter in admin/adminsignin.html and (2) originalpageid parameter in admin/newpage.html associated with a group. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15850 - http://pridels0.blogspot.com/2005/12/projectforum-470-vuln.html - http://www.vupen.com/english/advisories/2005/2921 - http://www.osvdb.org/21734 - http://se
/projectforum-470-vuln.html - http://www.vupen.com/english/advisories/2005/2921 - http://www.osvdb.org/21734 - http://secunia.com/advisories/18071 - http://www.osvdb.org/21733
CVE ID: CVE-2005-4337 State: PUBLISHED Published: 2005-12-17T21:00:00Z Last Updated: 2024-09-16T19:30:21.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified user_id parameter and a "/" in the encoded_pw parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.ipomonis.com/advisories/Bb_6.zip - http://www.osvdb.org/21616
CVE ID: CVE-2005-4338 State: PUBLISHED Published: 2005-12-17T21:00:00Z Last Updated: 2024-09-16T19:35:17.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to gain administrator privileges by setting the context parameter to "admin". Additional Analyst Notes: - CVE Program Container: References: - http://www.ipomonis.com/advisories/Bb_6.zip - http://www.osvdb.org/21617
CVE ID: CVE-2005-4339 State: PUBLISHED Published: 2005-12-17T21:00:00Z Last Updated: 2024-09-16T23:47:05.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to inject arbitrary web script or HTML via the context parameter to announcement.pl, which is reflected in the resulting page. Additional Analyst Notes: - CVE Program Container: References: - http://www.ipomonis.com/advisories/Bb_6.zip
CVE ID: CVE-2005-4340 State: REJECTED Published: 2005-12-17T21:00:00Z Last Updated: 2024-09-16T19:30:32.883Z Description: No description available.
CVE ID: CVE-2005-4341 State: PUBLISHED Published: 2005-12-17T21:00:00Z Last Updated: 2024-09-16T22:09:27.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to list all available categories via a blank category_id parameter to category.pl. NOTE: it is not clear whether this information is sensitive or not, so this might not be an exposure. Additional Analyst Notes: - CVE Program Container: References: - http://www.ipomonis.com/advisories/Bb_6.zip - http://www.osvdb.org/21619
CVE ID: CVE-2005-4342 State: PUBLISHED Published: 2005-12-17T23:00:00 Last Updated: 2024-08-07T23:38:51.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the SecurityManager is disabled, which might allow remote attackers to "bypass security controls," aka "JRun Clustered Sandbox Security Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18078 - http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html - http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html - htt
net/security/security_zone/mpsb05-12.html - http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html - http://www.securityfocus.com/bid/15904 - http://securitytracker.com/id?1015369 - http://www.vupen.com/english/advisories/2005/2948
CVE ID: CVE-2005-4343 State: PUBLISHED Published: 2005-12-17T23:00:00 Last Updated: 2024-08-07T23:38:51.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka "CFMAIL injection Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18078 - http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html - http://www.macromedia.com/devnet/security/security_zone/mpsb05-14
dia.com/devnet/security/security_zone/mpsb05-12.html - http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html - http://www.securityfocus.com/bid/15904 - http://securitytracker.com/id?1015369 - http://www.vupen.com/english/advisories/2005/2948
CVE ID: CVE-2005-4344 State: PUBLISHED Published: 2005-12-17T23:00:00 Last Updated: 2024-08-07T23:38:51.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe (formerly Macromedia) ColdFusion MX 7.0 does not honor when the CFOBJECT /CreateObject(Java) setting is disabled, which allows local users to create an object despite the specified configuration. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18078 - http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html - http://www.securityfocus.com/bid/15904 - http://securitytracker.com/id?1015371 - http://www.vupen.com/english/advisories/2005/2948
CVE ID: CVE-2005-4345 State: PUBLISHED Published: 2005-12-17T23:00:00 Last Updated: 2024-08-07T23:38:51.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe (formerly Macromedia) ColdFusion MX 7.0 exposes the password hash of the Administrator in an API call, which allows local developers to obtain the hash and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18078 - http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html - http://www.securityfocus.com/bid/15904 - http://securitytracker.com/id?1015371 - http://www.vupen.com/english/advisories/2005/2948
CVE ID: CVE-2005-4346 State: PUBLISHED Published: 2005-12-18T22:00:00 Last Updated: 2024-08-07T23:38:51.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invalid SQL syntax error in blog.php in phpBB Blog 2.2.2 and earlier allows remote attackers to obtain the full path of the application via an invalid permalink parameter to index.php, which produces an invalid SQL query that leaks the full pathname in a SQL syntax error message. NOTE: this was originally claimed to be SQL injection, but a cleansing step strips all non-digit characters and leaves an empty permalink argument, which leads to the syntax error. Additional Analyst Notes: - CVE Program Container: References: - http:
malink argument, which leads to the syntax error. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/phpbb-blog-222-sql-inj-vuln.html - http://www.outshine.com/forums/viewtopic.php?t=308 - http://www.osvdb.org/21565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23495
CVE ID: CVE-2005-4347 State: PUBLISHED Published: 2006-03-22T11:00:00 Last Updated: 2024-08-07T23:38:51.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the "chroot barrier" with util-vserver, which allows attackers to access files on the host system that are outside of the vserver. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25406 - http://secunia.com/advisories/19339
CVE ID: CVE-2005-4348 State: PUBLISHED Published: 2005-12-21T00:00:00 Last Updated: 2024-08-07T23:38:51.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18266 - http://secunia.com/advisories/18172 - http://secunia.com/advisories/18231 - http://www.vupen.com/english/advisories/2006/3101 - http://www.securityfocus.com/archive/1/420098/100/0/threaded - http://secunia.com/adv
com/english/advisories/2006/3101 - http://www.securityfocus.com/archive/1/420098/100/0/threaded - http://secunia.com/advisories/21253 - http://securitytracker.com/id?1015383 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499 - http://secunia.com/advisories/17891 - http://www.securityfocus.com/bid/19289 - http://www.trustix.org/errata/2006/0002/ - http://secunia.com/advisories/18463 - http://secunia.com/advisories/24284 - http://secunia.com/advisories/24007 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9659 - http://www.securityfocus.com/bid/15987 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=34383
itre.oval%3Adef%3A9659 - http://www.securityfocus.com/bid/15987 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=343836 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23713 - http://www.novell.com/linux/security/advisories/2007_4_sr.html - https://usn.ubuntu.com/233-1/ - http://www.osvdb.org/21906 - http://www.vupen.com/english/advisories/2005/2996 - http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:236 - http://www.securityfocus.com/archive/1/435197/100/0/threaded - ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc - http://www.redhat.com/support/errata/RHSA-2007-0018.html - http://secunia.com/advisories/18895 - http://www.debian.org/security/20
.redhat.com/support/errata/RHSA-2007-0018.html - http://secunia.com/advisories/18895 - http://www.debian.org/security/2005/dsa-939 - http://secunia.com/advisories/18433 - http://fetchmail.berlios.de/fetchmail-SA-2005-03.txt
CVE ID: CVE-2005-4349 State: PUBLISHED Published: 2005-12-19T11:00:00 Last Updated: 2025-01-16T19:49:37.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in server_privileges.php in phpMyAdmin 2.7.0 allows remote authenticated users to execute arbitrary SQL commands via the (1) dbname and (2) checkprivs parameters. NOTE: the vendor and a third party have disputed this issue, saying that the main task of the program is to support query execution by authenticated users, and no external attack scenario exists without an auto-login configuration. Thus it is likely that this issue will be REJECTED. However, a closely related CSRF issue has been assigned C
iguration. Thus it is likely that this issue will be REJECTED. However, a closely related CSRF issue has been assigned CVE-2005-4450 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://securityreason.com/securityalert/270 - http://www.vupen.com/english/advisories/2005/2995 - http://marc.info/?l=bugtraq&m=113486637512821&w=2 - http://www.securityfocus.com/archive/1/419829/100/0/threaded - http://secunia.com/advisories/18113 - http://www.securityfocus.com/archive/1/419832/100/0/threaded
CVE ID: CVE-2005-4350 State: PUBLISHED Published: 2005-12-20T00:00:00 Last Updated: 2024-08-07T23:38:51.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in WBEM Services A.01.x before A.01.05.12 and A.02.x before A.02.00.08 on HP-UX B.11.00 through B.11.23 allows remote attackers to cause an unspecified denial of service via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00582373 - http://www.securityfocus.com/bid/15930 - http://secunia.com/advisories/18160 - http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00582373 - http://www.vupen.com/english