Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0258 State: PUBLISHED Published: 2005-02-22T05:00:00 Last Updated: 2024-08-07T21:05:25.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in (1) usercp_register.php and (2) usercp_avatar.php for phpBB 2.0.11, and possibly other versions, with gallery avatars enabled, allows remote attackers to delete (unlink) arbitrary files via "/../" sequences in the avatarselect parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200503-02.xml - http://www.phpbb.com/support/documents.php?mode=changelog - http://www.idefense.com/application/poi/display?id=205&type=vulnerabilit
hpbb.com/support/documents.php?mode=changelog - http://www.idefense.com/application/poi/display?id=205&type=vulnerabilities
CVE ID: CVE-2005-0259 State: PUBLISHED Published: 2005-02-22T05:00:00 Last Updated: 2024-08-07T21:05:25.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by providing both a local and remote location for an avatar, then modifying the "Upload Avatar from a URL:" field to reference the target file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14362/ - http://www.idefense.com/application/poi/display?id=204&type=vulnerabilities - http://www.gentoo.org/security/en/glsa/glsa-200503-02.xml - http://www
ication/poi/display?id=204&type=vulnerabilities - http://www.gentoo.org/security/en/glsa/glsa-200503-02.xml - http://www.phpbb.com/support/documents.php?mode=changelog - http://www.kb.cert.org/vuls/id/774686
CVE ID: CVE-2005-0260 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbitrary code via a long packet to UDP port 41524, which is not properly handled in a recvfrom call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14183 - http://www.idefense.com/application/poi/display?id=194&type=vulnerabilities - http://supportconnectw.ca.com/public/enews/BrightStor/brigcurrent.asp#news1 - https://exchange.xforce.ibmcloud.co
ties - http://supportconnectw.ca.com/public/enews/BrightStor/brigcurrent.asp#news1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19251 - http://securitytracker.com/id?1013138
CVE ID: CVE-2005-0261 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users to read one line of arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=IY67655&apar=only - https://exchange.xforce.ibmcloud.com/vulnerabilities/19281 - http://www.idefense.com/application/poi/display?id=195&type=vulnerabilities - http://secunia.com/advisories/14232 - http://www.securityfocus.com/bid/12513 - http://
lay?id=195&type=vulnerabilities - http://secunia.com/advisories/14232 - http://www.securityfocus.com/bid/12513 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY67457&apar=only
CVE ID: CVE-2005-0262 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argument. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=IY67750&apar=only - http://secunia.com/advisories/14231 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19282 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY67812&apar=only - http://www.idefense.com/application/poi/display?id=196&type=vulnerabilities - http://www-1.ibm.com/support/sea
ar=only - http://www.idefense.com/application/poi/display?id=196&type=vulnerabilities - http://www-1.ibm.com/support/search.wss?rs=0&q=IY66933&apar=only - http://www.securityfocus.com/bid/12516
CVE ID: CVE-2005-0263 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19278 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY67124&apar=only - http://www.securityfocus.com/bid/12517 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY67136&apar=only - http://secunia.com/advisories/14237 - http://www.idefense.com/application/poi/display?id=197&type=vulnerabilit
ar=only - http://secunia.com/advisories/14237 - http://www.idefense.com/application/poi/display?id=197&type=vulnerabilities - http://www-1.ibm.com/support/search.wss?rs=0&q=IY67807&apar=only
CVE ID: CVE-2005-0264 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) expand or (2) order parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110461644407935&w=2 - http://secunia.com/advisories/13695 - http://www.securityfocus.com/bid/12114 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18705
CVE ID: CVE-2005-0265 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to execute arbitrary SQL commands via the (1) parent or (2) sortposted parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110461644407935&w=2 - http://secunia.com/advisories/13695 - http://www.securityfocus.com/bid/12114 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18704
CVE ID: CVE-2005-0266 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote attackers to inject arbitrary web script or HTML via the (1) return_module, (2) return_action, (3) name, (4) module, or (5) record parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110461706232174&w=2 - http://www.securityfocus.com/bid/12113 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18719
CVE ID: CVE-2005-0267 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in FlatNuke 2.5.1 allows remote attackers to create an administrator account via carriage returns and #10 in the url_avatar field, which is interpreted as a sensitive directive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18741 - http://marc.info/?l=bugtraq&m=110477752916772&w=2
CVE ID: CVE-2005-0268 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct code injection vulnerability in FlatNuke 2.5.1 allows remote attackers to execute arbitrary PHP code by placing the code into the url_avatar field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12150 - http://marc.info/?l=bugtraq&m=110477752916772&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18746
CVE ID: CVE-2005-0269 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110477648219738&w=2 - http://secunia.com/advisories/13711 - http://www.securityfocus.com/bid/12149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18729
CVE ID: CVE-2005-0270 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to inject arbitrary web script or HTML via the (1) si parameter to showcat.php, (2) cat or (3) page parameter to showproduct.php, or (4) report parameter to reportproduct.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18731 - http://www.gulftech.org/?node=research&article_id=00062-01022005 - http://secunia.com/advisories/13697/ - http://marc.inf
ttp://www.gulftech.org/?node=research&article_id=00062-01022005 - http://secunia.com/advisories/13697/ - http://marc.info/?l=bugtraq&m=110485682424110&w=2
CVE ID: CVE-2005-0271 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showcat.php or (2) product parameter to addfav.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.gulftech.org/?node=research&article_id=00062-01022005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18732 - http://secunia.com/advisories/13697/ - http://marc.info/?l=bugtraq&m=110485682424110&w=2
CVE ID: CVE-2005-0272 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: ReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary PHP files by posting a review file with multiple extensions, which bypasses the intended restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18735 - http://www.gulftech.org/?node=research&article_id=00062-01022005 - http://secunia.com/advisories/13697/ - http://marc.info/?l=bugtraq&m=110485682424110&w=2
CVE ID: CVE-2005-0273 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) ppuser parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110486165802196&w=2 - http://www.securityfocus.com/bid/12156 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18744 - http://www.gulftech.org/?node=research&article_id=00063-01032005 - http://secunia.com/advisories/13680/
CVE ID: CVE-2005-0274 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) si, (3) page, or (4) ppuser parameters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110486165802196&w=2 - http://www.securityfocus.com/bid/12156 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18744 - http://www.gulftech.org/?node=research&article_id=00063-01032005 - http://secunia.com/advisori
m/vulnerabilities/18744 - http://www.gulftech.org/?node=research&article_id=00063-01032005 - http://secunia.com/advisories/13680/
CVE ID: CVE-2005-0275 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: TFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) via a GET request containing an MS-DOS device name. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110485674622696&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18750
CVE ID: CVE-2005-0276 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in the FTP service in 3Com 3CDaemon 2.0 revision 10 allow remote attackers to cause a denial of service (application crash) via format string specifiers in (1) the username, (2) cd, (3) delete, (4) rename, (5) rmdir, (6) literal, (7) stat, or (8) CWD commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18751 - http://marc.info/?l=bugtraq&m=110485674622696&w=2
CVE ID: CVE-2005-0277 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via (1) a long username in the USER command or (2) an FTP command that contains a long argument, such as cd, send, or ls. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18754 - http://marc.info/?l=bugtraq&m=110485674622696&w=2 - http://marc.info/?l=bug
.xforce.ibmcloud.com/vulnerabilities/18754 - http://marc.info/?l=bugtraq&m=110485674622696&w=2 - http://marc.info/?l=bugtraq&m=110886719528518&w=2
CVE ID: CVE-2005-0278 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command that contains an MS-DOS device name, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12155 - http://marc.info/?l=bugtraq&m=110485674622696&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18756
CVE ID: CVE-2005-0279 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Soldner Secret Wars 30830 and earlier does not properly handle the "message too long" socket error, which allows remote attackers to cause a denial of service (socket termination) via a long UDP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18749 - http://secunia.com/advisories/13716 - http://marc.info/?l=bugtraq&m=110486654213504&w=2
CVE ID: CVE-2005-0280 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Soldner Secret Wars 30830 and earlier allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in a message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12162 - http://secunia.com/advisories/13716 - http://marc.info/?l=bugtraq&m=110486654213504&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18752
CVE ID: CVE-2005-0281 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web interface in Soldner Secret Wars 30830 allows remote attackers to inject arbitrary web script or HTML via a user message, which is not filtered or quoted when the administrator views the server logs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12162 - http://secunia.com/advisories/13716 - http://marc.info/?l=bugtraq&m=110486654213504&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18753
CVE ID: CVE-2005-0282 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the uid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/187 - http://marc.info/?l=bugtraq&m=110486566600980&w=2 - http://www.securityfocus.com/bid/12161
CVE ID: CVE-2005-0283 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in QwikiWiki allows remote attackers to read arbitrary files via a .. (dot dot) and a %00 at the end of the filename in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12044 - http://marc.info/?l=bugtraq&m=110486832621053&w=2 - http://www.securityfocus.com/bid/12163 - http://www.qwikiwiki.com/index.php?page=QwikiVulnerability - https://exchange.xforce.ibmcloud.com/vulnerabilities/18748
CVE ID: CVE-2005-0284 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in addentry.php in Woltlab Burning Book 1.0 Gold, 1.1.1e, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the user-agent parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110548032401506&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18859
CVE ID: CVE-2005-0285 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webseries Payment Application does not properly restrict privileged operations, which allows remote authenticated users to gain privileges by directly accessing certain URLs. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1012854 - http://marc.info/?l=bugtraq&m=110547396124885&w=2 - http://www.securityfocus.com/bid/12216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18848 - http://secunia.com/advisories/13821
CVE ID: CVE-2005-0286 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: eMotion MediaPartner Web Server 5.0 and 5.1 allows remote attackers to obtain sensitive information via an HTTP request for a .bhtml file that contains a (1) . (dot) or (2) + (plus sign) at the end, which returns the source code for that file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12236 - http://secunia.com/advisories/13820 - http://securitytracker.com/id?1012855 - http://marc.info/?l=bugtraq&m=110547824902053&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities
om/id?1012855 - http://marc.info/?l=bugtraq&m=110547824902053&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18861
CVE ID: CVE-2005-0287 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bottomline Webseries Payment Application allows remote attackers to read arbitrary files on the network via a report template with modified ReportPath or ReportName values. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1012854 - http://marc.info/?l=bugtraq&m=110548383812462&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18862 - http://secunia.com/advisories/13821
CVE ID: CVE-2005-0288 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: The change password functionality in Bottomline Webseries Payment Application does not require the old password when users enter a new password, which could allow remote authenticated users to change other users' passwords. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1012854 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18860 - http://marc.info/?l=bugtraq&m=110549684319400&w=2 - http://www.securityfocus.com/bid/12231 - http://secunia.com/advisories/13821
CVE ID: CVE-2005-0289 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Service (WDS), allows remote attackers to cause a denial of service (device freeze) by connecting to UDP port 161 and before link-state change occurs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13753 - http://www.securityfocus.com/bid/12152 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030832.html - http://marc.info/?l=bugtraq&m=110582124528867&w=2 - https://exch
uk/pipermail/full-disclosure/2005-January/030832.html - http://marc.info/?l=bugtraq&m=110582124528867&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18865
CVE ID: CVE-2005-0290 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to bypass the filters using hex encoded URLs, as demonstrated using a hex encoded file extension. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030984.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18920 - http://www.securityfocus.com/bid/12278 - http://secunia.com/advisories/13787 - http://marc.info/?l=bugtraq&m=110599727631560&w=2 - http://se
ocus.com/bid/12278 - http://secunia.com/advisories/13787 - http://marc.info/?l=bugtraq&m=110599727631560&w=2 - http://securitytracker.com/id?1012913 - http://www.securinews.com/vuln.htm?vulnid=103
CVE ID: CVE-2005-0291 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the log viewer in NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via a blocked URL phrase. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030984.html - http://www.securityfocus.com/bid/12278 - http://secunia.com/advisories/13787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18921 - http://marc.info/?l=bugtraq&m=11
nia.com/advisories/13787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18921 - http://marc.info/?l=bugtraq&m=110599727631560&w=2 - http://www.osvdb.org/13012 - http://securitytracker.com/id?1012913 - http://www.securinews.com/vuln.htm?vulnid=103