Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-1770 State: PUBLISHED Published: 2005-03-10T05:00:00 Last Updated: 2024-08-08T01:00:37.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in the user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/831534 - http://marc.info/?l=bugtraq&m=107911581732035&w=2 - http://www.securityfocus.com/bid/9855 - http://secunia.com/advisories/11124 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15486
CVE ID: CVE-2004-1771 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-08T01:00:37.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Scalable OGo (SOGo) 1.0 allows remote authenticated users to bypass intended permissions and view private appointments of other users. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.opengroupware.org/bugzilla/show_bug.cgi?id=1060 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19820 - http://securitytracker.com/id?1013553 - http://www.osvdb.org/14675
CVE ID: CVE-2004-1772 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T01:00:37.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108137386310299&w=2 - https://bugzilla.fedora.us/show_bug.cgi?id=2155 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11722 - http://www.securityfocus.com/bid/10066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15759 - http://www.securityfocus.co
w.securityfocus.com/bid/10066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15759 - http://www.securityfocus.com/archive/1/359639 - http://www.redhat.com/support/errata/RHSA-2005-377.html
CVE ID: CVE-2004-1773 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T01:00:37.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.fedora.us/show_bug.cgi?id=2155 - http://security.gentoo.org/glsa/glsa-200410-01.xml - http://www.securityfocus.com/bid/11298 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11093 - http://www.redhat.com/support/errata/RHSA-2005-377.htm
epository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11093 - http://www.redhat.com/support/errata/RHSA-2005-377.html
CVE ID: CVE-2004-1774 State: PUBLISHED Published: 2005-04-19T04:00:00 Last Updated: 2024-08-08T01:00:37.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.appsecinc.com/resources/alerts/oracle/2004-0001/ - http://www.securiteam.com/securitynews/5CP010KE0W.html - http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/025984.html - http://www.oracle.com/technology/deploy/security/pdf/2004alert68.
pipermail/full-disclosure/2004-September/025984.html - http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf - http://www.frsirt.com/exploits/20050413.OracleExploit.sql.php - http://www.securityfocus.com/bid/13145 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20078
CVE ID: CVE-2004-1775 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T01:00:37.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers to read and modify device configuration via the read-write community string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6179 - http://www.securityfocus.com/bid/5030 - http://www.kb.cert.org/vuls/id/645400 - http://www.cisco.com/warp/public/707/ios-snmp-community-vulns-pub.shtml
CVE ID: CVE-2004-1776 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T01:00:37.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.1(3) and 12.1(3)T allows remote attackers to read and modify device configuration data via the cable-docsis read-write community string used by the Data Over Cable Service Interface Specification (DOCSIS) standard. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/840665 - http://www.cisco.com/warp/public/707/ios-snmp-community-vulns-pub.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/6180
CVE ID: CVE-2004-1777 State: PUBLISHED Published: 2005-05-03T04:00:00 Last Updated: 2024-08-08T01:00:37.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of service (application crash) via long command line arguments or a long callto:// URL, a different vulnerability than CVE-2004-1114. Additional Analyst Notes: - CVE Program Container: References: - http://www.skype.com/security/ssa-2004-01.html - http://lists.virus.org/bugtraq-0406/msg00221.html - http://securitytracker.com/id?1010490 - http://www.osvdb.org/11860
CVE ID: CVE-2004-1778 State: PUBLISHED Published: 2005-05-03T04:00:00 Last Updated: 2024-08-08T01:00:37.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skype 0.92.0.12 and 1.0.0.1 for Linux, and possibly other versions, creates the /usr/share/skype/lang directory with world-writable permissions, which allows local users to modify language files and possibly conduct social engineering or other attacks. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110868557905786&w=2 - http://marc.info/?l=bugtraq&m=110374568916303&w=2 - http://www.securityfocus.com/bid/12081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18644
CVE ID: CVE-2004-1779 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:00:37.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in board.php for ThWboard before beta 2.84 allows remote attackers to inject arbitrary web script or HTML via the lastvisited parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10546 - http://cvs.sourceforge.net/viewcvs.py/thwb/thwb/board.php?r1=1.11&r2=1.12 - http://sourceforge.net/project/shownotes.php?release_id=207893 - http://www.osvdb.org/3330 - http://securitytracker.com/id?1008617 - http://www.securityfocus.com/bid/9367 - ht
=207893 - http://www.osvdb.org/3330 - http://securitytracker.com/id?1008617 - http://www.securityfocus.com/bid/9367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14143
CVE ID: CVE-2004-1780 State: PUBLISHED Published: 2005-05-10T04:00:00Z Last Updated: 2024-09-16T19:31:49.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9347
CVE ID: CVE-2004-1781 State: PUBLISHED Published: 2005-05-10T04:00:00Z Last Updated: 2024-09-17T03:59:11.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Info Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating system via the CMD_CREDITCARD_CHARGE command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9348
CVE ID: CVE-2004-1782 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:00:37.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9349 - http://www.osvdb.org/16861
CVE ID: CVE-2004-1783 State: PUBLISHED Published: 2005-05-10T04:00:00Z Last Updated: 2024-09-16T20:57:57.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary files via a /.. (slash dot dot). Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/windowsntfocus/5FP051FBPQ.html - http://securitytracker.com/id?1008588 - http://www.securityfocus.com/bid/9350 - http://secunia.com/advisories/10522
CVE ID: CVE-2004-1784 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:00:37.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the web server of Webcam Watchdog 3.63 allows remote attackers to execute arbitrary code via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/348818 - http://www.elitehaven.net/webcamwatchdog.txt - http://www.securityfocus.com/bid/9351 - http://www.webcamsoft.com/en/watchdog_h.html - http://www.osvdb.org/3312 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14131 - http://secunia.com/advisories/10527
CVE ID: CVE-2004-1785 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:00:37.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in calendar.php for Invision Power Board 1.3 allows remote attackers to execute arbitrary SQL commands via the m parameter, which sets the $this->chosen_month variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3319 - http://forums.invisionpower.com/index.php?act=ST&f=1&t=108786 - http://www.securityfocus.com/bid/9353 - http://www.securityfocus.com/archive/1/348821 - http://secunia.com/advisories/10530 - http://www.securitytracker.com/id?1008589
CVE ID: CVE-2004-1786 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:00:37.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: PortalApp places user credentials under the web root with insufficient access control, which allows remote attackers to gain access to sensitive information via a direct request to 8275.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1008627 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14169 - http://www.securityfocus.com/bid/9354
CVE ID: CVE-2004-1787 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:00:37.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search queries. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14111 - http://www.securityfocus.com/bid/9372 - http://secunia.com/advisories/10554 - http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2537 - http://securitytracker.com/id?1008621 - http://www.osvdb.org/3336
CVE ID: CVE-2004-1788 State: PUBLISHED Published: 2005-05-10T04:00:00Z Last Updated: 2024-09-17T04:23:50.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to main.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9355
CVE ID: CVE-2004-1789 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:00:37.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web management interface in ZyWALL 10 4.07 allows remote attackers to inject arbitrary web script or HTML via the rpAuth_1 page. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14163 - http://securitytracker.com/id?1008644 - http://www.securityfocus.com/bid/9373 - http://www.osvdb.org/3443 - http://secunia.com/advisories/10574 - http://www.osvdb.org/12793 - http://www.securityfocus.com/archive/1/349085
CVE ID: CVE-2004-1790 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:00:37.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web management interface in Edimax AR-6004 ADSL Routers allows remote attackers to inject arbitrary web script or HTML via the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/349089 - http://www.osvdb.org/3435 - http://securitytracker.com/id?1008643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14165 - http://www.securityfocus.com/bid/9374 - http://secunia.com/advisories/10576
CVE ID: CVE-2004-1791 State: PUBLISHED Published: 2005-05-10T04:00:00Z Last Updated: 2024-09-17T02:16:23.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password, which also appear as the default login text for the management interface, which allows remote attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/349089 - http://www.osvdb.org/3511 - http://securitytracker.com/id?1008643
CVE ID: CVE-2004-1792 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:00:37.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a long packet with two CRLF sequences to the service management port (TCP 8000). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9339 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14123 - http://www.elitehaven.net/switchoff.txt - http://www.securityfocus.com/archive/1/348693 - http://securitytracker.com/id?1008581 - http://secunia.com/advisories/10521
CVE ID: CVE-2004-1793 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:00:37.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9340 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14124 - http://www.osvdb.org/3309 - http://www.elitehaven.net/switchoff.txt - http://www.securityfocus.com/archive/1/348693 - http://securitytracker.com/id?1008581 - http:/
haven.net/switchoff.txt - http://www.securityfocus.com/archive/1/348693 - http://securitytracker.com/id?1008581 - http://secunia.com/advisories/10521
CVE ID: CVE-2004-1794 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:00:37.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the VCard4J Toolkit allows remote attackers to inject arbitrary web script or HTML via the NICKNAME tag in a vCard. Additional Analyst Notes: - CVE Program Container: References: - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0006.html - http://www.securityfocus.com/bid/9343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14120 - http://securitytracker.com/id?1008582
CVE ID: CVE-2004-1795 State: PUBLISHED Published: 2005-05-10T04:00:00Z Last Updated: 2024-09-17T03:17:29.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Info Touch Surfnet kiosk allows local users to access the underlying filesystem via a 'file://' URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9346
CVE ID: CVE-2004-1796 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:47.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in HotNews 0.7.2 and earlier allows remote attackers to execute arbitrary PHP code via the (1) config[header] parameter to hotnews-engine.inc.php3 or (2) config[incdir] parameter to hnmain.inc.php3. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3332 - http://www.securityfocus.com/archive/1/348840 - http://secunia.com/advisories/10551 - http://securitytracker.com/id?1008608 - http://www.osvdb.org/3405 - https://exchange.xforce.ibmcloud.com/vulnerabi
551 - http://securitytracker.com/id?1008608 - http://www.osvdb.org/3405 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14140 - http://www.securityfocus.com/bid/9357 - http://sourceforge.net/forum/forum.php?forum_id=342594
CVE ID: CVE-2004-1797 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:47.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php for FreznoShop 1.3.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14147 - http://securitytracker.com/id?1008606 - http://www.freznoshop.com/changelog_en.htm - http://secunia.com/advisories/10547 - http://www.osvdb.org/3335
CVE ID: CVE-2004-1798 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:47.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealOne player 6.0.11.868 allows remote attackers to execute arbitrary script in the "My Computer" zone via a Synchronized Multimedia Integration Language (SMIL) presentation with a "file:javascript:" URL, which is executed in the security context of the previously loaded URL, a different vulnerability than CVE-2003-0726. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/9584 - http://securitytracker.com/id?1008647 - http://www.securityfocus.com/bid/9378 - http://www.osvdb.org/3826
sories/9584 - http://securitytracker.com/id?1008647 - http://www.securityfocus.com/bid/9378 - http://www.osvdb.org/3826 - http://www.securityfocus.com/archive/1/349086 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14168
CVE ID: CVE-2004-1799 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:47.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: PF in certain OpenBSD versions, when stateful filtering is enabled, does not limit packets for a session to the original interface, which allows remote attackers to bypass intended packet filters via spoofed packets to other interfaces. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/19105 - http://marc.info/?l=full-disclosure&m=107331321302113&w=2 - http://www.securityfocus.com/bid/9362
CVE ID: CVE-2004-1800 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:47.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Sysbotz SimpleData 4.0.1 and possibly earlier versions allows remote attackers to gain access via a crafted URL and a certain cookie. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1008695 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14206 - http://www.sysbotz.com/press/sdupdate402.htm - http://www.securityfocus.com/bid/9380 - http://secunia.com/advisories/10595
CVE ID: CVE-2004-1801 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in PWebServer 0.3.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9817 - http://secunia.com/advisories/11057 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15404 - http://marc.info/?l=bugtraq&m=107876388211413&w=2 - http://www.autistici.org/fdonato/advisory/PWebServer0.3.3-adv.txt
CVE ID: CVE-2004-1802 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chat Anywhere 2.72 and earlier allows remote attackers to hide their IP address by using %00 before the nickname, which causes the IP address to be displayed as $IP$ on the administration web page. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15416 - http://aluigi.altervista.org/adv/chatany-ghost-adv.txt - http://www.securityfocus.com/bid/9823 - http://www.lionmax.com/chatanywhere.htm - http://marc.info/?l=bugtraq&m=107885946220895&w=2
CVE ID: CVE-2004-1804 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: wMCam server 2.1.348 allows remote attackers to cause a denial of service (no new connections) via multiple malformed HTTP requests without the GET command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15431 - http://www.securityfocus.com/bid/9839 - http://marc.info/?l=bugtraq&m=107894337524376&w=2
CVE ID: CVE-2004-1805 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:47.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in class names. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15430 - http://marc.info/?l=bugtraq&m=107893764406905&w=2 - http://aluigi.altervista.org/adv/unrfs-adv.txt - http://secunia.com/advisories/11108 - http://www.securityfocus.com/bid/9840 - http://ma
tervista.org/adv/unrfs-adv.txt - http://secunia.com/advisories/11108 - http://www.securityfocus.com/bid/9840 - http://marc.info/?l=bugtraq&m=107902755204583&w=2
CVE ID: CVE-2004-1806 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:07:48.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to execute SQL commands via the (1) category_id, (2) product_id, or (3) feature_id parameters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107911090901744&w=2 - http://securitytracker.com/id?1009403 - http://www.cfwebstore.com/whatsnewdetail.cfm?WhatsNew__WhatsNewID=43 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15447 - http://www.s-quadra.com/advisories/Adv-20040312.txt - http://www.
//exchange.xforce.ibmcloud.com/vulnerabilities/15447 - http://www.s-quadra.com/advisories/Adv-20040312.txt - http://www.osvdb.org/4229 - http://www.securityfocus.com/bid/9854 - http://secunia.com/advisories/11112