Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-1462 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_survey 3.0.0 through 3.0.15-pre6 does not check whether a survey exists before creating a subdirectory for it, which allows remote attackers to cause a denial of service (disk consumption and possible crash). Additional Analyst Notes: - CVE Program Container: References: - http://gathering.itm.mh.se/modsurvey/changelog.php - http://gathering.itm.mh.se/modsurvey/SA20030504.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/11861 - http://www.securityfocus.com/bid/7498 - http://archives.neohapsis.com/archives/bugtraq
cloud.com/vulnerabilities/11861 - http://www.securityfocus.com/bid/7498 - http://archives.neohapsis.com/archives/bugtraq/2003-05/0058.html
CVE ID: CVE-2003-1463 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1) determine the installation path by reading the contents of the Name parameter in a link, and (2) read arbitrary files via an absolute path in the Name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7438 - http://www.securityfocus.com/bid/7439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11874 - http://securit
38 - http://www.securityfocus.com/bid/7439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11874 - http://securityreason.com/securityalert/3286 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11875 - http://www.securityfocus.com/archive/1/319735
CVE ID: CVE-2003-1464 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Siemens 45 series mobile phones allows remote attackers to cause a denial of service (disconnect and unavailable inbox) via a Short Message Service (SMS) message with a long image name. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11950 - http://www.securityfocus.com/archive/1/320555 - http://securityreason.com/securityalert/3287 - http://www.securityfocus.com/bid/7507
CVE ID: CVE-2003-1465 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in Phorum 3.4 through 3.4.2 allows remote attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7569 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12482 - http://securityreason.com/securityalert/3288 - http://www.securityfocus.com/archive/1/321310
CVE ID: CVE-2003-1466 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Phorum 3.4 through 3.4.2 allows remote attackers to use Phorum as a connection proxy to other sites via (1) register.php or (2) login.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7583 - http://www.securityfocus.com/bid/7581 - http://securityreason.com/securityalert/3288 - http://www.securityfocus.com/archive/1/321310
CVE ID: CVE-2003-1467 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) login.php, (2) register.php, (3) post.php, and (4) common.php in Phorum before 3.4.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7572 - http://www.securityfocus.com/bid/7576 - http://www.securityfocus.com/bid/7573 - http://securityreason.com/securityalert/3288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12502 - http:
7573 - http://securityreason.com/securityalert/3288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12502 - http://www.securityfocus.com/bid/7577 - http://www.securityfocus.com/bid/7584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12487 - http://www.securityfocus.com/archive/1/321310
CVE ID: CVE-2003-1468 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web_Links module in PHP-Nuke 6.0 through 6.5 final allows remote attackers to obtain the full web server path via an invalid cid parameter that is non-numeric or null, which leaks the pathname in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/321313 - http://www.securityfocus.com/bid/7589 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12436
CVE ID: CVE-2003-1469 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows remote attackers to obtain the full path of the web server via a direct request to CFIDE/probe.cfm, which leaks the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/319867 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11879 - http://www.securityfocus.com/bid/7443 - http://www.nii.co.in/vuln/pdmac.html - http://securityrea
ulnerabilities/11879 - http://www.securityfocus.com/bid/7443 - http://www.nii.co.in/vuln/pdmac.html - http://securityreason.com/securityalert/3307
CVE ID: CVE-2003-1470 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a CREATE command with a long mailbox name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7446 - http://securityreason.com/securityalert/3296 - http://www.securityfocus.com/archive/1/319879 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11896
CVE ID: CVE-2003-1471 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service (crash) via a (1) DELE or (2) UIDL with a negative number. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11882 - http://archives.neohapsis.com/archives/bugtraq/2003-04/0359.html - http://www.securityfocus.com/bid/7445 - http://archive.cert.uni-stuttgart.de/bugtraq/2003/04/msg00364.html
CVE ID: CVE-2003-1472 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in 3D-FTP client 4.0 allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary code via a long banner. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11883 - http://www.securityfocus.com/bid/7451 - http://www.securityfocus.com/archive/1/319818
CVE ID: CVE-2003-1473 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in LTris 1.0.1 of FreeBSD Ports Collection 2003-02-25 and earlier allows local users to execute arbitrary code with gid "games" permission via a long HOME environment variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11978 - http://www.securityfocus.com/archive/1/321001 - http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2003-05/0122.html - http://www.securityfocus.com/bid/7537
CVE ID: CVE-2003-1474 State: PUBLISHED Published: 2007-10-24T23:00:00Z Last Updated: 2024-09-17T03:38:45.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: slashem-tty in the FreeBSD Ports Collection is installed with write permissions for the games group, which allows local users with group games privileges to modify slashem-tty and execute arbitrary code as other users, as demonstrated using a separate vulnerability in LTris. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/321001 - http://www.iss.net/security_center/static/11979.php - http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2003-05/0122.html
CVE ID: CVE-2003-1475 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netbus 1.5 through 1.7 allows more than one client to be connected at the same time, but only prompts the first connection for authentication, which allows remote attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11982 - http://securityreason.com/securityalert/3289 - http://www.securityfocus.com/archive/1/320980 - http://www.securityfocus.com/bid/7538
CVE ID: CVE-2003-1476 State: PUBLISHED Published: 2007-10-24T23:00:00Z Last Updated: 2024-09-16T19:31:54.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cerberus FTP Server 2.1 stores usernames and passwords in plaintext, which could allow local users to gain access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7556 - http://www.cerberusftp.com/cerberus-releasenotes.htm#KnownIssues
CVE ID: CVE-2003-1477 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service (CPU consumption) via a PowerPoint attachment that either (1) is corrupt or (2) contains "embedded objects." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7562 - http://www.clearswift.com/download/bin/Patches/ReadMe_SMTP_438.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/12052
CVE ID: CVE-2003-1478 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web page that begins with a "xFFxFE" byte sequence and a large number of CRLF sequences, as demonstrated using freeze.htm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11971 - http://www.securityfocus.com/archive/1/320266
CVE ID: CVE-2003-1479 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webcamXP 1.02.432 and 1.02.535 allows remote attackers to inject arbitrary web script or HTML via the message field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/320345 - http://www.securityfocus.com/bid/7490 - http://securityreason.com/securityalert/3304 - http://www.frame4.com/content/advisories/FSA-2003-002.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/11952
CVE ID: CVE-2003-1480 State: PUBLISHED Published: 2007-10-24T23:00:00Z Last Updated: 2024-09-16T22:15:13.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/8753 - http://www.securiteam.com/tools/5WP031FA0U.html - http://www.securityfocus.com/bid/7500
CVE ID: CVE-2003-1481 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/320438 - http://securityreason.com/securityalert/3290 - http://www.securityfocus.com/bid/7501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11932
CVE ID: CVE-2003-1482 State: PUBLISHED Published: 2007-10-24T23:00:00Z Last Updated: 2024-09-16T22:40:24.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: The backup configuration file for Microsoft MN-500 wireless base station stores administrative passwords in plaintext, which allows local users to gain access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7496 - http://www.kurczaba.com/html/security/0305031.htm - http://securitytracker.com/id?1006691
CVE ID: CVE-2003-1483 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/12298 - http://securitytracker.com/id?1006730 - http://www.securityfocus.com/bid/7499 - http://downloads.securityfocus.com/vulnerabilities/exploits/flashfxp_decrypt.c
CVE ID: CVE-2003-1484 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) by creating a DHTML link that uses the AnchorClick "A" object with a blank href attribute. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11946 - http://www.securityfocus.com/archive/1/320544 - http://www.securityfocus.com/bid/7502 - http://securityreason.com/securityalert/3292
CVE ID: CVE-2003-1485 State: PUBLISHED Published: 2007-10-24T23:00:00Z Last Updated: 2024-09-17T02:31:17.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file attachment that contains "multiple extensions combined with large blocks of white space." Additional Analyst Notes: - CVE Program Container: References: - http://www.clearswift.com/download/bin/Patches/ReadMe_SMTP_438.htm - http://www.securityfocus.com/bid/7568
CVE ID: CVE-2003-1486 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phorum 3.4 through 3.4.2 allows remote attackers to obtain the full path of the web server via an incorrect HTTP request to (1) smileys.php, (2) quick_listrss.php, (3) purge.php, (4) news.php, (5) memberlist.php, (6) forum_listrss.php, (7) forum_list_rdf.php, (8) forum_list.php, or (9) move.php, which leaks the information in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7571 - http://securityreason.com/securityalert/3288 - https://exchange.xforce.ibmcloud.c
ttp://www.securityfocus.com/bid/7571 - http://securityreason.com/securityalert/3288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/12499 - http://www.securityfocus.com/archive/1/321310
CVE ID: CVE-2003-1487 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the Phorum configuration files via the (1) UserAdmin program, (2) Edit user profile, or (3) stats program. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/12500 - http://www.securityfocus.com/bid/7579 - http://www.securityfocus.com/bid/7578 - http://securityreason.com/securityalert/3288 - http://www.securityfocus.com/bid/75
tp://www.securityfocus.com/bid/7578 - http://securityreason.com/securityalert/3288 - http://www.securityfocus.com/bid/7574 - http://www.securityfocus.com/archive/1/321310
CVE ID: CVE-2003-1488 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) verif_admin.php and (2) check_admin.php scripts in Truegalerie 1.0 allow remote attackers to gain administrator access via a request to admin.php without the connect parameter and with the loggedin parameter set to any value, such as 1. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=vulnwatch&m=105128431109082&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11886 - http://secunia.com/advisories/8683 - http://www.securityfocus.com/bid/7427
CVE ID: CVE-2003-1489 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: upload.php in Truegalerie 1.0 allows remote attackers to read arbitrary files by specifying the target filename in the file cookie in form.php, then downloading the file from the image gallery. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=vulnwatch&m=105128431109082&w=2 - http://secunia.com/advisories/8683
CVE ID: CVE-2003-1490 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: SonicWall Pro running firmware 6.4.0.1 allows remote attackers to cause a denial of service (device reset) via a long HTTP POST to the internal interface, possibly due to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3291 - http://www.securityfocus.com/archive/1/319712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11876 - http://www.securityfocus.com/bid/7435
CVE ID: CVE-2003-1491 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kerio Personal Firewall (KPF) 2.1.4 has a default rule to accept incoming packets from DNS (UDP port 53), which allows remote attackers to bypass the firewall filters via packets with a source port of 53. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7436 - http://archives.neohapsis.com/archives/fulldisclosure/2003-q2/0352.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/11880 - http://www.securiteam.com/securitynews/5FP0N1P9PI.html
CVE ID: CVE-2003-1492 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an HTTP request for a domain with an extra . (dot) at the end. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/319919 - http://www.securityfocus.com/bid/7456 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11924
CVE ID: CVE-2003-1493 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (memory exhaustion) via crafted TCP packets. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/hp/2003-q4/0019.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/13467 - http://www.securityfocus.com/bid/8859
CVE ID: CVE-2003-1494 State: PUBLISHED Published: 2007-10-24T23:00:00 Last Updated: 2024-08-08T02:28:03.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (CPU consumption) via a crafted TCP packet. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/hp/2003-q4/0019.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/13467 - http://www.securityfocus.com/bid/8859
CVE ID: CVE-2003-1495 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the non-SSL web agent in various HP Management Agent products allows local users or remote attackers to gain privileges or cause a denial of service via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13496 - http://www.securityfocus.com/bid/8878 - http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2003.1357.1
CVE ID: CVE-2003-1496 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in CDE dtmailpr of HP Tru64 4.0F through 5.1B allows local users to gain privileges via unknown attack vectors. NOTE: due to lack of details in the vendor advisory, it is not clear whether this is the same issue as CVE-1999-0840. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/9990 - http://www.securityfocus.com/bid/8813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13418 - http://www.securityfocus.com/advisories/5973
CVE ID: CVE-2003-1497 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the system log viewer of Linksys BEFSX41 1.44.3 allows remote attackers to cause a denial of service via an HTTP request with a long Log_Page_Num variable. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3298 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13436 - http://www.securityfocus.com/archive/1/341309 - http://www.securityfocus.com/bid/8834 - http://www.linksys.com/download/vertxt/befsx41_1453.txt
CVE ID: CVE-2003-1498 State: PUBLISHED Published: 2007-10-25T19:00:00 Last Updated: 2024-08-08T02:28:03.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php for WRENSOFT Zoom Search Engine 2.0 Build 1018 and earlier allows remote attackers to inject arbitrary web script or HTML via the zoom_query parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13431 - http://archives.neohapsis.com/archives/bugtraq/2003-10/0173.html - http://www.securityfocus.com/bid/8823