Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
g type. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-386.html - http://secunia.com/advisories/14992 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/20123 - https://bugzilla.mozilla.org/show_bug.cgi?id=290162 - http://secunia.com/advisories/19823 - http://securitytracker.com/id?1013742 - http://www.securityfocus.com/bid/15495 - http://www.redhat.com/support/errata/RHSA-2005-601.html - http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml - http://www.mozilla.org/security/announce/mfsa2005-40.html - http://www.securityfocus.com/bid/13232 - htt
200504-18.xml - http://www.mozilla.org/security/announce/mfsa2005-40.html - http://www.securityfocus.com/bid/13232 - http://securitytracker.com/id?1013743 - http://secunia.com/advisories/14938 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100018 - http://www.redhat.com/support/errata/RHSA-2005-384.html - http://www.redhat.com/support/errata/RHSA-2005-383.html - http://www.novell.com/linux/security/advisories/2006_04_25.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10629
CVE ID: CVE-2005-1160 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:44:05.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: The privileged "chrome" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overriding certain properties or methods of DOM nodes, as demonstrated using multiple attacks involving the eval function or the Script object. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=289083 - http://www.redhat.com/support/errata/RHSA-2005-386.html - http://secunia.com/advisories/14992 - https://oval.cisecurity.org/repository/s
t.com/support/errata/RHSA-2005-386.html - http://secunia.com/advisories/14992 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100017 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - http://www.mozilla.org/security/announce/mfsa2005-41.html - http://secunia.com/advisories/19823 - http://www.securityfocus.com/bid/13233 - http://www.securityfocus.com/bid/15495 - https://bugzilla.mozilla.org/show_bug.cgi?id=289074 - http://www.redhat.com/support/errata/RHSA-2005-601.html - http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml - https://bugzilla.mozilla.org/show_bug.cgi?id=289961 - http://secunia.com/advisories/14938 - http:
a/glsa-200504-18.xml - https://bugzilla.mozilla.org/show_bug.cgi?id=289961 - http://secunia.com/advisories/14938 - http://www.redhat.com/support/errata/RHSA-2005-384.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11291 - http://www.redhat.com/support/errata/RHSA-2005-383.html - http://www.novell.com/linux/security/advisories/2006_04_25.html
CVE ID: CVE-2005-1161 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:44:05.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) owAddItem.asp or (2) owProductDetail.asp, (3) idCategory parameter to owListProduct.asp, or (4) bSpecials parameter to owListProduct.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013720 - http://www.securityfocus.com/bid/13183 - http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab - http://www.sec
cus.com/bid/13183 - http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab - http://www.securityfocus.com/bid/13182 - http://www.osvdb.org/15518 - http://www.osvdb.org/15520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20097 - http://www.securityfocus.com/bid/13181 - http://www.osvdb.org/15519 - http://marc.info/?l=bugtraq&m=111352017704126&w=2 - http://secunia.com/advisories/14969
CVE ID: CVE-2005-1162 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:44:05.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web script or HTML via the (1) sEmail parameter to owContactUs.asp, (2) bSub parameter to owListProduct.asp, or the (3) Name, (4) Email, or (5) Comment fields in owProductDetail.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13184 - http://securitytracker.com/id?1013720 - http://www.osvdb.org/15523 - http://www.securityfocus.com/bid/13186 - http://www.oneworldst
ritytracker.com/id?1013720 - http://www.osvdb.org/15523 - http://www.securityfocus.com/bid/13186 - http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab - http://www.osvdb.org/15521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20096 - http://marc.info/?l=bugtraq&m=111352017704126&w=2 - http://www.osvdb.org/15522 - http://secunia.com/advisories/14969 - http://www.securityfocus.com/bid/13185
CVE ID: CVE-2005-1163 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:44:05.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Yager 5.24 and earlier allow remote attackers to execute arbitrary code via (1) a crafted nickname or (2) a packet with a large amount of data. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14967 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20100 - http://www.securityfocus.com/bid/13177 - http://marc.info/?l=bugtraq&m=111352154820865&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20101 - http://www.osvdb.org/15508 - http://www.o
52154820865&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20101 - http://www.osvdb.org/15508 - http://www.osvdb.org/15507 - http://aluigi.altervista.org/adv/yagerbof-adv.txt - http://www.securityfocus.com/bid/13178
CVE ID: CVE-2005-1164 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:44:05.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yager 5.24 and earlier allows remote attackers to cause a denial of service (application hang) via a packet with a game header that provides less data than indicated by the length. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14967 - http://www.securityfocus.com/bid/13179 - http://marc.info/?l=bugtraq&m=111352154820865&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20104 - http://aluigi.altervista.org/adv/yagerbof-adv.txt - http://www.osvdb.org/15509
CVE ID: CVE-2005-1165 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:44:05.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yager 5.24 and earlier allows remote attackers to cause a denial of service (application crash) via certain malformed data. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111352154820865&w=2 - http://aluigi.altervista.org/adv/yagerbof-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/20105
CVE ID: CVE-2005-1166 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:44:05.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNTUS26 process in Dameware NT Utilities and the DWRCS process in MiniRemote Control 4.9 and earlier stores the username and password in cleartext in memory, which could allow attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013725 - http://www.osvdb.org/15275 - http://marc.info/?l=bugtraq&m=111358825101305&w=2 - http://www.shellsec.net/leer_advisory.php?id=7
CVE ID: CVE-2005-1167 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:44:05.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Musicmatch 10.00.2047 and earlier store log files in the Program Files directory instead of the user profile, which may allow local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111358261404682&w=2 - http://www.hyperdose.com/advisories/H2005-02.txt
CVE ID: CVE-2005-1168 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:44:06.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: DiagCollectionControl.dll in Musicmatch 10.00.2047 and earlier allows remote attackers to overwrite arbitrary files via the bstrSavePath argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13167 - http://marc.info/?l=bugtraq&m=111359007928030&w=2
CVE ID: CVE-2005-1169 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:44:05.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mafia Blog .4 BETA does not properly protect the admin directory, which allows remote attackers to execute arbitrary PHP code by using writeinfo.php to inject the code into info.php. Additional Analyst Notes: - CVE Program Container: References: - http://chrisnowak.org/projects/mafia/ - http://marc.info/?l=bugtraq&m=111359511826958&w=2 - http://www.securityfocus.com/bid/13194
CVE ID: CVE-2005-1170 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:44:06.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111367077709726&w=2
CVE ID: CVE-2005-1171 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:44:05.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111367077709726&w=2 - http://www.osvdb.org/15812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20146 - http://www.securityfocus.com/bid/13210
CVE ID: CVE-2005-1172 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:44:05.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in init.inc.php in Coppermine Photo Gallery 1.3.x allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111383800707880&w=2 - http://www.securityfocus.com/bid/13218 - http://coppermine.sourceforge.net/board/index.php?topic=17134 - http://secunia.com/advisories/15004
CVE ID: CVE-2005-1173 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:44:05.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary code via a long GET request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111384806002021&w=2
CVE ID: CVE-2005-1174 State: PUBLISHED Published: 2005-07-16T04:00:00 Last Updated: 2024-08-07T21:44:05.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: MIT Kerberos 5 (krb5) 1.3 through 1.4.1 Key Distribution Center (KDC) allows remote attackers to cause a denial of service (application crash) via a certain valid TCP connection that causes a free of unallocated memory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20364 - http://www.redhat.com/support/errata/RHSA-2005-567.html - http://www.novell.com/linux/security/advisories/2005_17_sr.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/21327 - http://www.kb.cert.org/v
urity/advisories/2005_17_sr.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/21327 - http://www.kb.cert.org/vuls/id/259798 - http://marc.info/?l=bugtraq&m=112122123211974&w=2 - http://securitytracker.com/id?1014460 - http://www.vupen.com/english/advisories/2006/2074 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A397 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101809-1 - http://web.mit.edu/kerberos/advisories/2005-002-patch_1.4.1.txt - http://www.turbolinux.com/security/2005/TLSA-2005-78.txt - http://www-1.ibm.com/support/docview.wss?uid=swg1IY85474 - ftp://patches.sgi.com/support/free/security/advisories/20050703-01-U.asc -
bm.com/support/docview.wss?uid=swg1IY85474 - ftp://patches.sgi.com/support/free/security/advisories/20050703-01-U.asc - http://www.securityfocus.com/bid/14240 - http://secunia.com/advisories/16041 - https://usn.ubuntu.com/224-1/ - http://www.debian.org/security/2005/dsa-757 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10229 - http://secunia.com/advisories/17899 - http://www.vupen.com/english/advisories/2005/1066 - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html - http://www.trustix.org/errata/2005/0036
CVE ID: CVE-2005-1175 State: PUBLISHED Published: 2005-07-17T04:00:00 Last Updated: 2024-08-07T21:44:05.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain valid TCP or UDP request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/21328 - http://secunia.com/advisories/20364 - http://www.redhat.com/support/errata/RHSA-2005-567.html - https://oval.cisecurity.org/repository/search/definiti
20364 - http://www.redhat.com/support/errata/RHSA-2005-567.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A736 - http://www.novell.com/linux/security/advisories/2005_17_sr.html - http://www.securityfocus.com/bid/14236 - http://marc.info/?l=bugtraq&m=112122123211974&w=2 - http://securitytracker.com/id?1014460 - http://www.vupen.com/english/advisories/2006/2074 - http://www.redhat.com/support/errata/RHSA-2005-562.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101809-1 - http://www.turbolinux.com/security/2005/TLSA-2005-78.txt - http://www-1.ibm.com/support/docview.wss?uid=swg1IY85474 - https://oval.cisecurity.org/repository/search/
-2005-78.txt - http://www-1.ibm.com/support/docview.wss?uid=swg1IY85474 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9902 - ftp://patches.sgi.com/support/free/security/advisories/20050703-01-U.asc - http://secunia.com/advisories/16041 - https://usn.ubuntu.com/224-1/ - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-002-kdc.txt - http://www.debian.org/security/2005/dsa-757 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://secunia.com/advisories/17135 - http://secunia.com/advisories/17899 - http://www.vupen.com/english/advisories/2005/1066 - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.
ttp://www.vupen.com/english/advisories/2005/1066 - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html - http://www.kb.cert.org/vuls/id/885830 - http://www.trustix.org/errata/2005/0036
CVE ID: CVE-2005-1176 State: PUBLISHED Published: 2005-04-19T04:00:00 Last Updated: 2024-08-07T21:44:05.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in JFS2 on AIX 5.2 and 5.3, when deleting a file while I/O is still occurring for that file, may write data to a different file, which could leak sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20604 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY70034&apar=only - http://www-1.ibm.com/support/search.wss?rs=0&q=IY70032&apar=only
CVE ID: CVE-2005-1177 State: PUBLISHED Published: 2005-04-19T04:00:00 Last Updated: 2024-08-07T21:44:05.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in (1) Webmin and (2) Usermin before 1.200 causes Webmin to change permissions and ownership of configuration files, with unknown impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.webmin.com/changes.html - http://securitytracker.com/id?1013723 - http://www.webmin.com/uchanges.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/20607
CVE ID: CVE-2005-1178 State: PUBLISHED Published: 2005-04-19T04:00:00 Last Updated: 2024-08-07T21:44:05.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Oracle Forms 10g allows remote attackers to execute arbitrary SQL commands via the Query/Where feature. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/securitynews/5HP0I0UFFI.html - http://www.red-database-security.com/wp/sql_injection_forms_us.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/20080
CVE ID: CVE-2005-1179 State: PUBLISHED Published: 2005-04-19T04:00:00 Last Updated: 2024-08-07T21:44:05.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032, Pro 65/75/90 1.001.00.060 through 1.001.02.084, and others, related to SNMP authentication, allows remote attackers to modify system configuration, a different vulnerability than CVE-2005-0703. Additional Analyst Notes: - CVE Program Container: References: - http://www.xerox.com/downloads/usa/en/c/cert_XRX
-0703. Additional Analyst Notes: - CVE Program Container: References: - http://www.xerox.com/downloads/usa/en/c/cert_XRX05_005.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/20192 - http://www.securityfocus.com/bid/13196 - http://secunia.com/advisories/14507
CVE ID: CVE-2005-1180 State: PUBLISHED Published: 2005-04-19T04:00:00 Last Updated: 2024-08-07T21:44:05.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the forwarder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.digitalparadox.org/advisories/pnuke.txt - http://www.osvdb.org/15647 - http://secunia.com/advisories/14965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20116 - http://marc.info/?l=bugtraq&m=111359804013536&w=2
CVE ID: CVE-2005-1181 State: PUBLISHED Published: 2005-04-19T04:00:00 Last Updated: 2024-08-07T21:44:05.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: NOTE: this issue has been disputed by the vendor. PHP remote code injection vulnerability in loader.php for Ariadne CMS 2.4 allows remote attackers to execute arbitrary PHP code by modifying the ariadne parameter to reference a URL on a remote web server that contains the code. NOTE: the vendor has disputed this issue, saying that loader.php first requires the "ariadne.inc" file, which defines the $ariadne variable, and thus it cannot be modified by an attacker. In addition, CVE personnel have partially verified the dispute vi
riable, and thus it cannot be modified by an attacker. In addition, CVE personnel have partially verified the dispute via source code inspection of Ariadne 2.4 as available on July 5, 2005 Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15549 - http://securitytracker.com/id?1013721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20611
CVE ID: CVE-2005-1182 State: PUBLISHED Published: 2005-04-19T04:00:00 Last Updated: 2024-08-07T21:44:05.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Incoming Remote Command (iSeries Access for Windows Remote Command service) in IBM OS/400 R510, R520, and R530 allows attackers to cause a denial of service (IRC shutdown) via certain inputs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20612 - http://www-1.ibm.com/support/docview.wss?uid=nas29afd3991f5f290b086256fdb0053b293
CVE ID: CVE-2005-1183 State: PUBLISHED Published: 2005-04-19T04:00:00 Last Updated: 2024-08-07T21:44:05.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mvnForum 1.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the Search parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20613 - http://www.securityfocus.com/bid/13213 - http://www.osvdb.org/15760
CVE ID: CVE-2005-1184 State: PUBLISHED Published: 2005-04-19T04:00:00 Last Updated: 2024-08-07T21:44:05.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the correct sequence number but the wrong Acknowledgement number, which generates a large number of "keep alive" packets. NOTE: some followups indicate that this issue could not be replicated. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/lists/fulldisclosure/2005/Apr/0358.html - http://seclists.org/lists/fulldisclosure/2005/Apr/0385.html - http://www
s.org/lists/fulldisclosure/2005/Apr/0358.html - http://seclists.org/lists/fulldisclosure/2005/Apr/0385.html - http://www.securityfocus.com/bid/13215 - http://seclists.org/lists/fulldisclosure/2005/Apr/0383.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/40502
CVE ID: CVE-2005-1185 State: PUBLISHED Published: 2005-04-19T04:00:00 Last Updated: 2024-08-07T21:44:05.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in Musicmatch Jukebox 10.00.2047 and earlier allows local users to gain privileges via a malicious C:\program.exe file, which is run by MMFWLaunch.exe when it attempts to execute launch.exe. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111352290711509&w=2 - http://www.hyperdose.com/advisories/H2005-05.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/20129 - http://securitytracker.com/id?1013718
CVE ID: CVE-2005-1186 State: PUBLISHED Published: 2005-04-19T04:00:00 Last Updated: 2024-08-07T21:44:05.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet Explorer, which allows systems in the domain to conduct unauthorized activities, as demonstrated using cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.hyperdose.com/advisories/H2005-04.txt - http://seclists.org/lists/bugtraq/2005/Apr/0212.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/20129 - http://securitytracker.com/id?1013718