Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-1182 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:46:11.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted (1) username or (2) hostname that satisfies a regular expression that is matched against a hosts.hfaxd entry without a password. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200501-21.xml - http://www.debian.org/security/2004/dsa-634 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:006 - h
.xml - http://www.debian.org/security/2004/dsa-634 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:006 - http://marc.info/?l=bugtraq&m=110546971307585&w=2 - http://marc.info/?l=hylafax&m=110545119911558&w=2 - http://secunia.com/advisories/13812
CVE ID: CVE-2004-1183 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-08T00:46:10.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-019.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:001 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9743 - http://www.mandriva.com/security/advisories?
urity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9743 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:002 - http://www.securityfocus.com/bid/12173 - http://www.debian.org/security/2004/dsa-626 - http://secunia.com/advisories/13728/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18782 - http://www.novell.com/linux/security/advisories/2005_01_libtiff_tiff.html - http://marc.info/?l=bugtraq&m=110503635113419&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:052 - http://security.gentoo.org/glsa/glsa-200501-06.xml - http://www.redhat.com/support/errata/RHSA-2005-035.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000920 -
://www.redhat.com/support/errata/RHSA-2005-035.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000920 - http://secunia.com/advisories/13776
CVE ID: CVE-2004-1184 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-08T00:46:11.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9658 - http://www.securityfocus.com/archive/1/419768/100/0/threaded - http://www.securityfocus.com/bid/12329 - http://support.apple.com/kb/HT3549 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:033 - https://usn.ubuntu.com/68-1/ -
.apple.com/kb/HT3549 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:033 - https://usn.ubuntu.com/68-1/ - http://securitytracker.com/id?1012965 - http://secunia.com/advisories/35074 - http://www.debian.org/security/2005/dsa-654 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.securityfocus.com/archive/1/435199/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297 - http://www.redhat.com/support/errata/RHSA-2005-040.html - http://www.gentoo.org/security/en/glsa/glsa-200502-03.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/19012
CVE ID: CVE-2004-1185 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-08T00:46:11.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/419768/100/0/threaded - http://www.securityfocus.com/bid/12329 - http://support.apple.com/kb/HT3549 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10808 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:033 - https://usn.ubuntu.com/
org.mitre.oval%3Adef%3A10808 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:033 - https://usn.ubuntu.com/68-1/ - http://securitytracker.com/id?1012965 - http://secunia.com/advisories/35074 - http://www.debian.org/security/2005/dsa-654 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.securityfocus.com/archive/1/435199/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/19029 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297 - http://www.redhat.com/support/errata/RHSA-2005-040.html - http://www.gentoo.org/security/en/glsa/glsa-200502-03.xml
CVE ID: CVE-2004-1186 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-08T00:46:11.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19033 - http://www.securityfocus.com/archive/1/419768/100/0/threaded - http://www.securityfocus.com/bid/12329 - http://support.apple.com/kb/HT3549 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:033 - https://usn.ubuntu.com/68-1/ - http://securitytracker.com/id?101296
ndriva.com/security/advisories?name=MDKSA-2005:033 - https://usn.ubuntu.com/68-1/ - http://securitytracker.com/id?1012965 - http://secunia.com/advisories/35074 - http://www.debian.org/security/2005/dsa-654 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11134 - http://www.securityfocus.com/archive/1/435199/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297 - http://www.redhat.com/support/errata/RHSA-2005-040.html - http://www.gentoo.org/security/en/glsa/glsa-200502-03.xml
CVE ID: CVE-2004-1187 State: PUBLISHED Published: 2004-12-22T05:00:00 Last Updated: 2024-08-08T00:46:11.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNA_TAG values, a different vulnerability than CVE-2004-1188. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18640 - http://www.mplayerhq.hu/MPlayer/patches/pnm_fix_20041215.diff - http://www.idefense.com/application/poi/display?id=176&type=vulnerabilities - http://www
patches/pnm_fix_20041215.diff - http://www.idefense.com/application/poi/display?id=176&type=vulnerabilities - http://www.mandriva.com/security/advisories?name=MDKSA-2005:011 - http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/pnm.c?r1=1.20&r2=1.21
CVE ID: CVE-2004-1188 State: PUBLISHED Published: 2004-12-22T05:00:00 Last Updated: 2024-08-08T00:46:12.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the PREAMBLE_SIZE, which causes a read operation with a negative length that leads to a buffer overflow via (1) RMF_TAG, (2) DATA_TAG, (3) PROP_TAG, (4) MDPR_TAG, and (5) CONT_TAG values, a different vulnerability than CVE-2004-1187. Additional Analyst Notes: - CVE Program Container: References: - http://www.mplayerhq.hu/MPlayer/patches/pnm_fix_20041215.diff
onal Analyst Notes: - CVE Program Container: References: - http://www.mplayerhq.hu/MPlayer/patches/pnm_fix_20041215.diff - http://www.mandriva.com/security/advisories?name=MDKSA-2005:011 - http://www.idefense.com/application/poi/display?id=177&type=vulnerabilities - http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/pnm.c?r1=1.20&r2=1.21 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18638
CVE ID: CVE-2004-1189 State: PUBLISHED Published: 2004-12-31T05:00:00 Last Updated: 2024-08-08T00:46:11.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: The add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow authenticated users to execute arbitrary code via a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000917 - https://oval.cisecurity.org
Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000917 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11911 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18621 - http://www.redhat.com/support/errata/RHSA-2005-012.html - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://marc.info/?l=bugtraq&m=110548298407590&w=2 - http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2004-004-pwhist.txt - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html - http://www.trustix.org/errata/2004/0069 - http://www.redhat.com/support/errata/RHSA-2005-045.html - http://marc.info/?
- http://www.trustix.org/errata/2004/0069 - http://www.redhat.com/support/errata/RHSA-2005-045.html - http://marc.info/?l=bugtraq&m=110358420909358&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:156
CVE ID: CVE-2004-1190 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:11.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to conduct unauthorized write activities to modify the firmware of associated SCSI devices. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2006-0101.html - http://www.novell.com/linux/security/advisories/2004_42_kernel.html - http://secunia.com/advisories/18510 - http://www.securityfocus.com/bi
om/linux/security/advisories/2004_42_kernel.html - http://secunia.com/advisories/18510 - http://www.securityfocus.com/bid/11784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18370 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9369
CVE ID: CVE-2004-1191 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:12.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in SuSE Linux 8.1 through 9.2, when run on SMP systems that have more than 4GB of memory, could allow local users to read unauthorized memory from "foreign memory pages." Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2004_42_kernel.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18137
CVE ID: CVE-2004-1192 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:11.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110304986223400&w=2 - http://www.nosystem.com.ar/advisories/advisory-09.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/18429 - http://marc.info/?l=bugtraq&m=110295469430696&w=2
CVE ID: CVE-2004-1193 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:11.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prevx Home 1.0 allows local users with administrator privileges to bypass the intrusion prevention features by directly writing to \device\physicalmemory, which restores the running kernel's original SDT ServiceTable. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1012294 - http://marc.info/?l=bugtraq&m=110118902823639&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18195 - http://marc.info/?l=bugtraq&m=110138413816367&w=2
CVE ID: CVE-2004-1194 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:11.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (application crash) via a long nickname. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11750 - http://marc.info/?l=bugtraq&m=110132227932050&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18256
CVE ID: CVE-2004-1195 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:12.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (application crash) via a join request that contains a memory address that causes the server to read arbitrary memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11750 - http://marc.info/?l=bugtraq&m=110132227932050&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18257
CVE ID: CVE-2004-1196 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:11.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in inmail.pl in Insite Inmail allows remote attackers to inject arbitrary web script or HTML via the acao parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18268 - http://marc.info/?l=bugtraq&m=110140029419018&w=2 - http://secunia.com/advisories/13188/ - http://www.securityfocus.com/bid/11758
CVE ID: CVE-2004-1197 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:11.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in inshop.pl in Insite inShop allows remote attackers to inject arbitrary web script or HTML via the screen parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18268 - http://marc.info/?l=bugtraq&m=110140029419018&w=2 - http://secunia.com/advisories/13188/ - http://www.securityfocus.com/bid/11758
CVE ID: CVE-2004-1198 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:11.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer allows remote attackers to cause a denial of service (application crash from memory consumption), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18282 - http://www.securityfocus.com/bid/11751 - http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1221.html - http://www.securityfocus.com/archive/1/382257
CVE ID: CVE-2004-1199 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:11.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18282 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029458.html - http://www.securityfocus.com/bid/11759
CVE ID: CVE-2004-1200 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:11.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox and Mozilla allow remote attackers to cause a denial of service (application crash from memory consumption), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029434.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18282 - http://www.securityfocus.com/bid/11752 - http://lists.grok.org.uk/pipermail/full-disclosure
.com/vulnerabilities/18282 - http://www.securityfocus.com/bid/11752 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029491.html - http://www.securityfocus.com/bid/11760
CVE ID: CVE-2004-1201 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:12.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 7.54 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18282 - http://marc.info/?l=full-disclosure&m=110144136213993&w=2 - http://marc.info/?l=full-disclosure&m=110141347502530&w=2 - http://www.securityfocus.com/bid/11762
CVE ID: CVE-2004-1202 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:11.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to inject arbitrary web script or HTML via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029499.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18272 - http://www.phpcms.de/download/index.en.html - http://marc.info/?l=bugtraq&m=110149207123510&w=2 - http://www.secur
272 - http://www.phpcms.de/download/index.en.html - http://marc.info/?l=bugtraq&m=110149207123510&w=2 - http://www.securityfocus.com/bid/11765
CVE ID: CVE-2004-1203 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:11.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via an invalid file parameter, which reveals the web server's installation path. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029499.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18272 - http://marc.info/?l=bugtraq&m=110149207123510&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18279
CVE ID: CVE-2004-1204 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:11.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service (application crash) by calling Xman with a long -title value, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110149783715867&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18264
CVE ID: CVE-2004-1205 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:11.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: codebrowserpntm.php in PnTresMailer 6.03 allows remote attackers to gain sensitive information via an invalid filetohighlight parameter, which reveals the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110149886306037&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18263
CVE ID: CVE-2004-1206 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:11.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in codebrowserpntm.php in pnTresMailer 6.0.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the filetodownload parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11767 - http://marc.info/?l=bugtraq&m=110149886306037&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18263
CVE ID: CVE-2004-1207 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:11.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Serious engine, as used in (1) Alpha Black Zero Intrepid Protocol 1.04 and earlier, (2) Nitro family, and (3) Serious Sam Second Encounter 1.07 allows remote attackers to cause a denial of service (server crash) via a large number of UDP join requests that exceeds the maximum player limit, as originally reported for Alpha Black Zero. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1011454 - http://secunia.com/advisories/12687 - http://www.securityfocus.com/bid/11279 - http://m
securitytracker.com/id?1011454 - http://secunia.com/advisories/12687 - http://www.securityfocus.com/bid/11279 - http://marc.info/?l=bugtraq&m=110180289205605&w=2 - http://marc.info/?l=bugtraq&m=109651567308405&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17545
CVE ID: CVE-2004-1208 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:11.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Orbz 2.10 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long password field in a join request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18298 - http://marc.info/?l=bugtraq&m=110176280402580&w=2 - http://www.securityfocus.com/bid/11774
CVE ID: CVE-2004-1209 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:12.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMOUNT field, which allows remote attackers to modify the price of the items that they purchase. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110181288820226&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18299
CVE ID: CVE-2004-1210 State: PUBLISHED Published: 2004-12-15T05:00:00 Last Updated: 2024-08-08T00:46:12.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) part variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.kurczaba.com/html/security/0411291.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/18301 - http://www.securityfocus.com/bid/11779 - http://marc.info/?l=bugtraq&m=110197682705001&w=2