Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-2022 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-07T22:15:36.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Webmail in iPlanet Messaging Server 5.2 Patch 1 and Sun ONE Messaging Server 6.2 allows remote attackers to execute arbitrary Javascript, possibly due to a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/0816 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101770-1
CVE ID: CVE-2005-2023 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-07T22:15:36.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: The send_pinentry_environment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pinentry from being found and causes S/MIME signing to fail. Additional Analyst Notes: - CVE Program Container: References: - http://lists.gnupg.org/pipermail/gpa-dev/2005-June/002291.html - https://lists.gnupg.org/pipermail/gpa-dev/2005-May/002284.html - http://lists.gnupg.org/pipermail/gpa-dev/2005-June/002294.html - http://www.novell.com/linux/security/advisories/2005_16_sr.html
CVE ID: CVE-2005-2024 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-07T22:15:36.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vipul Razor Agents (razor-agents) before 2.70 allows remote attackers to cause a denial of service via (1) certain "unusual HTML messages" or (2) "certain malformed headers" such as Content-Type. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200506-17.xml - http://bugs.gentoo.org/show_bug.cgi?id=95492 - http://www.novell.com/linux/security/advisories/2005_35_razor_agents.html - http://www.securityfocus.com/bid/13984 - http://sourceforge.net/mailarchive/forum.php?thread_id
5_35_razor_agents.html - http://www.securityfocus.com/bid/13984 - http://sourceforge.net/mailarchive/forum.php?thread_id=7520323&forum_id=4259 - http://www.debian.org/security/2005/dsa-738
CVE ID: CVE-2005-2025 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-07T22:15:36.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which generates a response if the groupname is valid, but does not generate a response for an invalid groupname. Additional Analyst Notes: - CVE Program Container: References: - http://www.nta-monitor.com/news/vpn-flaws/cisco/VPN-Concentrator/index.htm - http://www.securityfocus.com/bid/13992 - http://www.vupen.com/english/advisories/2005/0822
CVE ID: CVE-2005-2026 State: PUBLISHED Published: 2005-06-21T04:00:00Z Last Updated: 2024-09-16T18:33:34.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 has a hard-coded account and password for debugging, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15757 - http://www.enterasys.com/support/relnotes/VH-4802-2050509-patch-rel.pdf
CVE ID: CVE-2005-2027 State: PUBLISHED Published: 2005-06-21T04:00:00Z Last Updated: 2024-09-17T00:25:46.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 does not properly restrict certain debugging commands to the ADMIN account, which could allow attackers to obtain sensitive information or modify the registry. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15757 - http://www.enterasys.com/support/relnotes/VH-4802-2050509-patch-rel.pdf
CVE ID: CVE-2005-2028 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-07T22:15:36.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14015 - http://marc.info/?l=bugtraq&m=111938068428037&w=2
CVE ID: CVE-2005-2029 State: PUBLISHED Published: 2005-06-21T04:00:00Z Last Updated: 2024-09-17T04:04:49.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: amaroK Web Frontend 1.3 stores the globals.inc file under the web root without a .php extension and insufficient access control, which allows remote attackers to obtain the database username and password via a direct request to the file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15736 - http://sourceforge.net/project/shownotes.php?release_id=335719
CVE ID: CVE-2005-2030 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-07T22:15:36.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the passwords and gain privileges, possibly after exploiting CVE-2005-2005 to obtain users.dat. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111893777504821&w=2 - http://www.securityfocus.com/bid/13975
CVE ID: CVE-2005-2031 State: PUBLISHED Published: 2005-06-21T04:00:00Z Last Updated: 2024-09-16T17:49:12.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in socialMPN allow remote attackers to execute arbitrary SQL commands via (1) the sid parameter to article.php, (2) uname parameter to user.php, (3) siteid parameter to viewforum.php, (4) username parameter to newtopic.php, the (5) secid or (6) artid parameter to sections.php, (7) siteid parameter to index.php, or (8) sid parameter to friend.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014214
CVE ID: CVE-2005-2032 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-07T22:15:36.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in lpadmin on Sun Solaris 7, 8, and 9 allows local users to overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014218 - http://secunia.com/advisories/15723 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101768-1 - http://www.securityfocus.com/bid/13968
CVE ID: CVE-2005-2033 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-07T22:15:36.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in folderview.asp for Blue-Collar Productions i-Gallery 3.3 allows remote attackers to read arbitrary files and directories via the folder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/0825 - http://www.securityfocus.com/bid/14000 - http://marc.info/?l=bugtraq&m=111936111630489&w=2
CVE ID: CVE-2005-2034 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-07T22:15:36.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in folderview.asp for BlueCollar iGallery 3.3 allows remote attackers to inject arbitrary web script or HTML via the folder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/0825 - http://marc.info/?l=bugtraq&m=111936111630489&w=2
CVE ID: CVE-2005-2035 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-07T22:15:36.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp for Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to execute arbitrary SQL commands via the password. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/17349 - http://exploitlabs.com/files/advisories/EXPL-A-2005-009-coolcafe.txt - http://securitytracker.com/id?1014221 - http://seclists.org/lists/fulldisclosure/2005/Jun/0205.html
CVE ID: CVE-2005-2036 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-07T22:15:36.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: modifyUser.asp in Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to obtain the administrator password and email address via a modified nickname value. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/17350 - http://exploitlabs.com/files/advisories/EXPL-A-2005-009-coolcafe.txt - http://seclists.org/lists/fulldisclosure/2005/Jun/0205.html
CVE ID: CVE-2005-2037 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-07T22:15:36.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Fortibus CMS 4.0.0 allow remote attackers to execute arbitrary SQL commands via (1) the username or password to logon.asp, (2) WeeklyNotesDisplay.asp, or (3) the Search page. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/0827 - http://secunia.com/advisories/15762 - http://securitytracker.com/id?1014242
CVE ID: CVE-2005-2038 State: PUBLISHED Published: 2005-06-21T04:00:00Z Last Updated: 2024-09-16T16:48:41.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fortibus CMS 4.0.0 allows remote attackers to modify information of other users, including Admin, via the "My info" page. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014242
CVE ID: CVE-2005-2039 State: PUBLISHED Published: 2005-06-21T04:00:00Z Last Updated: 2024-09-17T00:21:02.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in "various plugins" for NanoBlogger 3.2.1 and earlier allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://nanoblogger.sourceforge.net/downloads/nanoblogger-3.2.3.tar.gz - http://secunia.com/advisories/15754 - http://www.osvdb.org/17392
CVE ID: CVE-2005-2040 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-07T22:15:36.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2005-0468 and CVE-2005-0469. Additional Analyst Notes: - CVE Program Container: References: - http://www.pdc.kth.se/heimdal/advisory/2005-06-20/ - http://www.debian.org/security/2005/dsa-758 - http://secunia.com/advisories/15718 - http://www.gentoo.org/security/en/glsa/glsa-200506-24.xml - http://www.novell.com/linux/security/advisories/2005_40_he
- http://www.gentoo.org/security/en/glsa/glsa-200506-24.xml - http://www.novell.com/linux/security/advisories/2005_40_heimdal.html
CVE ID: CVE-2005-2041 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-07T22:15:36.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in addschup in HAURI ViRobot 2.0, and possibly other products, allows remote attackers to execute arbitrary code via a long ViRobot_ID cookie (HTTP_COOKIE). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12964 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21000 - http://marc.info/?l=full-disclosure&m=111880273631392&w=2 - http://www.securiteam.com/exploits/5TP0C1FG1I.html - http://www.globalhauri.com/html/download/down_unixpatch.html - http://secunia.c
ecuriteam.com/exploits/5TP0C1FG1I.html - http://www.globalhauri.com/html/download/down_unixpatch.html - http://secunia.com/advisories/15700 - http://www.digitalmunition.com/DMA%5B2005-0614a%5D.txt - http://www.osvdb.org/17320
CVE ID: CVE-2005-2042 State: PUBLISHED Published: 2005-06-22T04:00:00Z Last Updated: 2024-09-16T19:25:03.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ajax-spell before 1.8 allows remote attackers to inject arbitrary web script or HTML via onmouseover or other events in HTML tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.broken-notebook.com/spell_checker/index.php - http://secunia.com/advisories/15737 - http://www.securityfocus.com/bid/13986 - http://sourceforge.net/project/shownotes.php?release_id=335556
CVE ID: CVE-2005-2043 State: PUBLISHED Published: 2005-06-22T04:00:00 Last Updated: 2024-08-07T22:15:37.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in XAMPP before 1.4.14 allows remote attackers to inject arbitrary HTML and PHP code via lang.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15735 - http://www.securityfocus.com/bid/13983 - http://sourceforge.net/project/shownotes.php?release_id=335710
CVE ID: CVE-2005-2044 State: PUBLISHED Published: 2005-06-22T04:00:00Z Last Updated: 2024-09-17T00:21:37.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitrary web script or HTML via the (1) show_course parameter to browse.php, (2) subject parameter to contact.php, (3) cid parameter to content.php, (4) l parameter to inbox/send_message.php, the (5) search, (6) words, (7) include, (8) find_in, (9) display_as, or (10) search parameter to search.php, the (11) submit, (12) query, or (13) field parameter to tile.php, the (14) us parameter to forum/subscribe_forum.ph
php, the (11) submit, (12) query, or (13) field parameter to tile.php, the (14) us parameter to forum/subscribe_forum.php, or the (15) roles[], (16) status, (17) submit, or (18) reset_filter parameters to directory.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014216 - http://www.osvdb.org/17356 - http://www.osvdb.org/17351 - http://www.osvdb.org/17354 - http://www.osvdb.org/17355 - http://www.osvdb.org/17359 - http://www.osvdb.org/17358 - http://www.osvdb.org/17352 - http://lostmon.blogspot.com/2005/06/atutor-multiple-variable-cross-site.html - http://www.securityfocus.com/bid/13972 - http://www.osvdb.org/17353 - http://www.osvdb.org/17
variable-cross-site.html - http://www.securityfocus.com/bid/13972 - http://www.osvdb.org/17353 - http://www.osvdb.org/17357
CVE ID: CVE-2005-2045 State: PUBLISHED Published: 2005-06-22T04:00:00 Last Updated: 2024-08-07T22:15:36.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DUware DUportal PRO 3.4.3 allow remote attackers to execute arbitrary SQL commands via the (1) iChannel parameter to default.asp, (2) iData parameter to detail.asp, (3) iMem parameter to members.asp, (4) iCat parameter to cat.asp, (5) offset parameter to members_listing_approval.asp, or (6) iChannel parameter to channels_edit.asp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111945219205114&w=2 - http://www.osvdb.org/17598 - http://www.
am Container: References: - http://marc.info/?l=bugtraq&m=111945219205114&w=2 - http://www.osvdb.org/17598 - http://www.osvdb.org/17599 - http://www.osvdb.org/17597 - http://echo.or.id/adv/adv19-theday-2005.txt
CVE ID: CVE-2005-2046 State: PUBLISHED Published: 2005-06-22T04:00:00 Last Updated: 2024-08-07T22:15:36.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iSub parameter to sub.asp, (3) iSub parameter to detail.asp, (4) iPro parameter to review.asp, iCat parameter to (5) catEdit.asp, (6) catDelete.asp, (7) productEdit.asp, or (8) productDelete.asp, or (9) iType parameter to type.asp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111945219205114&w=2 - http://ec
onal Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111945219205114&w=2 - http://echo.or.id/adv/adv19-theday-2005.txt
CVE ID: CVE-2005-2047 State: PUBLISHED Published: 2005-06-22T04:00:00 Last Updated: 2024-08-07T22:15:36.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DUware DUpaypal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iPro parameter to detail.asp, (3) iSub parameter to sub.asp, (4) iCat parameter to catEdit.asp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111945219205114&w=2 - http://echo.or.id/adv/adv19-theday-2005.txt
CVE ID: CVE-2005-2048 State: PUBLISHED Published: 2005-06-22T04:00:00 Last Updated: 2024-08-07T22:15:36.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via the (1) iMsg parameter to messages.asp, iFor parameter to (2) post.asp or (3) forums.asp, or (4) id parameter to userEdit.asp. NOTE: vectors 1 and 3 were later reported to affect version 3.0. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111945219205114&w=2 - http://www.securityfocus.com/archive/1/453330/100/0/threaded - https://
p://marc.info/?l=bugtraq&m=111945219205114&w=2 - http://www.securityfocus.com/archive/1/453330/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30668 - http://echo.or.id/adv/adv19-theday-2005.txt
CVE ID: CVE-2005-2049 State: PUBLISHED Published: 2005-06-22T04:00:00 Last Updated: 2024-08-07T22:15:37.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DUware DUclassmate 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) iState parameter to default.asp or (2) iPro parameter to edit.asp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111945219205114&w=2 - http://www.securityfocus.com/bid/14036 - http://echo.or.id/adv/adv19-theday-2005.txt
CVE ID: CVE-2005-2050 State: PUBLISHED Published: 2005-06-26T04:00:00 Last Updated: 2024-08-07T22:15:36.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key information from the exit server's process space. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15764/ - http://archives.seul.org/or/announce/Jun-2005/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/21093 - http://www.gentoo.org/security/en/glsa/glsa-200506-18.xml - http://bugs.gentoo.org/show_bug.cgi?id=96320
CVE ID: CVE-2005-2051 State: PUBLISHED Published: 2005-06-26T04:00:00 Last Updated: 2024-08-07T22:15:36.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the VERITAS Backup Exec Web Administration Console (BEWAC) 9.0 4367 through 10.0 rev. 5484 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/p-232.shtml - http://www.securityfocus.com/bid/14025 - http://seer.support.veritas.com/docs/276606.htm - http://marc.info/?l=bugtraq&m=111954711532252&w=2 - http://secunia.com/advisories/15789
CVE ID: CVE-2005-2052 State: PUBLISHED Published: 2005-06-26T04:00:00 Last Updated: 2024-08-07T22:15:37.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 (6.0.12.1040 through 1069), RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111955853611840&w=2 - http://service.real.com/help/faq/security/050623_player/EN/
CVE ID: CVE-2005-2053 State: PUBLISHED Published: 2005-06-26T04:00:00 Last Updated: 2024-08-07T22:15:36.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Just another flat file (JAF) CMS before 3.0 Final allows remote attackers to obtain sensitive information via (1) an * (asterisk) in the id parameter, (2) a blank id parameter, or (3) an * (asterisk) in the disp parameter to index.php, which reveals the path in an error message. NOTE: a followup suggests that this may be a directory traversal or file inclusion vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://echo.or.id/adv/adv20-theday-2005.txt - http://marc.info/?l=bugtraq&m=1119900040285
ogram Container: References: - http://echo.or.id/adv/adv20-theday-2005.txt - http://marc.info/?l=bugtraq&m=111990004028512&w=2 - http://marc.info/?l=bugtraq&m=111954840611126&w=2
CVE ID: CVE-2005-2054 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T19:35:17.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in RealPlayer 10 and 10.5 (6.0.12.1040-1069) and RealOne Player v1 and v2 allows remote attackers to overwrite arbitrary files or execute arbitrary ActiveX controls via a crafted MP3 file. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/help/faq/security/050623_player/EN/
CVE ID: CVE-2005-2055 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T02:15:53.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealPlayer 8, 10, 10.5 (6.0.12.1040-1069), and Enterprise and RealOne Player v1 and v2 allows remote malicious web server to create an arbitrary HTML file that executes an RM file via "default settings of earlier Internet Explorer browsers". Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/help/faq/security/050623_player/EN/
CVE ID: CVE-2005-2056 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-07T22:15:36.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Quantum archive decompressor in Clam AntiVirus (ClamAV) before 0.86.1 allows remote attackers to cause a denial of service (application crash) via a crafted Quantum archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200506-23.xml - http://www.novell.com/linux/security/advisories/2005_38_clamav.html - http://sourceforge.net/project/shownotes.php?release_id=337279 - http://secunia.com/advisories/15811 - http://www.debian.org/security/2005/dsa-737 - http://www
s.php?release_id=337279 - http://secunia.com/advisories/15811 - http://www.debian.org/security/2005/dsa-737 - http://www.securityfocus.com/bid/14058
CVE ID: CVE-2005-2057 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-07T22:15:36.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to inject arbitrary web script or HTML via the (1) Searchpage parameter to dosearch.php, (2) Number, (3) what, or (4) page parameter to newreply.php, (5) Number, (6) Board, or (7) what parameter to showprofile.php, (8) fpart or (9) page parameter to showflat.php, or (10) like parameter to showmembers.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubbcentral.com/boards/showflat.ph
mbers.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351 - http://www.gulftech.org/?node=research&article_id=00084-06232005 - http://marc.info/?l=bugtraq&m=111963737202040&w=2