Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
a-866 - http://www.mozilla.org/security/announce/mfsa2005-58.html - http://secunia.com/advisories/17284 - http://secunia.com/advisories/17149 - http://secunia.com/advisories/17263 - http://secunia.com/advisories/16917 - http://www.debian.org/security/2005/dsa-838 - http://secunia.com/advisories/17014 - http://www.redhat.com/support/errata/RHSA-2005-785.html - http://www.novell.com/linux/security/advisories/2005_58_mozilla.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:174 - http://secunia.com/advisories/17090 - http://secunia.com/advisories/16911 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1307 - http://secunia.com/advisories/1
://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1307 - http://secunia.com/advisories/16977 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10367 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:170 - https://bugzilla.mozilla.org/show_bug.cgi?id=303213
CVE ID: CVE-2005-2706 State: PUBLISHED Published: 2005-09-23T04:00:00 Last Updated: 2024-08-07T22:45:02.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute Javascript with chrome privileges via an about: page such as about:mozilla. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:169 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1443 - http://www.debian.org/security/2005/dsa-868 - http://www.vupen.com/english/advisories/2005/1824 - http://www.redhat.com/archives/fedora-legacy-
ecurity/2005/dsa-868 - http://www.vupen.com/english/advisories/2005/1824 - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - http://www.securityfocus.com/bid/14920 - http://secunia.com/advisories/19823 - http://www.securityfocus.com/bid/15495 - http://securitytracker.com/id?1014954 - http://www.redhat.com/support/errata/RHSA-2005-789.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11317 - http://secunia.com/advisories/17026 - http://www.osvdb.org/19648 - http://www.redhat.com/support/errata/RHSA-2005-791.html - http://www.ubuntu.com/usn/usn
6 - http://www.osvdb.org/19648 - http://www.redhat.com/support/errata/RHSA-2005-791.html - http://www.ubuntu.com/usn/usn-200-1 - http://secunia.com/advisories/17042 - http://www.debian.org/security/2005/dsa-866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22378 - http://www.mozilla.org/security/announce/mfsa2005-58.html - http://secunia.com/advisories/17284 - http://secunia.com/advisories/17149 - http://secunia.com/advisories/17263 - http://secunia.com/advisories/16917 - http://www.debian.org/security/2005/dsa-838 - http://secunia.com/advisories/17014 - http://www.redhat.com/support/errata/RHSA-2005-785.html - http://www.novell.com/linux/security/advisories/2005_58_mozilla.html - h
.redhat.com/support/errata/RHSA-2005-785.html - http://www.novell.com/linux/security/advisories/2005_58_mozilla.html - http://www.novell.com/linux/security/advisories/2006_04_25.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:174 - http://secunia.com/advisories/17090 - http://secunia.com/advisories/16911 - http://secunia.com/advisories/16977 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:170
CVE ID: CVE-2005-2707 State: PUBLISHED Published: 2005-09-23T04:00:00 Last Updated: 2024-08-07T22:45:01.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows without user interface components such as the address and status bar, which could be used to conduct spoofing or phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:169 - http://www.debian.org/security/2005/dsa-868 - http://www.vupen.com/english/advisories/2005/1824 - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.ht
.vupen.com/english/advisories/2005/1824 - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22380 - http://secunia.com/advisories/19823 - http://www.securityfocus.com/bid/14919 - http://www.securityfocus.com/bid/15495 - http://securitytracker.com/id?1014954 - http://www.redhat.com/support/errata/RHSA-2005-789.html - http://secunia.com/advisories/17026 - http://www.redhat.com/support/errata/RHSA-2005-791.html - http://secunia.com/advisories/
/secunia.com/advisories/17026 - http://www.redhat.com/support/errata/RHSA-2005-791.html - http://secunia.com/advisories/17042 - http://www.debian.org/security/2005/dsa-866 - http://secunia.com/advisories/17284 - http://www.mozilla.org/security/announce/mfsa2005-59.html - http://secunia.com/advisories/17149 - http://secunia.com/advisories/17263 - http://secunia.com/advisories/16917 - http://www.debian.org/security/2005/dsa-838 - http://secunia.com/advisories/17014 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1197 - http://www.redhat.com/support/errata/RHSA-2005-785.html - http://www.novell.com/linux/security/advisories/2005_58_mozilla.html - http://
t.com/support/errata/RHSA-2005-785.html - http://www.novell.com/linux/security/advisories/2005_58_mozilla.html - http://www.novell.com/linux/security/advisories/2006_04_25.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:174 - http://secunia.com/advisories/17090 - http://secunia.com/advisories/16911 - http://secunia.com/advisories/16977 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:170
CVE ID: CVE-2005-2708 State: PUBLISHED Published: 2005-10-25T04:00:00 Last Updated: 2024-08-07T22:45:02.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: The search_binary_handler function in exec.c in Linux 2.4 kernel on 64-bit x86 architectures does not check a return code for a particular function call when virtual memory is low, which allows local users to cause a denial of service (panic), as demonstrated by running a process using the bash ulimit -v command. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2006-0140.html - http://secunia.com/advisories/18684 - http://www.securityfocus.com/bid/16320 - https://oval.c
rata/RHSA-2006-0140.html - http://secunia.com/advisories/18684 - http://www.securityfocus.com/bid/16320 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10649 - http://www.securityfocus.com/archive/1/428058/100/0/threaded - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161925 - http://secunia.com/advisories/18523 - http://www.redhat.com/support/errata/RHSA-2006-0190.html - http://www.securityfocus.com/archive/1/428028/100/0/threaded - http://secunia.com/advisories/18562
CVE ID: CVE-2005-2709 State: PUBLISHED Published: 2005-11-20T22:00:00 Last Updated: 2024-08-07T22:45:01.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2006-0140.html - http://secunia.com/advisories/18684 - http://www.kernel.org
- http://www.redhat.com/support/errata/RHSA-2006-0140.html - http://secunia.com/advisories/18684 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.1 - http://secunia.com/advisories/19369 - http://www.redhat.com/support/errata/RHSA-2006-0101.html - http://www.vupen.com/english/advisories/2005/2359 - http://secunia.com/advisories/17541 - http://www.debian.org/security/2006/dsa-1018 - http://www.securityfocus.com/archive/1/428058/100/0/threaded - http://securitytracker.com/id?1015434 - http://www.osvdb.org/20676 - http://www.securityfocus.com/archive/1/427981/100/0/threaded - https://usn.ubuntu.com/219-1/ - http://secunia.com/advisories/17648 - http://www.redhat.com/support/errata/
0/threaded - https://usn.ubuntu.com/219-1/ - http://secunia.com/advisories/17648 - http://www.redhat.com/support/errata/RHSA-2006-0190.html - http://secunia.com/advisories/18510 - http://www.securityfocus.com/archive/1/428028/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/23040 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://www.debian.org/security/2006/dsa-1017 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10746 - http://secunia.com/advisories/17504 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:059 - http://secunia.com/advisories/19374 - http://www.redhat.com/support/errata/RHSA-2006-01
advisories?name=MDKSA-2006:059 - http://secunia.com/advisories/19374 - http://www.redhat.com/support/errata/RHSA-2006-0191.html - http://secunia.com/advisories/18562 - http://www.securityfocus.com/bid/15365
CVE ID: CVE-2005-2710 State: PUBLISHED Published: 2005-09-27T04:00:00 Last Updated: 2024-08-07T22:45:01.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the (1) image handle or (2) timeformat attribute in a RealPix (.rp) or RealText (.rt) file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17127 - http://www.kb.cert.org/vuls/id/361181 - http://www.gentoo.org/security/en/glsa/glsa-200510-07.xml - http://www.debian.org/security/2005/dsa-826 - http://securityreason.com/securityalert/27 - http://marc.info/?l=full-d
- http://www.debian.org/security/2005/dsa-826 - http://securityreason.com/securityalert/27 - http://marc.info/?l=full-disclosure&m=112775929608219&w=2 - http://secunia.com/advisories/16961 - http://www.redhat.com/support/errata/RHSA-2005-788.html - http://secunia.com/advisories/16981 - http://secunia.com/advisories/17116 - http://secunia.com/advisories/16954 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11015 - http://www.novell.com/linux/security/advisories/2005_59_RealPlayer.html - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168078 - http://www.idefense.com/application/poi/display?id=311&type=vulnerabilities - http://www.open-security.org
i?id=168078 - http://www.idefense.com/application/poi/display?id=311&type=vulnerabilities - http://www.open-security.org/advisories/13 - http://securityreason.com/securityalert/41 - http://www.redhat.com/support/errata/RHSA-2005-762.html - http://marc.info/?l=bugtraq&m=112785544325326&w=2
CVE ID: CVE-2005-2711 State: PUBLISHED Published: 2006-03-24T02:00:00 Last Updated: 2024-08-07T22:45:02.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "Application Protection" dialog, which allows local users to execute arbitrary programs as SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17218 - http://securitytracker.com/id?1015820 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
ecurityfocus.com/bid/17218 - http://securitytracker.com/id?1015820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25423 - http://www.osvdb.org/24096 - http://www.vupen.com/english/advisories/2006/1090 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=403 - http://securitytracker.com/id?1015821 - http://secunia.com/advisories/19327
CVE ID: CVE-2005-2712 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T22:45:02.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP server (nldap.exe) in IBM Lotus Domino before 7.0.1, 6.5.5, and 6.5.4 FP2 allows remote attackers to cause a denial of service (crash) via a long bind request, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16523 - http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21229907 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=389 - http://www.vupen.com/english/advisories/2006/0526 - https://exchange.xforce.ibmclo
/vulnerabilities/display.php?id=389 - http://www.vupen.com/english/advisories/2006/0526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24634 - http://securitytracker.com/id?1015611
CVE ID: CVE-2005-2713 State: PUBLISHED Published: 2006-03-02T19:00:00 Last Updated: 2024-08-07T22:45:01.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to create arbitrary world-writable files as root by specifying an alternate file in the password database option. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=400 - http://www.securityfocus.com/archive/1/426535/100/0/threaded - http://secunia.com/advisories/19064 - http://www.securityfocus.com/bid/16907 - http://www.vupen.com/english/ad
hreaded - http://secunia.com/advisories/19064 - http://www.securityfocus.com/bid/16907 - http://www.vupen.com/english/advisories/2006/0791 - http://www.securityfocus.com/bid/16910 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25272 - http://www.us-cert.gov/cas/techalerts/TA06-062A.html - http://www.osvdb.org/23646 - http://docs.info.apple.com/article.html?artnum=303382
CVE ID: CVE-2005-2714 State: PUBLISHED Published: 2006-03-02T19:00:00 Last Updated: 2024-08-07T22:45:02.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to overwrite arbitrary files via a symlink attack on the .pwtmp.[PID] temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=400 - http://www.securityfocus.com/archive/1/426535/100/0/threaded - http://secunia.com/advisories/19064 - http://www.osvdb.org/23647 - http://www.securityfocus.com/bid/16907 - http://www.vupen.com/english/a
/advisories/19064 - http://www.osvdb.org/23647 - http://www.securityfocus.com/bid/16907 - http://www.vupen.com/english/advisories/2006/0791 - http://www.securityfocus.com/bid/16910 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html - http://www.us-cert.gov/cas/techalerts/TA06-062A.html - http://docs.info.apple.com/article.html?artnum=303382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25274
CVE ID: CVE-2005-2715 State: PUBLISHED Published: 2005-10-12T04:00:00 Last Updated: 2024-08-07T22:45:01.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMAND_LOGON_TO_MSERVER command. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/security/Content/2005.10.12.html - http://secunia.com/advisories/17181 - http://seer.support.veritas.com/docs/279085.htm - http://www.kb
/2005.10.12.html - http://secunia.com/advisories/17181 - http://seer.support.veritas.com/docs/279085.htm - http://www.kb.cert.org/vuls/id/495556 - http://www.zerodayinitiative.com/advisories/ZDI-05-001.html - http://www.securityfocus.com/bid/15079 - http://securitytracker.com/id?1015028 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102054-1
CVE ID: CVE-2005-2716 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:01.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: The event_pin_code_request function in the btsrv daemon (btsrv.c) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a Bluetooth device name. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-796 - http://affix.sourceforge.net/patch_btsrv_affix_3_2_0 - http://www.securityfocus.com/bid/14672 - http://affix.sourceforge.net/patch_btsrv_affix_2_1_2 - http://secunia.com/advisories/16574/ - http://www.digitalmunition.
ttp://affix.sourceforge.net/patch_btsrv_affix_2_1_2 - http://secunia.com/advisories/16574/ - http://www.digitalmunition.com/DMA%5B2005-0826a%5D.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/22034 - http://marc.info/?l=bugtraq&m=112511370326063&w=2
CVE ID: CVE-2005-2717 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:02.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP code when opening settings.php, possibly via send_reminders.php or other scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/1513 - http://secunia.com/advisories/16675 - http://securitytracker.com/id?1014849 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22136 - http://www.debian.org/security/2005/dsa-799 - http://www.securityfocus.com/bi
force.ibmcloud.com/vulnerabilities/22136 - http://www.debian.org/security/2005/dsa-799 - http://www.securityfocus.com/bid/14651 - http://secunia.com/advisories/16528 - http://sourceforge.net/project/shownotes.php?release_id=350336
CVE ID: CVE-2005-2718 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:01.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ad_pcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via crafted PCM audio data, as demonstrated using a video file with an audio header containing a large value in a stream format (strf) chunk. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=112484733122809&w=2 - http://www.sven-tantau.de/public_files/mplayer/mplayer_20050824.txt - http://www.mandriva.com/security/advisories?name=MDKSA-2005:158 - https://bugs.gentoo.
es/mplayer/mplayer_20050824.txt - http://www.mandriva.com/security/advisories?name=MDKSA-2005:158 - https://bugs.gentoo.org/show_bug.cgi?id=103555 - http://www.securityfocus.com/bid/14652
CVE ID: CVE-2005-2719 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:02.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ventrilo 2.1.2 through 2.3.0 allows remote attackers to cause a denial of service (application crash) via a status packet that contains less data than specified in the packet header sent to UDP port 3784. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/21996 - http://www.securityfocus.com/bid/14644 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/036407.html - http://securitytracker.com/id?1014784 - http://secunia.com/advisories/16551/ - http
disclosure/2005-August/036407.html - http://securitytracker.com/id?1014784 - http://secunia.com/advisories/16551/ - http://marc.info/?l=bugtraq&m=112483407515020&w=2
CVE ID: CVE-2005-2720 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:02.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ACE archive decompression library (vrAZace.dll) in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall, when compressed file scanning is enabled, allows remote attackers to execute arbitrary code via an ACE archive that contains a file with a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16488/ - http://secunia.com/secunia_research/2005-33/advisory/ - http://www.securityfocus.co
tp://secunia.com/advisories/16488/ - http://secunia.com/secunia_research/2005-33/advisory/ - http://www.securityfocus.com/bid/14647 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22005 - http://marc.info/?l=bugtraq&m=112490854126619&w=2
CVE ID: CVE-2005-2721 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:02.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) admin.php in Foojan PHP Weblog allow remote attackers to inject arbitrary web script or HTML via the Referer field in the HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16565/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22004 - http://www.securityfocus.com/bid/14658 - http://marc.info/?l=bugtraq&m=112491140712884&w=2
CVE ID: CVE-2005-2722 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:02.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct request to /daylinks/index.php or (2) a negative value in the daylinkspage parameter to index.php, which reveal the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112491140712884&w=2
CVE ID: CVE-2005-2723 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:02.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in auth.php in PaFileDB 3.1, when authmethod is set to cookies, allows remote attackers to execute arbitrary SQL commands via the username value in the pafiledbcookie cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14654 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21988 - http://secunia.com/advisories/16566/ - http://www.security-project.org/projects/board/showthread.php?t=947 - http://marc.info/?l=bugtraq&m=112490781927680&w=2
CVE ID: CVE-2005-2724 State: PUBLISHED Published: 2005-08-29T04:00:00 Last Updated: 2024-08-07T22:45:02.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via a file attachment that is processed by the Display feature. NOTE: the severity of this issue has been disputed by the developer. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16539/ - http://marc.info/?l=bugtraq&m=112490698219531&w=2 - http://www.debian.org/security/2005/dsa-793 - http://secunia.com/advisories/17156 - https://exchange.xforce.ibmcloud.com
http://www.debian.org/security/2005/dsa-793 - http://secunia.com/advisories/17156 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21997 - http://marc.info/?l=courier-users&m=112488135424849&w=2 - http://www.ubuntu.com/usn/usn-201-1 - http://secunia.com/secunia_research/2005-35/advisory/ - http://www.securityfocus.com/bid/14650