Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
advisories/17115/ - http://rgod.altervista.org/utopia113.html - http://www.utopiasoftware.net/ - http://marc.info/?l=bugtraq&m=112872691119874&w=2 - http://www.osvdb.org/19941 - http://www.securityfocus.com/bid/15027 - http://securitytracker.com/id?1015016 - http://www.osvdb.org/19940
CVE ID: CVE-2005-3201 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php for Utopia News Pro (UNP) 1.1.3, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to execute arbitrary SQL via the newsid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17115/ - http://rgod.altervista.org/utopia113.html - http://www.utopiasoftware.net/ - http://www.osvdb.org/19942 - http://marc.info/?l=bugtraq&m=112872691119874&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22
.org/19942 - http://marc.info/?l=bugtraq&m=112872691119874&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22555 - http://securitytracker.com/id?1015016 - http://www.securityfocus.com/bid/15028
CVE ID: CVE-2005-3202 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 allow remote attackers to inject arbitrary web script or HTML, and subsequently execute SQL statements via the (1) p or (2) p_t02 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_htmldb_css.html - http://www.osvdb.org/20052 - http://securityreason.com/securityalert/62 - http://secunia.com/advisories/14935/ - http://marc.info/?l=bugtraq&m=11287039841845
ecurityreason.com/securityalert/62 - http://secunia.com/advisories/14935/ - http://marc.info/?l=bugtraq&m=112870398418456&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22540 - http://www.osvdb.org/20051 - http://www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0173.html - http://www.securityfocus.com/bid/15031
CVE ID: CVE-2005-3203 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: The manual installation of Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 stores the SYS password in install.lst in plaintext, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15033 - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0174.html - http://secunia.com/advisories/14935/ - http://www.red-database-security.com/advisory/oracle_htmldb_plaintext_password.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/22542 -
curity.com/advisory/oracle_htmldb_plaintext_password.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/22542 - http://marc.info/?l=bugtraq&m=112870441917345&w=2
CVE ID: CVE-2005-3204 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:58.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/66 - http://www.securityfocus.com/bid/15034 - http://www.red-database-security.com/advisory/oracle_xmldb_css.html - http://secunia.com/advisories/15991/ - http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html - http://archives.neohapsis.com/arch
ories/15991/ - http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0177.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/22541 - http://marc.info/?l=bugtraq&m=112870541502542&w=2 - http://www.osvdb.org/20054
CVE ID: CVE-2005-3205 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in iSQL*Plus (iSQLPlus) in Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to inject arbitrary web script or HTML via script in the "set markup HTML TABLE" command, which is executed when the user selects a table. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0172.html - http://securityreason.com/securityalert/63 - http://secunia.com/advisories/15991/ - http://www.oracle.com/technology/de
http://securityreason.com/securityalert/63 - http://secunia.com/advisories/15991/ - http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html - http://marc.info/?l=bugtraq&m=112870489324437&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22539 - http://www.red-database-security.com/advisory/oracle_isqlplus_css.html - http://www.securityfocus.com/bid/15030
CVE ID: CVE-2005-3206 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service (TNS listener stop) via an HTTP request with an sid parameter that contains a STOP command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15032 - http://marc.info/?l=bugtraq&m=112870589127719&w=2 - http://secunia.com/advisories/15991/ - http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html - https://exchange.xforce.ibmcloud.com/vulnerabilitie
tp://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/22544 - http://www.osvdb.org/20056 - http://securityreason.com/securityalert/64 - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0176.html - http://www.red-database-security.com/advisory/oracle_isqlplus_shutdown.html
CVE ID: CVE-2005-3207 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS listener stop) via a userid parameter that contains a STOP command. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0175.html - http://secunia.com/advisories/15991/ - http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html - http://www.red-database-security.com/advisory/oracle_forms_shutdown.html - https://exchange.xforce.i
f/cpujul2005.html - http://www.red-database-security.com/advisory/oracle_forms_shutdown.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/22543 - http://securityreason.com/securityalert/65 - http://www.securityfocus.com/bid/15039 - http://marc.info/?l=bugtraq&m=112870645720399&w=2
CVE ID: CVE-2005-3208 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in (1) aeNovo, (2) aeNovoShop and (3) aeNovoWYSI allow remote attackers to execute arbitrary SQL code via (a) the password parameter in control.asp, and (b) the strSQL parameter in search.asp, which can enable XSS attacks in resulting error messages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17117/ - http://www.osvdb.org/19936 - http://www.securityfocus.com/bid/15036 - http://marc.info/?l=bugtraq&m=112872593432359&w=2 - https://exchange
rg/19936 - http://www.securityfocus.com/bid/15036 - http://marc.info/?l=bugtraq&m=112872593432359&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22553 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22551 - http://www.kapda.ir/advisory-78.html - http://www.securityfocus.com/bid/15038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22547 - http://www.osvdb.org/19937
CVE ID: CVE-2005-3209 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aenovo products (1) aeNovo, (2) aeNovoShop, and (3) aeNovoWYSI store password information in plaintext in the (a) control, (b) content, and (c) page tables, which allows attackers with database access to obtain those passwords and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17117/ - http://marc.info/?l=bugtraq&m=112872593432359&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22549 - http://www.kapda.ir/advisory-78.html - http://www.osvdb.org/19939
CVE ID: CVE-2005-3210 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of Kaspersky Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3211 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of BitDefender Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3212 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of NOD32 Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3213 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of F-Prot Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3214 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of Avast Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3215 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of McAfee Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3216 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of Sophos Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3217 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of Symantec Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3218 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of Dr.Web Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3219 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of Avira Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3220 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of Norman Virus Control Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919
m Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3221 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of Fortinet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3222 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of VBA32 Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3223 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of Rising Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3224 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of AntiVir Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3225 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of (1) eTrust-Iris and (2) eTrust-Vet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&
: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3226 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of ArcaVir Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3227 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of UNA Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3228 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of Ikarus AntiVirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3229 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of ClamAV Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2
CVE ID: CVE-2005-3230 State: PUBLISHED Published: 2005-10-14T04:00:00 Last Updated: 2024-08-07T23:01:59.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in unspecified versions of Panda Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper. Additional Analyst Notes: - CVE Program Container: References: - http://shadock.net/secubox/AVCraftedArchive.html - http://marc.info/?l=bugtraq&m=112879611919750&w=2