Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-2240 State: PUBLISHED Published: 2005-07-12T04:00:00 Last Updated: 2024-08-07T22:22:48.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16040 - http://www.securityfocus.com/bid/14228 - http://www.debian.org/security/2006/dsa-1003 - http://www.zataz.net/adviso/xpvm-06272005.txt - http://secunia.com/advisories/19251
CVE ID: CVE-2005-2241 State: PUBLISHED Published: 2005-07-12T04:00:00 Last Updated: 2024-08-07T22:22:48.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 does not quickly time out Realtime Information Server Data Collection (RISDC) sockets, which results in a "resource leak" that allows remote attackers to cause a denial of service (memory and connection consumption) in RisDC.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml - http://www.securityfocus.com/bid/14250
CVE ID: CVE-2005-2242 State: PUBLISHED Published: 2005-07-12T04:00:00 Last Updated: 2024-08-07T22:22:48.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to cause a denial of service (memory consumption and restart) via crafted packets to (1) the CTI Manager (ctimgr.exe) or (2) the CallManager (ccm.exe). Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml - http://www.securityfocus.com/bid/14251 - http://www.securityfocus.com/bid/14252
CVE ID: CVE-2005-2243 State: PUBLISHED Published: 2005-07-12T04:00:00 Last Updated: 2024-08-07T22:22:47.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1, when Multi Level Admin (MLA) is enabled, allows remote attackers to cause a denial of service (memory consumption) via a large number of Admin Service Tool (AST) logins that fail. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml - http://www.securityfocus.com/bid/14253
CVE ID: CVE-2005-2244 State: PUBLISHED Published: 2005-07-12T04:00:00 Last Updated: 2024-08-07T22:22:47.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: The aupair service (aupair.exe) in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to execute arbitrary code or corrupt memory via crafted packets that trigger a memory allocation failure and lead to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19053 - http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml - http://www.securityfocus.com/bi
lnerabilities/19053 - http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml - http://www.securityfocus.com/bid/14255
CVE ID: CVE-2005-2245 State: PUBLISHED Published: 2005-07-12T04:00:00 Last Updated: 2024-08-07T22:22:48.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in F5 BIG-IP 9.0.2 through 9.1 allows attackers to "subvert the authentication of SSL transactions," via unknown attack vectors, possibly involving NATIVE ciphers. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014452 - http://tech.f5.com/home/bigip-next/solutions/security/sol4944.html - http://www.securityfocus.com/bid/14215 - http://secunia.com/advisories/16008
CVE ID: CVE-2005-2246 State: PUBLISHED Published: 2005-07-12T04:00:00 Last Updated: 2024-08-07T22:22:48.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in iPhotoAlbum 1.1 allow remote attackers to execute arbitrary code via the (1) doc_path parameter to getpage.php or (2) set_menu parameter to lib/static/header.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14229 - https://www.exploit-db.com/exploits/3596 - http://securitytracker.com/id?1014448 - http://www.attrition.org/pipermail/vim/2007-March/001474.html - http://secunia.com/advisories/16031 - http://www.securityfocus
/www.attrition.org/pipermail/vim/2007-March/001474.html - http://secunia.com/advisories/16031 - http://www.securityfocus.com/bid/23189
CVE ID: CVE-2005-2247 State: PUBLISHED Published: 2005-07-12T04:00:00Z Last Updated: 2024-09-16T23:30:43.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16028 - http://moodle.org/doc/?frame=release.html
CVE ID: CVE-2005-2248 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:47.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in DownloadProtect before 1.0.3 allows remote attackers to read files above the download folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14211 - http://secunia.com/advisories/16003
CVE ID: CVE-2005-2249 State: PUBLISHED Published: 2005-07-13T04:00:00Z Last Updated: 2024-09-16T23:21:06.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unknown vulnerabilities in Jinzora 2.0.1 have unknown impact and attack vectors, possibly involving a PHP file inclusion vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15952 - http://freshmeat.net/projects/jinzora/?branch_id=43140&release_id=200390
CVE ID: CVE-2005-2250 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:48.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename in an OBEX file share. Additional Analyst Notes: - CVE Program Container: References: - http://affix.sourceforge.net/affix_212_sec.patch - http://www.securityfocus.com/bid/14230 - http://www.digitalmunition.com/DMA%5B2005-0712a%5D.txt - http://www.debian.org/security/2005/dsa-762
CVE ID: CVE-2005-2251 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:48.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in secure.php in PHPSecurePages (phpSP) 0.28beta and earlier allows remote attackers to execute arbitrary code via the cfgProgDir parameter, a variant of CVE-2001-1468. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29263 - http://secunia.com/advisories/15994 - http://securitytracker.com/id?1014410 - https://www.exploit-db.com/exploits/2452 - http://www.securityfocus.com/bid/14201
CVE ID: CVE-2005-2252 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:48.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie to the user ID. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014423 - http://secunia.com/advisories/15967
CVE ID: CVE-2005-2253 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:48.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PhpAuction 2.5 allow remote attackers to modify SQL queries via the category parameter to adsearch.php. NOTE: there is evidence that viewnews.php may not be part of the PhpAuction product, so it is not included in this description. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014423 - http://secunia.com/advisories/15967
CVE ID: CVE-2005-2254 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:48.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PhpAuction 2.5 allow remote attackers to inject arbitrary web script or HTML via the lan parameter to (1) index.php or (2) admin/index.php, or (3) the auction_id parameter to profile.php. NOTE: there is evidence that viewnews.php and login.php may not be part of the PhpAuction product, so they are not included in this description. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014423 - http://secunia.com/advisories/15967
CVE ID: CVE-2005-2255 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:48.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in PhpAuction 2.5 allows remote attackers to read arbitrary files, include local PHP files, or obtain sensitive path information via ".." sequences in the lan parameter to (1) index.php or (2) admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014423 - http://secunia.com/advisories/15967
CVE ID: CVE-2005-2256 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:47.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f" (encoded dot dot) sequences in the formLanguage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-759 - http://archives.neohapsis.com/archives/dailydave/2005-q3/0010.html - http://www.vuxml.org/freebsd/88188a8c-eff6-11d9-8310-0001020eed82.html - http://www.securityfocus.com/bid/14142 - http://securitytracker.com/id?1014414 - http
eff6-11d9-8310-0001020eed82.html - http://www.securityfocus.com/bid/14142 - http://securitytracker.com/id?1014414 - http://secunia.com/advisories/16116 - http://sourceforge.net/project/shownotes.php?release_id=342261 - http://secunia.com/advisories/15941
CVE ID: CVE-2005-2257 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:47.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by modifying the author_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014415 - http://marc.info/?l=bugtraq&m=112076117708139&w=2 - http://secunia.com/advisories/15936
CVE ID: CVE-2005-2258 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:48.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in photolist.inc.php in Squito Gallery 1.33 allows remote attackers to execute arbitrary code via the photoroot parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14219 - http://secunia.com/advisories/16009 - http://securitytracker.com/id?1014447
CVE ID: CVE-2005-2259 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:47.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including (1) USANet Shopping Mall Software, (2) Domain Name Auction Software, (3) Standard Classified Ads Software, and (4) MakeBid Reverse Auction allows remote attackers to execute arbitrary code via shell metacharacters in the DISPCLOSED parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14179 - http://secunia.com/advisories/15985 - http://securitytracker.com/id?1014411
CVE ID: CVE-2005-2260 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:47.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly distinguish between user-generated events and untrusted synthetic events, which makes it easier for remote attackers to perform dangerous actions that normally could only be performed manually by the user. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-810 - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://www.ciac.org/ciac/bulle
security/2005/dsa-810 - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://www.ciac.org/ciac/bulletins/p-252.shtml - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202 - http://www.redhat.com/support/errata/RHSA-2005-587.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A742 - http://secunia.com/advisories/16059 - http://secunia.com/advisories/16044 - http://www.vupen.com/english/advisories/2005/1075 - http://bugzilla.mozilla.org/show_bug.cgi?id=289940 - http://www.networksecurity.fi/advisories/netscape-multiple-issues.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10132 -
pe-multiple-issues.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10132 - http://www.novell.com/linux/security/advisories/2005_45_mozilla.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1226 - http://www.securityfocus.com/bid/14242 - http://www.redhat.com/support/errata/RHSA-2005-586.html - http://secunia.com/advisories/16043 - http://www.mozilla.org/security/announce/mfsa2005-45.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100013
CVE ID: CVE-2005-2261 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:48.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-810 - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://www.ciac.org/ciac/bulletins/p-252.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ov
//www.ciac.org/ciac/bulletins/p-252.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A808 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202 - http://secunia.com/advisories/19823 - http://www.redhat.com/support/errata/RHSA-2005-587.html - http://secunia.com/advisories/16059 - http://secunia.com/advisories/16044 - http://www.vupen.com/english/advisories/2005/1075 - http://www.redhat.com/support/errata/RHSA-2005-601.html - http://www.networksecurity.fi/advisories/netscape-multiple-issues.html - https://bugzilla.mozilla.org/show_bug.cgi?id=292591 - http://www.mozilla.org/security/announce/mfsa2005-46.html - https://oval.cisecurity.org/repo
rg/show_bug.cgi?id=292591 - http://www.mozilla.org/security/announce/mfsa2005-46.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10947 - http://www.novell.com/linux/security/advisories/2005_45_mozilla.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1348 - http://www.securityfocus.com/bid/14242 - http://www.redhat.com/support/errata/RHSA-2005-586.html - http://secunia.com/advisories/16043 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100012 - http://www.novell.com/linux/security/advisories/2006_04_25.html - https://bugzilla.mozilla.org/show_bug.cgi?id=292589
CVE ID: CVE-2005-2262 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:48.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" (in Firefox) or "Set as Background" (in Netscape) context menu on an image URL that is really a javascript: URL with an eval statement, aka "Firewalling." Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://www.mikx.de/firewalling/ - http://www.ciac.org/ciac/bulletins/p-252.shtml - http://www.se
ories/2005_18_sr.html - http://www.mikx.de/firewalling/ - http://www.ciac.org/ciac/bulletins/p-252.shtml - http://www.securiteam.com/securitynews/5ZP0E0UGAK.html - http://secunia.com/advisories/16044 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11097 - http://www.mozilla.org/security/announce/mfsa2005-47.html - http://www.vupen.com/english/advisories/2005/1075 - http://www.networksecurity.fi/advisories/netscape-multiple-issues.html - http://www.novell.com/linux/security/advisories/2005_45_mozilla.html - http://www.securityfocus.com/bid/14242 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100011 - http://www
m/bid/14242 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100011 - http://www.redhat.com/support/errata/RHSA-2005-586.html - http://secunia.com/advisories/16043
CVE ID: CVE-2005-2263 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:48.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of the new page and results in a same origin violation. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-810 - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http:/
- http://www.debian.org/security/2005/dsa-810 - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://www.ciac.org/ciac/bulletins/p-252.shtml - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202 - http://www.redhat.com/support/errata/RHSA-2005-587.html - http://secunia.com/advisories/16059 - http://www.vupen.com/english/advisories/2005/1075 - https://bugzilla.mozilla.org/show_bug.cgi?id=293331 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100010 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100016 - http://www.novell.com/linux/security/advisories/2005_45_mozilla.html - https://ov
oval%3Aorg.mitre.oval%3Adef%3A100016 - http://www.novell.com/linux/security/advisories/2005_45_mozilla.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1311 - http://www.securityfocus.com/bid/14242 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1281 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11629 - http://www.redhat.com/support/errata/RHSA-2005-586.html - http://secunia.com/advisories/16043 - http://www.mozilla.org/security/announce/mfsa2005-48.html
CVE ID: CVE-2005-2264 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:49.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.5 allows remote attackers to steal sensitive information by opening a malicious link in the Firefox sidebar using the _search target, then injecting script into other pages via a data: URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://www.ciac.org/ciac/bulletins/p-252.shtml - http://www.mozilla.org/security/announce/mfsa2005-49.html - http://www.vupen.com/english/advisories/2005/1075 - http://www.novell.com/linux/sec
security/announce/mfsa2005-49.html - http://www.vupen.com/english/advisories/2005/1075 - http://www.novell.com/linux/security/advisories/2005_45_mozilla.html - http://www.securityfocus.com/bid/14242 - https://bugzilla.mozilla.org/show_bug.cgi?id=294074 - http://www.redhat.com/support/errata/RHSA-2005-586.html - http://secunia.com/advisories/16043 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9887 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100009
CVE ID: CVE-2005-2265 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:49.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of service (access violation and crash), and possibly execute arbitrary code, by calling InstallVersion.compareTo with an object instead of a string. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-810 - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://www.ciac.org/ciac/bulletins/p-252.shtml - http://www.mozilla.org/security/announce/mf
dvisories/2005_18_sr.html - http://www.ciac.org/ciac/bulletins/p-252.shtml - http://www.mozilla.org/security/announce/mfsa2005-50.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202 - http://secunia.com/advisories/19823 - http://www.redhat.com/support/errata/RHSA-2005-587.html - http://secunia.com/advisories/16059 - http://secunia.com/advisories/16044 - http://www.vupen.com/english/advisories/2005/1075 - http://www.redhat.com/support/errata/RHSA-2005-601.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10397 - http://www.networksecurity.fi/advisories/netscape-multiple-issues.html - http://www.novell.com/linux/security/advisories/200
://www.networksecurity.fi/advisories/netscape-multiple-issues.html - http://www.novell.com/linux/security/advisories/2005_45_mozilla.html - http://www.securityfocus.com/bid/14242 - https://bugzilla.mozilla.org/show_bug.cgi?id=295854 - http://www.redhat.com/support/errata/RHSA-2005-586.html - http://secunia.com/advisories/16043 - http://www.novell.com/linux/security/advisories/2006_04_25.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A417 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A781 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100008
CVE ID: CVE-2005-2266 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:48.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other methods in a parent frame, even when the parent is in a different domain, which violates the same origin policy and allows remote attackers to steal sensitive information such as cookies and passwords from web sites whose child frames do not verify that they are in the same domain as their parents. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15549 - http://www.debian.org/security/200