Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
om/secunia_research/2005-60/advisory - http://securitytracker.com/id?1015265 - http://www.vupen.com/english/advisories/2005/2570 - http://securitytracker.com/id?1015267 - http://www.securityfocus.com/archive/1/417588/30/0/threaded - http://www.osvdb.org/21073 - http://secunia.com/advisories/17420 - http://securitytracker.com/id?1015266
CVE ID: CVE-2005-3832 State: PUBLISHED Published: 2005-11-26T19:00:00 Last Updated: 2024-08-07T23:24:36.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in (1) CxUux60.dll and (2) CxUux60u.dll, as used in SpeedProject products including (a) Squeez 5.0 Build 4285, and (b) SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive containing a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2005-60/advisory - http://securitytracker.com/id?1015265 - http://www.vupen.com/english/advisories/2005/2570 - http://securitytr
advisory - http://securitytracker.com/id?1015265 - http://www.vupen.com/english/advisories/2005/2570 - http://securitytracker.com/id?1015267 - http://www.securityfocus.com/archive/1/417588/30/0/threaded - http://securityreason.com/securityalert/204 - http://www.osvdb.org/21073 - http://secunia.com/advisories/17420 - http://securitytracker.com/id?1015266
CVE ID: CVE-2005-3833 State: PUBLISHED Published: 2005-11-26T20:00:00 Last Updated: 2024-08-07T23:24:36.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in songinfo.php in Tunez 1.21 and earlier allows remote attackers to execute arbitrary SQL commands via the song_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21062 - http://secunia.com/advisories/17692 - http://pridels0.blogspot.com/2005/11/tunez-sql-and-xss-vuln.html - http://www.securityfocus.com/bid/15548 - http://www.vupen.com/english/advisories/2005/2556
CVE ID: CVE-2005-3834 State: PUBLISHED Published: 2005-11-26T20:00:00 Last Updated: 2024-08-07T23:24:36.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in Tunez 1.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchFor parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17692 - http://www.osvdb.org/21063 - http://pridels0.blogspot.com/2005/11/tunez-sql-and-xss-vuln.html - http://www.securityfocus.com/bid/15548 - http://www.vupen.com/english/advisories/2005/2556
CVE ID: CVE-2005-3835 State: PUBLISHED Published: 2005-11-26T20:00:00 Last Updated: 2024-08-07T23:24:36.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in support/index.php in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the main parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2575 - http://secunia.com/advisories/17730 - http://pridels0.blogspot.com/2005/11/desklance-vuln.html
CVE ID: CVE-2005-3836 State: PUBLISHED Published: 2005-11-26T20:00:00 Last Updated: 2024-08-07T23:24:36.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the announce parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2575 - http://secunia.com/advisories/17730 - http://pridels0.blogspot.com/2005/11/desklance-vuln.html
CVE ID: CVE-2005-3837 State: PUBLISHED Published: 2005-11-26T20:00:00 Last Updated: 2024-08-07T23:24:36.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search module in sCssBoard 1.2 and 1.12, and earlier versions, allows remote attackers to inject arbitrary web script or HTML via the search_term parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17716 - http://pridels0.blogspot.com/2005/11/scssboard-xss-vuln-in-search-param.html - http://www.securityfocus.com/bid/15558 - http://www.vupen.com/english/advisories/2005/2568 - http://www.osvdb.org/21089
CVE ID: CVE-2005-3838 State: PUBLISHED Published: 2005-11-26T22:00:00 Last Updated: 2024-08-07T23:24:36.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in search.php in IsolSoft Support Center 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) lorder, (2) Priority, (3) Status, (4) Category, (5) searchvalue, and (6) field parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015270 - http://www.securityfocus.com/bid/15570 - http://pridels0.blogspot.com/2005/11/isolsoft-support-center-sql-inj.html - http://www.osvdb.org/21102 - http://secunia.com/advisor
els0.blogspot.com/2005/11/isolsoft-support-center-sql-inj.html - http://www.osvdb.org/21102 - http://secunia.com/advisories/17728 - http://www.vupen.com/english/advisories/2005/2592
CVE ID: CVE-2005-3839 State: PUBLISHED Published: 2005-11-26T22:00:00 Last Updated: 2024-08-07T23:24:36.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SupportPRO Supportdesk allows remote attackers to inject arbitrary web script or HTML via the (1) post tickers and (2) view tickets options. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/11/supportpro-supportdesk-xss-vuln.html - http://www.osvdb.org/21088 - http://secunia.com/advisories/17701 - http://www.vupen.com/english/advisories/2005/2574 - http://www.securityfocus.com/bid/15564
CVE ID: CVE-2005-3840 State: PUBLISHED Published: 2005-11-26T22:00:00 Last Updated: 2024-08-07T23:24:36.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in kb.php in Omnistar Live 5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) category_id parameter. NOTE: due to a typo, an Internet Explorer issue was incorrectly assigned this identifier, but the correct identifier is CVE-2005-3240. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21077 - http://pridels0.blogspot.com/2005/11/omnistar-live-id-and-categoryid-sql.html - http://secunia.com/advisories/17697 - http://www
ridels0.blogspot.com/2005/11/omnistar-live-id-and-categoryid-sql.html - http://secunia.com/advisories/17697 - http://www.vupen.com/english/advisories/2005/2561
CVE ID: CVE-2005-3841 State: PUBLISHED Published: 2005-11-26T22:00:00 Last Updated: 2024-08-07T23:24:36.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in kPlaylist 1.6 (build 400), and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchfor search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15546 - http://pridels0.blogspot.com/2005/11/kplaylist-xss-vuln.html - http://secunia.com/advisories/17689 - http://www.osvdb.org/21069 - http://www.vupen.com/english/advisories/2005/2551
CVE ID: CVE-2005-3842 State: PUBLISHED Published: 2005-11-26T22:00:00 Last Updated: 2024-08-07T23:24:36.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in pdjk-support suite 1.1a and earlier allows remote attackers to execute arbitrary SQL commands via the (1) rowstart, (2) news_id, and (3) faq_id parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15598 - http://www.vupen.com/english/advisories/2005/2593 - http://secunia.com/advisories/17722 - http://pridels0.blogspot.com/2005/11/pdjk-support-suite-sql-inj.html - http://www.osvdb.org/21099
CVE ID: CVE-2005-3843 State: PUBLISHED Published: 2005-11-26T22:00:00 Last Updated: 2024-08-07T23:24:36.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in faq.php in Nicecoder iDesk 1.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21117 - http://www.securityfocus.com/bid/15597 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23222 - http://secunia.com/advisories/17729 - http://pridels0.blogspot.com/2005/11/idesk-catid-sql-inj.html - http://www.vupen.com/english/advisories/2005/2590
CVE ID: CVE-2005-3844 State: PUBLISHED Published: 2005-11-26T22:00:00 Last Updated: 2024-08-07T23:24:36.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the (1) poll and (2) category parameters to index.php, and (3) the ctg parameter in an archive action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2594 - http://pridels0.blogspot.com/2005/11/phpwordpress-30-sql-inj.html - http://secunia.com/advisories/17733 - http://forum.word-press.net/index.php?&showtopic=76&st=0&#entry181
sql-inj.html - http://secunia.com/advisories/17733 - http://forum.word-press.net/index.php?&showtopic=76&st=0&#entry181 - http://www.securityfocus.com/bid/15582 - http://www.osvdb.org/21110
CVE ID: CVE-2005-3845 State: PUBLISHED Published: 2005-11-26T22:00:00 Last Updated: 2024-08-07T23:24:36.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in invoices.php in EZ Invoice Inc 2.0 allows remote attackers to execute arbitrary SQL commands via the i parameter. NOTE: the vendor has stated "EZ Invoice, Inc has a patah available. Please email support@ezinvoiceinc.com and EZI will email you the patch to fix this small issue." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23213 - http://www.securityfocus.com/bid/16133 - http://www.vupen.com/english/advisories/2005/2596 - htt
vulnerabilities/23213 - http://www.securityfocus.com/bid/16133 - http://www.vupen.com/english/advisories/2005/2596 - http://pridels0.blogspot.com/2005/11/ez-invoice-inc-v-20-sql-inj.html - http://www.osvdb.org/21369
CVE ID: CVE-2005-3846 State: PUBLISHED Published: 2005-11-26T22:00:00 Last Updated: 2024-08-07T23:24:36.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in Fantastic News 2.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/11/fantastic-news-category-sql-inj.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/23215 - http://www.osvdb.org/21162 - http://www.securityfocus.com/bid/15622 - http://www.vupen.com/english/advisories/2005/2595 - http://secunia.com/advisories/17758
CVE ID: CVE-2005-3847 State: PUBLISHED Published: 2005-11-27T00:00:00 Last Updated: 2024-08-07T23:24:36.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The handle_stop_signal function in signal.c in Linux kernel 2.6.11 up to other versions before 2.6.13 and 2.6.12.6 allows local users to cause a denial of service (deadlock) by sending a SIGKILL to a real-time threaded process while it is performing a core dump. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19038 - http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git%3Ba=blob%3Bh=f6cc7e101c49f356e4c4df5cca1ff352a0f01dd5%3Bhb=9c5fcb99af7c157be45e9d53aeb857ded5211
chrisw/stable-queue.git%3Ba=blob%3Bh=f6cc7e101c49f356e4c4df5cca1ff352a0f01dd5%3Bhb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd%3Bf=2.6.12.6/nptl-signal-delivery-deadlock-fix.patch - http://marc.info/?l=linux-kernel&m=112508422716574&w=2 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=dd12f48d4e8774415b528d3991ae47c28f26e1ac%3Bhp=ade6648b3b11a5d81f6f28135193ab6d85d621db - http://www.securityfocus.com/bid/16856 - http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html - http://www.debian.org/security/2006/dsa-1017 - http://secunia.com/advisories/19374 - http://marc.info/?l=linux-kernel&m=112430346613450&w=2
CVE ID: CVE-2005-3848 State: PUBLISHED Published: 2005-11-27T00:00:00 Last Updated: 2024-08-07T23:24:36.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the icmp_push_reply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted packets that cause the ip_append_data function to fail, aka "DST leak in icmp_push_reply." Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2006-0140.html - http://secunia.com/advisories/19038 - http://marc.info/?l=linux-kernel&m=112431016816937&w=2 - http://marc.info/?l=linux-kernel&m
cunia.com/advisories/19038 - http://marc.info/?l=linux-kernel&m=112431016816937&w=2 - http://marc.info/?l=linux-kernel&m=112508479212728&w=2 - http://secunia.com/advisories/19369 - http://secunia.com/advisories/18203 - http://www.redhat.com/support/errata/RHSA-2006-0101.html - http://www.securityfocus.com/bid/16044 - http://www.debian.org/security/2006/dsa-1018 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cb94c62c252796f42bb83fe40960d12f3ea5a82a - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11346 - http://secunia.com/advisories/18510 - http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html - h
11346 - http://secunia.com/advisories/18510 - http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:072 - http://www.debian.org/security/2006/dsa-1017 - http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git%3Ba=blob%3Bh=1cf41a8a8db3080c9a9243e77c5c447c8e694f87%3Bhb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd%3Bf=2.6.12.6/fix-dst-leak-in-icmp_push_reply.patch - http://secunia.com/advisories/19374 - http://marc.info/?l=linux-kernel&m=112439084918917&w=2 - https://usn.ubuntu.com/231-1/ - http://secunia.com/advisories/18562
CVE ID: CVE-2005-3849 State: PUBLISHED Published: 2005-11-27T00:00:00 Last Updated: 2024-08-07T23:24:36.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Search module in PmWiki up to 2.0.12 allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/201 - http://www.vupen.com/english/advisories/2005/2532 - http://secunia.com/advisories/17707 - http://www.securityfocus.com/bid/15539 - http://www.securityfocus.com/archive/1/417432/100/0/threaded - http://www.osvdb.org/21056 - http://moritz-naumann.com/adv
ttp://www.securityfocus.com/archive/1/417432/100/0/threaded - http://www.osvdb.org/21056 - http://moritz-naumann.com/adv/0005/pmwiki/0005.txt
CVE ID: CVE-2005-3850 State: PUBLISHED Published: 2005-11-27T11:00:00 Last Updated: 2024-08-07T23:24:36.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.asp in Online Knowledge Base System (OKBSYS) Lite Edition 1.0 allows remote attackers to inject arbitrary web script or HTML via hex-encoded values in the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17713 - http://www.securityfocus.com/bid/15607 - http://www.vupen.com/english/advisories/2005/2582 - http://www.osvdb.org/21094 - http://pridels0.blogspot.com/2005/11/okbsys-lite-10-searchasp-xss-vuln.html
CVE ID: CVE-2005-3851 State: PUBLISHED Published: 2005-11-27T11:00:00 Last Updated: 2024-08-07T23:24:36.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.asp in Online Attendance System (OASYS) Lite 1.0 allows remote attackers to inject arbitrary web script or HTML via certain search parameters, possibly the keyword parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21095 - http://pridels0.blogspot.com/2005/11/oasys-lite-10-searchasp-xss-vuln.html - http://secunia.com/advisories/17712 - http://www.vupen.com/english/advisories/2005/2583 - http://www.securityfocus.com/bid/15605
CVE ID: CVE-2005-3852 State: PUBLISHED Published: 2005-11-27T11:00:00 Last Updated: 2024-08-07T23:24:36.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.asp in Online Work Order Suite (OWOS) Lite Edition for ASP 3.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2584 - http://www.osvdb.org/21116 - http://pridels0.blogspot.com/2005/11/owos-lite-30-sql-inj.html - http://secunia.com/advisories/17711
CVE ID: CVE-2005-3853 State: PUBLISHED Published: 2005-11-27T11:00:00 Last Updated: 2024-08-07T23:24:36.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in snews.php in sNews 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) category parameters to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21093 - http://secunia.com/advisories/17688 - http://pridels0.blogspot.com/2005/11/snews-13-sql-injection.html - http://www.vupen.com/english/advisories/2005/2585
CVE ID: CVE-2005-3854 State: PUBLISHED Published: 2005-11-27T11:00:00Z Last Updated: 2024-09-17T03:59:03.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in EasyPageCMS allows remote attackers to inject arbitrary web script or HTML via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21007 - http://securitytracker.com/id?1015211 - http://packetstorm.linuxsecurity.com/0511-exploits/EasyPageCMSXSS.txt
CVE ID: CVE-2005-3855 State: PUBLISHED Published: 2005-11-27T11:00:00 Last Updated: 2024-08-07T23:24:36.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in process.php in 1-2-3 music store allows remote attackers to execute arbitrary SQL commands via the AlbumID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/11/1-2-3-music-store-albumid-sql.html - http://www.securityfocus.com/bid/15544 - http://www.vupen.com/english/advisories/2005/2549 - http://www.osvdb.org/21074 - http://secunia.com/advisories/17683
CVE ID: CVE-2005-3856 State: PUBLISHED Published: 2005-11-27T20:00:00Z Last Updated: 2024-09-16T18:08:41.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Popular URL capability (popularurls.cpp) in Krusader 1.60.0 and 1.70.0-beta1 saves passwords in cleartext in the krusaderrc file when the user enters URLs containing passwords in the panel URL field, which might allow attackers to access other sites. Additional Analyst Notes: - CVE Program Container: References: - http://www.krusader.org/phpBB/viewtopic.php?t=1367 - http://www.krusader.org/phpBB/viewtopic.php?t=1368 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336169
CVE ID: CVE-2005-3857 State: PUBLISHED Published: 2005-11-27T21:00:00 Last Updated: 2024-08-07T23:24:36.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: The time_out_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of service (kernel log message consumption) by causing a large number of broken leases, which is recorded to the log using the printk function. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2006-0140.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174337 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ed017
illa/show_bug.cgi?id=174337 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ed0175a462c4c30f6df6fac1cccac058f997739 - http://secunia.com/advisories/19369 - http://secunia.com/advisories/18203 - http://www.redhat.com/support/errata/RHSA-2006-0101.html - http://www.debian.org/security/2006/dsa-1018 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9727 - http://secunia.com/advisories/19607 - http://www.securityfocus.com/archive/1/428058/100/0/threaded - http://marc.info/?l=linux-kernel&m=113190437101622&w=2 - http://www.securityfocus.com/archive/1/427981/100/0/threaded - http://secunia.com/advisories/18510 - http://w
1622&w=2 - http://www.securityfocus.com/archive/1/427981/100/0/threaded - http://secunia.com/advisories/18510 - http://www.securityfocus.com/archive/1/428028/100/0/threaded - http://marc.info/?l=linux-kernel&m=113175851920568&w=2 - http://www.trustix.org/errata/2005/0070 - ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U - http://www.mandriva.com/security/advisories?name=MDKSA-2006:072 - http://www.securityfocus.com/bid/15627 - http://www.debian.org/security/2006/dsa-1017 - http://secunia.com/advisories/19374 - https://usn.ubuntu.com/231-1/ - http://secunia.com/advisories/17787 - http://secunia.com/advisories/17786 - http://secunia.com/advisories/18562 - http://www.vupen.
nia.com/advisories/17787 - http://secunia.com/advisories/17786 - http://secunia.com/advisories/18562 - http://www.vupen.com/english/advisories/2005/2649
CVE ID: CVE-2005-3858 State: PUBLISHED Published: 2005-11-27T22:00:00 Last Updated: 2024-08-07T23:24:36.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the ip6_input_finish function in ip6_input.c in Linux kernel 2.6.12 and earlier might allow attackers to cause a denial of service via malformed IPv6 packets with unspecified parameter problems, which prevents the SKB from being freed. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2006-0140.html - http://secunia.com/advisories/19038 - http://www.securityfocus.com/bid/16043 - http://secunia.com/advisories/19369 - http://secunia.com/advisories/18203 - ht
http://www.securityfocus.com/bid/16043 - http://secunia.com/advisories/19369 - http://secunia.com/advisories/18203 - http://www.redhat.com/support/errata/RHSA-2006-0101.html - http://marc.info/?l=linux-kernel&m=112533899509033&w=2 - http://www.debian.org/security/2006/dsa-1018 - http://secunia.com/advisories/18510 - http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html - http://marc.info/?l=linux-kernel&m=112508479120081&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9396 - http://www.debian.org/security/2006/dsa-1017 - http://secunia.com/advisories/19374 - https://usn.ubuntu.com/231-1/ - http://secunia.com/advisories/18562
CVE ID: CVE-2005-3859 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/417797/100/0/threaded - http://securityreason.com/securityalert/209 - http://www.vupen.com/english/advisories/2005/2600 - http://secunia.com/advisories/17771 - http://www.securityfocus.com/bid/15576 - http://securitytracker.com/id?1015277