Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ww.securityfocus.com/bid/12659 - http://secunia.com/advisories/19823 - http://www.mozilla.org/security/announce/mfsa2005-21.html - http://www.novell.com/linux/security/advisories/2006_04_25.html
CVE ID: CVE-2005-0588 State: PUBLISHED Published: 2005-02-28T05:00:00 Last Updated: 2024-08-07T21:21:05.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12659 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10682 - http://www.redhat.com/support/errata/RHSA-2005-176.html - http://www.mozilla.org/security/announce/mfsa20
Adef%3A10682 - http://www.redhat.com/support/errata/RHSA-2005-176.html - http://www.mozilla.org/security/announce/mfsa2005-20.html - http://www.redhat.com/support/errata/RHSA-2005-384.html - http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100038 - https://bugzilla.mozilla.org/show_bug.cgi?id=271209 - http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml
CVE ID: CVE-2005-0589 State: PUBLISHED Published: 2005-02-28T05:00:00 Last Updated: 2024-08-07T21:21:06.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12659 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10825 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100039 - http://www.mozilla.org/se
ttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100039 - http://www.mozilla.org/security/announce/mfsa2005-19.html - http://www.redhat.com/support/errata/RHSA-2005-176.html - http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml - https://bugzilla.mozilla.org/show_bug.cgi?id=270697
CVE ID: CVE-2005-0590 State: PUBLISHED Published: 2005-02-28T05:00:00 Last Updated: 2024-08-07T21:21:06.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real hostname. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12659 - http://secunia.com/advisories/19823 - http://www.mozilla.org/security/announce/mfsa2005-17.html - https://oval.cisecurity
ttp://secunia.com/advisories/19823 - http://www.mozilla.org/security/announce/mfsa2005-17.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100041 - https://bugzilla.mozilla.org/show_bug.cgi?id=268059 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10010 - http://www.redhat.com/support/errata/RHSA-2005-176.html - http://www.redhat.com/support/errata/RHSA-2005-384.html - http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml - http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml - http://www.novell.com/linux/security/advisories/2006_04_25.html
CVE ID: CVE-2005-0591 State: PUBLISHED Published: 2005-02-28T05:00:00 Last Updated: 2024-08-07T21:21:05.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing." Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/mfsa2005-16.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18864 - http://secunia.com/advisories/13786 - http://www.mikx.de/firespoofing/ - https://bugzilla.mozilla.org/show_bug.cgi?id=260560
://secunia.com/advisories/13786 - http://www.mikx.de/firespoofing/ - https://bugzilla.mozilla.org/show_bug.cgi?id=260560 - http://marc.info/?l=bugtraq&m=110547286002188&w=2 - http://www.securityfocus.com/bid/12234 - http://www.redhat.com/support/errata/RHSA-2005-176.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100042 - http://www.redhat.com/support/errata/RHSA-2005-384.html - http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10039 - http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml - http://www.mikx.de/index.php?p=7
CVE ID: CVE-2005-0592 State: PUBLISHED Published: 2005-02-28T05:00:00 Last Updated: 2024-08-07T21:21:06.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla before 1.7.6 might allow remote attackers to cause a denial of service (crash) or execute arbitrary code via invalid sequences in a UTF8 encoded string that result in a zero length value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12659 - http://secunia.com/advisories/19823 - http://www.mozilla.org/security/announce/mfsa2005-15.html - https://bugzilla.mozilla.org/show_bug.cgi?i
visories/19823 - http://www.mozilla.org/security/announce/mfsa2005-15.html - https://bugzilla.mozilla.org/show_bug.cgi?id=241440 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100043 - http://www.redhat.com/support/errata/RHSA-2005-176.html - http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml - http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml - http://www.novell.com/linux/security/advisories/2006_04_25.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10606
CVE ID: CVE-2005-0593 State: PUBLISHED Published: 2005-02-28T05:00:00 Last Updated: 2024-08-07T21:21:05.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure site" lock icon via (1) a web site that does not finish loading, which shows the lock of the previous site, (2) a non-HTTP server that uses SSL, which causes the lock to be displayed when the SSL handshake is completed, or (3) a URL that generates an HTTP 204 error, which updates the icon and location information but does not change the display of the original site. Additional Analyst Notes: - CVE Program Container: References: - htt
t does not change the display of the original site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12659 - https://bugzilla.mozilla.org/show_bug.cgi?id=258048 - http://www.mozilla.org/security/announce/mfsa2005-14.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100044 - https://bugzilla.mozilla.org/show_bug.cgi?id=268483 - https://bugzilla.mozilla.org/show_bug.cgi?id=277564 - http://www.redhat.com/support/errata/RHSA-2005-176.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9533 - http://www.redhat.com/support/errata/RHSA-2005-384.html - http://www.gen
definition/oval%3Aorg.mitre.oval%3Adef%3A9533 - http://www.redhat.com/support/errata/RHSA-2005-384.html - http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml - http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml - https://bugzilla.mozilla.org/show_bug.cgi?id=276720
CVE ID: CVE-2005-0594 State: PUBLISHED Published: 2005-05-04T04:00:00 Last Updated: 2024-08-07T21:21:06.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Netinfo Setup Tool (NeST) allows local users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/354486 - http://www.us-cert.gov/cas/techalerts/TA05-136A.html - http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
CVE ID: CVE-2005-0595 State: PUBLISHED Published: 2005-03-01T05:00:00 Last Updated: 2024-08-07T21:21:06.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-02/0599.html - http://www.securityfocus.com/bid/12673 - http://secunia.com/advisories/14405
CVE ID: CVE-2005-0596 State: PUBLISHED Published: 2005-03-01T05:00:00Z Last Updated: 2024-09-16T17:42:45.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 4 (PHP4) allows attackers to cause a denial of service (daemon crash) by using the readfile function on a file whose size is a multiple of the page size. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12665 - http://www.linuxcompatible.org/story42495.html
CVE ID: CVE-2005-0597 State: PUBLISHED Published: 2005-03-01T05:00:00 Last Updated: 2024-08-07T21:21:05.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco devices running Application and Content Networking System (ACNS) 5.0 before 5.0.17.6 and 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service (process restart) via a "crafted TCP connection." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12648 - http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml - http://secunia.com/advisories/14395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19466
CVE ID: CVE-2005-0598 State: PUBLISHED Published: 2005-03-01T05:00:00 Last Updated: 2024-08-07T21:21:06.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RealServer RealSubscriber on Cisco devices running Application and Content Networking System (ACNS) 5.1 allow remote attackers to cause a denial of service (CPU consumption) via malformed packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12648 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19469 - http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml - http://secunia.com/advisories/14395 - http://www.kb.cert.org/vuls/id/579240
CVE ID: CVE-2005-0599 State: PUBLISHED Published: 2005-03-01T05:00:00 Last Updated: 2024-08-07T21:21:06.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, or 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service (CPU consumption) via malformed IP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12648 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19468 - http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml - http://secunia.com/advisories/14395
CVE ID: CVE-2005-0600 State: PUBLISHED Published: 2005-03-01T05:00:00 Last Updated: 2024-08-07T21:21:06.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco devices running Application and Content Networking System (ACNS) 5.0, 5.1 before 5.1.13.7, or 5.2 before 5.2.3.9 allow remote attackers to cause a denial of service (bandwidth consumption) via "crafted IP packets" that are continuously forwarded. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12648 - http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/19470 - http://secunia.com/advisories/14395
CVE ID: CVE-2005-0601 State: PUBLISHED Published: 2005-03-01T05:00:00 Last Updated: 2024-08-07T21:21:06.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, 5.1, or 5.2 use a default password when the setup dialog has not been run, which allows remote attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19471 - http://www.securityfocus.com/bid/12648 - http://www.cisco.com/warp/public/707/cisco-sa-20050224-acnsdos.shtml - http://secunia.com/advisories/14395
CVE ID: CVE-2005-0602 State: PUBLISHED Published: 2005-03-01T05:00:00 Last Updated: 2024-08-07T21:21:05.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14447 - http://www.info-zip.org/FAQ.html - http://www.vupen.com/english/advisories/2007/3866 - http://www.trustix.org/errata/2005/0053/ - http://marc.info/?l=bugtraq&m=110960796331943&w=2 - http://secunia.com/advisories/17342 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200844
960796331943&w=2 - http://secunia.com/advisories/17342 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200844-1 - http://secunia.com/advisories/17045 - http://secunia.com/advisories/27684 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:197 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103150-1
CVE ID: CVE-2005-0603 State: PUBLISHED Published: 2005-03-01T05:00:00 Last Updated: 2024-08-07T21:21:06.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: viewtopic.php in phpBB 2.0.12 and earlier allows remote attackers to obtain sensitive information via a highlight parameter containing invalid regular expression syntax, which reveals the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpbb.com/phpBB/viewtopic.php?t=267563 - http://neossecurity.net/Advisories/Advisory-06.txt - http://secunia.com/advisories/14413 - http://marc.info/?l=bugtraq&m=110943646112950&w=2
CVE ID: CVE-2005-0604 State: PUBLISHED Published: 2005-03-01T05:00:00 Last Updated: 2024-08-07T21:21:06.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: lnss.exe in GFI Languard Network Security Scanner 5.0 stores the username and password in memory in plaintext, which could allow local administrators to obtain domain administrator credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.hat-squad.com/en/000160.html - http://marc.info/?l=bugtraq&m=110961644621528&w=2
CVE ID: CVE-2005-0605 State: PUBLISHED Published: 2005-03-04T05:00:00 Last Updated: 2024-08-07T21:21:06.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-331.html - http://www.redhat.com/support/errata/RHSA-2005-412.html - http://securitytracker.com/id?1013339 - http://secunia.com/advisories/18049 - ftp://patches.sgi.com/support/free/security/advisories/20060403-01-U - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.5/SCOSA-2006.5.txt -
upport/free/security/advisories/20060403-01-U - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.5/SCOSA-2006.5.txt - http://bugs.gentoo.org/show_bug.cgi?id=83598 - http://www.gentoo.org/security/en/glsa/glsa-200503-15.xml - http://www.debian.org/security/2005/dsa-723 - http://secunia.com/advisories/19624 - https://bugs.freedesktop.org/attachment.cgi?id=1909 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://secunia.com/advisories/18316 - http://secunia.com/advisories/14460 - http://www.redhat.com/support/errata/RHSA-2005-198.html - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html - http://www.redhat.com/support/errata/RHSA-
//www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html - http://www.redhat.com/support/errata/RHSA-2005-044.html - http://security.gentoo.org/glsa/glsa-200503-08.xml - http://www.securityfocus.com/bid/12714 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://bugs.gentoo.org/show_bug.cgi?id=83655 - http://www.redhat.com/support/errata/RHSA-2005-473.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.57/SCOSA-2005.57.txt - https://usn.ubuntu.com/97-1/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10411 - https://usn.ubuntu.com/92-1/
CVE ID: CVE-2005-0606 State: PUBLISHED Published: 2005-03-01T05:00:00 Last Updated: 2024-08-07T21:21:06.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in settings.inc.php for CubeCart 2.0.0 through 2.0.5, as used in multiple PHP files, allows remote attackers to inject arbitrary HTML or web script via the (1) cat_id, (2) PHPSESSID, (3) view_doc, (4) product, (5) session, (6) catname, (7) search, or (8) page parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12658 - http://secunia.com/advisories/14416 - http://lostmon.blogspot.com/2005/02/cubecart-20x-multiple-variable-xss.html
2658 - http://secunia.com/advisories/14416 - http://lostmon.blogspot.com/2005/02/cubecart-20x-multiple-variable-xss.html - http://www.cubecart.com/site/forums/index.php?showtopic=6032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20637 - http://securitytracker.com/id?1013304
CVE ID: CVE-2005-0607 State: PUBLISHED Published: 2005-03-01T05:00:00 Last Updated: 2024-08-07T21:21:06.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: CubeCart 2.0.0 through 2.0.5 allows remote attackers to determine the full path of the server via direct calls without parameters to (1) information.php, (2) language.php, (3) list_docs.php, (4) popular_prod.php, (5) sale.php, (6) subfooter.inc.php, (7) subheader.inc.php, (8) cat_navi.php, or (9) check_sum.php, which reveals the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2005/02/cubecart-20x-multiple-variable-xss.html - http://www.cubecart.com/site/
eferences: - http://lostmon.blogspot.com/2005/02/cubecart-20x-multiple-variable-xss.html - http://www.cubecart.com/site/forums/index.php?showtopic=6032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20638 - http://securitytracker.com/id?1013304
CVE ID: CVE-2005-0608 State: PUBLISHED Published: 2005-03-01T05:00:00 Last Updated: 2024-08-07T21:21:06.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in server.cpp for WebMod 0.47 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a POST request with a Content-Length that is less than the amount of data that is actually sent. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14302 - http://djeyl.net/forum/index.php?showtopic=41440
CVE ID: CVE-2005-0609 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2005-0610 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T21:21:06.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkg_fetch, (2) overwrite arbitrary files via temporary files when portupgrade upgrades a port or package, or (3) create arbitrary zero-byte files via the pkgdb.fixme temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14903 - http://www.securityfocus.com/bid/13106 - http://www.vuxml.o
ntainer: References: - http://secunia.com/advisories/14903 - http://www.securityfocus.com/bid/13106 - http://www.vuxml.org/freebsd/22f00553-a09d-11d9-a788-0001020eed82.html
CVE ID: CVE-2005-0611 State: PUBLISHED Published: 2005-03-02T05:00:00 Last Updated: 2024-08-07T21:21:06.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-271.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11419 - http://service.real.com/help/faq/security/050224_player/EN/ - http://www.redhat.com/support/errata/RHSA-2005-265.html - http:
//service.real.com/help/faq/security/050224_player/EN/ - http://www.redhat.com/support/errata/RHSA-2005-265.html - http://marc.info/?l=bugtraq&m=110979465912834&w=2 - http://marc.info/?l=vulnwatch&m=110977858619314&w=2
CVE ID: CVE-2005-0612 State: PUBLISHED Published: 2005-03-02T05:00:00 Last Updated: 2024-08-07T21:21:06.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IP/VC Videoconferencing System 3510, 3520, 3525 and 3530 contain hard-coded default SNMP community strings, which allows remote attackers to gain access, cause a denial of service, and modify configuration. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14122 - http://www.cisco.com/public/technotes/cisco-sa-20050202-ipvc.shtml - http://securitytracker.com/id?1013067 - http://www.securityfocus.com/bid/12424
CVE ID: CVE-2005-0613 State: PUBLISHED Published: 2005-03-03T05:00:00Z Last Updated: 2024-09-17T02:21:46.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in FCKeditor 2.0 RC2, when used with PHP-Nuke, allows remote attackers to upload arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12676
CVE ID: CVE-2005-0614 State: PUBLISHED Published: 2005-03-03T05:00:00 Last Updated: 2024-08-07T21:21:06.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: sessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges via the autologinid value in a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110970201920206&w=2 - http://www.phpbb.com/phpBB/viewtopic.php?t=267563 - http://marc.info/?l=bugtraq&m=110999268130739&w=2 - http://secunia.com/advisories/14413
CVE ID: CVE-2005-0615 State: PUBLISHED Published: 2005-03-02T05:00:00 Last Updated: 2024-08-07T21:21:06.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in (1) index.php, (2) modules.php, or (3) admin.php in PostNuke 0.760-RC2 allow remote attackers to execute arbitrary SQL code via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://news.postnuke.com/Article2669.html - http://securitytracker.com/id?1013324 - http://marc.info/?l=bugtraq&m=110962819232255&w=2
CVE ID: CVE-2005-0616 State: PUBLISHED Published: 2005-03-02T05:00:00 Last Updated: 2024-08-07T21:21:06.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Download module for PostNuke 0.750 and 0.760-RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) Program name, (2) File link, (3) Author name (4) Author e-mail address, (5) File size, (6) Version, or (7) Home page variables. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110962768300373&w=2 - http://news.postnuke.com/Article2669.html - http://securitytracker.com/id?1013324