Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0087 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T20:57:40.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-033.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10355
CVE ID: CVE-2005-0088 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T20:57:41.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-104.html - http://security.gentoo.org/glsa/glsa-200502-14.xml - http://www.trustix.org/errata/2005/0003/ - http://www.securityfocus.com/archive/1/430286/100/0/threaded - http://securitytracker.com/id?1013156 - http://marc.info/?l=bugtraq&m=110815313218389&w=2 - http://distro.conecti
aded - http://securitytracker.com/id?1013156 - http://marc.info/?l=bugtraq&m=110815313218389&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000926 - http://www.securityfocus.com/bid/12519 - http://www.debian.org/security/2005/dsa-689 - http://www.redhat.com/support/errata/RHSA-2005-100.html - http://www.kb.cert.org/vuls/id/356409 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10617
CVE ID: CVE-2005-0089 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T20:57:40.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013083 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19217 - http://www.python.org/security/PS
ytracker.com/id?1013083 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19217 - http://www.python.org/security/PSF-2005-001/ - http://marc.info/?l=bugtraq&m=110746469728728&w=2 - http://www.trustix.org/errata/2005/0003/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9811 - http://www.securityfocus.com/bid/12437 - http://secunia.com/advisories/14128 - http://www.debian.org/security/2005/dsa-666 - http://python.org/security/PSF-2005-001/patch-2.2.txt - http://www.mandriva.com/security/advisories?name=MDKSA-2005:035 - http://www.redhat.com/support/errata/RHSA-2005-108.html
CVE ID: CVE-2005-0090 State: PUBLISHED Published: 2005-02-21T05:00:00 Last Updated: 2024-08-07T20:57:41.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: A regression error in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch omits an "access check," which allows local users to cause a denial of service (crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20618 - http://www.redhat.com/support/errata/RHSA-2005-092.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10425
CVE ID: CVE-2005-0091 State: PUBLISHED Published: 2005-02-21T05:00:00 Last Updated: 2024-08-07T20:57:41.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when using the hugemem kernel, allows local users to read and write to arbitrary kernel memory and gain privileges via certain syscalls. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11249 - http://www.securityfocus.com/bid/12599 - http://www.redhat.com/support/errata/RHSA-2005-092.html - https://exchange.xforce.ibmcloud.com/vulnerabilities
d/12599 - http://www.redhat.com/support/errata/RHSA-2005-092.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/20619
CVE ID: CVE-2005-0092 State: PUBLISHED Published: 2005-02-21T05:00:00 Last Updated: 2024-08-07T20:57:41.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when running on x86 with the hugemem kernel, allows local users to cause a denial of service (crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20620 - http://www.redhat.com/support/errata/RHSA-2005-092.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11647
CVE ID: CVE-2005-0093 State: REJECTED Published: 2005-04-18T04:00:00Z Last Updated: 2024-09-16T17:18:12.459Z Description: No description available.
CVE ID: CVE-2005-0094 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T20:57:40.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11146 - http://www.trustix.org/errata/2005/0003/ - http://www.squid-cache.org/Advisories/SQUID-2005_1.txt -
val%3Adef%3A11146 - http://www.trustix.org/errata/2005/0003/ - http://www.squid-cache.org/Advisories/SQUID-2005_1.txt - http://fedoranews.org/updates/FEDORA--.shtml - http://www.securityfocus.com/bid/12276 - http://security.gentoo.org/glsa/glsa-200501-25.xml - http://www.debian.org/security/2005/dsa-651 - http://www.redhat.com/support/errata/RHSA-2005-061.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:014 - http://www.novell.com/linux/security/advisories/2005_06_squid.html - http://www.redhat.com/support/errata/RHSA-2005-060.html - http://secunia.com/advisories/13825 - http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-gopher_html_parsing.patch
CVE ID: CVE-2005-0095 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T20:57:41.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache numbers. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923 - http://www.trustix.org/errata/2005/0003/ - http://www.securityfocus.com/bid/12275 - http://www.osvdb.org/12886 - http://fedoranews.org
stix.org/errata/2005/0003/ - http://www.securityfocus.com/bid/12275 - http://www.osvdb.org/12886 - http://fedoranews.org/updates/FEDORA--.shtml - http://security.gentoo.org/glsa/glsa-200501-25.xml - http://www.debian.org/security/2005/dsa-651 - http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_denial_of_service.patch - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10269 - http://www.squid-cache.org/Advisories/SQUID-2005_2.txt - http://securitytracker.com/id?1012882 - http://www.redhat.com/support/errata/RHSA-2005-061.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:014 - http://www.novell.com/linux/security/advis
-061.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:014 - http://www.novell.com/linux/security/advisories/2005_06_squid.html - http://www.redhat.com/support/errata/RHSA-2005-060.html - http://secunia.com/advisories/13825
CVE ID: CVE-2005-0096 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T20:57:40.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (memory consumption). Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923 - http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-fakeauth_auth - http://www.securityfocus.com/bid/12324 - http://www.trustix.org/errata/2005/0003/ - http://fedoranews.org/updates/FEDORA--.shtml - http://securitytracker.com/id?10
tp://www.trustix.org/errata/2005/0003/ - http://fedoranews.org/updates/FEDORA--.shtml - http://securitytracker.com/id?1012818 - http://security.gentoo.org/glsa/glsa-200501-25.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10233 - http://www.redhat.com/support/errata/RHSA-2005-061.html - http://www.novell.com/linux/security/advisories/2005_06_squid.html - http://www.redhat.com/support/errata/RHSA-2005-060.html
CVE ID: CVE-2005-0097 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T20:57:40.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type 3 message that triggers a NULL dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-fakeauth_auth - http://www.trustix.org/errata/2005/0003/ - http://fedoranews.org/updates/FEDORA--.shtml - http://securitytracker.com/id?1012818 - http://security.gentoo.org/glsa/glsa-200501-25.xml - http://www.redhat.
.shtml - http://securitytracker.com/id?1012818 - http://security.gentoo.org/glsa/glsa-200501-25.xml - http://www.redhat.com/support/errata/RHSA-2005-061.html - http://secunia.com/advisories/13789 - http://www.securityfocus.com/bid/12220 - http://www.novell.com/linux/security/advisories/2005_06_squid.html - http://www.redhat.com/support/errata/RHSA-2005-060.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11646
CVE ID: CVE-2005-0098 State: PUBLISHED Published: 2005-03-08T05:00:00Z Last Updated: 2024-09-17T02:57:08.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the SDL port of abuse (abuse-SDL) before 2.00 allow local users to execute arbitrary code via the command line. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14495 - http://www.debian.org/security/2005/dsa-691
CVE ID: CVE-2005-0099 State: PUBLISHED Published: 2005-03-08T05:00:00 Last Updated: 2024-08-07T20:57:41.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SDL port of abuse (abuse-SDL) before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/14610 - http://secunia.com/advisories/14495 - http://www.debian.org/security/2005/dsa-691
CVE ID: CVE-2005-0100 State: PUBLISHED Published: 2005-02-08T05:00:00 Last Updated: 2024-08-07T20:57:41.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9408 - http://www.debian.org/security/2005/dsa-671 - http://www.securityfocus.com/archive/1/433928/30/5010/threaded - http://www.debian.org/security/2005/dsa
/2005/dsa-671 - http://www.securityfocus.com/archive/1/433928/30/5010/threaded - http://www.debian.org/security/2005/dsa-670 - http://marc.info/?l=bugtraq&m=110780416112719&w=2 - http://www.redhat.com/support/errata/RHSA-2005-110.html - http://www.debian.org/security/2005/dsa-685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19246 - http://www.redhat.com/support/errata/RHSA-2005-133.html - http://www.redhat.com/support/errata/RHSA-2005-112.html - http://www.securityfocus.com/bid/12462 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:038
CVE ID: CVE-2005-0101 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T20:57:40.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code via a long string without a newline character. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19178 - http://security.gentoo.org/glsa/glsa-200502-05.xml - http://people.freebsd.org/~niels/issues/newspost-20050114.txt - http://secunia.com/advisories/14098 - http://marc.info/?l=bugtraq&m=110746336728781&w=2 - http://secun
st-20050114.txt - http://secunia.com/advisories/14098 - http://marc.info/?l=bugtraq&m=110746336728781&w=2 - http://secunia.com/advisories/14092/ - http://securitytracker.com/id?1013056 - http://www.vuxml.org/freebsd/7f13607b-6948-11d9-8937-00065be4b5b6.html - http://www.securityfocus.com/bid/12418
CVE ID: CVE-2005-0102 State: PUBLISHED Published: 2005-01-29T05:00:00 Last Updated: 2024-08-07T20:57:40.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:024 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9616 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000925 -
earch/definition/oval%3Aorg.mitre.oval%3Adef%3A9616 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000925 - http://security.gentoo.org/glsa/glsa-200501-35.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/19031 - http://securitytracker.com/id?1012981 - https://usn.ubuntu.com/69-1/ - http://www.securityfocus.com/bid/12354 - http://www.redhat.com/support/errata/RHSA-2005-238.html - http://www.debian.org/security/2005/dsa-673 - http://secunia.com/advisories/13830 - http://www.redhat.com/support/errata/RHSA-2005-397.html
CVE ID: CVE-2005-0103 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T20:57:41.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by modifying a URL parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19037 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10670 - http://www.squirrelmail.org/security/issue/2005-01-19?PHPSESSID=8af117822fb1ca
ion/oval%3Aorg.mitre.oval%3Adef%3A10670 - http://www.squirrelmail.org/security/issue/2005-01-19?PHPSESSID=8af117822fb1ca3aa966a64248b5d223 - http://www.redhat.com/support/errata/RHSA-2005-135.html - http://marc.info/?l=bugtraq&m=110702772714662&w=2 - http://www.redhat.com/support/errata/RHSA-2005-099.html - http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html - http://secunia.com/advisories/13962/ - http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml
CVE ID: CVE-2005-0104 State: PUBLISHED Published: 2005-02-06T05:00:00 Last Updated: 2024-08-07T20:57:40.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10568 - http://secunia.com/advisories/14096 - http://www.redhat.com/support/errata/RHSA-2005-135.html - http://marc.info/?l=bugtraq&m=110702772714662&w=2 - http://www.redhat.com/support/errata/RHSA-200
a/RHSA-2005-135.html - http://marc.info/?l=bugtraq&m=110702772714662&w=2 - http://www.redhat.com/support/errata/RHSA-2005-099.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19036 - http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html - http://secunia.com/advisories/13962/ - http://www.gentoo.org/security/en/glsa/glsa-200501-39.xml - http://www.debian.org/security/2005/dsa-662 - http://www.squirrelmail.org/security/issue/2005-01-20
CVE ID: CVE-2005-0105 State: PUBLISHED Published: 2005-02-16T05:00:00Z Last Updated: 2024-09-17T02:06:46.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in typespeed 0.4.1 and earlier allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-684
CVE ID: CVE-2005-0106 State: PUBLISHED Published: 2005-05-03T04:00:00 Last Updated: 2024-08-07T20:57:41.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGD_PATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/113-1/ - http://secunia.com/advisories/18639 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:023 - http://www.securityfocus.com/bid/13471
CVE ID: CVE-2005-0107 State: PUBLISHED Published: 2005-02-25T05:00:00Z Last Updated: 2024-09-17T02:33:06.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-690
CVE ID: CVE-2005-0108 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T20:57:41.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache mod_auth_radius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to cause a denial of service (crash) via a RADIUS_REPLY_MESSAGE with a RADIUS attribute length of 1, which leads to a memcpy operation with a -1 length argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110548193312050&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18841 - http://secunia.com/advisories/14046 - http://securitytracker.com/id?1012829 - http://www.debian.org/se
abilities/18841 - http://secunia.com/advisories/14046 - http://securitytracker.com/id?1012829 - http://www.debian.org/security/2005/dsa-659 - http://secunia.com/advisories/13773 - http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-02 - http://www.securityfocus.com/bid/12217
CVE ID: CVE-2005-0109 State: PUBLISHED Published: 2005-03-08T05:00:00 Last Updated: 2024-08-07T20:57:41.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/911878 - http://secunia.com/advisories/18165 - http://www-1.ibm.com/support/docview.wss?uid=
p://www.kb.cert.org/vuls/id/911878 - http://secunia.com/advisories/18165 - http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754 - http://marc.info/?l=freebsd-hackers&m=110994026421858&w=2 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.24/SCOSA-2005.24.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9747 - http://www.vupen.com/english/advisories/2005/3002 - http://secunia.com/advisories/15348 - http://www.securityfocus.com/bid/12724 - http://marc.info/?l=freebsd-security&m=110994370429609&w=2 - http://www.redhat.com/support/errata/RHSA-2005-476.html - http://securitytracker.com/id?1013967 - http://www.vupen.com/english/advis
edhat.com/support/errata/RHSA-2005-476.html - http://securitytracker.com/id?1013967 - http://www.vupen.com/english/advisories/2005/0540 - http://www.daemonology.net/papers/htt.pdf - http://www.redhat.com/support/errata/RHSA-2005-800.html - http://www.daemonology.net/hyperthreading-considered-harmful/ - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101739-1 - http://marc.info/?l=openbsd-misc&m=110995101417256&w=2
CVE ID: CVE-2005-0110 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T20:57:40.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly trick an unknowledgeable user into executing arbitrary code via a web page with a body element containing an onclick tag, as demonstrated using the createElement function. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=110569119106172&w=2
CVE ID: CVE-2005-0111 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T21:05:24.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the websql CGI program in MySQL MaxDB 7.5.00 allows remote attackers to execute arbitrary code via a long password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1012893 - http://www.idefense.com/application/poi/display?id=181&type=vulnerabilities - http://www.securityfocus.com/bid/12265
CVE ID: CVE-2005-0112 State: PUBLISHED Published: 2005-01-22T05:00:00 Last Updated: 2024-08-07T21:05:23.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-based administrative interface for 3Com OfficeConnect Wireless 11g Access Point (AP) 1.00.08, and possibly earlier versions before 1.03.07A, allows remote attackers to bypass authentication and obtain sensitive information by directly accessing the (1) config.bin (2) profile.wlp?PN=ggg or (3) event.logs URLs. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18994 - http://www.securityfocus.com/bid/12322 - http://www.idefense.com/application/poi/displa
loud.com/vulnerabilities/18994 - http://www.securityfocus.com/bid/12322 - http://www.idefense.com/application/poi/display?id=188&type=vulnerabilities - http://securitytracker.com/id?1012958 - http://secunia.com/advisories/13942