Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-0595 State: PUBLISHED Published: 2004-07-16T04:00:00 Last Updated: 2024-08-08T00:24:26.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000847 - http://marc.info/?l=bugtraq&
Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000847 - http://marc.info/?l=bugtraq&m=108982983426031&w=2 - http://www.debian.org/security/2005/dsa-669 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10619 - http://www.redhat.com/support/errata/RHSA-2004-395.html - http://www.redhat.com/support/errata/RHSA-2004-405.html - http://www.redhat.com/support/errata/RHSA-2004-392.html - http://www.debian.org/security/2004/dsa-531 - http://www.novell.com/linux/security/advisories/2004_21_php4.html - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:068 - https://exchange.xforce.ibmcloud.com/vulnerabili
www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:068 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16692 - http://www.redhat.com/support/errata/RHSA-2005-816.html - http://marc.info/?l=bugtraq&m=109181600614477&w=2 - http://marc.info/?l=bugtraq&m=109051444105182&w=2 - http://www.securityfocus.com/bid/10724 - http://marc.info/?l=bugtraq&m=108981780109154&w=2 - http://www.gentoo.org/security/en/glsa/glsa-200407-13.xml - http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023909.html
CVE ID: CVE-2004-0596 State: PUBLISHED Published: 2004-07-14T04:00:00 Last Updated: 2024-08-08T00:24:26.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Equalizer Load-balancer for serial network interfaces (eql.c) in Linux kernel 2.6.x up to 2.6.7 allows local users to cause a denial of service via a non-existent device name that triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16694 - http://www.securityfocus.com/bid/10730 - http://linux.bkbits.net:8080/linux-2.6/cset%4040d4aa72hPLWy-jMLr0eJAXMxHcNZg
CVE ID: CVE-2004-0597 State: PUBLISHED Published: 2004-08-05T04:00:00 Last Updated: 2024-08-08T00:24:26.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.net/errata/2004/0040/ - http://sunsolve.sun.com/search/document.do?asse
gram Container: References: - http://www.trustix.net/errata/2004/0040/ - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200663-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2274 - http://www.mozilla.org/projects/security/known-vulnerabilities.html - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - http://www.redhat.com/support/errata/RHSA-2004-421.html - http://www.redhat.com/support/errata/RHSA-2004-402.html - http://www.gentoo.org/security/en/glsa/glsa-200408-22.xml - http://secunia.com/advisories/22958 - http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-114816-02-1 - http://marc.info/?l=b
ories/22958 - http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-114816-02-1 - http://marc.info/?l=bugtraq&m=109900315219363&w=2 - https://bugzilla.fedora.us/show_bug.cgi?id=1943 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A594 - http://www.us-cert.gov/cas/techalerts/TA05-039A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16894 - http://marc.info/?l=bugtraq&m=109761239318458&w=2 - http://scary.beasts.org/security/CESA-2004-001.txt - http://www.redhat.com/support/errata/RHSA-2004-429.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2378 - http://www.securityfocus.com/bid/
/oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2378 - http://www.securityfocus.com/bid/15495 - http://www.debian.org/security/2004/dsa-536 - http://www.kb.cert.org/vuls/id/388984 - http://lists.apple.com/mhonarc/security-announce/msg00056.html - http://www.kb.cert.org/vuls/id/817368 - http://marc.info/?l=bugtraq&m=109163866717909&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4492 - http://marc.info/?l=bugtraq&m=109181639602978&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-009 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:213 - http://www.us-cert.gov/cas/techal
tins/2005/ms05-009 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:213 - http://www.us-cert.gov/cas/techalerts/TA04-217A.html - http://www.adobe.com/support/downloads/detail.jsp?ftpID=2679 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7709 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:212 - http://marc.info/?l=bugtraq&m=110796779903455&w=2 - http://www.coresecurity.com/common/showdoc.php?idx=421&idxseccion=10 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000856 - http://www.securityfocus.com/bid/10857 - http://www.novell.com/linux/security/advisories/2004_23_libpng.html - http://www.gentoo.org/security/en/
com/bid/10857 - http://www.novell.com/linux/security/advisories/2004_23_libpng.html - http://www.gentoo.org/security/en/glsa/glsa-200408-03.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11284 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:079 - http://secunia.com/advisories/22957
CVE ID: CVE-2004-0598 State: PUBLISHED Published: 2004-08-05T04:00:00 Last Updated: 2024-08-08T00:24:26.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a certain PNG image that triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.net/errata/2004/0040/ - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200663-1 - http://www.mozilla.org/projects/security/known-vulnerabilities.html - http://www.redhat.com/support/errata/RHSA-2004-402.html - https://oval.cisecurity.org/repository/s
ulnerabilities.html - http://www.redhat.com/support/errata/RHSA-2004-402.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10203 - http://www.gentoo.org/security/en/glsa/glsa-200408-22.xml - http://secunia.com/advisories/22958 - https://bugzilla.fedora.us/show_bug.cgi?id=1943 - http://marc.info/?l=bugtraq&m=109761239318458&w=2 - http://scary.beasts.org/security/CESA-2004-001.txt - http://www.redhat.com/support/errata/RHSA-2004-429.html - http://www.debian.org/security/2004/dsa-536 - http://lists.apple.com/mhonarc/security-announce/msg00056.html - http://marc.info/?l=bugtraq&m=109163866717909&w=2 - http://marc.info/?l=bugtraq&m=109181639602978&w=2 -
/msg00056.html - http://marc.info/?l=bugtraq&m=109163866717909&w=2 - http://marc.info/?l=bugtraq&m=109181639602978&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:213 - http://www.us-cert.gov/cas/techalerts/TA04-217A.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16895 - http://www.kb.cert.org/vuls/id/236656 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000856 - http://www.securityfocus.com/bid/10857 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2572 - http://www.novell.com/linux/security/advisories/2004_23_libpng.html - http://www.gentoo.o
Aorg.mitre.oval%3Adef%3A2572 - http://www.novell.com/linux/security/advisories/2004_23_libpng.html - http://www.gentoo.org/security/en/glsa/glsa-200408-03.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2004:079 - http://secunia.com/advisories/22957
CVE ID: CVE-2004-0599 State: PUBLISHED Published: 2004-08-05T04:00:00 Last Updated: 2024-08-08T00:24:26.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.net/errata/2004/0040/ - http://www.kb.cert.org/vuls/id/477512 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200663-1 - http://www.mozilla.org/pro
cert.org/vuls/id/477512 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200663-1 - http://www.mozilla.org/projects/security/known-vulnerabilities.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1479 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - http://www.redhat.com/support/errata/RHSA-2004-421.html - http://www.redhat.com/support/errata/RHSA-2004-402.html - http://www.gentoo.org/security/en/glsa/glsa-200408-22.xml - http://secunia.com/advisories/22958 - http://marc.info/?l=bugtraq&m=109900315219363&w=2 - https://bugzilla.fedora.us/show_bug.cgi?id=1943 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
900315219363&w=2 - https://bugzilla.fedora.us/show_bug.cgi?id=1943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16896 - http://marc.info/?l=bugtraq&m=109761239318458&w=2 - http://scary.beasts.org/security/CESA-2004-001.txt - http://www.redhat.com/support/errata/RHSA-2004-429.html - http://www.securityfocus.com/bid/15495 - http://www.debian.org/security/2004/dsa-536 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10938 - http://lists.apple.com/mhonarc/security-announce/msg00056.html - http://marc.info/?l=bugtraq&m=109163866717909&w=2 - http://www.debian.org/security/2004/dsa-570 - http://marc.info/?l=bugtraq&m=109181639602978&w=2 - http://www
17909&w=2 - http://www.debian.org/security/2004/dsa-570 - http://marc.info/?l=bugtraq&m=109181639602978&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:213 - http://www.us-cert.gov/cas/techalerts/TA04-217A.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:212 - http://www.debian.org/security/2004/dsa-571 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000856 - http://www.securityfocus.com/bid/10857 - http://www.novell.com/linux/security/advisories/2004_23_libpng.html - http://www.gentoo.org/security/en/glsa/glsa-200408-03.xml - http://www.kb.cert.org/vuls/id/160448 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:079 - http://www.kb
http://www.kb.cert.org/vuls/id/160448 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:079 - http://www.kb.cert.org/vuls/id/286464 - http://secunia.com/advisories/22957
CVE ID: CVE-2004-0600 State: PUBLISHED Published: 2004-07-23T04:00:00 Last Updated: 2024-08-08T00:24:26.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.org/errata/2004/0039/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/16785 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000851 - http://www.redhat.com/support/errata/RHSA-2004-259.html - http://marc.info/?l=bugtraq&m=1090528
s/?id=a&anuncio=000851 - http://www.redhat.com/support/errata/RHSA-2004-259.html - http://marc.info/?l=bugtraq&m=109052891507263&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000854 - http://marc.info/?l=bugtraq&m=109051533021376&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11445 - http://www.novell.com/linux/security/advisories/2004_22_samba.html - http://marc.info/?l=bugtraq&m=109051340810458&w=2 - http://marc.info/?l=bugtraq&m=109053195818351&w=2 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071 - http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml - http://marc.info/?l=bugtraq&m=109052647
ame=MDKSA-2004:071 - http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml - http://marc.info/?l=bugtraq&m=109052647928375&w=2
CVE ID: CVE-2004-0601 State: PUBLISHED Published: 2004-11-19T05:00:00 Last Updated: 2024-08-08T00:24:26.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control rules correctly, which could allow remote attackers to bypass intended restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17581 - http://secunia.com/advisories/12711/ - http://www.securityfocus.com/bid/11319 - http://distcc.samba.org/ftp/distcc/distcc-2.17.NEWS
CVE ID: CVE-2004-0602 State: PUBLISHED Published: 2004-07-08T04:00:00 Last Updated: 2024-08-08T00:24:26.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: The binary compatibility mode for FreeBSD 4.x and 5.x does not properly handle certain Linux system calls, which could allow local users to access kernel memory to gain privileges or cause a system panic. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16558 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:13.linux.asc
CVE ID: CVE-2004-0603 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could allow remote attackers or local users to execute arbitrary commands, a different vulnerability than CVE-1999-1332. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=54890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16506 - http://security.gentoo.org/glsa/glsa-200406-18.xml - http://www.securityfocus.com/bid/10603
CVE ID: CVE-2004-0604 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service (crash), possibly via an empty search query, which triggers a NULL dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200406-19.xml - http://secunia.com/advisories/11941/ - http://developer.berlios.de/bugs/?func=detailbug&bug_id=1573&group_id=809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16508 - http://www.securityfocus.com/bid/10
_id=1573&group_id=809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16508 - http://www.securityfocus.com/bid/10604 - http://gift-fasttrack.berlios.de/
CVE ID: CVE-2004-0605 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which could allow remote attackers to cause a denial of service by repeatedly making requests, which are slowly dequeued. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16457 - http://www.securityfocus.com/bid/10572 - http://marc.info/?l=bugtraq&m=108766803817406&w=2
CVE ID: CVE-2004-0606 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the (1) CLIENTID or (2) HOSTNAME option of a DHCP request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16456 - http://www.securityfocus.com/bid/10573 - http://marc.info/?l=bugtraq&m=108769996925349&w=2
CVE ID: CVE-2004-0607 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108731967126033&w=2 - http://sourceforge.net/project/shownotes.php?release_id=245982 - http://www.osvdb.org/7113 - http://secunia.com/advisories/11877 - http://marc.info/?l=bugtraq&m=108726102304507&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
sories/11877 - http://marc.info/?l=bugtraq&m=108726102304507&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16414 - http://www.redhat.com/support/errata/RHSA-2004-308.html - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9163 - http://securitytracker.com/id?1010495 - http://secunia.com/advisories/11863 - http://www.securityfocus.com/bid/10546 - http://security.gentoo.org/glsa/glsa-200406-17.xml
CVE ID: CVE-2004-0608 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP 7710 and earlier, Unreal Tournament 451b and earlier, Unreal Tournament 2003 2225 and earlier, Unreal Tournament 2004 before 3236, Wheel of Time 333b and earlier, and X-com Enforcer, allows remote attackers to execute arbitrary code via a UDP packet contai
of Time 333b and earlier, and X-com Enforcer, allows remote attackers to execute arbitrary code via a UDP packet containing a secure query with a long value, which overwrites memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10570 - http://www.gentoo.org/security/en/glsa/glsa-200407-14.xml - http://marc.info/?l=bugtraq&m=108787105023304&w=2 - http://aluigi.altervista.org/adv/unsecure-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/16451
CVE ID: CVE-2004-0609 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows remote authenticated users to determine the existence of files in a directory outside the jail. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10574 - http://marc.info/?l=bugtraq&m=108787373022844&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16470
CVE ID: CVE-2004-0610 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web administration interface in Microsoft MN-500 Wireless Router allows remote attackers to cause a denial of service (connection refusal) via a large number of open HTTP connections. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10585 - http://marc.info/?l=bugtraq&m=108796481501258&w=2 - http://www.kurczaba.com/securityadvisories/0406213.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/16448
CVE ID: CVE-2004-0611 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web-Based Administration in Netgear FVS318 VPN Router allows remote attackers to cause a denial of service (no new connections) via a large number of open HTTP connections. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108787199201059&w=2 - http://www.securityfocus.com/bid/10585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16462
CVE ID: CVE-2004-0612 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mobile Code filter in ZoneAlarm Pro 5.0.590.015 does not filter mobile code within an SSL encrypted session, which could allow remote attackers to bypass the mobile code filtering. NOTE: it has been disputed by the vendor that this behavior is required by the SSL specification. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108786444608208&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16471 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0420.html - http
ange.xforce.ibmcloud.com/vulnerabilities/16471 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0420.html - http://www.securityfocus.com/bid/10584
CVE ID: CVE-2004-0613 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request that uploads a PHP file to the ticket attachments directory. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108786779500957&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16478 - http://www.securityfocus.com/bid/10586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16477
CVE ID: CVE-2004-0614 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: osTicket trusts a hidden form field in the submit form to limit the upload size of a document, which could allow remote attackers to upload a file of any size. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108786779500957&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16477
CVE ID: CVE-2004-0615 State: PUBLISHED Published: 2004-06-30T04:00:00 Last Updated: 2024-08-08T00:24:26.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10587 - http://secunia.com/advisories/11919 - http://www.osvdb.org/7211 - http://marc.info/?l=bugtraq&m=108786257609932&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabil