Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
p://secunia.com/advisories/18669 - http://secunia.com/advisories/17557 - http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml - https://www.ubuntu.com/usn/usn-232-1/ - http://www.redhat.com/support/errata/RHSA-2005-838.html - http://securitytracker.com/id?1015130 - http://www.novell.com/linux/security/advisories/2005_27_sr.html - http://www.hardened-php.net/advisory_182005.77.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PIRZJHM6UDNWNHZ3PCMEZ2YUK3CWY2UE/
CVE ID: CVE-2005-3389 State: PUBLISHED Published: 2005-11-01T02:00:00 Last Updated: 2024-08-07T23:10:08.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting, which causes PHP to set an internal flag that enables register_globals and allows attackers to exploit vulnerabilities in PHP applications that would otherwise be protected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15249 - h
e protected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15249 - http://secunia.com/advisories/21252 - http://secunia.com/advisories/22691 - http://securityreason.com/securityalert/134 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:213 - http://www.redhat.com/support/errata/RHSA-2005-831.html - http://www.turbolinux.com/security/2006/TLSA-2006-38.txt - http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm - http://secunia.com/advisories/18198 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 - http://secunia.com/advisories/18054 - http://www.
86522 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 - http://secunia.com/advisories/18054 - http://www.vupen.com/english/advisories/2005/2254 - http://www.securityfocus.com/archive/1/415291 - http://securitytracker.com/id?1015131 - http://www.hardened-php.net/advisory_192005.78.html - http://secunia.com/advisories/17559 - http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html - http://secunia.com/advisories/17371 - http://www.vupen.com/english/advisories/2006/4320 - http://rhn.redhat.com/errata/RHSA-2006-0549.html - http://secunia.com/advisories/17490 - http://www.securityfocus.com/archive/1/419504/100/0/threaded -
A-2006-0549.html - http://secunia.com/advisories/17490 - http://www.securityfocus.com/archive/1/419504/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11481 - http://www.php.net/release_4_4_1.php - http://secunia.com/advisories/17510 - http://secunia.com/advisories/17531 - http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html - http://secunia.com/advisories/18669 - http://secunia.com/advisories/17557 - http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml - https://www.ubuntu.com/usn/usn-232-1/ - http://www.redhat.com/support/errata/RHSA-2005-838.html - http://www.novell.com/linux/security/advisories/2005_27_sr.html
CVE ID: CVE-2005-3390 State: PUBLISHED Published: 2005-11-01T02:00:00 Last Updated: 2024-08-07T23:10:08.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS" fileupload field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21252 - http://secunia.com/advisories/22691 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:213 - http://www.redhat.com/support/errata/
visories/22691 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:213 - http://www.redhat.com/support/errata/RHSA-2005-831.html - http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm - http://secunia.com/advisories/18198 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 - http://securityreason.com/securityalert/132 - http://secunia.com/advisories/18054 - http://www.vupen.com/english/advisories/2005/2254 - http://www.securityfocus.com/archive/1/415290/30/0/threaded - http://secunia.com/advisories/17559 - http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_se
.com/advisories/17559 - http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10537 - http://www.securityfocus.com/bid/15250 - http://secunia.com/advisories/17371 - http://www.vupen.com/english/advisories/2006/4320 - http://rhn.redhat.com/errata/RHSA-2006-0549.html - http://secunia.com/advisories/17490 - http://www.securityfocus.com/archive/1/419504/100/0/threaded - http://www.php.net/release_4_4_1.php - http://www.hardened-php.net/advisory_202005.79.html - http://securitytracker.com/id?1015129 - http://www.hardened-php.net/globals-problem - ht
p.net/advisory_202005.79.html - http://securitytracker.com/id?1015129 - http://www.hardened-php.net/globals-problem - http://secunia.com/advisories/17510 - http://secunia.com/advisories/17531 - http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html - http://secunia.com/advisories/18669 - http://secunia.com/advisories/17557 - http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml - https://www.ubuntu.com/usn/usn-232-1/ - http://www.redhat.com/support/errata/RHSA-2005-838.html - http://www.novell.com/linux/security/advisories/2005_27_sr.html
CVE ID: CVE-2005-3391 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T23:10:08.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and open_basedir restrictions via unknown attack vectors in (1) ext/curl and (2) ext/gd. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22691 - http://secunia.com/advisories/18198 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 - http://www.osvdb.org/20898 - http://securityreason.com/securityalert/525 - http://secuni
docDisplay.do?docId=c00786522 - http://www.osvdb.org/20898 - http://securityreason.com/securityalert/525 - http://secunia.com/advisories/19064 - http://secunia.com/advisories/18054 - http://www.vupen.com/english/advisories/2005/2254 - http://www.securityfocus.com/bid/16907 - http://secunia.com/advisories/17371 - http://www.vupen.com/english/advisories/2006/0791 - http://www.vupen.com/english/advisories/2006/4320 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html - http://www.securityfocus.com/archive/1/419504/100/0/threaded - http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:035 - http://secunia.com/advisories/18763 - http://www.php.net/release_4_4_1.php
om/security/advisories?name=MDKSA-2006:035 - http://secunia.com/advisories/18763 - http://www.php.net/release_4_4_1.php - http://www.us-cert.gov/cas/techalerts/TA06-062A.html - http://www.securityfocus.com/bid/15411 - http://secunia.com/advisories/17510 - http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html - http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml - https://www.ubuntu.com/usn/usn-232-1/ - http://docs.info.apple.com/article.html?artnum=303382
CVE ID: CVE-2005-3392 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T23:10:08.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to bypass safe_mode and open_basedir directives. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22691 - http://secunia.com/advisories/18198 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 - http://securityreason.com/securityalert/525 - http://www.securityfocus.com/bid/15413 - http://secuni
o?docId=c00786522 - http://securityreason.com/securityalert/525 - http://www.securityfocus.com/bid/15413 - http://secunia.com/advisories/19064 - http://secunia.com/advisories/18054 - http://www.vupen.com/english/advisories/2005/2254 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22924 - http://www.securityfocus.com/bid/16907 - http://secunia.com/advisories/17371 - http://www.vupen.com/english/advisories/2006/0791 - http://www.vupen.com/english/advisories/2006/4320 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html - http://www.securityfocus.com/archive/1/419504/100/0/threaded - http://www.osvdb.org/20897 - http://www.php.net/release_4_4_1.php - http://www.us-c
om/archive/1/419504/100/0/threaded - http://www.osvdb.org/20897 - http://www.php.net/release_4_4_1.php - http://www.us-cert.gov/cas/techalerts/TA06-062A.html - http://secunia.com/advisories/17510 - http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml - https://www.ubuntu.com/usn/usn-232-1/ - http://docs.info.apple.com/article.html?artnum=303382
CVE ID: CVE-2005-3393 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T23:10:08.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the foreign_option function in options.c for OpenVPN 2.0.x allows remote clients to execute arbitrary code via format string specifiers in a push of the dhcp-option command option. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17447 - http://secunia.com/advisories/17480 - http://openvpn.net/changelog.html - http://www.novell.com/linux/security/advisories/2005_25_sr.html - http://www.gentoo.org/security/en/glsa/glsa-200511-07.xml - http://www.securi
inux/security/advisories/2005_25_sr.html - http://www.gentoo.org/security/en/glsa/glsa-200511-07.xml - http://www.securityfocus.com/bid/15239 - http://www.securityfocus.com/archive/1/415487 - http://secunia.com/advisories/17452 - http://www.vupen.com/english/advisories/2005/2255 - http://marc.info/?l=bugtraq&m=113081023121059&w=2 - http://www.debian.org/security/2005/dsa-885 - http://secunia.com/advisories/17376
CVE ID: CVE-2005-3394 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T23:10:08.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in forum.php in oaboard forum 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) channel parameter in the topics module and (2) topic parameter in the posting module. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2258 - http://secunia.com/advisories/17373 - http://www.osvdb.org/20420 - http://www.securityfocus.com/archive/1/415299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22932 - http://www.
http://www.securityfocus.com/archive/1/415299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22932 - http://www.securityfocus.com/bid/15245
CVE ID: CVE-2005-3395 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T23:10:08.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute arbitrary SQL commands via the st parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/415297 - http://www.osvdb.org/20419 - http://secunia.com/advisories/17375 - http://www.securityfocus.com/bid/15240 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22928 - http://www.vupen.com/english/advisories/2005/2257
CVE ID: CVE-2005-3396 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T23:10:08.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the chcons (chcon) command in IBM AIX 5.2 and 5.3, when DEBUG MALLOC is enabled, might allow attackers to execute arbitrary code via a long command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015122 - http://www.vupen.com/english/advisories/2005/2253 - http://secunia.com/advisories/17380 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5470 - http://securityreason.com/securityalert/261 - http://www-1.ib
ory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5470 - http://securityreason.com/securityalert/261 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY78253 - http://www.securityfocus.com/bid/15247 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY78241
CVE ID: CVE-2005-3397 State: PUBLISHED Published: 2005-11-01T11:00:00Z Last Updated: 2024-09-16T19:35:41.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to comersus_backoffice_supportError.asp. NOTE: the comersus_backoffice_message.asp/message vector is already covered by CVE-2005-2191 item 2. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15251
CVE ID: CVE-2005-3398 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T23:10:08.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15222 - http://secunia.com/advisories/17334 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102016-1 - https://oval.cisecurity.org/repository/search/definiti
tp://sunsolve.sun.com/search/document.do?assetkey=1-26-102016-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1445 - http://www.vupen.com/english/advisories/2005/2226 - http://securitytracker.com/id?1015112
CVE ID: CVE-2005-3399 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T23:10:08.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in CAT-QuickHeal 8.0 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug." Additional Analyst Notes: - CVE Program Container: References: - http
, EML, and HTML content, aka the "magic byte bug." Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=113036131526435&w=2 - http://marc.info/?l=bugtraq&m=113026417802703&w=2
CVE ID: CVE-2005-3400 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T23:10:08.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in Fortinet 2.48.0.0 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug." Additional Analyst Notes: - CVE Program Container: References: - http
CVE ID: CVE-2005-3401 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T23:10:08.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple interpretation error in TheHacker 5.8.4.128 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug." Additional Analyst Notes: - CVE Program Container: References: - ht
XE, EML, and HTML content, aka the "magic byte bug." Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/114 - http://marc.info/?l=bugtraq&m=113036131526435&w=2 - http://marc.info/?l=bugtraq&m=113026417802703&w=2 - http://securityreason.com/securityalert/122
CVE ID: CVE-2005-3402 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T23:10:08.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMTP client in Mozilla Thunderbird 1.0.5 BETA, 1.0.7, and possibly other versions, does not notify users when it cannot establish a secure channel with the server, which allows remote attackers to obtain authentication information without detection via a man-in-the-middle (MITM) attack that bypasses TLS authentication or downgrades CRAM-MD5 authentication to plain authentication. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=311657 - http://www.securityfocus.c
- CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=311657 - http://www.securityfocus.com/bid/15106 - http://marc.info/?l=bugtraq&m=113034421329653&w=2 - http://marc.info/?l=bugtraq&m=113028017608146&w=2
CVE ID: CVE-2005-3403 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T23:10:08.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to inject arbitrary web script or HTML via (1) the _base_href parameter in translate.php, (2) the _base_path parameter in news.inc.php, and (3) the p parameter in add_note.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=113043022821049&w=2 - http://www.vupen.com/english/advisories/2005/2228 - http://secunia.com/advisories/16915/ - http://www.osvdb.org/20348 - http://ww
w.vupen.com/english/advisories/2005/2228 - http://secunia.com/advisories/16915/ - http://www.osvdb.org/20348 - http://www.osvdb.org/20349 - http://securityreason.com/securityalert/123 - http://securitytracker.com/id?1015165 - http://www.securityfocus.com/bid/15221 - http://atutor.ca/view/3/6158/1.html - http://secunia.com/secunia_research/2005-55/advisory/ - http://www.osvdb.org/20347
CVE ID: CVE-2005-3404 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T23:10:08.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitrary files via the section parameter followed by a null byte (%00) in (1) body_header.inc.php and (2) print.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=113043022821049&w=2 - http://www.vupen.com/english/advisories/2005/2228 - http://secunia.com/advisories/16915/ - http://www.osvdb.org/20346 - http://www.osvdb.org/20345 - http://securityreason.com/securityal
a.com/advisories/16915/ - http://www.osvdb.org/20346 - http://www.osvdb.org/20345 - http://securityreason.com/securityalert/123 - http://securitytracker.com/id?1015165 - http://www.securityfocus.com/bid/15221 - http://secunia.com/secunia_research/2005-55/advisory/
CVE ID: CVE-2005-3405 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T23:10:08.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: ATutor 1.4.1 through 1.5.1-pl1 allows remote attackers to execute arbitrary PHP functions via a direct request to forum.inc.php with a modified addslashes parameter with either the (1) asc or (2) desc parameters set, possibly due to an eval injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=113043022821049&w=2 - http://www.vupen.com/english/advisories/2005/2228 - http://secunia.com/advisories/16915/ - http://securityreason.com/securityalert/123 - http://secur
advisories/2005/2228 - http://secunia.com/advisories/16915/ - http://securityreason.com/securityalert/123 - http://securitytracker.com/id?1015165 - http://www.osvdb.org/20344 - http://www.securityfocus.com/bid/15221 - http://secunia.com/secunia_research/2005-55/advisory/
CVE ID: CVE-2005-3406 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T23:10:08.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpESP 1.7.5 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2237 - http://cvs.sourceforge.net/viewcvs.py/phpesp/phpESP/docs/CHANGES?rev=.&content-type=text/plain - http://www.osvdb.org/20357 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22904 - http://www.securityfocus.com/bid/15232 - http://secunia.com/advisories/1733
.xforce.ibmcloud.com/vulnerabilities/22904 - http://www.securityfocus.com/bid/15232 - http://secunia.com/advisories/17333
CVE ID: CVE-2005-3407 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T23:10:08.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in phpESP 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22905 - http://www.vupen.com/english/advisories/2005/2237 - http://cvs.sourceforge.net/viewcvs.py/phpesp/phpESP/docs/CHANGES?rev=.&content-type=text/plain - http://www.securityfocus.com/bid/15232 - http://secunia.com/advisories/17333
CVE ID: CVE-2005-3408 State: PUBLISHED Published: 2005-11-01T11:00:00 Last Updated: 2024-08-07T23:10:08.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in gCards version 1.43 allows remote attackers to execute arbitrary SQL commands via the limit parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20329 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22884 - http://secunia.com/advisories/17353 - http://securitytracker.com/id?1015106 - http://www.fr33d0m.net/content-1783.html - http://www.securityfocus.com/bid/15216 - http://www.vupen.com/english/advisories/2005/2223
CVE ID: CVE-2005-3409 State: PUBLISHED Published: 2005-11-02T00:00:00 Last Updated: 2024-08-07T23:10:08.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an error status, which leads to a null dereference in an exception handler. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17447 - http://secunia.com/advisories/17480 - http://openvpn.net/changelog.html - http://www.novell.com/linux/security/advisories/2005_25_sr.html - http://www.gentoo.org/security/en/glsa/gl