Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-1058 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 negotiation, may not process certain attributes in the ISAKMP profile that specifies XAUTH, which allows remote attackers to bypass XAUTH and move to Phase 2 negotiations. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5738 - http://www.cisco.com/warp/public/707/cisco-sa-20050406-xauth.shtml
CVE ID: CVE-2005-1059 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data parameter to changepw.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13051 - http://secunia.com/advisories/14871 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20008 - http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-04/0148.html
CVE ID: CVE-2005-1060 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the TCP/IP functionality (TCPIP.NLM) in Novell Netware 6.x allows remote attackers to cause a denial of service (ABEND by Page Fault Processor Exception) via certain packets. Additional Analyst Notes: - CVE Program Container: References: - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2970467.htm - http://secunia.com/advisories/14874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20024 - http://www.securityfocus.com/bid/13067
CVE ID: CVE-2005-1061 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-07T21:35:59.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the secure file that are later used as part of a regular expression, which causes the parser to crash, aka "logwatch log processing regular expression DoS." Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-364.html - https://bugzilla.redhat.com/bugzilla-old/show_bug.cgi?id=137502
CVE ID: CVE-2005-1062 State: PUBLISHED Published: 2005-04-29T04:00:00 Last Updated: 2024-08-07T21:35:59.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods. Additional Analyst Notes: - CVE Program Container: References: - http://research.tic.udc.es/scg/advisories/20050429-1.txt - http://www.securityfocus.com/archive/1/397221 - http://www.kerio.com/security_advisory.html
CVE ID: CVE-2005-1063 State: PUBLISHED Published: 2005-04-29T04:00:00 Last Updated: 2024-08-07T21:35:59.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to cause a denial of service (CPU consumption) via certain attacks that force the product to "compute unexpected conditions" and "perform cryptographic operations." Additional Analyst Notes: - CVE Program Container: References: - http://research.tic.udc.es/scg/advisories/20050429-2.txt - http://www.securityfocus.com/archive/1/397220 - http://www.kerio.com/security_advis
c.es/scg/advisories/20050429-2.txt - http://www.securityfocus.com/archive/1/397220 - http://www.kerio.com/security_advisory.html
CVE ID: CVE-2005-1064 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: The copy_symlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the symlink itself, which allows local users to obtain access to arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=111317179531000&w=2 - http://www.osvdb.org/15420 - http://www.gentoo.org/security/en/glsa/glsa-200504-12.xml - http://www.rsnapshot.org/security/2005/001.html - http://securitytracker.com/id?1013674 - http://sec
lsa-200504-12.xml - http://www.rsnapshot.org/security/2005/001.html - http://securitytracker.com/id?1013674 - http://secunia.com/advisories/14878
CVE ID: CVE-2005-1065 State: PUBLISHED Published: 2005-04-12T04:00:00Z Last Updated: 2024-09-16T23:06:40.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: tetex in Novell Linux Desktop 9 allows local users to determine the existence of arbitrary files via a symlink attack in the /var/cache/fonts directory. Additional Analyst Notes: - CVE Program Container: References: - http://lists.suse.com/archive/suse-security-announce/2005-Apr/0002.html - http://www.securityfocus.com/bid/13072
CVE ID: CVE-2005-1066 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in rpdump in Pine 4.62 and earlier allows local users to overwrite arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://msgs.securepoint.com/cgi-bin/get/bugtraq0504/126.html - http://secunia.com/advisories/14899 - http://www.osvdb.org/15456
CVE ID: CVE-2005-1067 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in Access_user Class before 1.75 allows local users to gain access as other users via the password "new". Additional Analyst Notes: - CVE Program Container: References: - http://freshmeat.net/projects/access_user/?branch_id=53852&release_id=192770 - http://secunia.com/advisories/14897 - http://www.osvdb.org/15348
CVE ID: CVE-2005-1068 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in sCssBoard 1.11 and earlier allows remote attackers to execute arbitrary Javascript via [url] tags. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=318346 - http://www.securityfocus.com/bid/13041 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20021 - http://securitytracker.com/id?1013659 - http://secunia.com/advisories/14694
CVE ID: CVE-2005-1069 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in sCssBoard 1.11 and earlier has unknown impact, related to "an exploit on the Profile page." Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=318346 - http://securitytracker.com/id?1013659 - http://secunia.com/advisories/14694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20022
CVE ID: CVE-2005-1070 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to execute arbitrary SQL commands via the st parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20059 - http://www.securityfocus.com/bid/13097 - http://www.securityfocus.com/archive/1/395515 - http://www.securitytracker.com/alerts/2005/Apr/1013676.html
CVE ID: CVE-2005-1071 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in banner.inc.php in JPortal Web Portal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the haslo parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15476 - http://marc.info/?l=bugtraq&m=111331738223323&w=2 - http://secunia.com/advisories/14919
CVE ID: CVE-2005-1072 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PunBB before 1.2.5 allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14882 - http://www.punbb.org/
CVE ID: CVE-2005-1073 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to read arbitrary files via the read parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20038 - http://www.digitalparadox.org/advisories/rga.txt - http://www.securityfocus.com/archive/1/395527 - http://www.securityfocus.com/bid/13080 - http://secunia.com/advisories/14906 - http://www.osvdb.org/15428
CVE ID: CVE-2005-1074 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php for RadScripts RadBids Gold 2 allows remote attackers to execute arbitrary SQL commands via the mode parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20040 - http://www.digitalparadox.org/advisories/rga.txt - http://www.securityfocus.com/archive/1/395527 - http://www.securityfocus.com/bid/13080 - http://secunia.com/advisories/14906 - http://www.osvdb.org/15429
CVE ID: CVE-2005-1075 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in RadScripts RadBids Gold 2 allow remote attackers to inject arbitrary web script or HTML via (1) the farea parameter to faq.php or the (2) cat, (3) order, or (4) area parameters to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20038 - http://www.digitalparadox.org/advisories/rga.txt - http://www.securityfocus.com/archive/1/395527 - http://www.osvdb.org/15430 - http://www.securityfocus.com/bid
/rga.txt - http://www.securityfocus.com/archive/1/395527 - http://www.osvdb.org/15430 - http://www.securityfocus.com/bid/13080 - http://secunia.com/advisories/14906 - http://www.osvdb.org/15431
CVE ID: CVE-2005-1076 State: PUBLISHED Published: 2005-04-12T04:00:00Z Last Updated: 2024-09-16T22:30:15.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the discussion board functionality for WebCT Campus Edition 4.1 allows remote attackers to inject arbitrary web script or HTML via the message field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/395544 - http://www.securityfocus.com/bid/13101
CVE ID: CVE-2005-1077 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.4.x allow remote attackers to inject arbitrary web script or HTML via (1) cds.php, (2) Guestbook-EN.pl, or (3) phonebook.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13127 - http://www.securityfocus.com/bid/13128 - http://www.securityfocus.com/bid/13126 - http://marc.info/?l=full-disclosure&m=111330048629182&w=2
CVE ID: CVE-2005-1078 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13131 - http://marc.info/?l=full-disclosure&m=111330048629182&w=2
CVE ID: CVE-2005-1079 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14929 - http://www.securiteam.com/unixfocus/5LP0G0AFFY.html - http://marc.info/?l=bugtraq&m=111340031132596&w=2
CVE ID: CVE-2005-1080 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in filenames in a .jar file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0857.html - http://rhn.redhat.com/errata/RHSA-2015-1007.html - https://bugzilla.redhat.com/show_bug.cgi?id=594497 - http://rhn.redhat.com/errata/RHSA-2015-0806.html - http://rhn.redhat.com/errata/RHSA-201
at.com/show_bug.cgi?id=594497 - http://rhn.redhat.com/errata/RHSA-2015-0806.html - http://rhn.redhat.com/errata/RHSA-2015-1006.html - http://marc.info/?l=oss-security&m=127602564508766&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=601823 - http://advisories.mageia.org/MGASA-2015-0158.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:212 - http://marc.info/?l=bugtraq&m=111331593310508&w=2 - http://rhn.redhat.com/errata/RHSA-2015-1091.html - http://marc.info/?l=oss-security&m=127603032617644&w=2 - http://secunia.com/advisories/14902 - http://rhn.redhat.com/errata/RHSA-2015-1020.html - http://rhn.redhat.com/errata/RHSA-2015-0807.html - http://rhn.redhat.com/errata/RHSA-2015
m/errata/RHSA-2015-1020.html - http://rhn.redhat.com/errata/RHSA-2015-0807.html - http://rhn.redhat.com/errata/RHSA-2015-0858.html - http://rhn.redhat.com/errata/RHSA-2015-1021.html - http://rhn.redhat.com/errata/RHSA-2015-0808.html - http://rhn.redhat.com/errata/RHSA-2015-0809.html - http://www.securityfocus.com/bid/13083 - http://rhn.redhat.com/errata/RHSA-2015-0854.html - http://www.securiteam.com/securitynews/5IP0C0AFGW.html
CVE ID: CVE-2005-1081 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in view.php in AzDGDatingPlatinum 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/395530 - http://www.securityfocus.com/bid/13082 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20052
CVE ID: CVE-2005-1082 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in AzDGDatingPlatinum 1.1.0 allows remote attackers to execute arbitrary SQL commands via (1) the id parameter to view.php or (2) the from parameter to members/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/395530 - http://www.securityfocus.com/archive/1/438607/100/100/threaded - http://www.securityfocus.com/bid/13082 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20051 - http://www.osvdb.org/15525 - https://excha
.com/bid/13082 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20051 - http://www.osvdb.org/15525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27436
CVE ID: CVE-2005-1083 State: PUBLISHED Published: 2005-04-12T04:00:00Z Last Updated: 2024-09-16T18:38:43.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in aeDating 3.2 allows remote attackers to include arbitrary files via the skin parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14913
CVE ID: CVE-2005-1084 State: PUBLISHED Published: 2005-04-12T04:00:00Z Last Updated: 2024-09-16T22:10:25.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to execute arbitrary SQL commands files via the event parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14913
CVE ID: CVE-2005-1085 State: PUBLISHED Published: 2005-04-12T04:00:00Z Last Updated: 2024-09-17T00:01:18.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the control panel in aeDating 3.2 allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14913
CVE ID: CVE-2005-1086 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T21:35:59.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary code via an HTTP request with a long User-Agent header. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15361 - http://www.security.org.sg/vuln/anhttpd142n.html - http://secunia.com/advisories/14861 - http://securitytracker.com/id?1013666 - http://www.securityfocus.com/bid/13066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20029
CVE ID: CVE-2005-1087 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T21:35:59.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15362 - http://www.security.org.sg/vuln/anhttpd142n.html - http://secunia.com/advisories/14861 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20031 - http://securitytracker.com/id?1013666
CVE ID: CVE-2005-1088 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T21:35:59.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in DameWare NT Utilities 4.8 and earlier, and Mini Remote Control 4.8 and earlier, allows local users to gain additional rights. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19997 - http://secunia.com/advisories/14829 - http://www.securityfocus.com/bid/13023 - http://www.dameware.com/support/security/bulletin.asp?ID=SB5 - http://www.osvdb.org/18732 - http://securitytracker.com/id?1013653
CVE ID: CVE-2005-1089 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T21:35:59.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in DC++ before 0.674 allows attackers to append data to arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://dcplusplus.sourceforge.net/index.php?t=8&s=1 - http://www.osvdb.org/15433 - http://secunia.com/advisories/14880
CVE ID: CVE-2005-1090 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T21:35:59.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the readFile and writeFile API for Maxthon 1.2.0 and 1.2.1 allows remote attackers to read or write arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13074 - http://secunia.com/advisories/14918 - http://www.raffon.net/advisories/maxthon/multvulns.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/20033 - http://www.osvdb.org/15423
CVE ID: CVE-2005-1091 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T21:35:59.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via script that includes the max.src file into the source page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13073 - http://secunia.com/advisories/14918 - http://www.osvdb.org/15424 - http://www.raffon.net/advisories/maxthon/multvulns.html
CVE ID: CVE-2005-1092 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T21:35:59.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lightspeed DeluxeFTP 6.01 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14923 - http://www.osvdb.org/15421 - http://www.securityfocus.com/bid/13105 - http://lostmon.blogspot.com/2005/04/deluxeftp-plain-text-passwords.html
CVE ID: CVE-2005-1093 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T21:35:59.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the PopUp Plus 2.0.3.8 plugin for Miranda IM, with "Use SmileyAdd Setting" enabled, allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://forums.miranda-im.org/showthread.php?p=9624 - http://www.securityfocus.com/bid/13048 - http://www.miranda-im.org/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/20013 - http://securitytracker.com/id?1013661 - http://forums.miranda-im.org/showthread.php?t=1070 - http://sec.org.il/coverages.php?c=89
curitytracker.com/id?1013661 - http://forums.miranda-im.org/showthread.php?t=1070 - http://sec.org.il/coverages.php?c=89 - http://www.osvdb.org/15482
CVE ID: CVE-2005-1094 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T21:35:59.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: FTP Now 2.6.14 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013657 - http://secunia.com/advisories/14889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20025 - http://www.osvdb.org/15296
CVE ID: CVE-2005-1095 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T21:35:59.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013667 - http://secunia.com/advisories/14864 - http://www.osvdb.org/15306 - http://www.securityfocus.com/bid/13046 - http://www.hackerscenter.com/archive/view.asp?id=1865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20014