Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
urityfocus.com/bid/15722 - http://www.securityfocus.com/archive/1/419522/100/0/threaded - http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=25f407f0b668f5e4ebd5d13e1fb4306ba6427ead - http://www.securityfocus.com/archive/1/427981/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2006:018 - http://secunia.com/advisories/17918 - https://usn.ubuntu.com/231-1/
CVE ID: CVE-2005-3806 State: PUBLISHED Published: 2005-11-25T21:00:00 Last Updated: 2024-08-07T23:24:36.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv6 flow label handling code (ip6_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service (crash) by triggering a free of non-allocated memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2006-0140.html - http://secunia.com/advisories/17917 - http://secunia.com/advisories/18684 - http://secunia.com/advisories/18977 -
html - http://secunia.com/advisories/17917 - http://secunia.com/advisories/18684 - http://secunia.com/advisories/18977 - http://www.securityfocus.com/advisories/9806 - http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d - http://secunia.com/advisories/19369 - http://secunia.com/advisories/18203 - http://www.redhat.com/support/errata/RHSA-2006-0101.html - http://www.debian.org/security/2006/dsa-1018 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9903 - http://www.securityfocus.com/archive/1/419522/100/0/threaded - http://www.securityfocus.com/archive/1/428058/100/0/threaded - http://
curityfocus.com/archive/1/419522/100/0/threaded - http://www.securityfocus.com/archive/1/428058/100/0/threaded - http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044 - http://www.securityfocus.com/archive/1/427981/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2006-0190.html - http://secunia.com/advisories/18510 - http://www.securityfocus.com/bid/15729 - http://www.securityfocus.com/archive/1/428028/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2006:018 - http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=bbbe80cdaf72a75a463aff9551e60b31e2f69061%3Bhp=f841bde30c18493a94fd5d522b84724a8eb82a4a%3Bhb=4ea6a8046bb49d
=blobdiff%3Bh=bbbe80cdaf72a75a463aff9551e60b31e2f69061%3Bhp=f841bde30c18493a94fd5d522b84724a8eb82a4a%3Bhb=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d%3Bf=net/ipv6/ip6_flowlabel.c - http://www.mandriva.com/security/advisories?name=MDKSA-2006:072 - http://secunia.com/advisories/17918 - http://www.debian.org/security/2006/dsa-1017 - http://secunia.com/advisories/19374 - https://usn.ubuntu.com/231-1/ - http://www.redhat.com/support/errata/RHSA-2006-0191.html - http://secunia.com/advisories/18562
CVE ID: CVE-2005-3807 State: PUBLISHED Published: 2005-11-25T21:00:00 Last Updated: 2024-08-07T23:24:36.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a denial of service (memory exhaustion) via certain Samba activities that cause an fasync entry to be re-allocated by the fcntl_setlease function after the fasync queue has already been cleaned by the locks_delete_lock function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17917 - http://www.securityfocus.com/advisories/9806 - http://kernel.org/git/?p=linux/kernel
tp://secunia.com/advisories/17917 - http://www.securityfocus.com/advisories/9806 - http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=dc15ae14e97ee9d5ed740cbb0b94996076d8b37e - http://secunia.com/advisories/18203 - http://www.ubuntulinux.org/usn/usn-231-1 - http://www.securityfocus.com/archive/1/419522/100/0/threaded - http://marc.info/?l=linux-kernel&m=113190437101622&w=2 - http://www.securityfocus.com/archive/1/427981/100/0/threaded - http://www.trustix.org/errata/2005/0070 - http://secunia.com/advisories/17918 - http://www.securityfocus.com/bid/15745
CVE ID: CVE-2005-3808 State: PUBLISHED Published: 2005-11-25T21:00:00 Last Updated: 2024-08-07T23:24:36.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the invalidate_inode_pages2_range function in mm/truncate.c in Linux kernel 2.6.11 to 2.6.14 allows local users to cause a denial of service (hang) via 64-bit mmap calls that are not properly handled on a 32-bit system. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18788 - http://www.kernel.org/hg/linux-2.6/?cs=6d5ffbb49406 - http://secunia.com/advisories/19038 - http://www.securityfocus.com/bid/15846 - http://secunia.com/advisories/18203 - http://www.novell.
com/advisories/19038 - http://www.securityfocus.com/bid/15846 - http://secunia.com/advisories/18203 - http://www.novell.com/linux/security/advisories/2006_06_kernel.html - http://seclists.org/lists/linux-kernel/2005/Nov/7839.html - http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:018 - http://www.securityfocus.com/advisories/9852 - https://usn.ubuntu.com/231-1/
CVE ID: CVE-2005-3809 State: PUBLISHED Published: 2005-11-25T21:00:00 Last Updated: 2024-08-07T23:24:36.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nfattr_to_tcp function in ip_conntrack_proto_tcp.c in ctnetlink in Linux kernel 2.6.14 up to 2.6.14.3 allows attackers to cause a denial of service (kernel oops) via an update message without private protocol information, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24114 - http://marc.info/?l=linux-kernel&m=113269476105016&w=2 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.3
CVE ID: CVE-2005-3810 State: PUBLISHED Published: 2005-11-25T21:00:00 Last Updated: 2024-08-07T23:24:36.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: ip_conntrack_proto_icmp.c in ctnetlink in Linux kernel 2.6.14 up to 2.6.14.3 allows attackers to cause a denial of service (kernel oops) via a message without ICMP ID (ICMP_ID) information, which leads to a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=linux-kernel&m=113269476307795&w=2 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.3
CVE ID: CVE-2005-3811 State: PUBLISHED Published: 2005-11-25T22:00:00 Last Updated: 2024-08-07T23:24:36.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16665 - http://www.securityfocus.com/bid/15493/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/23132 - http://www.osvdb.org/20925 - http://secunia.com/secunia_research/2005-58/advisory/ - http://archives.neohapsis.com/
32 - http://www.osvdb.org/20925 - http://secunia.com/secunia_research/2005-58/advisory/ - http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0580.html - http://securityreason.com/securityalert/195
CVE ID: CVE-2005-3812 State: PUBLISHED Published: 2005-11-26T02:00:00 Last Updated: 2024-08-07T23:24:36.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: freeFTPd 1.0.10 allows remote authenticated users to cause a denial of service (null dereference and crash) via a PORT command with missing arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2580 - http://www.securityfocus.com/archive/1/417602/30/0/threaded - http://www.securityfocus.com/bid/15557 - http://secunia.com/advisories/17737
CVE ID: CVE-2005-3813 State: PUBLISHED Published: 2005-11-26T02:00:00 Last Updated: 2024-08-07T23:24:36.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: IMAP service (meimaps.exe) of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to cause a denial of service (application crash) by using RENAME with a non-existent mailbox, a different vulnerability than CVE-2005-3690. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/205 - http://marc.info/?l=full-disclosure&m=113285451031500&w=2 - http://www.securityfocus.com/archive/1/417589/30/0/threaded - http://www.securityfocus.com/bid/15556 - htt
1031500&w=2 - http://www.securityfocus.com/archive/1/417589/30/0/threaded - http://www.securityfocus.com/bid/15556 - http://securitytracker.com/id?1015268 - http://zur.homelinux.com/Advisories/MailEnableImapDos.txt - http://secunia.com/advisories/17740 - http://www.osvdb.org/21109 - http://www.vupen.com/english/advisories/2005/2579
CVE ID: CVE-2005-3814 State: PUBLISHED Published: 2005-11-26T02:00:00 Last Updated: 2024-08-07T23:24:36.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SmartPPC Pro allow remote attackers to inject arbitrary web script or HTML via the username parameter in (1) directory.php, (2) frames.php, and (3) search.php. Additional Analyst Notes: - CVE Program Container: References: - http://nightmaresecurity.net/index.php?showtopic=1015 - http://www.addict3d.org/index.php?page=viewarticle&type=security&ID=5359 - http://securitytracker.com/id?1015259 - http://www.vupen.com/english/advisories/2005/2581 - http://www.securityfocus.com/
ttp://securitytracker.com/id?1015259 - http://www.vupen.com/english/advisories/2005/2581 - http://www.securityfocus.com/bid/15567 - http://www.osvdb.org/21092 - http://secunia.com/advisories/17736 - http://www.osvdb.org/21091 - http://www.osvdb.org/21090
CVE ID: CVE-2005-3815 State: PUBLISHED Published: 2005-11-26T02:00:00 Last Updated: 2024-08-07T23:24:36.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forum.php in Orca Forum 4.3b and earlier allows remote attackers to execute arbitrary SQL commands via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15565 - http://www.osvdb.org/21085 - http://secunia.com/advisories/17721 - http://pridels0.blogspot.com/2005/11/orca-forum-43x-msg-sql-inj.html - http://www.vupen.com/english/advisories/2005/2572
CVE ID: CVE-2005-3816 State: PUBLISHED Published: 2005-11-26T02:00:00 Last Updated: 2024-08-07T23:24:36.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in forum.php in freeForum 1.1 and earlier and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter or (2) thread parameter in thread mode. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015269 - http://pridels0.blogspot.com/2005/11/freeforum-1x-cat-and-thread-sql-inj.html - http://www.vupen.com/english/advisories/2005/2571 - http://www.osvdb.org/21086 - http://secunia.com/advisories/17720 - http://www.s
vupen.com/english/advisories/2005/2571 - http://www.osvdb.org/21086 - http://secunia.com/advisories/17720 - http://www.securityfocus.com/bid/15559
CVE ID: CVE-2005-3817 State: PUBLISHED Published: 2005-11-26T02:00:00 Last Updated: 2024-08-07T23:24:36.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter in search_result.php, (2) sbres_id parameter in review.php, (3) cid parameter in browsecats.php, (4) h_id parameter in email.php, and (5) an unspecified parameter to the search module. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2557 - http://pridels0.blogspot.com/2005/11/web-host-directory
eferences: - http://www.vupen.com/english/advisories/2005/2557 - http://pridels0.blogspot.com/2005/11/web-host-directory-script-multiple.html - http://www.osvdb.org/21079 - http://www.securityfocus.com/bid/15561 - http://www.osvdb.org/21081 - http://secunia.com/advisories/17724 - http://www.osvdb.org/21082 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23208 - http://www.osvdb.org/21080 - http://www.osvdb.org/21083
CVE ID: CVE-2005-3818 State: PUBLISHED Published: 2005-11-26T02:00:00 Last Updated: 2024-08-07T23:24:36.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) various input fields, including the contact, lead, and first or last name fields, (2) the record parameter in a DetailView action in the Leads module for index.php, (3) the $_SERVER['PHP_SELF'] variable, which is used in multiple locations such as index.php, and (4) aggregated RSS feeds in the RSS aggregation module. Additional Analyst Notes: - CVE Program Container: References
nd (4) aggregated RSS feeds in the RSS aggregation module. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2569 - http://www.hardened-php.net/advisory_232005.105.html - http://www.securityfocus.com/bid/15562 - http://securitytracker.com/id?1015271 - http://www.osvdb.org/21228 - http://www.securityfocus.com/archive/1/417730/30/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/23363 - http://www.osvdb.org/21227 - http://secunia.com/advisories/17693 - http://www.osvdb.org/21230 - http://www.osvdb.org/21229 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23362
CVE ID: CVE-2005-3819 State: PUBLISHED Published: 2005-11-26T02:00:00 Last Updated: 2024-08-07T23:24:36.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary SQL commands and bypass authentication via the (1) user_name and (2) date parameter in the HelpDesk module. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2569 - http://www.hardened-php.net/advisory_232005.105.html - http://www.securityfocus.com/bid/15562 - http://securitytracker.com/id?1015271 - http://www.securityfocus.com/archive/1/417730/30/0/threaded
ocus.com/bid/15562 - http://securitytracker.com/id?1015271 - http://www.securityfocus.com/archive/1/417730/30/0/threaded - http://secunia.com/advisories/17693 - http://www.osvdb.org/21225
CVE ID: CVE-2005-3820 State: PUBLISHED Published: 2005-11-26T02:00:00 Last Updated: 2024-08-07T23:24:36.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in index.php in vTiger CRM 4.2 and earlier allow remote attackers to read or include arbitrary files, an ultimately execute arbitrary PHP code, via .. (dot dot) and null byte ("%00") sequences in the (1) module parameter and (2) action parameter in the Leads module, as also demonstrated by injecting PHP code into log messages and accessing the log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/417711/30/0/threaded - http
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/417711/30/0/threaded - http://www.securityfocus.com/bid/15569 - http://www.vupen.com/english/advisories/2005/2569 - http://www.hardened-php.net/advisory_232005.105.html - http://www.securityfocus.com/bid/15562 - http://securitytracker.com/id?1015271 - http://www.securityfocus.com/archive/1/417730/30/0/threaded - http://securitytracker.com/id?1015274 - http://marc.info/?l=full-disclosure&m=113290708121951&w=2 - http://secunia.com/advisories/17693
CVE ID: CVE-2005-3821 State: PUBLISHED Published: 2005-11-26T02:00:00 Last Updated: 2024-08-07T23:24:36.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in vTiger CRM 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via multiple vectors, including the account name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/417711/30/0/threaded - http://www.securityfocus.com/bid/15569 - http://www.vupen.com/english/advisories/2005/2569 - http://securitytracker.com/id?1015274 - http://marc.info/?l=full-disclosure&m=113290708121951&w=2 - http://www.osvdb.org/21232 -
ecuritytracker.com/id?1015274 - http://marc.info/?l=full-disclosure&m=113290708121951&w=2 - http://www.osvdb.org/21232 - http://secunia.com/advisories/17693
CVE ID: CVE-2005-3822 State: PUBLISHED Published: 2005-11-26T02:00:00 Last Updated: 2024-08-07T23:24:36.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username in the login form or (2) record parameter, as demonstrated in the EditView action for the Contacts module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/417711/30/0/threaded - http://www.securityfocus.com/bid/15569 - http://www.vupen.com/english/advisories/2005/2569 - http://securityreason.com/securityalert/203 - http://secur
d/15569 - http://www.vupen.com/english/advisories/2005/2569 - http://securityreason.com/securityalert/203 - http://securitytracker.com/id?1015274 - http://marc.info/?l=full-disclosure&m=113290708121951&w=2 - http://secunia.com/advisories/17693
CVE ID: CVE-2005-3823 State: PUBLISHED Published: 2005-11-26T02:00:00 Last Updated: 2024-08-07T23:24:36.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Users module in vTiger CRM 4.2 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary file in the templatename parameter, which is passed to the eval function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/417711/30/0/threaded - http://www.securityfocus.com/bid/15569 - http://www.vupen.com/english/advisories/2005/2569 - http://securitytracker.com/id?1015274 - http://marc.info/?l=full-disclosure&m=113290708121951&w=2 - http://secunia.com/a
http://securitytracker.com/id?1015274 - http://marc.info/?l=full-disclosure&m=113290708121951&w=2 - http://secunia.com/advisories/17693
CVE ID: CVE-2005-3824 State: PUBLISHED Published: 2005-11-26T02:00:00 Last Updated: 2024-08-07T23:24:36.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: The uploads module in vTiger CRM 4.2 and earlier allows remote attackers to upload arbitrary files, such as PHP files, via the add2db action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/417711/30/0/threaded - http://www.securityfocus.com/bid/15569 - http://www.vupen.com/english/advisories/2005/2569 - http://securitytracker.com/id?1015274 - http://marc.info/?l=full-disclosure&m=113290708121951&w=2 - http://secunia.com/advisories/17693
CVE ID: CVE-2005-3825 State: PUBLISHED Published: 2005-11-26T02:00:00 Last Updated: 2024-08-07T23:24:36.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Comdev Vote Caster 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the campaign_id parameter in a result action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17672 - http://www.vupen.com/english/advisories/2005/2573 - http://www.securityfocus.com/bid/15563 - http://www.osvdb.org/21087 - http://pridels0.blogspot.com/2005/11/vote-caster-3x-sql-inj-vuln.html
CVE ID: CVE-2005-3826 State: PUBLISHED Published: 2005-11-26T02:00:00 Last Updated: 2024-08-07T23:24:36.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Ezyhelpdesk 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) edit_id, (2) faq_id, and (3) c_id parameters in a query string, and (4) the search engine, possibly involving the search_string parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/11/ezyhelpdesk-multiple-sql-inj.html - http://www.osvdb.org/21075 - http://www.osvdb.org/21076 - http://www.vupen.com/english/advisories/2005/2560 - http://www.securit
ww.osvdb.org/21075 - http://www.osvdb.org/21076 - http://www.vupen.com/english/advisories/2005/2560 - http://www.securityfocus.com/bid/15553 - http://secunia.com/advisories/17696
CVE ID: CVE-2005-3827 State: PUBLISHED Published: 2005-11-26T19:00:00 Last Updated: 2024-08-07T23:24:36.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in product_cat in AgileBill 1.4.92 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17723 - http://www.vupen.com/english/advisories/2005/2591 - http://securitytracker.com/id?1015272 - http://pridels0.blogspot.com/2005/11/agilebill-14x-id-sql-injection.html - http://www.osvdb.org/21103 - http://www.securityfocus.com/bid/15572
CVE ID: CVE-2005-3828 State: PUBLISHED Published: 2005-11-26T19:00:00 Last Updated: 2024-08-07T23:24:36.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21096 - http://secunia.com/advisories/17732 - http://pridels0.blogspot.com/2005/11/activecampaign-knowledgebuilder-vuln.html - http://www.vupen.com/english/advisories/2005/2587
CVE ID: CVE-2005-3829 State: PUBLISHED Published: 2005-11-26T19:00:00 Last Updated: 2024-08-07T23:24:36.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an invalid category parameter, which causes a large number of SQL queries to be processed. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17732 - http://pridels0.blogspot.com/2005/11/activecampaign-knowledgebuilder-vuln.html - http://www.vupen.com/english/advisories/2005/2587 - http://www.osvdb.org/21098
CVE ID: CVE-2005-3830 State: PUBLISHED Published: 2005-11-26T19:00:00 Last Updated: 2024-08-07T23:24:36.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in ActiveCampaign SupportTrio 1.4 and earlier allows remote attackers to read or include arbitrary files via the page parameter, possibly due to a directory traversal vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21101 - http://secunia.com/advisories/17731 - http://pridels0.blogspot.com/2005/11/activecampaign-supporttrio-local-file.html - http://www.vupen.com/english/advisories/2005/2588
CVE ID: CVE-2005-3831 State: PUBLISHED Published: 2005-11-26T19:00:00 Last Updated: 2024-08-07T23:24:36.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in (1) CxZIP60.dll and (2) CxZIP60u.dll, as used in SpeedProject products including (a) ZipStar 5.0 Build 4285, (b) Squeez 5.0 Build 4285, and (c) SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive containing a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2005-60/advisory - http://securitytracker.com/id?1015265 - http://www.vupen.com/english/advisories/2