Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
gelog.html - http://www.novell.com/linux/security/advisories/2005_25_sr.html - http://www.gentoo.org/security/en/glsa/glsa-200511-07.xml - http://www.securityfocus.com/bid/15270 - http://www.securityfocus.com/archive/1/415487 - http://secunia.com/advisories/17452 - http://www.osvdb.org/20416 - http://www.debian.org/security/2005/dsa-885 - http://secunia.com/advisories/17376
CVE ID: CVE-2005-3411 State: PUBLISHED Published: 2005-11-01T20:00:00 Last Updated: 2024-08-07T23:10:08.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in post.asp in Snitz Forums 2000 3.4.05 allows remote attackers to inject arbitrary web script or HTML via the type parameter in a Topic method. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20421 - http://forum.snitz.com/forum/topic.asp?TOPIC_ID=60011 - http://www.vupen.com/english/advisories/2005/2261 - http://www.securityfocus.com/bid/15241 - http://secunia.com/advisories/17385
CVE ID: CVE-2005-3412 State: PUBLISHED Published: 2005-11-01T20:00:00 Last Updated: 2024-08-07T23:10:08.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via a Post Reply to a topic, in which the reply contains a javascript: URL in an <img> tag. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=113083841308736&w=2 - http://www.securityfocus.com/bid/15257 - http://securityreason.com/securityalert/136 - http://www.securityfocus.com/archive/1/415400/30/0/threaded - http://www.h4cky0u.org/advisories/HYSA-
ecurityalert/136 - http://www.securityfocus.com/archive/1/415400/30/0/threaded - http://www.h4cky0u.org/advisories/HYSA-2005-009-elite-forum.txt - http://www.vupen.com/english/advisories/2005/2260 - http://secunia.com/advisories/17341
CVE ID: CVE-2005-3413 State: PUBLISHED Published: 2005-11-01T20:00:00 Last Updated: 2024-08-07T23:10:08.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in desktop.php in eyeOS 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the motd parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22936 - http://www.osvdb.org/20410 - http://www.securityfocus.com/bid/15255 - http://www.thebillygoatcurse.com/advisories/eyeOS_0.8.4_Multiple.pdf - http://secunia.com/advisories/17105 - http://www.vupen.com/english/advisories/2005/2259
CVE ID: CVE-2005-3414 State: PUBLISHED Published: 2005-11-01T20:00:00 Last Updated: 2024-08-07T23:10:08.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: eyeOS 0.8.4 stores usrinfo.xml under the web document root with insufficient access control, which allows remote attackers to obtain user credentials. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22938 - http://www.securityfocus.com/bid/15256 - http://www.thebillygoatcurse.com/advisories/eyeOS_0.8.4_Multiple.pdf - http://www.osvdb.org/20411 - http://secunia.com/advisories/17105 - http://www.vupen.com/english/advisories/2005/2259
CVE ID: CVE-2005-3415 State: PUBLISHED Published: 2005-11-01T21:00:00 Last Updated: 2024-08-07T23:10:08.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpBB 2.0.17 and earlier allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GET/POST/COOKIE (GPC) variable and a GLOBALS[] variable with the same name, which causes phpBB to unset the GLOBALS[] variable but not the GPC variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22914 - http://marc.info/?l=bugtraq&m=113081113317600&w=2 - http://www.osvdb.org/20386 - http://www.debian.org/security/2005/dsa-
ttp://marc.info/?l=bugtraq&m=113081113317600&w=2 - http://www.osvdb.org/20386 - http://www.debian.org/security/2005/dsa-925 - http://secunia.com/advisories/17366 - http://securityreason.com/securityalert/130 - http://secunia.com/advisories/18098 - http://www.hardened-php.net/advisory_172005.75.html - http://securitytracker.com/id?1015121 - http://www.securityfocus.com/bid/15243
CVE ID: CVE-2005-3416 State: PUBLISHED Published: 2005-11-01T21:00:00 Last Updated: 2024-08-07T23:10:08.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpBB 2.0.17 and earlier, when register_globals is enabled and the session_start function has not been called to handle a session, allows remote attackers to bypass security checks by setting the $_SESSION and $HTTP_SESSION_VARS variables to strings instead of arrays, which causes an array_merge function call to fail. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20413 - http://marc.info/?l=bugtraq&m=113081113317600&w=2 - http://www.debian.org/security/2005/dsa-925 - http://secunia.com/a
- http://marc.info/?l=bugtraq&m=113081113317600&w=2 - http://www.debian.org/security/2005/dsa-925 - http://secunia.com/advisories/17366 - http://securityreason.com/securityalert/130 - http://secunia.com/advisories/18098 - http://www.hardened-php.net/advisory_172005.75.html - http://securitytracker.com/id?1015121 - http://www.securityfocus.com/bid/15243
CVE ID: CVE-2005-3417 State: PUBLISHED Published: 2005-11-01T21:00:00 Last Updated: 2024-08-07T23:10:08.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote attackers to modify global variables and bypass security mechanisms because PHP does not define the associated HTTP_* variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20414 - http://marc.info/?l=bugtraq&m=113081113317600&w=2 - http://www.debian.org/security/2005/dsa-925 - http://secunia.com/advisories/17366 - http://securityreason.com/securityalert/130 - http://secunia.com/advisories/1809
- http://secunia.com/advisories/17366 - http://securityreason.com/securityalert/130 - http://secunia.com/advisories/18098 - http://www.hardened-php.net/advisory_172005.75.html - http://securitytracker.com/id?1015121 - http://www.securityfocus.com/bid/15243
CVE ID: CVE-2005-3418 State: PUBLISHED Published: 2005-11-01T21:00:00 Last Updated: 2024-08-07T23:10:08.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) error_msg parameter to usercp_register.php, (2) forward_page parameter to login.php, and (3) list_cat parameter to search.php, which are not initialized as variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2250 - http://marc.info/?l=bugtraq&m=113081113317600&w=2 - http://www.debian.org/security/2005/dsa-92
sh/advisories/2005/2250 - http://marc.info/?l=bugtraq&m=113081113317600&w=2 - http://www.debian.org/security/2005/dsa-925 - http://secunia.com/advisories/17366 - http://www.osvdb.org/20388 - http://www.osvdb.org/20389 - http://securityreason.com/securityalert/130 - http://secunia.com/advisories/18098 - http://www.hardened-php.net/advisory_172005.75.html - http://www.osvdb.org/20387 - http://securitytracker.com/id?1015121 - http://www.securityfocus.com/bid/15243
CVE ID: CVE-2005-3419 State: PUBLISHED Published: 2005-11-01T21:00:00 Last Updated: 2024-08-07T23:10:08.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in usercp_register.php in phpBB 2.0.17 allows remote attackers to execute arbitrary SQL commands via the signature_bbcode_uid parameter, which is not properly initialized. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2250 - http://marc.info/?l=bugtraq&m=113081113317600&w=2 - http://www.debian.org/security/2005/dsa-925 - http://www.osvdb.org/20390 - http://secunia.com/advisories/17366 - http://securityreason.com/securityalert/130 - http
- http://www.osvdb.org/20390 - http://secunia.com/advisories/17366 - http://securityreason.com/securityalert/130 - http://secunia.com/advisories/18098 - http://www.hardened-php.net/advisory_172005.75.html - http://securitytracker.com/id?1015121 - http://www.securityfocus.com/bid/15243
CVE ID: CVE-2005-3420 State: PUBLISHED Published: 2005-11-01T21:00:00 Last Updated: 2024-08-07T23:10:08.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: usercp_register.php in phpBB 2.0.17 allows remote attackers to modify regular expressions and execute PHP code via the signature_bbcode_uid parameter, as demonstrated by injecting an "e" modifier into a preg_replace statement. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2250 - http://marc.info/?l=bugtraq&m=113081113317600&w=2 - http://www.debian.org/security/2005/dsa-925 - http://secunia.com/advisories/17366 - http://securityreason.com/securityalert/130 - http:/
n.org/security/2005/dsa-925 - http://secunia.com/advisories/17366 - http://securityreason.com/securityalert/130 - http://secunia.com/advisories/18098 - http://www.hardened-php.net/advisory_172005.75.html - http://www.osvdb.org/20391 - http://securitytracker.com/id?1015121 - http://www.securityfocus.com/bid/15243
CVE ID: CVE-2005-3421 State: PUBLISHED Published: 2005-11-01T21:00:00 Last Updated: 2024-08-07T23:10:08.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: estcmd in Hyper Estraier 1.0.1 on Windows systems allows remote attackers to read unauthorized files via a crafted search request for a filename that contains Unicode characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15236 - http://secunia.com/advisories/17379 - http://jvn.jp/jp/JVN%2318282718/index.html - http://securitytracker.com/id?1015119 - http://sourceforge.net/project/shownotes.php?release_id=366565
CVE ID: CVE-2005-3422 State: PUBLISHED Published: 2005-11-01T21:00:00 Last Updated: 2024-08-07T23:10:08.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web script or HTML via the error parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/20398 - http://secunia.com/advisories/17387 - http://www.vupen.com/english/advisories/2005/2252 - http://www.securityfocus.com/bid/15233
CVE ID: CVE-2005-3423 State: PUBLISHED Published: 2005-11-01T22:00:00 Last Updated: 2024-08-07T23:10:08.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via (1) the loginusername parameter or (2) cookies to (a) subdreamer.php, (b) ipb2.php, (c) phpbb2.php, (d) vbulletin2.php, and (e) vbulletin3.php. Additional Analyst Notes: - CVE Program Container: References: - http://rst.void.ru/papers/advisory35.txt - http://www.osvdb.org/20379 - http://www.osvdb.org/20380 - http://www.osvdb.org/20382 - http://www.osvdb.org/20378 - http://www.osvdb.org/20381 - http://secunia.
osvdb.org/20380 - http://www.osvdb.org/20382 - http://www.osvdb.org/20378 - http://www.osvdb.org/20381 - http://secunia.com/advisories/17378 - http://www.securityfocus.com/bid/15238 - http://www.osvdb.org/20384
CVE ID: CVE-2005-3424 State: PUBLISHED Published: 2005-11-01T22:00:00 Last Updated: 2024-08-07T23:10:08.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.5 allows remote attackers to inject arbitrary web script or HTML via 404 error pages, a different vulnerability than CVE-2005-3425. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_28_sr.html - http://www.osvdb.org/20359 - http://www.gnu.org/software/gnump3d/ChangeLog - http://lists.gnu.org/archive/html/gnump3d-users/2005-10/msg00013.html - http://www.vupen.com/english/advisories/2005/2242 - http:
sts.gnu.org/archive/html/gnump3d-users/2005-10/msg00013.html - http://www.vupen.com/english/advisories/2005/2242 - http://www.debian.org/security/2005/dsa-877 - http://www.securityfocus.com/bid/15226 - http://secunia.com/advisories/17351
CVE ID: CVE-2005-3425 State: PUBLISHED Published: 2005-11-01T22:00:00 Last Updated: 2024-08-07T23:10:08.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2005-3424. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_28_sr.html - http://securitytracker.com/id?1015118 - http://secunia.com/advisories/17831 - http://www.gnu.org/software/gnump3d/ChangeLog - http://secunia.com/advisories/17449 - http://www.debian.org/security/2005/ds
://www.gnu.org/software/gnump3d/ChangeLog - http://secunia.com/advisories/17449 - http://www.debian.org/security/2005/dsa-877 - http://www.securityfocus.com/bid/15341 - http://secunia.com/advisories/17351 - http://secunia.com/advisories/17355
CVE ID: CVE-2005-3426 State: PUBLISHED Published: 2005-11-02T00:00:00 Last Updated: 2024-08-07T23:10:08.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco CSS 11500 Content Services Switch (CSS) with SSL termination services allows remote attackers to cause a denial of service (memory corruption and device reload) via a malformed client certificate during SSL session negotiation. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015081 - http://secunia.com/advisories/17260 - http://www.cisco.com/warp/public/707/cisco-sa-20051019-css.shtml - http://securityreason.com/securityalert/99 - http://www.securityfocus.com/bid/15144
CVE ID: CVE-2005-3427 State: PUBLISHED Published: 2005-11-02T00:00:00 Last Updated: 2024-08-07T23:10:08.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Management Center (MC) for IPS Sensors (IPS MC) 2.1 can omit port field values while generating the Cisco IOS IPS configuration file, wich can cause some signatures to be disabled and makes it easier for attackers to escape detection. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22926 - http://www.vupen.com/english/advisories/2005/2266 - http://www.osvdb.org/20444 - http://www.securityfocus.com/bid/15269 - http://www.kb.cert.org/vuls/id/154883 -
005/2266 - http://www.osvdb.org/20444 - http://www.securityfocus.com/bid/15269 - http://www.kb.cert.org/vuls/id/154883 - http://securitytracker.com/id?1015133 - http://www.cisco.com/warp/public/707/cisco-sa-20051101-ipsmc.shtml - http://securityreason.com/securityalert/137 - http://secunia.com/advisories/17397
CVE ID: CVE-2005-3428 State: PUBLISHED Published: 2005-11-02T11:00:00 Last Updated: 2024-08-07T23:10:08.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to inject arbitrary web script or HTML via a message body. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html - http://www.osvdb.org/20488 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22907 - http://securitytracker.com/id?1015117 - http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf - h
tracker.com/id?1015117 - http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf - http://secunia.com/advisories/17240/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1052 - http://marc.info/?l=bugtraq&m=113053680631151&w=2
CVE ID: CVE-2005-3429 State: PUBLISHED Published: 2005-11-02T11:00:00 Last Updated: 2024-08-07T23:10:08.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rockliffe MailSite Express before 6.1.22, with the option to save login information enabled, saves user passwords in plaintext in cookies, which allows local users to obtain passwords by reading the cookie file, or remote attackers to obtain the cookies via cross-site scripting (XSS) vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/22906 - http://securitytracker.com/id?
sclosure/2005-10/0578.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/22906 - http://securitytracker.com/id?1015117 - http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf - http://www.osvdb.org/22682 - http://marc.info/?l=bugtraq&m=113053680631151&w=2
CVE ID: CVE-2005-3430 State: PUBLISHED Published: 2005-11-02T11:00:00 Last Updated: 2024-08-07T23:10:08.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to upload and execute arbitrary script files by giving the files specific extensions, such as (1) .unk, (2) .asa, and possibly (3) .htr and (4) .aspx, which are not filtered like the .asp extension. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/22907 - http://securitytracker.com/id?
sclosure/2005-10/0578.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/22907 - http://securitytracker.com/id?1015117 - http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf - http://secunia.com/advisories/17240/ - http://www.securityfocus.com/bid/15230 - http://marc.info/?l=bugtraq&m=113053680631151&w=2
CVE ID: CVE-2005-3431 State: PUBLISHED Published: 2005-11-02T11:00:00 Last Updated: 2024-08-07T23:10:08.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to read arbitrary files via a full pathname in the AttachPath field of a mail message under composition. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0578.html - http://securityreason.com/securityalert/126 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22908 - http://www.securityfocus.com/bid/15231 - http://securitytracker.com/id?1015
.xforce.ibmcloud.com/vulnerabilities/22908 - http://www.securityfocus.com/bid/15231 - http://securitytracker.com/id?1015117 - http://www.security-assessment.com/Advisories/Rockliffe_Express_Webmail_Vulnerabilities.pdf - http://secunia.com/advisories/17240/ - http://marc.info/?l=bugtraq&m=113053680631151&w=2
CVE ID: CVE-2005-3432 State: PUBLISHED Published: 2005-11-02T11:00:00 Last Updated: 2024-08-07T23:10:08.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: MiniGal 2 (MG2) 0.5.1 allows remote attackers to list password protected images via a request to index.php with the list parameter set to * (wildcard) and the page parameter set to all. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=113063215507210&w=2 - http://www.securityfocus.com/bid/15235 - http://securityreason.com/securityalert/128 - http://secunia.com/advisories/17374/
CVE ID: CVE-2005-3433 State: PUBLISHED Published: 2005-11-02T11:00:00 Last Updated: 2024-08-07T23:10:08.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Mirabilis ICQ 2003a allows user-assisted attackers to execute arbitrary code by convincing a user to enter long strings into the First Name and Last Name fields. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=113063323109149&w=2
CVE ID: CVE-2005-3434 State: PUBLISHED Published: 2005-11-02T11:00:00 Last Updated: 2024-08-07T23:10:08.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Archilles Newsworld before 1.5.0-rc1 stores (1) account.nwd and (2) session.nwd under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames, hashed passwords, and session IDs, and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22860 - http://secunia.com/advisories/17310/ - http://marc.info/?l=bugtraq&m=113018731120709&w=2 - https://exchange.xforce.ibmcloud.com/vulnerab
om/advisories/17310/ - http://marc.info/?l=bugtraq&m=113018731120709&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22859
CVE ID: CVE-2005-3435 State: PUBLISHED Published: 2005-11-02T11:00:00 Last Updated: 2024-08-07T23:10:08.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin_news.php in Archilles Newsworld up to 1.3.0 allows attackers to bypass authentication by obtaining the password hash for another user, for example through another Newsworld vulnerability, and specifying the hash in the pwd argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22860 - http://secunia.com/advisories/17310/ - http://marc.info/?l=bugtraq&m=113018731120709&w=2
CVE ID: CVE-2005-3436 State: PUBLISHED Published: 2005-11-02T11:00:00 Last Updated: 2024-08-07T23:10:08.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Nuked-Klan 1.7 allows remote attackers to inject arbitrary web script or HTML via the (1) Search module, (2) certain edit fields in Guestbook, (3) the title in the Forum module, and (4) Textbox. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2189 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22873 - http://secunia.com/advisories/17304/ - http://securityreason.com/securityalert/104 - http://marc.info/?l=bugtraq&m=
73 - http://secunia.com/advisories/17304/ - http://securityreason.com/securityalert/104 - http://marc.info/?l=bugtraq&m=112991421210577&w=2 - http://www.securityfocus.com/bid/15166
CVE ID: CVE-2005-3437 State: PUBLISHED Published: 2005-11-02T11:00:00 Last Updated: 2024-08-07T23:10:08.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PL/SQL component in Oracle Database Server 9i up to 10.1.0.4 has unknown impact and attack vectors, aka Oracle Vuln# DB01. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html - http://www.us-cert.gov/cas/techalerts/TA05-292A.html - http://www.securityfocus.com/bid/15134 - http://www.kb.cert.org/vuls/id/210524 - http://secunia.com/advisories/17250
CVE ID: CVE-2005-3438 State: PUBLISHED Published: 2005-11-02T11:00:00 Last Updated: 2024-08-07T23:10:08.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle Database Server 9i up to 10.1.0.4.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB04 in Change Data Capture; (2) DB06 in Data Guard Logical Standby; (3) DB10 in Locale; (4) DB12 in Materialized Views; (5) DB13 in Objects Extension; (6) DB15 in Oracle Label Security; (7) DB27 in Security, possibly due to a buffer overflow in sys.pbsde.init; and (8) DB28 and (9) DB29 in Workspace Manager. Additional Analyst Notes: - CVE Program Container: References: - http://www.or