Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
t Notes: - CVE Program Container: References: - http://secunia.com/advisories/15549 - http://www.debian.org/security/2005/dsa-810 - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://secunia.com/advisories/15553 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202 - http://secunia.com/advisories/19823 - http://www.redhat.com/support/errata/RHSA-2005-587.html - http://www.vupen.com/english/advisories/2005/1075 - http://www.redhat.com/support/errata/RHSA-2005-601.html - http://secunia.com/advisories/15551 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100107 - https://oval.cisecurity.org/repository/search/definition/oval%
/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100107 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1415 - http://www.novell.com/linux/security/advisories/2005_45_mozilla.html - http://www.securityfocus.com/bid/14242 - http://www.redhat.com/support/errata/RHSA-2005-586.html - http://www.mozilla.org/security/announce/mfsa2005-52.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10712 - http://www.novell.com/linux/security/advisories/2006_04_25.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21332
CVE ID: CVE-2005-2267 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:48.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary code by using standalone applications such as Flash and QuickTime to open a javascript: URL, which is run in the context of the previous page, and may lead to code execution if the standalone application loads a privileged chrome: URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://www.ciac.org/ciac/bulletins/p-252.shtml - http://securitytrac
ell.com/linux/security/advisories/2005_18_sr.html - http://www.ciac.org/ciac/bulletins/p-252.shtml - http://securitytracker.com/id?1014469 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1172 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202 - http://www.redhat.com/support/errata/RHSA-2005-587.html - http://www.mozilla.org/security/announce/mfsa2005-53.html - http://www.vupen.com/english/advisories/2005/1075 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11334 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100006 - http://www.novell.com/linux/security/advis
urity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100006 - http://www.novell.com/linux/security/advisories/2005_45_mozilla.html - http://www.securityfocus.com/bid/14242 - https://bugzilla.mozilla.org/show_bug.cgi?id=298255 - http://www.redhat.com/support/errata/RHSA-2005-586.html - http://secunia.com/advisories/16043 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1073
CVE ID: CVE-2005-2268 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:48.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-810 - http://secunia.com/advisories/15489 - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://www.mozilla.org/securi
a.com/advisories/15489 - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://www.mozilla.org/security/announce/mfsa2005-54.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1313 - http://www.redhat.com/support/errata/RHSA-2005-587.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100005 - http://www.vupen.com/english/advisories/2005/1075 - http://www.novell.com/linux/security/advisories/2005_45_mozilla.html - http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/ - http://www.securityfocus.com/bid/14242 - ht
l - http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/ - http://www.securityfocus.com/bid/14242 - http://www.redhat.com/support/errata/RHSA-2005-586.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1268 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10517
CVE ID: CVE-2005-2269 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:47.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as demonstrated using an XHTML document with IMG tags with custom properties ("XHTML node spoofing"). Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-810 - http://www.novell.com/linux/s
otes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-810 - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://www.ciac.org/ciac/bulletins/p-252.shtml - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202 - http://secunia.com/advisories/19823 - http://www.redhat.com/support/errata/RHSA-2005-587.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100005 - http://secunia.com/advisories/16059 - http://secunia.com/advisories/16044 - http://www.vupen.com/english/advisories/2005/1075 - https://bugzilla.mozilla.org/show_bug.cgi?id=298892 - http://www.redhat.com/support/errata/RHSA-2005-601.html -
/1075 - https://bugzilla.mozilla.org/show_bug.cgi?id=298892 - http://www.redhat.com/support/errata/RHSA-2005-601.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100004 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A729 - http://www.networksecurity.fi/advisories/netscape-multiple-issues.html - http://www.novell.com/linux/security/advisories/2005_45_mozilla.html - http://www.mozilla.org/security/announce/mfsa2005-55.html - http://www.securityfocus.com/bid/14242 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100011 - https://oval.cisecurity.org/repository/search/defi
g/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100011 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9777 - http://www.redhat.com/support/errata/RHSA-2005-586.html - http://secunia.com/advisories/16043 - http://www.novell.com/linux/security/advisories/2006_04_25.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1258
CVE ID: CVE-2005-2270 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:48.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to execute arbitrary code by navigating the prototype chain to reach a privileged object. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-810 - https://bugzilla.mozilla.org/show_bug.cgi?id=294795 - http://www.novell.com/linux/security/advisories/2005_18_sr.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11751 - ht
ries/2005_18_sr.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11751 - http://www.mozilla.org/security/announce/mfsa2005-56.html - http://www.ciac.org/ciac/bulletins/p-252.shtml - https://bugzilla.mozilla.org/show_bug.cgi?id=295011 - https://bugzilla.mozilla.org/show_bug.cgi?id=294799 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160202 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A550 - http://secunia.com/advisories/19823 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A817 - http://www.redhat.com/support/errata/RHSA-2005-587.html - http://secunia.com/ad
tion/oval%3Aorg.mitre.oval%3Adef%3A817 - http://www.redhat.com/support/errata/RHSA-2005-587.html - http://secunia.com/advisories/16059 - http://www.vupen.com/english/advisories/2005/1075 - http://www.redhat.com/support/errata/RHSA-2005-601.html - http://securitytracker.com/id?1014470 - http://www.novell.com/linux/security/advisories/2005_45_mozilla.html - http://www.kb.cert.org/vuls/id/652366 - http://www.securityfocus.com/bid/14242 - http://www.redhat.com/support/errata/RHSA-2005-586.html - http://secunia.com/advisories/16043 - http://www.novell.com/linux/security/advisories/2006_04_25.html - https://bugzilla.mozilla.org/show_bug.cgi?id=296397 - https://oval.cisecurity.org/repository/search
es/2006_04_25.html - https://bugzilla.mozilla.org/show_bug.cgi?id=296397 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100003
CVE ID: CVE-2005-2271 State: PUBLISHED Published: 2005-07-13T04:00:00Z Last Updated: 2024-09-16T17:38:57.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: iCab 2.9.8 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/ - http://secunia.com/advisories/15477
CVE ID: CVE-2005-2272 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:48.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17813 - http://www.vupen.com/english/advisories/2005/2659 - http://www.osvdb.org/17397 - http://securitytracker.com/id?1015294 - http://docs.info.apple.com/article.html?a
05/2659 - http://www.osvdb.org/17397 - http://securitytracker.com/id?1015294 - http://docs.info.apple.com/article.html?artnum=302847 - http://secunia.com/advisories/15474 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21070 - http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/ - http://secunia.com/secunia_research/2005-12/advisory/ - http://www.securityfocus.com/bid/14011
CVE ID: CVE-2005-2273 State: PUBLISHED Published: 2005-07-13T04:00:00 Last Updated: 2024-08-07T22:22:49.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 7.x and 8 before 8.01 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2005-8/ - http://secunia.com/advisories/15488 - http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/
CVE ID: CVE-2005-2274 State: PUBLISHED Published: 2005-07-13T04:00:00Z Last Updated: 2024-09-16T23:00:25.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15491 - http://secunia.com/advisories/15492 - http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/ - http://secunia.com/secunia_research/2005-9/
2 - http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/ - http://secunia.com/secunia_research/2005-9/advisory/ - http://www.microsoft.com/technet/security/advisory/902333.mspx
CVE ID: CVE-2005-2276 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:22:48.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded javascript URI (e.g. "j&#X41vascript" in an IMG tag. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112181451014783&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21421 - http://www.osvdb.org/18064 - http://secunia.com/advisories/16098/ - http://support.novell.com/cgi-bin/se
ilities/21421 - http://www.osvdb.org/18064 - http://secunia.com/advisories/16098/ - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098301.htm - http://www.securityfocus.com/bid/14310 - http://www.infobyte.com.ar/adv/ISR-11.html - http://securitytracker.com/id?1014515
CVE ID: CVE-2005-2277 State: PUBLISHED Published: 2005-07-15T04:00:00 Last Updated: 2024-08-07T22:22:48.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command. Additional Analyst Notes: - CVE Program Container: References: - http://affix.sourceforge.net/affix_212_sec.patch - http://www.securityfocus.com/bid/14232 - http://www.digitalmunition.com/DMA%5B2005-0712b%5D.txt - http://affix.sourceforge.net/affix_320_sec.patch - http://marc.info/?l=bugtraq&m=112119962704397&w=2 - http://www.debian.org/security/20
rceforge.net/affix_320_sec.patch - http://marc.info/?l=bugtraq&m=112119962704397&w=2 - http://www.debian.org/security/2005/dsa-762
CVE ID: CVE-2005-2278 State: PUBLISHED Published: 2005-07-17T04:00:00 Last Updated: 2024-08-07T22:22:49.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrary code via the status command with a long mailbox name. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112127188609993&w=2 - http://www.coresecurity.com/common/showdoc.php?idx=467&idxseccion=10
CVE ID: CVE-2005-2279 State: PUBLISHED Published: 2005-07-17T04:00:00 Last Updated: 2024-08-07T22:22:49.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ONS 15216 Optical Add/Drop Multiplexer (OADM) running firmware 2.2.2 and earlier allows remote attackers to cause a denial of service (management plane session loss) via crafted telnet data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14246 - http://secunia.com/advisories/16073 - http://www.osvdb.org/17863 - http://www.cisco.com/warp/public/707/cisco-sa-20050713-ons.shtml - http://securitytracker.com/id?1014475
CVE ID: CVE-2005-2280 State: PUBLISHED Published: 2005-07-17T04:00:00 Last Updated: 2024-08-07T22:22:48.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Security Agent (CSA) 4.5 allows remote attackers to cause a denial of service (system crash) via a crafted IP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20050713-csa.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/21344
CVE ID: CVE-2005-2281 State: PUBLISHED Published: 2005-07-17T04:00:00Z Last Updated: 2024-09-16T23:06:10.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebEOC before 6.0.2 uses a weak encryption scheme for passwords, which makes it easier for attackers to crack passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/JGEI-6BWQDQ - http://www.kb.cert.org/vuls/id/491770
CVE ID: CVE-2005-2282 State: PUBLISHED Published: 2005-07-17T04:00:00 Last Updated: 2024-08-07T22:22:49.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebEOC before 6.0.2 allow remote attackers to inject arbitrary web script and HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/JGEI-6BVST4 - http://www.kb.cert.org/vuls/id/138538
CVE ID: CVE-2005-2283 State: PUBLISHED Published: 2005-07-17T04:00:00Z Last Updated: 2024-09-17T01:22:11.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebEOC before 6.0.2 does not properly restrict the size of an uploaded file, which allows remote authenticated users to cause a denial of service (system and database resource consumption) via a large file. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/JGEI-6BWLER - http://www.kb.cert.org/vuls/id/956762
CVE ID: CVE-2005-2284 State: PUBLISHED Published: 2005-07-17T04:00:00Z Last Updated: 2024-09-17T02:16:53.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in WebEOC before 6.0.2 allow remote attackers to modify SQL statements via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/JGEI-6C8Q27 - http://www.kb.cert.org/vuls/id/372797
CVE ID: CVE-2005-2285 State: PUBLISHED Published: 2005-07-17T04:00:00 Last Updated: 2024-08-07T22:22:48.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebEOC before 6.0.2 stores sensitive information in locations such as URIs, web pages, and configuration files, which allows remote attackers to obtain information such as Usernames, Passwords, Emergency information, medical information, and system configuration. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/165290 - http://www.kb.cert.org/vuls/id/JGEI-6BWPXL
CVE ID: CVE-2005-2286 State: PUBLISHED Published: 2005-07-17T04:00:00Z Last Updated: 2024-09-17T01:51:41.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebEOC before 6.0.2 does not properly check user authorization, which allows remote attackers to gain privileges via a direct request to a resource. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/JGEI-6BWLWG - http://www.kb.cert.org/vuls/id/258834
CVE ID: CVE-2005-2287 State: PUBLISHED Published: 2005-07-17T04:00:00 Last Updated: 2024-08-07T22:22:48.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to cause a denial of service (application crash) via a large TCP packet with a leading space, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112122500308722&w=2
CVE ID: CVE-2005-2288 State: PUBLISHED Published: 2005-07-17T04:00:00 Last Updated: 2024-08-07T22:22:48.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHPCounter 7.2 allows remote attackers to inject arbitrary web script or HTML via the EpochPrefix parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112129495128834&w=2 - http://secunia.com/advisories/15816 - http://www.securityfocus.com/bid/14256 - http://securitytracker.com/id?1014478
CVE ID: CVE-2005-2289 State: PUBLISHED Published: 2005-07-17T04:00:00 Last Updated: 2024-08-07T22:22:49.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPCounter 7.2 allows remote attackers to obtain sensitive information via a direct request to prelims.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112129495128834&w=2 - http://secunia.com/advisories/15816 - http://securitytracker.com/id?1014478
CVE ID: CVE-2005-2290 State: PUBLISHED Published: 2005-07-17T04:00:00 Last Updated: 2024-08-07T22:22:49.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: wps_shop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and (2) cat variables. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014480 - http://marc.info/?l=bugtraq&m=112128870110418&w=2 - http://secunia.com/advisories/15780 - http://www.securityfocus.com/bid/14245
CVE ID: CVE-2005-2291 State: PUBLISHED Published: 2005-07-17T04:00:00 Last Updated: 2024-08-07T22:22:47.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when starting sqlplus, which allows local users to gain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112129082323341&w=2 - http://www.red-database-security.com/advisory/oracle_jdeveloper_passes_plaintext_password.html
CVE ID: CVE-2005-2292 State: PUBLISHED Published: 2005-07-17T04:00:00 Last Updated: 2024-08-07T22:22:48.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and (3) settings.xml, which allows local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_jdeveloper_plaintext_password.html - http://secunia.com/advisories/15991/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/21342 - http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html - http://mar
e.ibmcloud.com/vulnerabilities/21342 - http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html - http://marc.info/?l=bugtraq&m=112129177927502&w=2
CVE ID: CVE-2005-2293 State: PUBLISHED Published: 2005-07-17T04:00:00 Last Updated: 2024-08-07T22:22:48.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/21343 - http://secunia.com/advisories/15991/ - http://marc.info/?l=bugtraq&m=112129452232307&w=2 - http://www.red-database-security.com/advisory/oracle_formsbuilder_temp_file_issue.html - http://www.oracle.com/technology/deploy/se
red-database-security.com/advisory/oracle_formsbuilder_temp_file_issue.html - http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html