Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
g00520.html - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=8da3e25b2c4c1f305fd85428d3a9eb62b543bfba%3Bhp=ecade4893a139cc35d4fe345ce70242ede5358c4%3Bhb=a4f1bac62564049ea4718c4624b0fadc9f597c84%3Bf=net/xfrm/xfrm_user.c - http://www.debian.org/security/2005/dsa-921 - http://www.redhat.com/support/errata/RHSA-2005-514.html - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a4f1bac62564049ea4718c4624b0fadc9f597c84 - http://secunia.com/advisories/17002 - http://secunia.com/advisories/17826 - http://secunia.com/advisories/16298 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://www.redhat.com/support/er
a.com/advisories/16298 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2005-663.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://www.vupen.com/english/advisories/2005/1878
CVE ID: CVE-2005-2457 State: PUBLISHED Published: 2005-08-22T04:00:00 Last Updated: 2024-08-07T22:30:01.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: The driver for compressed ISO file systems (zisofs) in the Linux kernel before 2.6.12.5 allows local users and remote attackers to cause a denial of service (kernel crash) via a crafted compressed ISO file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_50_kernel.html - https://usn.ubuntu.com/169-1/ - http://secunia.com/advisories/16500 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://secunia.com/advisories/19369 - http://ww
6500 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://secunia.com/advisories/19369 - http://www.debian.org/security/2006/dsa-1018 - http://www.securityfocus.com/bid/14614 - http://www.securityfocus.com/archive/1/419522/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 - http://secunia.com/advisories/17826 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5 - http://secunia.com/advisories/17918 - http://www.debian.org/security/2006/dsa-1017 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://secunia.com/advisories/16355/ - http://secunia.com/advisories/19374
CVE ID: CVE-2005-2458 State: PUBLISHED Published: 2005-08-22T04:00:00 Last Updated: 2024-08-07T22:29:59.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 allows remote attackers to cause a denial of service (kernel crash) via a compressed file with "improper tables". Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_50_kernel.html - http://secunia.com/advisories/18684 - http://secunia.com/advisories/18056 - https://usn.ubuntu.com/169-1/ - http://secunia.com/advisories/16500 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http
om/169-1/ - http://secunia.com/advisories/16500 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://www.redhat.com/support/errata/RHSA-2006-0144.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10785 - http://www.redhat.com/support/errata/RHSA-2006-0101.html - http://secunia.com/advisories/18059 - http://www.securityfocus.com/archive/1/419522/100/0/threaded - http://www.securityfocus.com/archive/1/428058/100/0/threaded - http://www.debian.org/security/2005/dsa-922 - http://www.redhat.com/support/errata/RHSA-2006-0190.html - http://secunia.com/advisories/18510 - http://sources.redhat.com/ml/bug-gnu-utils/1999-06/msg00183.html
-2006-0190.html - http://secunia.com/advisories/18510 - http://sources.redhat.com/ml/bug-gnu-utils/1999-06/msg00183.html - http://www.securityfocus.com/archive/1/428028/100/0/threaded - http://www.debian.org/security/2005/dsa-921 - http://secunia.com/advisories/17826 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5 - http://secunia.com/advisories/17918 - http://www.securityfocus.com/archive/1/427980/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://www.securityfocus.com/bid/14719 - http://secunia.com/advisories/16355/ - http://secunia.com/advisories/19252 - http://www.redhat.com/support/errata/RHSA-2006-0191.html
CVE ID: CVE-2005-2459 State: PUBLISHED Published: 2005-08-22T04:00:00 Last Updated: 2024-08-07T22:30:01.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote attackers to cause a denial of service (kernel crash) via a certain compressed file that leads to a null pointer dereference, a different vulnerability than CVE-2005-2458. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_50_kernel.html - http://secunia.com/advisories/18056 - https://usn.ubuntu.com/169-1/ - http://secunia.c
/advisories/2005_50_kernel.html - http://secunia.com/advisories/18056 - https://usn.ubuntu.com/169-1/ - http://secunia.com/advisories/16500 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 - http://secunia.com/advisories/18059 - http://www.securityfocus.com/archive/1/419522/100/0/threaded - http://www.debian.org/security/2005/dsa-922 - http://www.debian.org/security/2005/dsa-921 - http://secunia.com/advisories/17826 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5 - http://www.securityfocus.com/bid/14720 - http://secunia.com/advisories/17918 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://secunia.com/advisories/16355/ - http://bugs.gent
ttp://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://secunia.com/advisories/16355/ - http://bugs.gentoo.org/show_bug.cgi?id=94584
CVE ID: CVE-2005-2460 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T22:29:59.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter or (2) name field when entering a session or sending a message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14425 - http://www.osvdb.org/18397 - http://marc.info/?l=bugtraq&m=112274359718863&w=2 - http://secunia.com/advisories/16286 - http://www.gulftech.org/?node=research&article_id=00092-07302005 - http
8863&w=2 - http://secunia.com/advisories/16286 - http://www.gulftech.org/?node=research&article_id=00092-07302005 - http://www.osvdb.org/18395
CVE ID: CVE-2005-2461 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T22:30:01.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL commands via the (1) year or (2) date parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14425 - http://marc.info/?l=bugtraq&m=112274359718863&w=2 - http://secunia.com/advisories/16286 - http://www.gulftech.org/?node=research&article_id=00092-07302005 - http://www.osvdb.org/18396
CVE ID: CVE-2005-2462 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T22:30:01.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kayako liveResponse 2.x, when logging in a user, records the password in plaintext in the URL, which allows local users and possibly remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14425 - http://marc.info/?l=bugtraq&m=112274359718863&w=2 - http://secunia.com/advisories/16286 - http://www.gulftech.org/?node=research&article_id=00092-07302005 - http://www.osvdb.org/18398
CVE ID: CVE-2005-2463 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T22:29:59.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kayako liveResponse 2.x allows remote attackers to obtain sensitive information via a direct request to addressbook.php and other include scripts, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14425 - http://www.osvdb.org/18399 - http://marc.info/?l=bugtraq&m=112274359718863&w=2 - http://secunia.com/advisories/16286 - http://www.gulftech.org/?node=research&article_id=00092-07302005
CVE ID: CVE-2005-2464 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T22:29:59.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: login.php in PCXP/TOPPE CMS allows remote attackers to bypass authentication and gain privileges by modifying the cookie to match the target userid. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112274251601106&w=2
CVE ID: CVE-2005-2465 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T22:30:01.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in pm.php in PCXP/TOPPE CMS allows remote attackers to inject arbitrary web script or HTML via the msg variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14428 - http://www.osvdb.org/18715 - http://marc.info/?l=bugtraq&m=112274251601106&w=2
CVE ID: CVE-2005-2466 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T22:29:59.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the auth_user function in admin.php in OpenBook 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21643 - http://securitytracker.com/id?1014606 - http://www.osvdb.org/18475 - http://www.vupen.com/english/advisories/2005/1301 - http://marc.info/?l=bugtraq&m=1122912834197
://www.osvdb.org/18475 - http://www.vupen.com/english/advisories/2005/1301 - http://marc.info/?l=bugtraq&m=112291283419785&w=2
CVE ID: CVE-2005-2467 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T22:30:01.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to view.php, (2) release parameter to list.php, or (3) F parameter to get_jsrs_data.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/1287 - http://secunia.com/advisories/16304 - http://www.securityfocus.com/bid/14436 - http://www.osvdb.org/18401 - http://securitytracker.com/id?1014603 - http
304 - http://www.securityfocus.com/bid/14436 - http://www.osvdb.org/18401 - http://securitytracker.com/id?1014603 - http://lists.mysql.com/eventum-users/2072 - http://marc.info/?l=bugtraq&m=112292193807958&w=2 - http://www.gulftech.org/?node=research&article_id=00093-07312005 - http://www.osvdb.org/18400 - http://www.osvdb.org/18402
CVE ID: CVE-2005-2468 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T22:29:59.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) isCorrectPassword or (2) userExist function in class.auth.php, getCustomFieldReport function in (4) custom_fields.php, (5) custom_fields_graph.php, or (6) class.report.php, or the insert function in (7) releases.php or (8) class.release.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/18404 - http://www.vupen.com/english/advisories/2005/1287 - h
CVE Program Container: References: - http://www.osvdb.org/18404 - http://www.vupen.com/english/advisories/2005/1287 - http://secunia.com/advisories/16304 - http://www.osvdb.org/18403 - http://www.osvdb.org/18405 - http://securitytracker.com/id?1014603 - http://lists.mysql.com/eventum-users/2072 - http://marc.info/?l=bugtraq&m=112292193807958&w=2 - http://www.gulftech.org/?node=research&article_id=00093-07312005 - http://www.securityfocus.com/bid/14437 - http://www.osvdb.org/18406
CVE ID: CVE-2005-2469 State: PUBLISHED Published: 2005-10-20T04:00:00 Last Updated: 2024-08-07T22:30:01.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the NMAP Agent for Novell NetMail 3.52C and possibly earlier versions allows local users to execute arbitrary code via a long user name in the USER command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22727 - http://securitytracker.com/id?1015048 - http://www.securityfocus.com/bid/15080 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972340.htm - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972433.htm
vell.com/cgi-bin/search/searchtid.cgi?/2972340.htm - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972433.htm - http://www.osvdb.org/19916 - http://secunia.com/secunia_research/2005-23/advisory/ - http://secunia.com/advisories/15925/ - http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0299.html - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972438.htm
CVE ID: CVE-2005-2470 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-07T22:30:01.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a "core application plug-in" for Adobe Reader 5.1 through 7.0.2 and Acrobat 5.0 through 7.0.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-750.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/21860 - http://www.novell.com/linux/security/advisories/2005_19_sr.html - http://www.securityfocus.com/bid/14603 - http://www.gentoo
://www.novell.com/linux/security/advisories/2005_19_sr.html - http://www.securityfocus.com/bid/14603 - http://www.gentoo.org/security/en/glsa/glsa-200508-11.xml - http://securitytracker.com/id?1014712 - http://www.kb.cert.org/vuls/id/896220 - http://www.adobe.com/support/techdocs/321644.html - http://www.vupen.com/english/advisories/2005/1434 - http://secunia.com/advisories/16466
CVE ID: CVE-2005-2471 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-07T22:30:00.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: pstopnm in netpbm does not properly use the "-dSAFER" option when calling Ghostscript to convert a PostScript file into a (1) PBM, (2) PGM, or (3) PNM file, which allows external user-assisted attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/21500 - http://www.securityfocus.com/bid/14379 - http://www.novell.com/linux/security/advisories/2005_19_sr.html - https://oval.cisecurity.org/repository/search/definition/oval%3Ao
novell.com/linux/security/advisories/2005_19_sr.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11645 - http://www.trustix.org/errata/2005/0038/ - http://www.debian.org/security/2006/dsa-1021 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=319757 - http://secunia.com/advisories/18330 - http://securitytracker.com/id?1014752 - http://secunia.com/advisories/19436 - http://secunia.com/advisories/16184 - http://www.redhat.com/support/errata/RHSA-2005-743.html - http://www.osvdb.org/18253
CVE ID: CVE-2005-2472 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-07T22:30:01.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in BusinessMail 4.60.00 allow remote attackers to cause a denial of service (application crash) via a long string to SMTP (1) HELO or (2) MAIL FROM commands. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014602 - http://www.osvdb.org/18407 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035647.html - http://reedarvin.thearvins.com/20050730-01.html - http://secunia.com/advisories/16306 - http://marc.info/?l=bugtraq&m=112291456305261&w=2
thearvins.com/20050730-01.html - http://secunia.com/advisories/16306 - http://marc.info/?l=bugtraq&m=112291456305261&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21636 - http://www.securityfocus.com/bid/14434
CVE ID: CVE-2005-2473 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-07T22:29:59.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ChurchInfo allow remote attackers to execute arbitrary SQL commands via the PersonID parameter to (1) PersonView.php, (2) MemberRoleChange.php, (3) PropertyAssign.php, (4) WhyCameEditor.php, (5) GroupPropsEditor.php, (6) Reports/PDFLabel.php, or (7) UserDelete.php, (8) DepositSlipID parameter to DepositSlipEditor.php, (9) QueryID parameter to QueryView.php, GroupID parameter to (10) GroupView.php, (11) GroupMemberList.php, (12) MemberRoleChange.php, (13) GroupDelete.php, (14) /Reports/
rameter to (10) GroupView.php, (11) GroupMemberList.php, (12) MemberRoleChange.php, (13) GroupDelete.php, (14) /Reports/ClassAttendance.php, or (15) /Reports/GroupReport.php, (16) PropertyID parameter to PropertyEditor.php, FamilyID parameter to (17) Canvas05Editor.php, (18) CanvasEditor.php, or (19) FamilyView.php, or (20) PledgeID parameter to PledgeDetails.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/18416 - http://www.osvdb.org/18411 - http://www.osvdb.org/18423 - http://marc.info/?l=bugtraq&m=112291550713546&w=2 - http://www.osvdb.org/18421 - http://www.osvdb.org/18418 - http://www.osvdb.org/18413 - http://www.securityfocus.com/bid/14438 - h
w.osvdb.org/18421 - http://www.osvdb.org/18418 - http://www.osvdb.org/18413 - http://www.securityfocus.com/bid/14438 - http://www.osvdb.org/18417 - http://securitytracker.com/id?1014617 - http://www.osvdb.org/18420 - http://www.osvdb.org/18415 - http://www.osvdb.org/18428 - http://www.osvdb.org/18414 - http://www.osvdb.org/18427 - http://www.osvdb.org/18422 - http://www.osvdb.org/18410 - http://www.osvdb.org/18412 - http://www.osvdb.org/18408 - http://www.osvdb.org/18424 - http://www.osvdb.org/18409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21647 - http://www.osvdb.org/18419 - http://secunia.com/advisories/16292
CVE ID: CVE-2005-2474 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-07T22:30:00.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: ChurchInfo allows remote attackers to execute obtain sensitive information via the PersonID parameter to (1) PersonView.php, (2) MemberRoleChange.php, (3) PropertyAssign.php, (4) WhyCameEditor.php, (5) GroupPropsEditor.php, (6) Reports/PDFLabel.php, or (7) UserDelete.php, an invalid Number parameter to (8) SelectList.php or (9) SelectDelete.php, GroupID parameter to (10) GroupView.php, (11) GroupMemberList.php, (12) MemberRoleChange.php, (13) GroupDelete.php, (14) /Reports/ClassAttendance.php, or (15) /Reports/GroupReport.php,
p, (12) MemberRoleChange.php, (13) GroupDelete.php, (14) /Reports/ClassAttendance.php, or (15) /Reports/GroupReport.php, (16) PropertyID parameter to PropertyEditor.php, FamilyID parameter to (17) Canvas05Editor.php, (18) CanvasEditor.php, or (19) FamilyView.php, or (20) PledgeID parameter to PledgeDetails.php, which reveal the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/18430 - http://www.osvdb.org/18450 - http://www.osvdb.org/18432 - http://www.osvdb.org/18435 - http://marc.info/?l=bugtraq&m=112291550713546&w=2 - http://www.osvdb.org/18425 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21648 - http://www.osvdb.org/
46&w=2 - http://www.osvdb.org/18425 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21648 - http://www.osvdb.org/18426 - http://securitytracker.com/id?1014617 - http://www.osvdb.org/18439 - http://www.osvdb.org/18437 - http://www.osvdb.org/18429 - http://www.osvdb.org/18431 - http://www.osvdb.org/18433 - http://www.osvdb.org/18438 - http://www.osvdb.org/18436 - http://www.osvdb.org/18434 - http://secunia.com/advisories/16292
CVE ID: CVE-2005-2475 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-07T22:30:01.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25098 - http://secunia.com/advisories/17653 - http://www.info-zip.org/FAQ.html - http://www.trustix.org/errata/2005/0053/ - http://www.ubuntu.com/usn/usn-191-1 - http://www.osvdb.org/18530 - http://www.secur
/www.trustix.org/errata/2005/0053/ - http://www.ubuntu.com/usn/usn-191-1 - http://www.osvdb.org/18530 - http://www.securityfocus.com/bid/14450 - http://secunia.com/advisories/17342 - http://secunia.com/advisories/16985 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.39/SCOSA-2005.39.txt - http://marc.info/?l=bugtraq&m=112300046224117&w=2 - http://securityreason.com/securityalert/32 - http://www.debian.org/security/2005/dsa-903 - http://www.redhat.com/support/errata/RHSA-2007-0203.html - http://secunia.com/advisories/17045 - http://secunia.com/advisories/17006 - http://secunia.com/advisories/16309 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9
/secunia.com/advisories/16309 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9975 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:197
CVE ID: CVE-2005-2476 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-07T22:29:59.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in lost_passowrd.php in Naxtor Shopping Cart 1.0 allows remote attackers to inject arbitrary web script or HTML via the email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014613 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21676 - http://marc.info/?l=bugtraq&m=112301600608192&w=2 - http://www.securityfocus.com/bid/14454 - http://secunia.com/advisories/16262
CVE ID: CVE-2005-2477 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-07T22:29:59.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: shop_display_products.php in Naxtor Shopping Cart 1.0 allows remote attackers to obtain sensitive information via a cat_id with a "'" (single quote), which reveals the path in an error message, possibly due to an SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14456 - http://securitytracker.com/id?1014613 - http://marc.info/?l=bugtraq&m=112301600608192&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21677 - http://secunia.com/advisories/1
raq&m=112301600608192&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21677 - http://secunia.com/advisories/16262