Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15294 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15292 - http://www.securityfocus.com/bid/9726 - http://archives.neohapsis.com/archives/bugtraq/2004-02/0645.html - http://www.xmbforum.com/community/boards/viewthread.php?tid=746859 - http://marc.info/?l=bugtraq&m=107756526625179&w=2 - https://docs.xmbforum2.com/index.php?title=Security_Issue_History
CVE ID: CVE-2004-0323 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain privileges via the (1) ppp parameter in viewthread.php, (2) desc parameter in misc.php, (3) tpp parameter in forumdisplay.php, (4) ascdesc parameter in forumdisplay.php, or (5) the addon parameter in stats.php. NOTE: it has also been shown that item (3) is also in XMB 1.9 beta. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9726 - http://archives.neohapsis.com/ar
t Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9726 - http://archives.neohapsis.com/archives/bugtraq/2004-02/0645.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15295 - http://www.xmbforum.com/community/boards/viewthread.php?tid=746859 - http://marc.info/?l=bugtraq&m=107756526625179&w=2 - http://archives.neohapsis.com/archives/bugtraq/2004-03/0265.html - https://docs.xmbforum2.com/index.php?title=Security_Issue_History
CVE ID: CVE-2004-0324 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters such as ", `, |, ;, or $. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107757320401858&w=2 - http://www.securityfocus.com/bid/9728 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15290
CVE ID: CVE-2004-0325 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU consumption) via "//../" arguments to (1) mkd, (2) xmkd, (3) dele, (4) size, (5) retr, (6) stor, (7) appe, (8) rnfr, (9) rnto, (10) rmd, or (11) xrmd, as demonstrated using "//../qwerty". Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15306 - http://marc.info/?l=bugtraq&m=107764173821905&w=2 - http://www.securityfocus.com/bid/9702
CVE ID: CVE-2004-0326 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107755692400728&w=2 - http://www.securityfocus.com/bid/9716 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017703.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15277
CVE ID: CVE-2004-0327 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary files via .. (dot dot) sequences in the clang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9720 - http://www.zone-h.org/advisories/read/id=4024 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15283 - http://marc.info/?l=bugtraq&m=107772470111000&w=2
CVE ID: CVE-2004-0328 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gigabyte Gn-B46B 2.4Ghz wireless broadband router firmware 1.003.00 allows local users on the same local network as the router to bypass authentication by using a copy of the router's html menu on a separate system. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15313 - http://www.securityfocus.com/bid/9740 - http://marc.info/?l=bugtraq&m=107766719227942&w=2
CVE ID: CVE-2004-0329 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeChat 1.1.1a allows remote attackers to cause a denial of service (crash) via certain unexpected strings, as demonstrated using "aaaaa". Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15321 - http://marc.info/?l=bugtraq&m=107781043621074&w=2 - http://www.securityfocus.com/bid/9744
CVE ID: CVE-2004-0330 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15323 - http://www.cnhonker.com/advisory/serv-u.mdtm.txt - http://marc.info/?l=bugtraq&m=107781164214399&w=2 - http://www.securityfocus.com/bid/9751
CVE ID: CVE-2004-0331 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service (crash) via a HTTP POST with a long application variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9750 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15325 - http://sh0dan.org/files/domadv.txt - http://marc.info/?l=bugtraq&m=107781539829143&w=2
CVE ID: CVE-2004-0332 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15329 - http://www.securityfocus.com/bid/9754 - http://marc.info/?l=bugtraq&m=107783767517850&w=2
CVE ID: CVE-2004-0333 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15490 - http://www.osvdb.org/4119 - http://www.securityfocus.com/bid/9758 - http://secunia.com/advisories/10995 - http://www.ciac.org/ciac/bulletins/o-092.shtml - http://www.winzip.com/fmwz90.h
- http://secunia.com/advisories/10995 - http://www.ciac.org/ciac/bulletins/o-092.shtml - http://www.winzip.com/fmwz90.htm - http://www.kb.cert.org/vuls/id/116182 - http://www.openpkg.org/security/OpenPKG-SA-2004.006-uudeview.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15336 - http://www.idefense.com/application/poi/display?id=76&type=vulnerabiliti&flashstatus=true - http://secunia.com/advisories/11019
CVE ID: CVE-2004-0334 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to (1) videophone_admindetail.asp, (2) videophone_syscfg.asp, (3) videophone_upgrade.asp, or (4) videophone_sysctrl.asp that contains a trailing / (slash). NOTE: the original report mentioned AXIS 2100 Network Camera, but this was likely a cut-and-paste error. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15636 - http://securitytracker
ences: - http://www.osvdb.org/4809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15636 - http://securitytracker.com/alerts/2004/Mar/1009522.html - http://marc.info/?l=bugtraq&m=107799556111784&w=2
CVE ID: CVE-2004-0335 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: LAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote attackers to obtain a directory listing via an HTTP request to (1) index.html, (2) cgi-bin/, or (3) users/. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2004-03/0096.html - http://www.securityfocus.com/bid/9780 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15349 - http://marc.info/?l=bugtraq&m=107799540630302&w=2
CVE ID: CVE-2004-0336 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:17:14.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: LAN SUITE Web Mail 602Pro allows remote attackers to gain sensitive information via the mail login form, which contains the path to the mail directory. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2004-03/0096.html - http://marc.info/?l=bugtraq&m=107799540630302&w=2 - http://www.securityfocus.com/bid/9781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15350
CVE ID: CVE-2004-0337 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary script or HTML as other users via a URL to index.html, followed by a / (slash) and the desired script. NOTE: the vendor states that this bug could not be reproduced, so this issue may be REJECTed in the future. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2004-03/0096.html - http://www.securityfocus.com/bid/9777 - https://exchange.xforce.ibmcloud.c
psis.com/archives/bugtraq/2004-03/0096.html - http://www.securityfocus.com/bid/9777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15351 - http://marc.info/?l=bugtraq&m=107799540630302&w=2
CVE ID: CVE-2004-0338 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15343 - http://marc.info/?l=bugtraq&m=107799527428834&w=2
CVE ID: CVE-2004-0339 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15348 - http://www.securityfocus.com/bid/9765 - http://marc.info/?l=bugtraq&m=107799508130700&w=2
CVE ID: CVE-2004-0340 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15340 - http://secunia.com/advisories/11001 - http://marc.info/?l=bugtraq&m=107801208004699&w=2 - http://www.securityfocus.com/bid/9767
CVE ID: CVE-2004-0341 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: WFTPD Pro Server 3.21 Release 1 allocates memory for a command until a 0Ah byte (newline) is sent, which allows local users to cause a denial of service (CPU consumption) by continuing to send a long command that does not contain a newline. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107801142924976&w=2 - http://secunia.com/advisories/11001 - http://www.securityfocus.com/bid/9767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15341 - http://www.osvdb.org/4115
CVE ID: CVE-2004-0342 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service (crash) via a (1) MKD or (2) XMKD command that causes an absolute path of 260 characters to be used, which overwrites a cookie with a null character, possibly due to an off-by-one error. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107801142924976&w=2 - http://www.osvdb.org/4116 - http://secunia.com/advisories/11001 - https://exchange.xforce.ibmcloud.com/vulne
24976&w=2 - http://www.osvdb.org/4116 - http://secunia.com/advisories/11001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15342 - http://www.securityfocus.com/bid/9767
CVE ID: CVE-2004-0343 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in YaBB SE 1.5.4 through 1.5.5b allow remote attackers to execute arbitrary SQL via (1) the msg parameter in ModifyMessage.php or (2) the postid parameter in ModifyMessage.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107816202813083&w=2 - http://www.securityfocus.com/bid/9774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15354
CVE ID: CVE-2004-0344 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows remote attackers to delete arbitrary files via a .. (dot dot) in the attachOld parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107816202813083&w=2 - http://www.securityfocus.com/bid/9774
CVE ID: CVE-2004-0345 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Red Faction client 1.20 and earlier allows remote servers to execute arbitrary code via a long server name. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107816217901923&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15353 - http://www.securityfocus.com/bid/9775
CVE ID: CVE-2004-0346 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one buffer overflow in _xlate_ascii_write() in ProFTPD 1.2.7 through 1.2.9rc2p allows local users to gain privileges via a 1024 byte RETR command. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107824679817240&w=2 - http://www.securityfocus.com/bid/9782 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15387
CVE ID: CVE-2004-0347 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:17:14.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in delhomepage.cgi in NetScreen-SA 5000 Series running firmware 3.3 Patch 1 (build 4797) allows remote authenticated users to execute arbitrary script as other users via the row parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/114070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15368 - http://marc.info/?l=bugtraq&m=107850564102190&w=2 - http://www.securityfocus.com/bid/9791 - http://marc.info/?l=bugtraq&m=10782636202411
/?l=bugtraq&m=107850564102190&w=2 - http://www.securityfocus.com/bid/9791 - http://marc.info/?l=bugtraq&m=107826362024112&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018120.html
CVE ID: CVE-2004-0348 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arbitrary SQL via the userId parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107833097705486&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15371 - http://www.securityfocus.com/bid/9799 - http://www.s-quadra.com/advisories/Adv-20040303.txt
CVE ID: CVE-2004-0349 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. (dot dot) in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107833161617397&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15381 - http://www.securityfocus.com/bid/9742
CVE ID: CVE-2004-0350 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local users to obtain the private key by factoring. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107833097705486&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15370 - http://www.securityfocus.com/bid/9799 - http://www.s-quadra.com/advisories/Adv-20040303.txt
CVE ID: CVE-2004-0351 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spider Sales shopping cart stores the private key in the same database and table as the public key, which allows local users with access to the database to decrypt data. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107833097705486&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15370 - http://www.securityfocus.com/bid/9799
CVE ID: CVE-2004-0352 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco 11000 Series Content Services Switches (CSS) running WebNS 5.0(x) before 05.0(04.07)S, and 6.10(x) before 06.10(02.05)S allow remote attackers to cause a denial of service (device reset) via a malformed packet to UDP port 5002. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15388 - http://www.securityfocus.com/bid/9806 - http://www.cisco.com/warp/public/707/cisco-sa-20040304-css.shtml - http://www.kb.cert.org/vuls/id/363374
CVE ID: CVE-2004-0353 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in auth_ident() function in auth.c for GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to gain privileges via a long string. Additional Analyst Notes: - CVE Program Container: References: - http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html - http://marc.info/?l=bugtraq&m=107894315012081&w=2 - http://marc.info/?l=bugtraq&m=107843915424588&w=2 - http://www.securityfocus.com/bid/9772 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15345
CVE ID: CVE-2004-0354 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code via format string specifiers in strings passed to (1) the info function in log.c, (2) the anubis_error function in errs.c, or (3) the ssl_error function in ssl.c. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15346 - http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html - http://marc.info/?l=bugtraq&m=1078
abilities/15346 - http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html - http://marc.info/?l=bugtraq&m=107843915424588&w=2 - http://www.securityfocus.com/bid/9772
CVE ID: CVE-2004-0355 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Power Board 1.3 Final allows remote attackers to gain sensitive information by selecting a file for "Personal Photo" that is not an image file, which displays the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15400 - http://marc.info/?l=bugtraq&m=107850510428567&w=2 - http://www.securityfocus.com/bid/9810
CVE ID: CVE-2004-0356 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:17:14.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Supervisor Report Center in SL Mail Pro 2.0.9 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a long HTTP sub-version. Additional Analyst Notes: - CVE Program Container: References: - http://216.26.170.92/Download/webfiles/Patches/SLMPPatch-2.0.14.pdf - http://www.securityfocus.com/bid/9809 - http://marc.info/?l=bugtraq&m=107850488326232&w=2 - http://www.nextgenss.com/advisories/slmailsrc.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/15398
CVE ID: CVE-2004-0357 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflows in SL Mail Pro 2.0.9 allow remote attackers to execute arbitrary code via (1) user.dll, (2) loadpageadmin.dll or (3) loadpageuser.dll. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15399 - http://www.nextgenss.com/advisories/slmailwm.txt - http://www.securityfocus.com/bid/9808 - http://216.26.170.92/Download/webfiles/Patches/SLMPPatch-2.0.14.pdf - http://marc.info/?l=bugtraq&m=107850432827699&w=2