Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-1026 State: PUBLISHED Published: 2005-04-09T04:00:00 Last Updated: 2024-08-07T21:35:59.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SnailSource phpBB 2.0.x mods allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to dlman.php in DLMan Pro or (2) id parameter to links.php in Linkz Pro (aka LinksLinks Pro). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13030 - http://marc.info/?l=bugtraq&m=111272430128195&w=2 - http://marc.info/?l=bugtraq&m=111271895819594&w=2 - http://www.securityfocus.com/bid/13028 - http://www.snailsource.com/fo
tp://marc.info/?l=bugtraq&m=111271895819594&w=2 - http://www.securityfocus.com/bid/13028 - http://www.snailsource.com/forum/dlman.php?func=file_info&file_id=77
CVE ID: CVE-2005-1027 State: PUBLISHED Published: 2005-04-09T04:00:00 Last Updated: 2024-08-07T21:35:59.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x through 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter in the Your_Account module, (2) avatarcategory parameter in the Your_Account module, or (3) lid parameter in the Downloads module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7570 - http://www.securityfocus.com/archive/1/321324 - http://marc.info/?l=bugtraq&m=111272010303144&w=2 - https://exchange.xforce
p://www.securityfocus.com/archive/1/321324 - http://marc.info/?l=bugtraq&m=111272010303144&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11994
CVE ID: CVE-2005-1028 State: PUBLISHED Published: 2005-04-09T04:00:00 Last Updated: 2024-08-07T21:35:59.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Nuke 6.x through 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) index.php with the forum_admin parameter set, (2) the Surveys module, or (3) the Your_Account module, which reveals the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111272010303144&w=2
CVE ID: CVE-2005-1029 State: PUBLISHED Published: 2005-04-09T04:00:00 Last Updated: 2024-08-07T21:35:59.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) itemID parameter to ItemInfo.asp, or (5) Email field to sendpassword.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13034 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19977 - http://www.osvdb.org/15283 - http://www.securitytracker.com/alerts/2005/Apr/1013649.html - http
/vulnerabilities/19977 - http://www.osvdb.org/15283 - http://www.securitytracker.com/alerts/2005/Apr/1013649.html - http://www.osvdb.org/15281 - http://www.securityfocus.com/bid/13032 - http://digitalparadox.org/advisories/aass.txt - http://marc.info/?l=bugtraq&m=111280834000432&w=2 - http://www.securityfocus.com/bid/13035 - http://secunia.com/advisories/14839 - http://www.osvdb.org/15282
CVE ID: CVE-2005-1030 State: PUBLISHED Published: 2005-04-09T04:00:00 Last Updated: 2024-08-07T21:35:59.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL parameter to account.asp, (5) Table, (6) Title parameter to sendpassword.asp, or (7) itemid to watchthisitem.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15287 - http://www.securityfocus.com/bid/13038 - http://www.osvdb.org/15286 - http://www.securityfocus.com/bid/13036 -
/15287 - http://www.securityfocus.com/bid/13038 - http://www.osvdb.org/15286 - http://www.securityfocus.com/bid/13036 - http://www.securityfocus.com/bid/13039 - http://www.securitytracker.com/alerts/2005/Apr/1013649.html - http://digitalparadox.org/advisories/aass.txt - http://marc.info/?l=bugtraq&m=111280834000432&w=2 - http://www.osvdb.org/15284 - http://www.osvdb.org/15285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19975 - http://secunia.com/advisories/14839
CVE ID: CVE-2005-1031 State: PUBLISHED Published: 2005-04-09T04:00:00 Last Updated: 2024-08-07T21:35:59.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: RUNCMS 1.1A, and possibly other products based on e-Xoops (exoops), when "Allow custom avatar upload" is enabled, does not properly verify uploaded files, which allows remote attackers to upload arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.runcms.org/public/modules/news/ - http://secunia.com/advisories/14869 - http://marc.info/?l=bugtraq&m=111280711228450&w=2 - http://www.securityfocus.com/bid/13027 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20001
CVE ID: CVE-2005-1032 State: REJECTED Published: 2005-04-09T04:00:00 Last Updated: 2017-07-10T14:57:01 Description: No description available.
CVE ID: CVE-2005-1033 State: PUBLISHED Published: 2005-04-09T04:00:00 Last Updated: 2024-08-07T21:35:59.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: CubeCart 2.0.6 allows remote attackers to obtain sensitive information via an invalid (1) language parameter to index.php, (2) PHPSESSID parameter to index.php, (3) product parameter to tellafriend.php, (4) add parameter to view_cart.php, or (5) product parameter to view_product.php, which reveals the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/14064 - http://securitytracker.com/id?1013660 - http://marc.info/?l=bugtraq&m=111281457918479&w=2
CVE ID: CVE-2005-1034 State: PUBLISHED Published: 2005-04-09T04:00:00 Last Updated: 2024-08-07T21:35:59.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: SurgeFTP 2.2m1 allows remote attackers to cause a denial of service (application hang) via the LEAK command. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013664 - http://www.security.org.sg/vuln/surgeftp22m1.html - http://www.securityfocus.com/bid/13054 - http://secunia.com/advisories/14888 - http://marc.info/?l=bugtraq&m=111289226204780&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20011
CVE ID: CVE-2005-1035 State: PUBLISHED Published: 2005-04-10T04:00:00 Last Updated: 2024-08-07T21:35:59.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Pavuk before 0.9.32 have unknown attack vectors and impact. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14571 - http://sourceforge.net/project/shownotes.php?release_id=313436
CVE ID: CVE-2005-1036 State: PUBLISHED Published: 2005-04-10T04:00:00Z Last Updated: 2024-09-16T18:24:18.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow user access to certain hardware, which allows local users to bypass intended access restrictions to cause a denial of service, obtain sensitive information, and possibly gain privileges. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:03.amd64.asc
CVE ID: CVE-2005-1037 State: PUBLISHED Published: 2005-04-10T04:00:00 Last Updated: 2024-08-07T21:35:59.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=IY68825&apar=only - http://secunia.com/advisories/14856 - http://www.niscc.gov.uk/niscc/docs/br-20050405-00278.html?lang=en
CVE ID: CVE-2005-1038 State: PUBLISHED Published: 2005-04-10T04:00:00 Last Updated: 2024-08-07T21:35:59.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U - http://www.redhat.com/support/errata/RHSA-2006-0117.html - http://www.novell.com/linux/security/advisories/2007_007_suse.html - http://se
.com/support/errata/RHSA-2006-0117.html - http://www.novell.com/linux/security/advisories/2007_007_suse.html - http://secunia.com/advisories/24995 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11104 - http://www.redhat.com/support/errata/RHSA-2005-361.html - http://support.avaya.com/elmodocs2/security/ASA-2006-118.htm - http://secunia.com/advisories/19532 - http://www.securityfocus.com/bid/13024 - http://secunia.com/advisories/20666 - http://www.securityfocus.com/archive/1/395093
CVE ID: CVE-2005-1039 State: PUBLISHED Published: 2005-04-10T04:00:00Z Last Updated: 2024-09-16T21:58:23.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Core Utilities (coreutils) 5.2.1, when (1) mkdir, (2) mknod, or (3) mkfifo is running with the -m switch, allows local users to modify permissions of other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13053
CVE ID: CVE-2005-1040 State: PUBLISHED Published: 2005-04-10T04:00:00Z Last Updated: 2024-09-16T18:12:55.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unknown vulnerabilities in netapplet in Novell Linux Desktop 9 allow local users to gain root privileges, related to "User input [being] passed to network scripts without verification." Additional Analyst Notes: - CVE Program Container: References: - http://lists.suse.com/archive/suse-security-announce/2005-Apr/0002.html
CVE ID: CVE-2005-1041 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fib_seq_start function in fib_hash.c in Linux kernel allows local users to cause a denial of service (system crash) via /proc/net/route. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-366.html - http://www.securityfocus.com/bid/13267 - http://marc.info/?l=bk-commits-head&m=111186506706769&w=2 - http://www.securityfocus.com/archive/1/419522/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9487 - http://sec
00/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9487 - http://secunia.com/advisories/17918 - http://www.securityfocus.com/archive/1/427980/100/0/threaded
CVE ID: CVE-2005-1042 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-406.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:072 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10822 - http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml
itory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10822 - http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml - http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=154021 - https://usn.ubuntu.com/112-1/ - http://www.redhat.com/support/errata/RHSA-2005-405.html - http://cvs.php.net/diff.php/php-src/ext/exif/exif.c?r1=1.118.2.33&r2=1.118.2.34&ty=u
CVE ID: CVE-2005-1043 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-406.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:072 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=154025 - http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml - http://lists.app
edhat.com/bugzilla/show_bug.cgi?id=154025 - http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml - http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10307 - https://usn.ubuntu.com/112-1/ - http://cvs.php.net/diff.php/php-src/ext/exif/exif.c?r1=1.118.2.29&r2=1.118.2.30&ty=u
CVE ID: CVE-2005-1044 State: REJECTED Published: 2005-04-12T04:00:00 Last Updated: 2005-11-02T10:00:00 Description: No description available.
CVE ID: CVE-2005-1045 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote attackers to execute arbitrary commands via a UNC path in a bookmark. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15356 - http://www.securityfocus.com/bid/13079 - http://securitytracker.com/id?1013665 - http://secunia.com/advisories/14898/ - http://marc.info/?l=bugtraq&m=111323587931293&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2003
s/14898/ - http://marc.info/?l=bugtraq&m=111323587931293&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20032
CVE ID: CVE-2005-1046 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11081 - http://www.novell.com/linux/security/advisories/2005_22_kdelibs3.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5802 - http://www.kde.org/info/security/advisory-20050421-1.txt - http://www.secu
finition/oval%3Aorg.mitre.oval%3Adef%3A5802 - http://www.kde.org/info/security/advisory-20050421-1.txt - http://www.securityfocus.com/archive/1/427976/100/0/threaded - http://www.vupen.com/english/advisories/2005/0331 - http://secunia.com/advisories/14908 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201320-1 - http://www.debian.org/security/2005/dsa-714 - http://secunia.com/advisories/28114 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103170-1 - http://bugs.kde.org/show_bug.cgi?id=102328 - http://www.securityfocus.com/bid/13096 - http://www.redhat.com/support/errata/RHSA-2005-393.html - http://www.vupen.com/english/advisories/2007/4241
CVE ID: CVE-2005-1047 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Meilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, which allows remote authenticated users to execute arbitrary commands by uploading PHP files, then directly requesting them from the uploads directory. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013671 - http://www.defacers.com.mx/advisories/2.txt - http://marc.info/?l=bugtraq&m=111299353030534&w=2
CVE ID: CVE-2005-1048 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules.php in PostNuke 0.760 RC3 allows remote attackers to execute arbitrary SQL statements via the sid parameter. NOTE: the vendor reports that they could not reproduce the issues for 760 RC3, or for .750. Additional Analyst Notes: - CVE Program Container: References: - http://digitalparadox.org/advisories/postnuke.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/20019 - http://marc.info/?l=bugtraq&m=111298226029957&w=2 - http://www.osvdb.org/15371 - http://secunia.com/advisories/148
019 - http://marc.info/?l=bugtraq&m=111298226029957&w=2 - http://www.osvdb.org/15371 - http://secunia.com/advisories/14868/ - http://securitytracker.com/id?1013670 - http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2679
CVE ID: CVE-2005-1049 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting vulnerabilities in PostNuke 0.760-RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) module parameter to admin.php or (2) op parameter to user.php. NOTE: the vendor reports that certain issues could not be reproduced for 760 RC3, or for .750. However, the op/user.php issue exists when the pnAntiCracker setting is disabled. Additional Analyst Notes: - CVE Program Container: References: - http://digitalparadox.org/advisories/postnuke.txt - http://www.osvdb.org/15370 - http
E Program Container: References: - http://digitalparadox.org/advisories/postnuke.txt - http://www.osvdb.org/15370 - http://marc.info/?l=bugtraq&m=111298226029957&w=2 - http://www.securityfocus.com/bid/13076 - http://secunia.com/advisories/14868/ - http://securitytracker.com/id?1013670 - http://www.securityfocus.com/bid/13075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20018 - http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2679 - http://cvs.postnuke.com/viewcvs.cgi/Historic_PostNuke_Library/postnuke-devel/html/user.php.diff?r1=1.18&r2=1.19
CVE ID: CVE-2005-1050 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: The modload op in the Reviews module for PostNuke 0.760-RC3 allows remote attackers to obtain sensitive information via an invalid id parameter, which reveals the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://digitalparadox.org/advisories/postnuke.txt - http://marc.info/?l=bugtraq&m=111298226029957&w=2 - http://securitytracker.com/id?1013670 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20020
CVE ID: CVE-2005-1051 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a change_email action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14882 - http://marc.info/?l=bugtraq&m=111306207306155&w=2 - http://www.securityfocus.com/bid/13071
CVE ID: CVE-2005-1052 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20026 - http://www.idefense.com/application/poi/display?id=227&type=vulnerabilities
CVE ID: CVE-2005-1053 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in orderwiz.php in ModernBill 4.3.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) c_code or (2) aid parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20035 - http://securitytracker.com/id?1013672 - http://www.gulftech.org/?node=research&article_id=00067-04102005 - http://marc.info/?l=bugtraq&m=111323741032183&w=2 - http://www.osvdb.org/15426 - http://secunia
icle_id=00067-04102005 - http://marc.info/?l=bugtraq&m=111323741032183&w=2 - http://www.osvdb.org/15426 - http://secunia.com/advisories/14890
CVE ID: CVE-2005-1054 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in news.php in ModernBill 4.3.0 and earlier allows remote attackers to execute arbitrary PHP code by modifying the DIR parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013672 - http://www.gulftech.org/?node=research&article_id=00067-04102005 - http://marc.info/?l=bugtraq&m=111323741032183&w=2 - http://www.osvdb.org/15427 - http://secunia.com/advisories/14890 - https:
//marc.info/?l=bugtraq&m=111323741032183&w=2 - http://www.osvdb.org/15427 - http://secunia.com/advisories/14890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20036
CVE ID: CVE-2005-1055 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: TowerBlog 0.6 and earlier stores the login data file under the web root, which allows remote attackers to obtain the MD5 checksums of the username and password via a direct request to the _dat/login file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14884 - http://marc.info/?l=bugtraq&m=111323802003019&w=2 - http://securitytracker.com/id?1013675 - http://www.osvdb.org/15425 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20039
CVE ID: CVE-2005-1056 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in HP OpenView Network Node Manager (NMM) 6.2 through 6.4, and 7.01 through 7.50, allows remote attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13029 - http://www.osvdb.org/15321 - http://securitytracker.com/id?1013651 - http://www.securityfocus.com/advisories/8372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19993 - http://secunia.com/advisories/14865
CVE ID: CVE-2005-1057 State: PUBLISHED Published: 2005-04-12T04:00:00 Last Updated: 2024-08-07T21:35:59.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2T, 12.3 and 12.3T, when using Easy VPN Server XAUTH version 6 authentication, allows remote attackers to bypass authentication via a "malformed packet." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5852 - http://www.cisco.com/warp/public/707/cisco-sa-20050406-xauth.shtml