Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-2244 State: PUBLISHED Published: 2007-10-14T20:00:00 Last Updated: 2024-08-08T03:59:11.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Akfingerd 0.5 and earlier versions allow local users to cause a denial of service (crash) via a .plan with a symlink to /dev/urandom or other device, then disconnecting while data is being transferred, which causes a SIGPIPE error that Akfingerd cannot handle. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-12/0049.html - http://www.securityfocus.com/bid/6324 - http://synflood.at/akfingerd/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/10795
CVE ID: CVE-2002-2245 State: PUBLISHED Published: 2007-10-14T20:00:00Z Last Updated: 2024-09-16T20:57:38.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which can cause firewalls and other intermediary devices to lose proper track of the FTP session. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2002-027.txt.asc
CVE ID: CVE-2002-2246 State: PUBLISHED Published: 2007-10-14T20:00:00 Last Updated: 2024-08-08T03:59:11.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote attackers to inject arbitrary web script or HTML via the HTTP referer header (HTTP_REFERER) to a non-existent page, which is injected into the resulting 404 error page. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-12/0113.html - http://www.securityfocus.com/bid/6369 - http://www.deerfield.com/products/visnetic_website/ - https://exchange.xforce.ibmcloud.com/vulnerabili
us.com/bid/6369 - http://www.deerfield.com/products/visnetic_website/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/10852
CVE ID: CVE-2002-2247 State: PUBLISHED Published: 2007-10-14T20:00:00 Last Updated: 2024-08-08T03:59:11.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via phpinfo.php, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10853 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html - http://www.securityfocus.com/bid/6376
CVE ID: CVE-2002-2248 State: PUBLISHED Published: 2007-10-14T20:00:00 Last Updated: 2024-08-08T03:59:11.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10706 - http://marc.info/?l=bugtraq&m=103834439321292&w=2 - http://www.securityfocus.com/bid/6256
CVE ID: CVE-2002-2249 State: PUBLISHED Published: 2007-10-14T20:00:00 Last Updated: 2024-08-08T03:59:11.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in News Evolution 2.0 allows remote attackers to execute arbitrary PHP commands via the neurl parameter to (1) backend.php, (2) screen.php, or (3) admin/modules/comment.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10709 - http://www.securityfocus.com/bid/6260 - http://marc.info/?l=bugtraq&m=103835200230127&w=2
CVE ID: CVE-2002-2250 State: PUBLISHED Published: 2007-10-14T20:00:00 Last Updated: 2024-08-08T03:59:11.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via (1) a long parameter to the xp_freedll extended stored procedure or (2) a long database name argument to the DBCC CHECKVERIFY function. Additional Analyst Notes: - CVE Program Container: References: - http://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00361.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10721 - http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0082.html - http://www.se
.ibmcloud.com/vulnerabilities/10721 - http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0082.html - http://www.securityfocus.com/bid/6269 - http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0080.html - http://www.appsecinc.com/resources/alerts/sybase/02-0003.html - http://www.securityfocus.com/bid/6266 - http://www.appsecinc.com/resources/alerts/sybase/02-0001.html - http://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00364.html - http://www.iss.net/security_center/static/10719.php
CVE ID: CVE-2002-2251 State: PUBLISHED Published: 2007-10-14T20:00:00 Last Updated: 2024-08-08T03:59:11.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the changevalue function in libcgi.h for Marcos Luiz Onisto Lib CGI 0.1 allows remote attackers to execute arbitrary code via a long argument. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-11/0330.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10715 - http://www.securityfocus.com/bid/6264
CVE ID: CVE-2002-2252 State: PUBLISHED Published: 2007-10-14T20:00:00 Last Updated: 2024-08-08T03:59:11.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in auth.inc.php in Thatware 0.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via a base64-encoded user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-12/0000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10759 - http://securitytracker.com/id?1005733
CVE ID: CVE-2002-2253 State: PUBLISHED Published: 2007-10-14T20:00:00 Last Updated: 2024-08-08T03:59:11.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Cyrus Sieve / libSieve 2.1.2 and earlier allow remote attackers to execute arbitrary code via (1) a long header name, (2) a long IMAP flag, or (3) a script that generates a large number of errors that overflow the resulting error string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10780 - http://www.securityfocus.com/bid/6300 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10779
nerabilities/10780 - http://www.securityfocus.com/bid/6300 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10743 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0019.html - http://www.securityfocus.com/bid/6294
CVE ID: CVE-2002-2254 State: PUBLISHED Published: 2007-10-14T20:00:00 Last Updated: 2024-08-08T03:59:11.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: The experimental IP packet queuing feature in Netfilter / IPTables in Linux kernel 2.4 up to 2.4.19 and 2.5 up to 2.5.31, when a privileged process exits and network traffic is not being queued, may allow a later process with the same Process ID (PID) to access certain network traffic that would otherwise be restricted. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-12/0025.html - http://www.securityfocus.com/bid/6305 - https://exchange.xforce.ibmcloud.com/v
.com/archives/bugtraq/2002-12/0025.html - http://www.securityfocus.com/bid/6305 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10756
CVE ID: CVE-2002-2255 State: PUBLISHED Published: 2007-10-14T20:00:00 Last Updated: 2024-08-08T03:59:11.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in phpBB 2.0.3 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the search_username parameter in searchuser mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6311 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10773 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0053.html
CVE ID: CVE-2002-2256 State: PUBLISHED Published: 2007-10-14T20:00:00 Last Updated: 2024-08-08T03:59:11.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pWins Webserver 0.2.5 and earlier allows remote attackers to read arbitrary files via Unicode characters. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-11/0347.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10724 - http://www.securityfocus.com/bid/6271
CVE ID: CVE-2002-2257 State: PUBLISHED Published: 2007-10-14T20:00:00 Last Updated: 2024-08-08T03:59:11.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the parse_field function in cgi_lib.c for LIBCGI 1.0.2 and 1.0.3 allows remote attackers to execute arbitrary code via a long argument. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-11/0346.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10722 - http://www.securityfocus.com/bid/6270
CVE ID: CVE-2002-2258 State: PUBLISHED Published: 2007-10-14T20:00:00 Last Updated: 2024-08-08T03:59:11.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moby NetSuite allows remote attackers to cause a denial of service (crash) via an HTTP POST request with a (1) large integer or (2) non-numeric value in the Content-Length header, which causes an access violation after a failed atoi function call. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-11/0364.html - http://www.securityfocus.com/bid/6277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10725
CVE ID: CVE-2002-2259 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0 allows local users to execute arbitrary code as root via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10801 - http://www.securityfocus.com/bid/6329 - http://www.suse.com/de/security/2002_047_openldap2.html
CVE ID: CVE-2002-2260 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the quips feature in Mozilla Bugzilla 2.10 through 2.17 allows remote attackers to inject arbitrary web script or HTML via the "show all quips" page. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103837886416560&w=2 - http://bugzilla.mozilla.org/show_bug.cgi?id=179329 - http://www.debian.org/security/2002/dsa-218 - http://www.securityfocus.com/bid/6257 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10707
CVE ID: CVE-2002-2261 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'check_relay' function by spoofing a blank DNS hostname. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6892 - http://www.sendmail.org/8.12.7.html - http://www.vupen.com/english/advisories/2009/3539 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8512 - http://securitytracker.com/id?
s://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8512 - http://securitytracker.com/id?1005748 - ftp://patches.sgi.com/support/free/security/advisories/20030101-01-P - http://www.securityfocus.com/bid/6548 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10775 - http://secunia.com/advisories/7826
CVE ID: CVE-2002-2262 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in xntpd of HP-UX 10.20 through 11.11 allows remote attackers to cause a denial of service (hang) via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/advisories/4764 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10836 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4959 - http://www.securityfocus.com/bid/6356
CVE ID: CVE-2002-2263 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation program for HP-UX Visualize Conference B.11.00.11 running on HP-UX 11.00 and 11.11 installs /etc/dt and its subdirecties with insecure permissions, which allows local users to read or write arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/advisories/4766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10838 - http://www.securityfocus.com/bid/6357
CVE ID: CVE-2002-2264 State: PUBLISHED Published: 2007-10-18T10:00:00Z Last Updated: 2024-09-16T20:28:00.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Internet Group Management Protocol (IGMP) of HP Tru64 4.0F through 5.1A allows remote attackers to cause a denial of service via unknown attack vectors. NOTE: this might be the same issue as CVE-2002-2185, but there are insufficient details to be certain. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/compaq/2002-q4/0013.html
CVE ID: CVE-2002-2265 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in LDAP Module in System Authentication of Open Source Internet Solutions (OSIS) 5.4 running on Tru64 UNIX 4.0G and 4.0F allows remote attackers to gain access to arbitrary files or gain privileges via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10703 - http://archives.neohapsis.com/archives/compaq/2002-q4/0014.html - http://www.securityfocus.com/bid/6174
CVE ID: CVE-2002-2266 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetScreen ScreenOS 2.8 through 4.0, when forwarding H.323 or Netmeeting traffic, allows remote attackers to cause a denial of service (firewall session table consumption) by establishing multiple half-open H.323 sessions, which are not cleaned up on garbage removal and do not time out for 36 hours. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10700 - http://www.securityfocus.com/bid/6250 - http://marc.info/?l=bugtraq&m=103827647621729&w=2
CVE ID: CVE-2002-2267 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: bogopass in bogofilter 0.9.0.4 allows local users to overwrite arbitrary files via a symlink attack on the bogopass temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-11/0367.html - http://www.securityfocus.com/bid/6278 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10726
CVE ID: CVE-2002-2268 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/lists/bugtraq/2002/Dec/0013.html - http://www.securiteam.com/windowsntfocus/6R0030A6AY.html - http://www.securityfocus.com/bid/6289 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10727
CVE ID: CVE-2002-2269 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Webster HTTP Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10728 - http://www.securityfocus.com/bid/6291 - http://www.securityfocus.com/archive/1/301893 - http://securityreason.com/securityalert/3262
CVE ID: CVE-2002-2270 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the ied command in HP-UX 10.10, 10.20, and 11.0 allows local users to view "normally invisible data" via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/advisories/4742 - http://www.securityfocus.com/advisories/4742 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5311 - http://www.securityfocus.com/bid/6317 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10777
CVE ID: CVE-2002-2271 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in BigFun 1.51b IRC client, when the Direct Client Connection (DCC) option is used, allows remote attackers to cause a denial of service (crash) via a long string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10757 - http://www.securiteam.com/exploits/6G003156AE.html
CVE ID: CVE-2002-2272 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-12/0045.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10771 - http://www.securityfocus.com/bid/6320
CVE ID: CVE-2002-2273 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Webster HTTP Server allows remote attackers to inject arbitrary web script or HTML via the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6292 - http://www.securityfocus.com/archive/1/301893 - http://securityreason.com/securityalert/3262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10729
CVE ID: CVE-2002-2274 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: akfingerd 0.5 allows local users to read arbitrary files as the akfingerd user (nobody) via a symlink attack on the .plan file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6325 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0049.html - http://synflood.at/akfingerd - https://exchange.xforce.ibmcloud.com/vulnerabilities/10796
CVE ID: CVE-2002-2275 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fortres 101 4.1 allows local users to bypass Fortres by pressing the Windows and "F" key together for 30 seconds, which opens multiple windows and eventually causes explorer.exe to crash, which then opens an unrestricted explorer.exe. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1005766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10807 - http://www.securityfocus.com/bid/6332 - http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0093.html
CVE ID: CVE-2002-2276 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ultimate PHP Board (UPB) 1.0 allows remote attackers to view the physical path of the message board via a direct request to add.php, which leaks the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-12/0071.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10788 - http://www.securityfocus.com/bid/6333
CVE ID: CVE-2002-2277 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to execute arbitrary SQL commands via the (1) $rech, (2) $BD_Tab_docs, (3) $BD_Tab_file, (4) $BD_Tab_liens, (5) $BD_Tab_faq, or (6) $chemin variables. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10735 - http://www.securityfocus.com/bid/6273 - http://archives.neohapsis.com/archives/bugtraq/2002-11/0359.html
CVE ID: CVE-2002-2278 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to inject arbitrary web script or HTML via the (1) $App_Theme, (2) $Rub_Search, (3) $Rub_News, (4) $Rub_File, (5) $Rub_Liens, or (6) $Rub_Faq variables. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10738 - http://archives.neohapsis.com/archives/bugtraq/2002-11/0359.html
CVE ID: CVE-2002-2279 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the bind function in config.inc of aldap 0.09 allows remote attackers to authenticate with Manager permissions. Additional Analyst Notes: - CVE Program Container: References: - http://alcastle.com/index.php?id=6&subject=%2Faldap%2F&view=CHANGE.LOG.txt - http://www.securityfocus.com/bid/6310 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10733
CVE ID: CVE-2002-2280 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: syslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when the machine's IP addressed is changed without rebooting, e.g. via ifconfig, which can cause incorrect information to be sent to the syslog server. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-11/0272.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10702 - http://www.securityfocus.com/bid/6219