Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-5001 State: PUBLISHED Published: 2022-03-28T20:45:43 Last Updated: 2024-08-08T02:35:17.270Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: ISS Products: BlackICE PC Protection Problem Types: CWE-269 Description: A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site Scripting Detection. The manipulation as part of POST/PUT/DELETE/OPTIONS Request leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. NOTE: This vulnerability only affects
o the public and may be used. It is recommended to upgrade the affected component. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.104 - http://www.computec.ch/mruef/advisories/black_ice_pc_protection_xss_evasion.txt - http://www.cgisecurity.com/articles/xss-faq.shtml
CVE ID: CVE-2003-5002 State: PUBLISHED Published: 2022-03-28T20:45:44 Last Updated: 2024-08-08T02:35:16.644Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: ISS Products: BlackICE PC Protection Problem Types: CWE-319 Description: A vulnerability was found in ISS BlackICE PC Protection. It has been declared as problematic. Affected by this vulnerability is the component Update Handler which allows cleartext transmission of data. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.295
CVE ID: CVE-2003-5003 State: PUBLISHED Published: 2022-03-28T20:45:46 Last Updated: 2024-08-08T02:35:17.306Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: ISS Products: BlackICE PC Protection Problem Types: CWE-80 Description: A vulnerability was found in ISS BlackICE PC Protection. It has been rated as problematic. Affected by this issue is the Update Handler. The manipulation with an unknown input leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program
lnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.296
CVE ID: CVE-2003-5004 State: REJECTED Published: N/A Last Updated: 2025-05-22T19:51:21.490Z Description: No description available.
CVE ID: CVE-2004-0001 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:01:23.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2004-017.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A868 - http://www.securityfocus.com/bid/9429 - http://security.gentoo.org/glsa/glsa-200402-06.xml - http://www.kb.cert.org/vuls/id/337238 - https://exchange.xforce.ibmclo
p://security.gentoo.org/glsa/glsa-200402-06.xml - http://www.kb.cert.org/vuls/id/337238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14888
CVE ID: CVE-2004-0002 State: PUBLISHED Published: 2004-02-03T05:00:00 Last Updated: 2024-08-08T00:01:23.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service (resource exhaustion) via (1) a low MTU, which causes a large number of small packets to be produced, or (2) via a large number of packets with a small TCP payload, which cause a large number of calls to the resource-intensive sowakeup function. Additional Analyst Notes: - CVE Program Container: References: - http://lists.freebsd.org/pipermail/cvs-src/2004-January/016271.html
CVE ID: CVE-2004-0003 State: PUBLISHED Published: 2004-02-03T05:00:00 Last Updated: 2024-08-08T00:01:23.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Linux kernel before 2.4.22 allows local users to gain privileges, related to "R128 DRI limits checking." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11464 - http://www.ciac.org/ciac/bulletins/o-127.shtml - http://secunia.com/advisories/12075 - http://secunia.com/advisories/11369 - http://www.debian.org/security/2004/dsa-482 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A834 - http://secunia.com/advisories/11362
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A834 - http://secunia.com/advisories/11362 - http://www.redhat.com/support/errata/RHSA-2004-044.html - http://www.debian.org/security/2004/dsa-495 - http://www.debian.org/security/2004/dsa-479 - http://www.redhat.com/support/errata/RHSA-2004-166.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15029 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1017 - http://www.ciac.org/ciac/bulletins/o-082.shtml - http://secunia.com/advisories/11376 - http://secunia.com/advisories/10912 - http://secunia.com/advisories/11891 - http://secunia.com/advisories/11370 - http://www.de
secunia.com/advisories/10912 - http://secunia.com/advisories/11891 - http://secunia.com/advisories/11370 - http://www.debian.org/security/2004/dsa-480 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:029 - http://www.turbolinux.com/security/2004/TLSA-2004-14.txt - http://www.linuxcompatible.org/print25630.html - http://secunia.com/advisories/11361 - http://www.securityfocus.com/bid/9570 - http://www.debian.org/security/2004/dsa-489 - http://www.debian.org/security/2004/dsa-481 - http://secunia.com/advisories/10911 - http://www.redhat.com/support/errata/RHSA-2004-106.html - http://www.ciac.org/ciac/bulletins/o-121.shtml - http://www.novell.com/linux/security/advisori
rata/RHSA-2004-106.html - http://www.ciac.org/ciac/bulletins/o-121.shtml - http://www.novell.com/linux/security/advisories/2004_05_linux_kernel.html - http://secunia.com/advisories/11202 - http://www.ciac.org/ciac/bulletins/o-126.shtml - http://secunia.com/advisories/10782 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9204 - http://www.redhat.com/support/errata/RHSA-2004-065.html - http://www.ciac.org/ciac/bulletins/o-145.shtml - http://www.debian.org/security/2004/dsa-491
CVE ID: CVE-2004-0004 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:01:23.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 and earlier only compares the serial of the signer's certificate and the one in the database, which can cause OpenCA to incorrectly accept a signature if the certificate's chain is trusted by OpenCA's chain directory, allowing remote attackers to spoof requests from other users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14847 - http://www.osvdb
- http://www.securityfocus.com/bid/9435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14847 - http://www.osvdb.org/3615 - http://www.kb.cert.org/vuls/id/336446 - http://www.openca.org/news/CAN-2004-0004.txt - http://marc.info/?l=bugtraq&m=107427313700554&w=2
CVE ID: CVE-2004-0005 State: PUBLISHED Published: 2004-02-03T05:00:00 Last Updated: 2024-08-08T00:01:23.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) octal encoding in yahoo_decode that causes a null byte to be written beyond the buffer, (2) octal encoding in yahoo_decode that causes a pointer to reference memory beyond the terminating null byte, (3) a quoted printable string to the gaim_quotedp_decode MIME decoder that causes a null byte to be written beyond the buffer, and (4) quoted printable encoding in gaim_quotedp_decode that causes a
ses a null byte to be written beyond the buffer, and (4) quoted printable encoding in gaim_quotedp_decode that causes a pointer to reference memory beyond the terminating null byte. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14944 - http://www.kb.cert.org/vuls/id/226974 - http://www.debian.org/security/2004/dsa-434 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14942 - http://www.novell.com/linux/security/advisories/2004_04_gaim.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14935 - http://marc.i
security&y=2004&m=slackware-security.361158 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14935 - http://marc.info/?l=bugtraq&m=107513690306318&w=2 - https://security.gentoo.org/glsa/200401-04 - http://www.securitytracker.com/id?1008850 - http://security.e-matters.de/advisories/012004.html - http://www.osvdb.org/3736 - http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html - http://www.kb.cert.org/vuls/id/655974 - http://www.kb.cert.org/vuls/id/190366 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813 - http://www.kb.cert.org/vuls/id/404470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14938
CVE ID: CVE-2004-0006 State: PUBLISHED Published: 2004-01-29T05:00:00 Last Updated: 2024-08-08T00:01:23.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc - http
: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc - http://www.securityfocus.com/bid/9489 - http://www.debian.org/security/2004/dsa-434 - ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc - http://www.redhat.com/support/errata/RHSA-2004-032.html - http://www.novell.com/linux/security/advisories/2004_04_gaim.html - http://www.osvdb.org/3732 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A818 - http://www.kb.cert.org/vuls/id/871838 - http://www.kb.cert.org/vuls/id/44
definition/oval%3Aorg.mitre.oval%3Adef%3A818 - http://www.kb.cert.org/vuls/id/871838 - http://www.kb.cert.org/vuls/id/444158 - http://marc.info/?l=bugtraq&m=107513690306318&w=2 - http://www.kb.cert.org/vuls/id/297198 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14941 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10222 - http://ultramagnetic.sourceforge.net/advisories/001.html - http://security.gentoo.org/glsa/glsa-200401-04.xml - http://www.securitytracker.com/id?1008850 - http://marc.info/?l=bugtraq&m=107522432613022&w=2 - http://security.e-matters.de/advisories/012004.html - http://www.redhat.com/support/errata/RHSA-2004-033.html - http:
- http://security.e-matters.de/advisories/012004.html - http://www.redhat.com/support/errata/RHSA-2004-033.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:006 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14939 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14940 - http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html - http://www.kb.cert.org/vuls/id/527142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14945 - http://www.kb.cert.org/vuls/id/371382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14943 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=00
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/14943 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813 - http://www.osvdb.org/3731 - http://www.kb.cert.org/vuls/id/503030 - http://www.redhat.com/support/errata/RHSA-2004-045.html
CVE ID: CVE-2004-0007 State: PUBLISHED Published: 2004-01-29T05:00:00 Last Updated: 2024-08-08T00:01:23.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9489 - http://www.debian.org/security/2004/dsa-434 - http://www.redhat.com/support/errata/RHSA-2004-032.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ad
m/support/errata/RHSA-2004-032.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9906 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158 - http://marc.info/?l=bugtraq&m=107513690306318&w=2 - http://ultramagnetic.sourceforge.net/advisories/001.html - http://security.gentoo.org/glsa/glsa-200401-04.xml - http://www.securitytracker.com/id?1008850 - http://marc.info/?l=bugtraq&m=107522432613022&w=2 - http://security.e-matters.de/advisories/012004.html - http://www.redhat.com/support/errata/RHSA-2004-033.html - http://www.osvdb.org/3733 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:006 -
rrata/RHSA-2004-033.html - http://www.osvdb.org/3733 - http://www.mandriva.com/security/advisories?name=MDKSA-2004:006 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A819 - http://www.kb.cert.org/vuls/id/197142 - http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html - http://www.securityfocus.com/advisories/6281 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14946
CVE ID: CVE-2004-0008 State: PUBLISHED Published: 2004-01-29T05:00:00 Last Updated: 2024-08-08T00:01:23.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc - http://marc.info/?l=bugtraq&m=107522338611564&w=2 - http://www.debian.org/security/2004/dsa-434 - ftp://patches.sgi.com/support/free/security/advisories/20040201-0
64&w=2 - http://www.debian.org/security/2004/dsa-434 - ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc - http://www.redhat.com/support/errata/RHSA-2004-032.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A820 - http://www.osvdb.org/3734 - http://marc.info/?l=bugtraq&m=107513690306318&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9469 - http://ultramagnetic.sourceforge.net/advisories/001.html - http://security.gentoo.org/glsa/glsa-200401-04.xml - http://www.securitytracker.com/id?1008850 - http://marc.info/?l=bugtraq&m=107522432613022&w=2 - http://security.e-matters.de/advisori
curitytracker.com/id?1008850 - http://marc.info/?l=bugtraq&m=107522432613022&w=2 - http://security.e-matters.de/advisories/012004.html - http://www.redhat.com/support/errata/RHSA-2004-033.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:006 - http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/14937 - http://www.kb.cert.org/vuls/id/779614 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813 - http://www.redhat.com/support/errata/RHSA-2004-045.html
CVE ID: CVE-2004-0009 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:01:23.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache-SSL 1.3.28+1.52 and earlier, with SSLVerifyClient set to 1 or 3 and SSLFakeBasicAuth enabled, allows remote attackers to forge a client certificate by using basic authentication with the "one-line DN" of the target user. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15065 - http://www.osvdb.org/3877 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016870.html - http://www.apache-ssl.org/advisory-20040206.txt - http://marc.info/?l=b
mail/full-disclosure/2004-February/016870.html - http://www.apache-ssl.org/advisory-20040206.txt - http://marc.info/?l=bugtraq&m=107619127531765&w=2 - http://www.securityfocus.com/bid/9590
CVE ID: CVE-2004-0010 State: PUBLISHED Published: 2004-02-19T05:00:00 Last Updated: 2024-08-08T00:01:23.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ncp_lookup function for ncpfs in Linux kernel 2.4.x allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11388 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1035 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A835 - http://www.debian.org/security/2004/dsa-482 - http://www.de
sitory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A835 - http://www.debian.org/security/2004/dsa-482 - http://www.debian.org/security/2004/dsa-495 - http://www.securityfocus.com/advisories/6759 - http://www.debian.org/security/2004/dsa-479 - http://www.redhat.com/support/errata/RHSA-2004-069.html - http://www.redhat.com/support/errata/RHSA-2004-188.html - http://www.ciac.org/ciac/bulletins/o-082.shtml - http://www.mandriva.com/security/advisories?name=MDKSA-2004:015 - http://www.debian.org/security/2004/dsa-480 - http://fedoranews.org/updates/FEDORA-2004-079.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/15250 - http://www.debian.org/security/2004/dsa-489 - http://www.debia
ps://exchange.xforce.ibmcloud.com/vulnerabilities/15250 - http://www.debian.org/security/2004/dsa-489 - http://www.debian.org/security/2004/dsa-481 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000820 - http://www.securityfocus.com/bid/9691 - http://www.novell.com/linux/security/advisories/2004_05_linux_kernel.html - http://www.redhat.com/support/errata/RHSA-2004-065.html - http://www.debian.org/security/2004/dsa-491
CVE ID: CVE-2004-0011 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:01:23.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in fsp before 2.81.b18 allows remote users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9377 - http://www.ciac.org/ciac/bulletins/o-048.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/14155 - http://www.debian.org/security/2004/dsa-416
CVE ID: CVE-2004-0012 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2004-0013 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:01:23.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: jabber 1.4.2, 1.4.2a, and possibly earlier versions, does not properly handle SSL connections, which allows remote attackers to cause a denial of service (crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9376 - http://www.debian.org/security/2004/dsa-414 - http://secunia.com/advisories/10559 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:005 - http://www.osvdb.org/3345 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14158
CVE ID: CVE-2004-0014 State: PUBLISHED Published: 2004-01-08T05:00:00 Last Updated: 2024-08-08T00:01:23.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14141 - http://secunia.com/advisories/10550 - http://www.securitytracker.com/id?1008616 - http://www.securityfocus.com/bid/9365 - http://www.debian.org/security/2004/dsa-412
CVE ID: CVE-2004-0015 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:01:23.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: vbox3 0.1.8 and earlier does not properly drop privileges before executing a user-provided TCL script, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14170 - http://www.securityfocus.com/bid/9381 - http://www.debian.org/security/2004/dsa-418
CVE ID: CVE-2004-0016 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:01:23.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers to create and execute PHP files. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-419 - http://www.securityfocus.com/bid/9387 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13489 - http://www.osvdb.org/6860
CVE ID: CVE-2004-0017 State: PUBLISHED Published: 2004-01-14T05:00:00 Last Updated: 2024-08-08T00:01:23.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the (1) calendar and (2) infolog modules for phpgroupware 0.9.14 allow remote attackers to perform unauthorized database operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2004/dsa-419 - http://www.securityfocus.com/bid/9386 - http://www.securitytracker.com/id?1008662 - http://secunia.com/advisories/10591
CVE ID: CVE-2004-0028 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:01:23.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: jitterbug 1.6.2 does not properly sanitize inputs, which allows remote authenticated users to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9397 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14207 - http://www.debian.org/security/2004/dsa-420
CVE ID: CVE-2004-0029 State: PUBLISHED Published: 2004-01-08T05:00:00 Last Updated: 2024-08-08T00:01:23.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allows local users to modify the Notes configuration and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9366 - http://www.excluded.org/advisories/advisory05.txt - http://www.securitytracker.com/id?1008623 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14153 - http://marc.info/?l=bugtraq&m=107340897710308&w=2 - http://secunia.com/advisories