Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-0286 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RobotFTP 1.0 and 2.0 beta 1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long username. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9672 - http://marc.info/?l=bugtraq&m=107696194306878&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15225
CVE ID: CVE-2004-0287 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service (crash) via a RETR command with a long argument containing a large number of / (slash) characters, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9668 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15220 - http://marc.info/?l=bugtraq&m=107695172917263&w=2
CVE ID: CVE-2004-0288 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch 3.2.13 through 3.2.15 could allow remote attackers to execute arbitrary code by indexing a large document. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15209 - http://www.securityfocus.com/bid/9667 - http://marc.info/?l=bugtraq&m=107695139930726&w=2
CVE ID: CVE-2004-0289 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in sdbscan in SignatureDB 0.1.1 allows local users to cause a denial of service (segmentation fault) via a database file that contains a large key parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15217 - http://marc.info/?l=bugtraq&m=107695113832648&w=2
CVE ID: CVE-2004-0290 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Purge Jihad 2.0.1 and earlier allows remote game servers to execute arbitrary code via an information packet that contains large (1) battle type and (2) map name fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9671 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15216 - http://purge.worthplaying.com/phpbb/viewtopic.php?t=1167 - http://marc.info/?l=bugtraq&m=107695064204362&w=2
CVE ID: CVE-2004-0291 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in post.php for YaBB SE 1.5.4 and 1.5.5 allows remote attackers to obtain hashed passwords via the quote parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107696318522985&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15224 - http://www.securityfocus.com/bid/9674
CVE ID: CVE-2004-0292 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:04.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in KarjaSoft Sami HTTP Server 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15237 - http://www.security-protocols.com/modules.php?name=News&file=article&sid=1746 - http://marc.info/?l=bugtraq&m=107703630913205&w=2 - http://www.securityfocus.com/bid/9679
CVE ID: CVE-2004-0293 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. (dot dot) in a HTTP request to (1) gotopage.cgi or (2) genindexpage.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14982 - http://www.securityfocus.com/bid/9670 - http://www.zone-h.org/en/advisories/read/id=3962/ - http://marc.info/?l=bugtraq&m=107703602707450&w=2
CVE ID: CVE-2004-0294 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:04.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: YaBB 1 SP 1.3.1 displays different error messages when a user exists or not, which makes it easier for remote attackers to identify valid users and conduct a brute force password guessing attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15236 - http://marc.info/?l=bugtraq&m=107703591314745&w=2 - http://www.securityfocus.com/bid/9677
CVE ID: CVE-2004-0295 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a denial of service (CPU consumption) via an open idle connection. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107705346817241&w=2 - http://www.securityfocus.com/bid/9680 - http://www.securiteam.com/windowsntfocus/5IP0B0AC1I.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15242
CVE ID: CVE-2004-0296 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:04.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a TsFtpSrv.exe to exit with an exception by opening and immediately closing a connection. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107705346817241&w=2 - http://www.securityfocus.com/bid/9680 - http://www.securiteam.com/windowsntfocus/5IP0B0AC1I.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15241
CVE ID: CVE-2004-0297 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:10:03.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via an LDAP message with a large tag length. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/972334 - http://www.securityfocus.com/bid/9682 - http://www.idefense.com/application/poi/display?id=74 - http://www.ipswitch.com/support/imail/releases/imail_professional/im805
www.idefense.com/application/poi/display?id=74 - http://www.ipswitch.com/support/imail/releases/imail_professional/im805HF2.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15243 - http://www.osvdb.org/3984
CVE ID: CVE-2004-0298 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: CesarFTP 0.99e allows remote attackers to cause a denial of service (CPU consumption) via a long RETR parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15252 - http://www.securityfocus.com/bid/9666 - http://marc.info/?l=bugtraq&m=107712057628250&w=2
CVE ID: CVE-2004-0299 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:03.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in smallftpd 0.99 allows local users to cause a denial of service (crash) via an FTP request with a large number of "/" (slash) characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15262 - http://marc.info/?l=bugtraq&m=107714207708375&w=2
CVE ID: CVE-2004-0300 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:04.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via (1) the cat parameter in shop.php, (2) the id parameter in more.php, (3) the cat_manufacturer parameter in shop_by_brand.php, or (4) the id parameter in listing.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9676 - http://www.securityfocus.com/bid/9687 - http://www.osvdb.org/3973 - http://marc.info/?l=bugtraq&m=107712117913185&w=2 - http://w
ww.securityfocus.com/bid/9687 - http://www.osvdb.org/3973 - http://marc.info/?l=bugtraq&m=107712117913185&w=2 - http://www.zone-h.org/en/advisories/read/id=3972/ - http://securitytracker.com/alerts/2004/Feb/1009092.html - http://secunia.com/advisories/10902/ - http://www.systemsecure.org/advisories/ssadvisory16022004.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/15232
CVE ID: CVE-2004-0301 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:10:04.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9676 - http://secunia.com/advisories/10902/ - http://www.systemsecure.org/advisories/ssadvisory16022004.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/15235 - http://securitytracker.com/alerts/2004/Feb/1009079.html
CVE ID: CVE-2004-0302 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:13.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) file parameter in index.php, (2) editfile in glossary.php, or (3) editfile in newmultiplechoice.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107712123305706&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15249 - http://www.zone-h.org/en/advisories/read/id=3973/ - http://www.securityfocus.com/bid/9689
CVE ID: CVE-2004-0303 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossaries/index.php, (2) the filename parameter in /readings/index.php, or (3) the filename parameter in /multiplechoice/resultsignore.php, as demonstrated using /etc/passwd. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107712123305706&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15249 - http://www.zone-h.org/en/advisories/read/id=3973/ - http://www.s
://exchange.xforce.ibmcloud.com/vulnerabilities/15249 - http://www.zone-h.org/en/advisories/read/id=3973/ - http://www.securityfocus.com/bid/9689
CVE ID: CVE-2004-0304 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in browse_items.asp in WebCortex WebStores 2000 6.0 allows remote attackers to gain unauthorized access and execute arbitrary commands via the Search_Text parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.s-quadra.com/advisories/Adv-20040218.txt - http://marc.info/?l=bugtraq&m=107712159425226&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15253 - http://www.securityfocus.com/bid/7766
CVE ID: CVE-2004-0305 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:13.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execute arbitrary script as other users and steal session IDs via the Message_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107712159425226&w=2 - http://www.securityfocus.com/bid/9693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15254
CVE ID: CVE-2004-0306 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:17:14.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS 15600 before 1.3(0) enable TFTP service on UDP port 69 by default, which allows remote attackers to GET or PUT ONS system files on the current active TCC in the /flash0 or /flash1 directories. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml - http://www.securityfocus.com/bid/9699 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15264
CVE ID: CVE-2004-0307 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:17:13.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), and ONS 15454 SD before 4.1(3) allows remote attackers to cause a denial of service (reset) by not sending the ACK portion of the TCP three-way handshake and sending an invalid response instead. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml - http://www.securityfocus.com/bid/9699 - http://www.osvdb.org/4009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15265
CVE ID: CVE-2004-0308 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS15600 before 1.3(0) allows a superuser whose account is locked out, disabled, or suspended to gain unauthorized access via a Telnet connection to the VxWorks shell. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/15266 - http://www.osvdb.org/4010 - http://www.securityfocus
html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15266 - http://www.osvdb.org/4010 - http://www.securityfocus.com/bid/9699
CVE ID: CVE-2004-0309 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:17:14.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before 4.5.085, allows remote attackers to execute arbitrary code via a long RCPT TO argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3991 - http://download.zonelabs.com/bin/free/securityAlert/8.html - http://marc.info/?l=bugtraq&m=107722656827427&w=2 - http://www.securityfocus.com/bid/9696 - http://www.kb.cert.or
html - http://marc.info/?l=bugtraq&m=107722656827427&w=2 - http://www.securityfocus.com/bid/9696 - http://www.kb.cert.org/vuls/id/619982 - http://www.ciac.org/ciac/bulletins/o-084.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/14991
CVE ID: CVE-2004-0310 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in LiveJournal 1.0 and 1.1 allows remote attackers to execute Javascript as other users via the stylesheet, which does not strip the semicolon or parentheses, as demonstrated using a background:url. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9700 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15268 - http://marc.info/?l=bugtraq&m=107722627800820&w=2
CVE ID: CVE-2004-0311 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:13.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: American Power Conversion (APC) Web/SNMP Management SmartSlot Card 3.0 through 3.0.3 and 3.21 are shipped with a default password of TENmanUFactOryPOWER, which allows remote attackers to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15238 - http://marc.info/?l=bugtraq&m=107703696631367&w=2 - http://marc.info/?l=bugtraq&m=107721020803565&w=2 - http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/endu
703696631367&w=2 - http://marc.info/?l=bugtraq&m=107721020803565&w=2 - http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=3131&p_created=1077139129
CVE ID: CVE-2004-0312 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys WAP55AG 1.07 allows remote attackers with access to an SNMP read only community string to gain access to read/write communtiy strings via a query for OID 1.3.6.1.4.1.3955.2.1.13.1.2. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107730681012131&w=2 - http://marc.info/?l=bugtraq&m=107712101324233&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15257 - http://www.securityfocus.com/bid/9688
CVE ID: CVE-2004-0313 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request, as demonstrated using a long (1) GET argument or (2) method name. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15275 - http://marc.info/?l=bugtraq&m=107730731900261&w=2 - http://www.securityfocus.com/bid/9706
CVE ID: CVE-2004-0314 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in done.jsp in WebzEdit 1.9 and earlier allows remote attackers to execute arbitrary script as other users via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15289 - http://marc.info/?l=bugtraq&m=107757029514146&w=2
CVE ID: CVE-2004-0315 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:13.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Avirt Voice 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long GET request on port 1080. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107756584609841&w=2 - http://www.securityfocus.com/bid/9721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15288
CVE ID: CVE-2004-0316 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Avirt Soho 4.3 allows remote attackers to cause a denial of service (crash) via (1) a large GET request to port 1080 or (2) a large GET request of % characters to port 8080. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107756666701194&w=2 - http://www.securityfocus.com/bid/9723 - http://www.securityfocus.com/bid/9722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15286
CVE ID: CVE-2004-0317 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in eauth in Load Sharing Facility 4.x, 5.x, and 6.x allows local users or remote attackers within the LSF cluster to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long LSF_From_PC parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15282 - http://www.securityfocus.com/bid/9719 - http://marc.info/?l=bugtraq&m=107756611501236&w=2
CVE ID: CVE-2004-0318 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:13.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Load Sharing Facility (LSF) 4.x, 5.x, and 6.x uses the LSF_EAUTH_UID environment variable, if it exists, instead of the real UID of the user, which could allow remote attackers within the local cluster to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107756600403557&w=2 - http://www.securityfocus.com/bid/9724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15278
CVE ID: CVE-2004-0319 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the font tag in ezBoard 7.3u allows remote attackers to execute arbitrary script as other users, as demonstrated using the background:url in a (1) font color or (2) font face argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9725 - http://marc.info/?l=bugtraq&m=107756639427140&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15287
CVE ID: CVE-2004-0320 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T00:17:14.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in nCipher Hardware Security Modules (HSM) 1.67.x through 1.99.x allows local users to access secrets stored in the module's run-time memory via certain sequences of commands. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15281 - http://www.securityfocus.com/bid/9717 - http://www.osvdb.org/4055 - http://marc.info/?l=bugtraq&m=107755899018249&w=2
CVE ID: CVE-2004-0321 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Team Factor 1.25 and earlier allows remote attackers to cause a denial of service (crash) via a packet that uses a negative number to specify the size of the data block that follows, which causes Team Factor to read unallocated memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.zone-h.org/advisories/read/id=4006 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15274 - http://marc.info/?l=bugtraq&m=107756001412888&w=2 - http://www.securityfocus.com/bid/9708
CVE ID: CVE-2004-0322 State: PUBLISHED Published: 2004-03-18T05:00:00 Last Updated: 2024-08-08T00:17:14.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary script as other users via the (1) member parameter in member.php, (2) uid parameter in u2uadmin.php, (3) user parameter in editprofile.php, (4) an onmouseover event in an align tag when bbcode is allowed, or (5) img tag where bbcode is allowed. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15294 - https://exchange.xforce.ibmcloud.com/vulnera