Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-3860 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in athena.php in Oliver May Athena PHP Website Administration 0.1a allows remote attackers to execute arbitrary PHP code via a URL in the athena_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/208 - http://sourceforge.net/forum/forum.php?forum_id=514746 - http://www.vupen.com/english/advisories/2005/2599 - http://www.securityfocus.com/bid/15574 - http://securitytracker.com/id?1015278 - http://www.securityfocus.com/ar
/2599 - http://www.securityfocus.com/bid/15574 - http://securitytracker.com/id?1015278 - http://www.securityfocus.com/archive/1/417796/100/0/threaded
CVE ID: CVE-2005-3861 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in content.php in phpGreetz 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the content parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/210 - http://securitytracker.com/id?1015276 - http://www.securityfocus.com/bid/15575 - http://www.vupen.com/english/advisories/2005/2601 - http://www.securityfocus.com/archive/1/417798/100/0/threaded
CVE ID: CVE-2005-3862 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21160 - http://www.vupen.com/english/advisories/2005/2604 - http://www.securityfocus.com/bid/15577 - http://secunia.com/advisories/18665 - http://secunia.com/advisories/17774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23267 - http://www.kipple.pe.kr/win/unalz/ - http://bugs.debian.org/cgi-bin/bugreport.cgi?bu
bmcloud.com/vulnerabilities/23267 - http://www.kipple.pe.kr/win/unalz/ - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=340842 - http://www.debian.org/security/2006/dsa-959
CVE ID: CVE-2005-3863 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21684 - http://secunia.com/advisories/17768 - http://www.vupen.com/english/advisories/2006/2062 - http://secunia.com/advisories/20368 - http://security.gentoo.org/gls
http://www.vupen.com/english/advisories/2006/2062 - http://secunia.com/advisories/20368 - http://security.gentoo.org/glsa/glsa-200608-27.xml - http://security.gentoo.org/glsa/glsa-200512-11.xml - http://www.debian.org/security/2006/dsa-1088 - http://www.securityfocus.com/bid/15600 - http://secunia.com/advisories/20446 - http://www.zone-h.org/en/advisories/read/id=8480/ - http://secunia.com/advisories/20329 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23233 - http://www.debian.org/security/2006/dsa-1083 - http://www.vupen.com/english/advisories/2005/2605 - http://www.securityfocus.com/archive/1/417906/100/0/threaded - http://www.osvdb.org/21161 - http://secunia.com/advisories/18081
CVE ID: CVE-2005-3864 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in SourceWell 1.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the cnt parameter. NOTE: various reports indicate that the affected version is 1.1.3, but as of 2005-11-29, the most recent version appears to be 1.1.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21130 - http://www.vupen.com/english/advisories/2005/2615 - http://pridels0.blogspot.com/2005/11/sourcewell-sql-inj-vuln.html - http://secunia.com/advisories/
dvisories/2005/2615 - http://pridels0.blogspot.com/2005/11/sourcewell-sql-inj-vuln.html - http://secunia.com/advisories/17673 - http://www.securityfocus.com/bid/15586
CVE ID: CVE-2005-3865 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in AllWeb search 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/11/allweb-search-sql-inj-vuln.html - http://secunia.com/advisories/17709 - http://www.securityfocus.com/bid/15587 - http://www.vupen.com/english/advisories/2005/2610 - http://www.osvdb.org/21129
CVE ID: CVE-2005-3866 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SearchFeed Search Engine 1.3.2 and earlier allows remote attackers to inject arbitrary HTML and web script, possibly via the REQ parameter, which is used when performing a search. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17715 - http://pridels0.blogspot.com/2005/11/searchfeed-search-engine-xss-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/23348 - http://www.securityfocus.com/bid/15612 - http://www.vupen.com/engl
/exchange.xforce.ibmcloud.com/vulnerabilities/23348 - http://www.securityfocus.com/bid/15612 - http://www.vupen.com/english/advisories/2005/2609 - http://www.osvdb.org/21144
CVE ID: CVE-2005-3867 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in RevenuePilot Search Engine Script 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the REQ parameter, which is used when performing a search. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/11/revenuepilot-search-engine-xss-vuln.html - http://www.osvdb.org/21143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23345 - http://www.securityfocus.com/bid/15612 - http://www.securityfocus.com/bid/1
.xforce.ibmcloud.com/vulnerabilities/23345 - http://www.securityfocus.com/bid/15612 - http://www.securityfocus.com/bid/16129 - http://secunia.com/advisories/17717 - http://www.vupen.com/english/advisories/2005/2607
CVE ID: CVE-2005-3868 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) term, (2) id, (3) stat, and (4) source parameters to index.php, and (5) through the image parameters with an add request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2616 - http://www.securityfocus.com/bid/15588 - http://www.osvdb.org/21127 - http://www.exploit-db.com/exploits/13993 - http://secunia.com/advisories/17719 - http:/
8 - http://www.osvdb.org/21127 - http://www.exploit-db.com/exploits/13993 - http://secunia.com/advisories/17719 - http://pridels0.blogspot.com/2005/11/k-search-multiple-vuln.html
CVE ID: CVE-2005-3869 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Google API Search 1.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via hex-encoded values in the REQ parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17725 - http://www.osvdb.org/21145 - http://www.vupen.com/english/advisories/2005/2608 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23347 - http://pridels0.blogspot.com/2005/11/google-api-search-xss-vuln.html - http://www.secu
cloud.com/vulnerabilities/23347 - http://pridels0.blogspot.com/2005/11/google-api-search-xss-vuln.html - http://www.securityfocus.com/bid/15612
CVE ID: CVE-2005-3870 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in edmobbs9r.php in edmoBBS 0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) table and (2) messageID parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21132 - http://secunia.com/advisories/17726 - http://pridels0.blogspot.com/2005/11/edmobbs-sql-inj-vuln.html - http://www.securityfocus.com/bid/15589 - http://www.vupen.com/english/advisories/2005/2621
CVE ID: CVE-2005-3871 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Joels Bulletin board (JBB) 0.9.9rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) nr parameter in topiczeigen.php, (2) forum and (3) zeigeseite parameters in showforum.php, (4) forum parameter in newtopic.php, and (5) tidnr parameter in neuerbeitrag.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21149 - http://www.securityfocus.com/bid/15590 - http://secunia.com/advisories/17727 - http://pridels0.blogspot.co
b.org/21149 - http://www.securityfocus.com/bid/15590 - http://secunia.com/advisories/17727 - http://pridels0.blogspot.com/2005/11/jbb-sql-inj-vuln.html - http://www.osvdb.org/21151 - http://www.vupen.com/english/advisories/2005/2620 - http://www.osvdb.org/21148 - http://www.osvdb.org/21150
CVE ID: CVE-2005-3872 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Ugroup 2.6.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) FORUM_ID parameter in forum.php, and the (2) TOPIC_ID, (3) FORUM_ID, and (4) CAT_ID parameters in topic.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15591 - http://pridels0.blogspot.com/2005/11/ugroup-262-sql-inj-vuln.html - http://www.osvdb.org/21152 - http://secunia.com/advisories/17734 - http://www.vupen.com/english/advisories/2005/2
html - http://www.osvdb.org/21152 - http://secunia.com/advisories/17734 - http://www.vupen.com/english/advisories/2005/2619 - http://www.osvdb.org/21153
CVE ID: CVE-2005-3873 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in topic.php in ShockBoard 3.0 and 4.0 allows remote attackers to execute arbitrary SQL commands via the offset parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15592 - http://secunia.com/advisories/17735 - http://pridels0.blogspot.com/2005/11/shockboard-sql-inj-vuln.html - http://www.vupen.com/english/advisories/2005/2612 - http://www.osvdb.org/21138
CVE ID: CVE-2005-3874 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in netzbr.php in Netzbrett 1.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the p_entry parameter in an entry command to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17742 - http://pridels0.blogspot.com/2005/11/netzbrett-151-sql-inj-vuln.html - http://www.vupen.com/english/advisories/2005/2611 - http://www.securityfocus.com/bid/15593 - http://www.osvdb.org/21139
CVE ID: CVE-2005-3875 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Enterprise Connector 1.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the messageid parameter in (1) send.php or (2) a delete action in messages.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21141 - http://www.osvdb.org/21142 - http://www.vupen.com/english/advisories/2005/2602 - http://www.securityfocus.com/bid/15578 - http://pridels0.blogspot.com/2005/11/enterprise-connector-sql-inj-vuln.html - http://secunia.c
rityfocus.com/bid/15578 - http://pridels0.blogspot.com/2005/11/enterprise-connector-sql-inj-vuln.html - http://secunia.com/advisories/17743
CVE ID: CVE-2005-3876 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in adcbrowres.php in AD Center ADC2000 NG Pro 1.2 and NG Pro Lite allow remote attackers to execute arbitrary SQL commands via the (1) cat and (2) lang parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2613 - http://www.securityfocus.com/bid/15595 - http://www.osvdb.org/21131 - http://secunia.com/advisories/17744 - http://pridels0.blogspot.com/2005/11/adc2000-ng-pro-sql-inj-vuln.html
CVE ID: CVE-2005-3877 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Simple Document Management System (SDMS) 2.0-CVS and earlier allow remote attackers to execute arbitrary SQL commands via the (1) folder_id parameter in list.php and (2) mid parameter in a view action to messages.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21375 - http://secunia.com/advisories/17746 - http://www.osvdb.org/21374 - http://pridels0.blogspot.com/2005/11/sdms-20-sql-inj-vuln.html - http://www.securityfocus.com/bid/15596 - http:
/21374 - http://pridels0.blogspot.com/2005/11/sdms-20-sql-inj-vuln.html - http://www.securityfocus.com/bid/15596 - http://www.vupen.com/english/advisories/2005/2614
CVE ID: CVE-2005-3878 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in PHP Doc System 1.5.1 and earlier allows remote attackers to access or include arbitrary files via a .. (dot dot) in the show parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17745 - http://pridels0.blogspot.com/2005/11/php-doc-system-151-local-file.html - http://www.securityfocus.com/bid/15611 - http://www.vupen.com/english/advisories/2005/2622
CVE ID: CVE-2005-3879 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) sbres_id parameter in (a) details_res.php, (b) refer_friend.php, and (c) report_link.php, and (2) the sbcat_id parameter in (d) showcats.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21136 - http://secunia.com/advisories/17555 - http://www.vupen.com/english/advisories/2005/2617 - http://www.osvdb.org/21134 - http://www.secu
.com/advisories/17555 - http://www.vupen.com/english/advisories/2005/2617 - http://www.osvdb.org/21134 - http://www.securityfocus.com/bid/15585 - http://pridels0.blogspot.com/2005/11/softbiz-resource-repository-script-sql.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/23208 - http://www.osvdb.org/21135 - http://www.osvdb.org/21133
CVE ID: CVE-2005-3880 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Omnistar KBase 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter in users/comments.php, (2) category_id and (3) id parameters in users/kb.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17773 - http://www.vupen.com/english/advisories/2005/2623 - http://pridels0.blogspot.com/2005/11/omnistar-kbase-sql-inj-vuln.html - http://www.osvdb.org/21204 - http://www.osvdb.org/21203 - http:/
blogspot.com/2005/11/omnistar-kbase-sql-inj-vuln.html - http://www.osvdb.org/21204 - http://www.osvdb.org/21203 - http://www.securityfocus.com/bid/15635
CVE ID: CVE-2005-3881 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in AtlantisFAQ Knowledge Base Software 2.03 and earlier allows remote attackers to execute arbitrary SQL commands via the searchStr parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2624 - http://secunia.com/advisories/17812 - http://www.osvdb.org/21267 - http://www.securityfocus.com/bid/15654 - http://pridels0.blogspot.com/2005/11/altantisfaq-sql-inj-vuln.html
CVE ID: CVE-2005-3882 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21265 - http://www.vupen.com/english/advisories/2005/2625 - http://pridels0.blogspot.com/2005/11/faqring-30-sql-inj-vuln.html - http://www.securityfocus.com/bid/15655 - http://secunia.com/advisories/17811
CVE ID: CVE-2005-3883 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote attackers to inject arbitrary e-mail headers via line feeds (LF) in the "To" address argument. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20210 - http://www.turbolinux.com/security/2006/TLSA-2006-38.txt - http://secunia.com/advisories/18198 - http://rhn.redhat.com/errata/RHSA-2006-0276.html - http://secunia.com/advisories/17763 - http://secunia.com/advisories/18054 - https://oval.
m/errata/RHSA-2006-0276.html - http://secunia.com/advisories/17763 - http://secunia.com/advisories/18054 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10332 - http://bugs.php.net/bug.php?id=35307 - http://www.php.net/release_5_1_0.php - http://securitytracker.com/id?1015296 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:238 - http://secunia.com/advisories/20951 - http://www.securityfocus.com/archive/1/419504/100/0/threaded - http://www.securityfocus.com/bid/15571 - http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm - http://secunia.com/advisories/19832 - ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.as
-129.htm - http://secunia.com/advisories/19832 - ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/23270 - https://www.ubuntu.com/usn/usn-232-1/ - http://www.vupen.com/english/advisories/2006/2685
CVE ID: CVE-2005-3884 State: PUBLISHED Published: 2005-11-29T11:00:00 Last Updated: 2024-08-07T23:24:36.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the search action in Zainu 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) term and (2) start parameters to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2603 - http://secunia.com/advisories/17766 - http://www.osvdb.org/21197 - http://www.securityfocus.com/bid/15579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23274 - http://pridels0.blogspot.com/2005/11/zainu-2x-sq
id/15579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23274 - http://pridels0.blogspot.com/2005/11/zainu-2x-sql-inj-vuln.html
CVE ID: CVE-2005-3885 State: PUBLISHED Published: 2005-11-29T19:00:00 Last Updated: 2024-08-07T23:24:36.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=321501 - http://secunia.com/advisories/17882 - http://secunia.com/advisories/16343 - https://usn.ubuntu.com/223-1/ - http://secunia.com/advisories/17886 - http://www.debian.org/security/2005/dsa-916 - http://www.securityfocus.com/bid/145
http://secunia.com/advisories/17886 - http://www.debian.org/security/2005/dsa-916 - http://www.securityfocus.com/bid/14522
CVE ID: CVE-2005-3886 State: PUBLISHED Published: 2005-11-29T20:00:00 Last Updated: 2024-08-07T23:24:36.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco Security Agent (CSA) 4.5.0 and 4.5.1 agents, when running on Windows systems, allows local users to bypass protections and gain system privileges by executing certain local software. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sa-20051129-csa.shtml - http://www.vupen.com/english/advisories/2005/2655 - http://secunia.com/advisories/17815 - http://securitytracker.com/id?1015283 - http://www.securityfocus.com/bid/15618 - http://secu
unia.com/advisories/17815 - http://securitytracker.com/id?1015283 - http://www.securityfocus.com/bid/15618 - http://securityreason.com/securityalert/224
CVE ID: CVE-2005-3887 State: PUBLISHED Published: 2005-11-29T21:00:00 Last Updated: 2024-08-07T23:24:36.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gadu-Gadu 7.20 does not properly handle MS-DOS device names in filenames, which allows remote attackers to (1) cause a denial of service (hang) via an image filename of AUX: sent twice (hang), or (2) write to the LPT1 port via a filename of "LPT1:". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/15520/ - http://marc.info/?l=bugtraq&m=113261573023912&w=2 - http://www.osvdb.org/21015 - http://secunia.com/advisories/17597/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/23
p://www.osvdb.org/21015 - http://secunia.com/advisories/17597/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/23148 - http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0658.html