Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0292 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in PHP Gift Registry (phpGiftReg) 1.4.0, and possibly other versions before 1.5.0b1, allow remote attackers to execute arbitrary SQL commands via the (1) messageid, (2) shopper, (3) shopfor, or (4) itemid parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12289 - http://securitytracker.com/id?1012910 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18925 - http://www.securityfocus.com/archive/1/392485 - http://s
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18925 - http://www.securityfocus.com/archive/1/392485 - http://secunia.com/advisories/13873 - http://marc.info/?l=bugtraq&m=110599710017066&w=2 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030965.html
CVE ID: CVE-2005-0293 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in minis.php in Minis 0.2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the month parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1012911 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030966.html - http://secunia.com/advisories/13866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18928 - http://marc.info/?l=bugtraq&m=110599953704025&w=2 - http://www.securityfocus.com/bid/12279
CVE ID: CVE-2005-0294 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service (infinite loop) via an HTTP request for a file that the web server does not have permission to read, as demonstrated using the month parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1012911 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030966.html - http://secunia.com/advisories/13866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18929 - http://marc.info/?l=bugtraq&
secunia.com/advisories/13866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18929 - http://marc.info/?l=bugtraq&m=110599953704025&w=2
CVE ID: CVE-2005-0295 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: npptnt2.sys in nProtect Gameguard provides unrestricted I/O to any process that calls it, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13928 - http://marc.info/?l=bugtraq&m=110608422029555&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18952 - http://www.securityfocus.com/bid/12280
CVE ID: CVE-2005-0296 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: NOTE: this issue has been disputed by the vendor. The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as the version, via an incorrect login and a modified (1) error or (2) modify parameter that returns template files or the "about" information page. NOTE: the vendor has disputed this issue Additional Analyst Notes: - CVE Program Container: References: - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-01/0341.html -
- CVE Program Container: References: - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-01/0341.html - http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-01/0771.html - http://www.osvdb.org/13135 - http://marc.info/?l=bugtraq&m=110608203729814&w=2 - http://support.novell.com/servlet/tidfinder/10096251 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18954 - http://www.securityfocus.com/bid/12285
CVE ID: CVE-2005-0297 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Oracle Database 9i and 10g allows remote attackers to execute arbitrary SQL commands and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110606477308492&w=2
CVE ID: CVE-2005-0298 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technology/deploy/security/pdf/cpu-jan-2005_advisory.pdf - http://marc.info/?l=bugtraq&m=110608912525883&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18947 - http://www.petefinnigan.com/directory_traversal.pdf
CVE ID: CVE-2005-0299 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the (1) dir parameter to controller.php or (2) dir_name parameter to controlleroo.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18988 - http://www.securityfocus.com/bid/12318 - http://marc.info/?l=bugtraq&m=110627132209963&w=2 - http://securitytracker.com/id?1012950
CVE ID: CVE-2005-0300 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in session.php in JSBoard 2.0.9 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the table parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12319 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18990 - http://marc.info/?l=bugtraq&m=110627201120011&w=2 - http://secunia.com/advisories/13920 - http://securitytracker.com/id?1012949
CVE ID: CVE-2005-0301 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to the program. Additional Analyst Notes: - CVE Program Container: References: - http://www.comersus.org/forum/displayMessage.asp?mid=32753 - http://marc.info/?l=bugtraq&m=110636597832556&w=2 - http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19010
CVE ID: CVE-2005-0302 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110636597832556&w=2 - http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19013
CVE ID: CVE-2005-0303 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_supportError.asp in BackOffice Lite 6.0 and 6.01 allow remote attackers to inject arbitrary web script or HTML via the error parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110636597832556&w=2 - http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19014
CVE ID: CVE-2005-0304 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a filename in a ZIP file for a skin. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13969 - http://marc.info/?l=bugtraq&m=110642748517854&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19030 - http://aluigi.altervista.org/adv/divxplayer-adv.txt - http://www.securityfocus.com/bid/12332
CVE ID: CVE-2005-0305 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users and gain privileges via the line parameter in a docreate operation. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1012951 - http://www.osvdb.org/13131 - http://marc.info/?l=bugtraq&m=110627350616949&w=2 - http://www.securityfocus.com/bid/12304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18998 - http://marc.info/?l=bugtraq&m=110643320814371&w=2
CVE ID: CVE-2005-0306 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: MercuryBoard 1.1.1 allows remote attackers to gain sensitive information via an HTTP request with the n parameter set to 0, which causes a divide-by-zero error and reveals the path in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110661795632354&w=2 - http://www.securityfocus.com/bid/12359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19048
CVE ID: CVE-2005-0307 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) s, (2) l, (3) a, (4) t, (5) to, or (6) re parameters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110661795632354&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19050 - http://www.securityfocus.com/bid/12359
CVE ID: CVE-2005-0308 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code via a large import or export function name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12352 - http://marc.info/?l=bugtraq&m=110661194108205&w=2 - http://secunia.com/advisories/13986 - http://securitytracker.com/id?1012997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19044
CVE ID: CVE-2005-0309 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) mod.php in Exponent 0.95 allow remote attackers to inject arbitrary web script or HTML via the module parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/13190 - http://www.securityfocus.com/bid/12358 - http://marc.info/?l=bugtraq&m=110666998407073&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19061 - http://www.osvdb.org/13188
CVE ID: CVE-2005-0310 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exponent 0.95 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) search.info.php, (2) permissions.info.php, (3) security.info.php, (4) formcontrol.php, or (5) file_modules.php, which reveals the path in an error message because the pathos_core_version variable is undefined. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19064 - http://marc.info/?l=bugtraq&m=110666998407073&w=2
CVE ID: CVE-2005-0311 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ingate Firewall 4.1.3 and earlier does not terminate the PPTP session for an active user when the administrator disables that user from a resource, which could allow remote authenticated users to retain unauthorized access to resources. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19123 - http://www.securityfocus.com/bid/12383 - http://marc.info/?l=bugtraq&m=110684375429946&w=2 - http://securitytracker.com/id?1013022 - http://www.ingate.com/relnote-422.ph
arc.info/?l=bugtraq&m=110684375429946&w=2 - http://securitytracker.com/id?1013022 - http://www.ingate.com/relnote-422.php - http://secunia.com/advisories/14060
CVE ID: CVE-2005-0312 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service (access violation) via a CWD command with a crafted pathname, as demonstrated using a large string of "%s" sequences, possibly indicating a format string vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19129 - http://www.securityfocus.com/bid/12384 - http://support.jgaa.com/index.php?cmd=ShowReport&ID=02643 - http://marc.info/?l=bugt
//www.securityfocus.com/bid/12384 - http://support.jgaa.com/index.php?cmd=ShowReport&ID=02643 - http://marc.info/?l=bugtraq&m=110687202332039&w=2
CVE ID: CVE-2005-0313 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) upload arbitrary files via certain parameters to upload.php or (2) read arbitrary files via certain parameters to download.php, and remote authenticated users to read, create, or delete arbitrary directories and files via the IMAP commands (3) CREATE, (4) EXAMINE, (5) SELECT, or (6) DELETE. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19114 -
onal Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19114 - http://www.securityfocus.com/bid/12388 - http://securitytracker.com/id?1013017 - http://marc.info/?l=bugtraq&m=110685011825461&w=2 - http://secunia.com/advisories/14053 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19108
CVE ID: CVE-2005-0314 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in user.php in Magic Winmail Server 4.0 Build 1112 allows remote attackers to inject arbitrary web script or HTML via the personal information fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12388 - http://securitytracker.com/id?1013017 - http://marc.info/?l=bugtraq&m=110685011825461&w=2 - http://secunia.com/advisories/14053 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19113
CVE ID: CVE-2005-0315 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command is the same as the IP address of the user of the FTP session, which allows remote authenticated users to use the server as an intermediary for port scanning. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12388 - http://securitytracker.com/id?1013017 - http://marc.info/?l=bugtraq&m=110685011825461&w=2 - http://secunia.com/advisories/14053 - https://exchange.xforce.ibmcl
http://marc.info/?l=bugtraq&m=110685011825461&w=2 - http://secunia.com/advisories/14053 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19115
CVE ID: CVE-2005-0316 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14058 - http://www.securityfocus.com/bid/12394 - http://marc.info/?l=bugtraq&m=110693045507245&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19144 - http://www.oliverkarow.de/research/WebWasherCONNECT.txt -
https://exchange.xforce.ibmcloud.com/vulnerabilities/19144 - http://www.oliverkarow.de/research/WebWasherCONNECT.txt - http://securitytracker.com/id?1013036
CVE ID: CVE-2005-0317 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in useredit_account.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19161 - http://www.securityfocus.com/bid/12395 - http://marc.info/?l=bugtraq&m=110692897003614&w=2 - http://secunia.com/advisories/14079
CVE ID: CVE-2005-0318 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: useredit_account.wdm in Alt-N WebAdmin 3.0.4 does not properly validate account edits by the logged in user, which allows remote authenticated users to edit other users' account information via a modified user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013038 - http://www.securityfocus.com/bid/12395 - http://marc.info/?l=bugtraq&m=110692897003614&w=2
CVE ID: CVE-2005-0319 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct remote injection vulnerability in modalfram.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to load external webpages that appear to come from the WebAdmin server, which allows remote attackers to inject arbitrary HTML or web script to facilitate cross-site scripting (XSS) and phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19162 - http://www.securityfocus.com/bid/12395 - http://marc.info/?l=bugtraq&m=110692897003614&w=2
CVE ID: CVE-2005-0320 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to login.html, (2) accountid parameter to accountsettings_add.html, or the (3) note, (4) title, and (5) location fields to calendar.html. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19147 - http://marc.info/?l=bugtraq&m=110693950205007&w=2 - http://www.securityfoc
e.xforce.ibmcloud.com/vulnerabilities/19147 - http://marc.info/?l=bugtraq&m=110693950205007&w=2 - http://www.securityfocus.com/bid/12396
CVE ID: CVE-2005-0321 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to (1) calendar_d.html, (2) calendar_m.html, (3) calendar_w.html, or (4) calendar_y.html, which reveal the installation path. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110693950205007&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19152
CVE ID: CVE-2005-0322 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) users.cfg, (2) settings.cfg, (3) users.dat or (4) user.dat files, which allows local users to extract the passwords. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110693950205007&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19153
CVE ID: CVE-2005-0323 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Infinite Mobile Delivery Webmail 2.6 allows remote attackers to inject arbitrary web script or HTML via the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12399 - http://secunia.com/advisories/14075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19151 - http://www.lovebug.org/imd_advisory.txt - http://marc.info/?l=bugtraq&m=110703630922262&w=2 - http://securitytracker.com/id?1013044
CVE ID: CVE-2005-0324 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Infinite Mobile Delivery Webmail 2.6 allows remote attackers to gain sensitive information via an HTTP request that contains invalid characters for a Windows foldername, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12399 - http://secunia.com/advisories/14075 - http://www.lovebug.org/imd_advisory.txt - http://marc.info/?l=bugtraq&m=110703630922262&w=2 - http://securitytracker.com/id?1013044 - https://exchange.xforce.ibmcloud.com/vul
info/?l=bugtraq&m=110703630922262&w=2 - http://securitytracker.com/id?1013044 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19154
CVE ID: CVE-2005-0325 State: PUBLISHED Published: 2005-02-10T05:00:00 Last Updated: 2024-08-07T21:05:25.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xpand Rally 1.0.0.0 allows remote attackers or remote malicious game servers to cause a denial of service (application crash) via a packet with large values that are not properly handled in certain malloc or memcpy operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19150 - http://securitytracker.com/id?1013043 - http://secunia.com/advisories/14073 - http://aluigi.altervista.org/adv/xprallyboom-adv.txt - http:
cker.com/id?1013043 - http://secunia.com/advisories/14073 - http://aluigi.altervista.org/adv/xprallyboom-adv.txt - http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031336.html - http://marc.info/?l=bugtraq&m=110720064811485&w=2