Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-2059 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) SearchFor parameter in [TABLE-NAME]_search.asp, (2) SQL parameter in [TABLE-NAME]_edit.asp, (3) SearchFor parameter in [TABLE]_list.asp, or (4) SQL parameter in export.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16801 - http://ferruh.mavituna.com/article/?574 - http://www.osvdb.org/8256 - http://secunia.com/advisor
vulnerabilities/16801 - http://ferruh.mavituna.com/article/?574 - http://www.osvdb.org/8256 - http://secunia.com/advisories/12164 - http://marc.info/?l=bugtraq&m=109086977330418&w=2 - http://www.osvdb.org/8255 - http://securitytracker.com/id?1010777 - http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0011.html - http://www.securityfocus.com/bid/10799 - http://www.osvdb.org/8254 - http://www.osvdb.org/8257
CVE ID: CVE-2004-2060 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the database via a direct request to the database filename, which is predictable based on table and field names. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/8253 - http://ferruh.mavituna.com/article/?574 - http://secunia.com/advisories/12164 - http://marc.info/?l=bugtraq&m=109086977330418&w=2 - http://securitytracker.com/id?1010777 - http://archives.neohapsis.com/archive
rc.info/?l=bugtraq&m=109086977330418&w=2 - http://securitytracker.com/id?1010777 - http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0011.html - http://www.securityfocus.com/bid/10799 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16802
CVE ID: CVE-2004-2061 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, or (3) file:// URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/8266 - http://www.securityfocus.com/bid/10812 - http://marc.info/?l=bugtraq&m=109095196526490&w=2 - http://securitytracker.com/id?1010788 - http://secunia.com/advisories/12173 - http://www.osvdb.org/8265 - https://exchange.xforc
ecuritytracker.com/id?1010788 - http://secunia.com/advisories/12173 - http://www.osvdb.org/8265 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16817
CVE ID: CVE-2004-2062 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to execute arbitrary SQL via the (1) thread_id, (2) parent_id, or (3) mode parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10821 - http://marc.info/?l=bugtraq&m=109105610220965&w=2 - http://secunia.com/advisories/12137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16828
CVE ID: CVE-2004-2063 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to inject arbitrary HTML or web script via the feedback parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/8269 - http://www.securityfocus.com/bid/10821 - http://marc.info/?l=bugtraq&m=109105610220965&w=2 - http://secunia.com/advisories/12137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16830
CVE ID: CVE-2004-2064 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in lostBook 1.1 and earlier allows remote attackers to inject arbitrary web script via the (1) Email or (2) Website fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/8271 - http://securitytracker.com/id?1010812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16835 - http://marc.info/?l=bugtraq&m=109112282611808&w=2 - http://www.securityfocus.com/bid/10825 - http://secunia.com/advisories/12190
CVE ID: CVE-2004-2065 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: DansGuardian 2.8 and earlier allows remote attackers to bypass the extension filtering rule via a hex encoded extension or . in the filename. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12191 - http://www.securityfocus.com/bid/10823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16836 - http://www.osvdb.org/8270 - http://dansguardian.org/?page=history - http://marc.info/?l=bugtraq&m=109113126217408&w=2 - http://securitytracker.com/id?1010817
CVE ID: CVE-2004-2066 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the (1) linpha_userid or (2) linpha_password cookies. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/8272 - http://marc.info/?l=bugtraq&m=109112246805277&w=2 - http://www.securityfocus.com/bid/10827 - http://secunia.com/advisories/12189 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16834
CVE ID: CVE-2004-2067 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attackers to execute arbitrary SQL and bypass authentication via the (1) user, (2) password, or (3) crypted_password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10826 - http://www.jaws.com.mx/index.php?gadget=blog&action=single_view&id=10 - http://marc.info/?l=bugtraq&m=109116345930380&w=2 - http://www.osvdb.org/8320 - http://securitytracker.com/id?1
&id=10 - http://marc.info/?l=bugtraq&m=109116345930380&w=2 - http://www.osvdb.org/8320 - http://securitytracker.com/id?1010815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16847
CVE ID: CVE-2004-2068 State: PUBLISHED Published: 2005-05-05T04:00:00 Last Updated: 2024-08-08T01:15:01.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service (process hang) via an empty NNTP news article with missing mandatory headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3441 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14189 - http://secunia.com/advisories/10590 - http://www.derkeiler.com/Mailing-Lists/VulnWatch/2004-01/0009.html - http://leafnode.sourceforge.net/leafnode-SA-2004-01.txt
CVE ID: CVE-2004-2069 State: PUBLISHED Published: 2005-05-05T04:00:00 Last Updated: 2024-08-08T01:15:01.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption). Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf - http://www.vmware.com/support/vi3/doc/esx-3069097-patch.h
http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf - http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html - http://www.vupen.com/english/advisories/2006/4502 - http://marc.info/?l=openssh-unix-dev&m=107520317020444&w=2 - http://www.osvdb.org/16567 - http://secunia.com/advisories/22875 - http://secunia.com/advisories/23680 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20930 - http://www.vmware.com/download/esx/esx-202-200610-patch.html - http://www.securityfocus.com/archive/1/451426/100/200/threaded - http://www.securityfocus.com/archive/1/425397/100/0/threaded - http://www.vmware.com/download/esx/esx-213-200610-patch.html - http://marc.info/?l=openssh-unix-dev&m=10
00/0/threaded - http://www.vmware.com/download/esx/esx-213-200610-patch.html - http://marc.info/?l=openssh-unix-dev&m=107529205602320&w=2 - http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf - http://secunia.com/advisories/17000 - http://www.securityfocus.com/bid/14963 - http://secunia.com/advisories/17252 - http://secunia.com/advisories/17135 - http://www.securityfocus.com/archive/1/451404/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541 - http://rhn.redhat.com/errata/RHSA-2005-550.html - http://www.securityfocus.com/archive/1/451417/100/200/threaded - http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html
CVE ID: CVE-2004-2070 State: PUBLISHED Published: 2005-05-16T04:00:00 Last Updated: 2024-08-08T01:15:01.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Altiris Client Service for Windows 5.6 SP1 Hotfix E (5.6.181) allows local users to execute arbitrary commands by opening the AClient tray icon and using the View Log File option, a different vulnerability than CVE-2005-1590. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/381649
CVE ID: CVE-2004-2071 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentication in the web interface via an HTTP GET request with two slashes ("//") after the server name. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1009030 - http://www.osvdb.org/3926 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15194 - http://secunia.com/advisories/10861 - http://www.securityfocus.com/bid/9646 - https://testzone.secunia.com/advisories/1086
tp://secunia.com/advisories/10861 - http://www.securityfocus.com/bid/9646 - https://testzone.secunia.com/advisories/10861
CVE ID: CVE-2004-2072 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote attackers to execute script on other clients via the Itemid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9588 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15062 - http://www.systemsecure.org/advisories/ssadvisory06022004.php
CVE ID: CVE-2004-2073 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux-VServer 1.24 allows local users with root privileges on a virtual server to gain access to the filesystem outside the virtual server via a modified chroot-again exploit using the chmod command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/353003 - http://www.securityfocus.com/bid/9596 - http://www.linux-vserver.org/index.php?page=ChangeLog - http://secunia.com/advisories/10816 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15073 - http://www.osvdb.org/387
p://secunia.com/advisories/10816 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15073 - http://www.osvdb.org/3875
CVE ID: CVE-2004-2074 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1) PASS or (2) RETR commands. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15380 - http://securitytracker.com/id?1009295 - http://www.securityfocus.com/bid/9800
CVE ID: CVE-2004-2075 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos Anti-Virus 3.78 allows remote attackers to cause a denial of service (infinite loop) via a MIME header that is not properly terminated. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1009042 - http://secunia.com/advisories/10855 - http://www.osvdb.org/3925 - http://www.sophos.com/support/news/#mime-378 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15191 - http://www.securityfocus.com/bid/9648
CVE ID: CVE-2004-2076 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/353869 - http://www.securityfocus.com/bid/9656 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15208
CVE ID: CVE-2004-2077 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nadeo Game Engine for Nadeo TrackMania and Nadeo Virtual Skipper 3 allows remote attackers to cause a denial of service (server crash) via malformed data to TCP port 2350, possibly due to long values or incorrect size fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteinfo.com/attaques/hacking/trackmaniados.shtml - http://www.securityfocus.com/bid/9604 - http://www.securityfocus.com/archive/1/353182 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15081 - http://www.securityfocus.
urityfocus.com/archive/1/353182 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15081 - http://www.securityfocus.com/archive/1/353226 - http://lists.netsys.com/pipermail/full-disclosure/2004-February/016906.html
CVE ID: CVE-2004-2078 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red-M Red-Alert 2.7.5 with software 3.1 build 24 allows remote attackers to cause a denial of service (reboot and loss of logged events) via a long request to TCP port 80, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/353211 - http://marc.info/?l=full-disclosure&m=107635119005407&w=2 - http://securitytracker.com/id?1009001 - http://www.securityfocus.com/bid/9618 - http://www.osvdb.org/3891 - http://www.securiteam.com/securitynews/5
d?1009001 - http://www.securityfocus.com/bid/9618 - http://www.osvdb.org/3891 - http://www.securiteam.com/securitynews/5SP0C0KC0A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15086 - http://secunia.com/advisories/10832 - http://genhex.org/releases/031003.txt
CVE ID: CVE-2004-2079 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which allows remote attackers to bypass authentication by connecting from the same IP address as an active authenticated user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/353211 - http://marc.info/?l=full-disclosure&m=107635119005407&w=2 - http://www.osvdb.org/3952 - http://securitytracker.com/id?1009001 - http://www.securityfocus.com/bid/9618 - http://www.securiteam.com/securitynew
- http://securitytracker.com/id?1009001 - http://www.securityfocus.com/bid/9618 - http://www.securiteam.com/securitynews/5SP0C0KC0A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/15088 - http://genhex.org/releases/031003.txt
CVE ID: CVE-2004-2080 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red-M Red-Alert 2.7.5 with software 3.1 build 24 converts multiple spaces in a Service Set Identifier (SSID) to a single space, which prevents Red-Alert from correctly identifying the SSID. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/353211 - http://marc.info/?l=full-disclosure&m=107635119005407&w=2 - http://securitytracker.com/id?1009001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15089 - http://www.securityfocus.com/bid/9618 - http://www.securiteam.com/se
xchange.xforce.ibmcloud.com/vulnerabilities/15089 - http://www.securityfocus.com/bid/9618 - http://www.securiteam.com/securitynews/5SP0C0KC0A.html - http://www.osvdb.org/3953 - http://genhex.org/releases/031003.txt
CVE ID: CVE-2004-2081 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: The samiftp.dll library in Sami FTP Server 1.1.3 allows local users to cause a denial of service (pmsystem.exe crash) by issuing (1) a CD command with a tilde (~) character or dot dot (/../) or (2) a GET command for an unavailable file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/353753 - http://www.securityfocus.com/bid/9657 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15204 - http://www.karja.com/samiftp/news.html
CVE ID: CVE-2004-2082 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: The samiftp.dll library in Sami FTP Server 1.1.3 allows remote authenticated users to cause a denial of service (pmsystem.exe crash) via a GET request wit a large number of leading "/" (slash) characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/353753 - http://www.securityfocus.com/bid/9657 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15204 - http://www.karja.com/samiftp/news.html
CVE ID: CVE-2004-2083 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file name, which causes the malicious file to appear as a trusted file type, aka "File Download Extension Spoofing." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/Internet_Explorer_File_Download_Extension_Spoofing_Test/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/21698 - http://www.securityfocus.com/bid/9640 - http://www.osvdb.org/3917 - http://se
force.ibmcloud.com/vulnerabilities/21698 - http://www.securityfocus.com/bid/9640 - http://www.osvdb.org/3917 - http://secunia.com/advisories/10760 - http://www.opera.com/docs/changelogs/windows/750b1/
CVE ID: CVE-2004-2084 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in JShop E-Commerce Server allows remote attackers to inject arbitrary web script or HTML via the xSearch parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3889 - http://www.systemsecure.org/advisories/ssadvisory09022004.php - http://secunia.com/advisories/10825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15100 - http://www.securityfocus.com/bid/9609 - http://securitytracker.com/id?1008988
CVE ID: CVE-2004-2085 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Brad Fears phpCodeCabinet 0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) the sid parameter to comments.php, (2) the cid, cf, or rfd parameters to category.php, or the cid parameter to (3) input.php, (4) browse.php, (5) themes/facade/header.php, or (6) themes/phpcc/header.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10862 - http://cvs.sourceforge.net/
Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10862 - http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/comments.php?r1=1.1&r2=1.2 - http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/category.php?r1=1.4&r2=1.5 - http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/browse.php?r1=1.5&r2=1.6 - http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/themes/facade/header.php?r1=1.4&r2=1.5 - http://securitytracker.com/id?1009012 - http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/input.php?r1=1.7&r2=1.8 - http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/themes/phpcc/header.php?r1=1.4&r2=1.5 - http://www.osvdb.org/
http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/themes/phpcc/header.php?r1=1.4&r2=1.5 - http://www.osvdb.org/16711 - http://sourceforge.net/project/shownotes.php?release_id=214860 - http://www.osvdb.org/3886 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15190 - http://www.osvdb.org/3885 - http://www.osvdb.org/16710 - http://www.osvdb.org/3887 - http://www.securityfocus.com/bid/9645 - http://www.securityfocus.com/bid/9601
CVE ID: CVE-2004-2086 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a long query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.sambar.com/security.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/15071 - http://www.osvdb.org/5786 - http://securitytracker.com/id?1008979 - http://www.securityfocus.com/bid/9607 - http://www.secu
p://www.osvdb.org/5786 - http://securitytracker.com/id?1008979 - http://www.securityfocus.com/bid/9607 - http://www.securityfocus.com/archive/82/353087
CVE ID: CVE-2004-2087 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T01:15:01.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in SandSurfer before 1.7.0 allows remote attackers to gain access as a logged-in user. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10829 - http://sourceforge.net/forum/forum.php?forum_id=351705 - http://www.osvdb.org/3922 - http://securitytracker.com/id?1009110 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15193 - http://www.securityfocus.com/bid/9647