Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-4566 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:27.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attackers to have an unknown impact via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. Additional Analyst Notes: - CVE Program Container: References: - http://www2.adtran.com/support/isakmp/ - http://www.vupen.com/english/advisories/2005/3027 - http://www.securityfocus.com/bid/16028 - http://secunia.com/advisories/18179
CVE ID: CVE-2005-4567 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:27.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (Build 4.4.000 Oct 26 2005) allow remote attackers to inject arbitrary web script or HTML by sending (1) the href parameter to index.fts, or the param1 parameter to (2) /domains/index.fts, (3) /config/licence.fts, or (4) /config/systemacl.fts. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22107 - http://securitytracker.com/id?1015399 - http://www.vupen.com/english/advisories
ferences: - http://www.osvdb.org/22107 - http://securitytracker.com/id?1015399 - http://www.vupen.com/english/advisories/2005/3010 - http://www.securityfocus.com/bid/15972 - http://www.osvdb.org/22104 - http://www.osvdb.org/22105 - http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1015.html - http://www.osvdb.org/22106
CVE ID: CVE-2005-4568 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:28.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (aka Build 4.4.000 Oct 26 2005) allow remote attackers to execute arbitrary code via format string specifiers in the (1) USER, (2) PASS, and (3) TOP commands to the POP3 server; and the (4) LIST and (5) AUTHENTICATE commands to the IMAP server. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/3010 - http://www.securityfocus.com/bid/15972 - http://archives.neohapsis.c
http://www.vupen.com/english/advisories/2005/3010 - http://www.securityfocus.com/bid/15972 - http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1017.html - http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1019.html
CVE ID: CVE-2005-4569 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:27.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in index.fts in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (aka Build 4.4.000 Oct 26 2005) allows remote attackers to execute arbitrary code via a long tzoffset value. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/3010 - http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1018.html - http://www.securityfocus.com/bid/15972
CVE ID: CVE-2005-4570 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:27.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Key Exchange version 1 (IKEv1) implementations in Fortinet FortiOS 2.50, 2.80 and 3.0, FortiClient 2.0,; and FortiManager 2.80 and 3.0 allow remote attackers to cause a denial of service (termination of a process that is automatically restarted) via IKE packets with invalid values of certain IPSec attributes, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the vendor advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies
ils in the vendor advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortinet.com/FortiGuardCenter/VU226364.html - http://www.securityfocus.com/bid/15997 - http://secunia.com/advisories/18446 - http://www.vupen.com/english/advisories/2006/0182
CVE ID: CVE-2005-4571 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:28.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in myEZshop Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/21996 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23843 - http://www.securityfocus.com/bid/15965 - http://secunia.com/advisories/18086
CVE ID: CVE-2005-4572 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:27.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in myEZshop Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) GroupsId and (2) ItemsId parameters in admin.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23844 - http://www.osvdb.org/21997 - http://www.securityfocus.com/bid/15965 - http://secunia.com/advisories/18086
CVE ID: CVE-2005-4573 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:28.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in plog-admin-functions.php in Plogger Beta 2 allows remote attackers to execute arbitrary code via a URL in the config[basedir] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23861 - http://freeconnects.webcindario.com/index.php?option=com_content&task=view&id=41&Itemid=1 - http://securitytracker.com/id?1015380 - http://www.osvdb.org/22395 - http://masendav.com/~duke/PloggerChanges_files/FileComparisonReport
racker.com/id?1015380 - http://www.osvdb.org/22395 - http://masendav.com/~duke/PloggerChanges_files/FileComparisonReport1.html - http://securityreason.com/securityalert/273 - http://www.securityfocus.com/bid/15992 - http://www.plogger.org/two-point-one/
CVE ID: CVE-2005-4574 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:28.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the bNewWindow parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16071 - http://pridels0.blogspot.com/2005/12/commonspot-content-server-vuln.html - http://secunia.com/advisories/18257 - http://www.osvdb.org/21931 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23864
CVE ID: CVE-2005-4575 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:27.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: PaperThin CommonSpot Content Server 4.5 and earlier allow remote attackers to obtain sensitive information via an invalid errmsg parameter to loader.cfm with a url parameter set to email-login-info.cfm, which leaks the full pathname in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2005/12/commonspot-content-server-vuln.html - http://secunia.com/advisories/18257 - http://www.osvdb.org/21932 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23865
CVE ID: CVE-2005-4576 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:27.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the UpdateEngine program in Fatwire UpdateEngine 6.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) COUNTRYNAME, (2) EMAIL, and (3) FUELAP_TEMPLATENAME parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/23848 - http://secunia.com/advisories/18259 - http://www.osvdb.org/21936 - http://pridels0.blogspot.com/2005/12/fatwire-updateengine-62-multiple-xss.html -
s/18259 - http://www.osvdb.org/21936 - http://pridels0.blogspot.com/2005/12/fatwire-updateengine-62-multiple-xss.html - http://www.securityfocus.com/bid/16073
CVE ID: CVE-2005-4577 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:27.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Business Logic - Container (BLC) P-2443-9114 01-00 through 02-06 on Windows, and P-1M43-9111 01-01 through 02-00 on AIX, allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in an unspecified input form. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22062 - http://www.securityfocus.com/bid/16067 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23876 - http://secunia.com/advisories/182
rityfocus.com/bid/16067 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23876 - http://secunia.com/advisories/18213 - http://securitytracker.com/id?1015420 - http://www.hitachi-support.com/security_e/vuls_e/HS05-025_e/01-e.html
CVE ID: CVE-2005-4578 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:27.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Hitachi Business Logic - Container (BLC) P-2443-9114 01-00 through 02-06 on Windows, and P-1M43-9111 01-01 through 02-00 on AIX, allow remote attackers to execute arbitrary SQL commands via unknown attack vectors in an unspecified input form. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16067 - http://secunia.com/advisories/18213 - http://www.osvdb.org/22063 - http://securitytracker.com/id?1015420 - http://www.hitachi-support.com/sec
visories/18213 - http://www.osvdb.org/22063 - http://securitytracker.com/id?1015420 - http://www.hitachi-support.com/security_e/vuls_e/HS05-025_e/01-e.html
CVE ID: CVE-2005-4579 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:27.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple HTTP response splitting vulnerabilities in Hitachi Business Logic - Container (BLC) P-2443-9114 01-00 through 02-06 on Windows, and P-1M43-9111 01-01 through 02-00 on AIX, allow remote attackers to inject arbitrary HTTP headers via unknown attack vectors in an unspecified input form. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16067 - http://secunia.com/advisories/18213 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23878 - http://securitytracker.com/id?101
ia.com/advisories/18213 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23878 - http://securitytracker.com/id?1015420 - http://www.osvdb.org/22064 - http://www.hitachi-support.com/security_e/vuls_e/HS05-025_e/01-e.html
CVE ID: CVE-2005-4580 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:27.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Day Communique 4 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16072 - http://www.osvdb.org/21930 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23860 - http://pridels0.blogspot.com/2005/12/communiqu-4-xss-vuln.html - http://secunia.com/advisories/18258
CVE ID: CVE-2005-4581 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:27.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Electric Sheep 2.6.3 client allows local users to execute arbitrary code via a long window-id parameter. NOTE: because the program is not setuid and not normally called from remote programs, there may not be a typical attack vector for the issue that crosses privilege boundaries. Therefore this may not be a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://draves.org/HyperNews/get.cgi/flame/1478.html - http://electricsheep.org/index.cgi?&menu=talk - https://exchange.xforc
://draves.org/HyperNews/get.cgi/flame/1478.html - http://electricsheep.org/index.cgi?&menu=talk - https://exchange.xforce.ibmcloud.com/vulnerabilities/23893 - http://draves.org/HyperNews/get.cgi/flame/1478/1.html - http://www.securityfocus.com/archive/1/420160/100/0/threaded - http://electricsheep.org/release_notes.html
CVE ID: CVE-2005-4582 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:28.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Electric Sheep 2.6.3 does not require authentication or integrity checks from the server to the client, which allows remote attackers to download and display arbitrary MPEG movie files via (1) DNS spoofing, (2) a URL on the command line, or (3) a URL in the configuration file. NOTE: the same attack vectors apply to common web browsers that are able to communicate with untrusted web servers, and other problems related to DNS design issues. Therefore this may not be a specific vulnerability. However, a client would reasonably ex
related to DNS design issues. Therefore this may not be a specific vulnerability. However, a client would reasonably expect to receive content only from the server. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/295 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23892 - http://www.securityfocus.com/archive/1/420161/100/0/threaded
CVE ID: CVE-2005-4583 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:27.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 December 2005 allows "remote code execution in the Web browser" via unspecified attack vectors, probably related to cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2001 - http://www.securityfocus.com/bid/16086 - http://securitytracker.com/id?1015422 - http://secunia.com/advisories/18250 - http://www.vupen.com/english/adviso
6086 - http://securitytracker.com/id?1015422 - http://secunia.com/advisories/18250 - http://www.vupen.com/english/advisories/2005/3084 - http://www.osvdb.org/22119
CVE ID: CVE-2005-4584 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:28.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: BZFlag server 2.0.4 and earlier allows remote attackers to cause a denial of service (application crash) via a callsign that is not followed by a NULL (\0) character. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22036 - http://aluigi.altervista.org/adv/bzflagboom-adv.txt - http://www.securityfocus.com/bid/16066 - http://securitytracker.com/id?1015418 - http://cvs.sourceforge.net/viewcvs.py/%2Acheckout%2A/bzflag/bzflag/ChangeLog?rev=2.103 - http://secunia.com/advisories/18238 - https://e
eforge.net/viewcvs.py/%2Acheckout%2A/bzflag/bzflag/ChangeLog?rev=2.103 - http://secunia.com/advisories/18238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23872
CVE ID: CVE-2005-4585 State: PUBLISHED Published: 2005-12-29T11:00:00 Last Updated: 2024-08-07T23:53:28.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the GTP dissector for Ethereal 0.9.1 to 0.10.13 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16076 - http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html - http://secunia.com/advisories/18911 - http://secunia.com/advisories/19230 - http://www.vupen.com/english/advisories/2005/3095 - http://www.redhat.com/support/errata/RHSA-2006-0156
visories/19230 - http://www.vupen.com/english/advisories/2005/3095 - http://www.redhat.com/support/errata/RHSA-2006-0156.html - http://www.ethereal.com/appnotes/enpa-sa-00022.html - http://www.osvdb.org/22092 - http://securitytracker.com/id?1015414 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23849 - ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U - http://secunia.com/advisories/19012 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9678 - http://secunia.com/advisories/18426 - http://secunia.com/advisories/18229 - http://securityreason.com/securityalert/304
CVE ID: CVE-2005-4586 State: PUBLISHED Published: 2005-12-30T11:00:00 Last Updated: 2024-08-07T23:53:28.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL commands via the (1) sql parameter in browse.php and the (2) sid, (3) lid, (4) gid, and (5) token parameters in certain PHP scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22184 - http://secunia.com/advisories/18167 - http://www.phpsurveyor.org/mantis/view.php?id=287 - http://www.phpsurveyor.org/mantis/view.php?id=286 - http://www.securityfocus.com/bid/16077 - http://
s/view.php?id=287 - http://www.phpsurveyor.org/mantis/view.php?id=286 - http://www.securityfocus.com/bid/16077 - http://www.osvdb.org/22039 - http://sourceforge.net/project/shownotes.php?release_id=381050&group_id=74605
CVE ID: CVE-2005-4587 State: PUBLISHED Published: 2005-12-30T11:00:00 Last Updated: 2024-08-07T23:53:28.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juniper NetScreen-Security Manager (NSM) 2004 FP2 and FP3 allow remote attackers to cause a denial of service (crash or hang of server components that are automatically restarted) via a long crafted string on (1) port 7800 (the GUI Server port) or (2) port 7801 (the Device Server port). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16075 - http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1281.html - http://www.osvdb.org/22047 - http://securitytracker.com/id?10154
ohapsis.com/archives/fulldisclosure/2005-12/1281.html - http://www.osvdb.org/22047 - http://securitytracker.com/id?1015417 - http://secunia.com/advisories/18232
CVE ID: CVE-2005-4588 State: PUBLISHED Published: 2005-12-30T11:00:00 Last Updated: 2024-08-07T23:53:28.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Koobi 5 allows remote attackers to inject arbitrary web script or HTML via nested, malformed url BBCode tags. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16078 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24329
CVE ID: CVE-2005-4589 State: PUBLISHED Published: 2005-12-30T11:00:00 Last Updated: 2024-08-07T23:53:28.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spb Kiosk Engine 1.0.0.1 stores the administrator's passcode in the registry in plaintext, which allows local users to obtain the passcode. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015413 - http://www.osvdb.org/22033 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23894 - http://www.airscanner.com/security/05083101_kioskpass.htm - http://secunia.com/advisories/18243 - http://www.securityfocus.com/archive/1/420258/100/0/threaded
CVE ID: CVE-2005-4590 State: PUBLISHED Published: 2005-12-30T11:00:00 Last Updated: 2024-08-07T23:53:28.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spb Kiosk Engine 1.0.0.1 allows local users to bypass restrictions on allowed applications via (1) removable media containing a program that will execute because of the autorun setting and (2) applications that are able to invoke other applications, as demonstrated by a file: URL specifying a .exe file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/420450/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/23905 - http://secunia.com/advisories/18243 -
450/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/23905 - http://secunia.com/advisories/18243 - http://www.airscanner.com/security/05083102_kioskremove.htm
CVE ID: CVE-2005-4591 State: PUBLISHED Published: 2006-01-09T19:00:00 Last Updated: 2024-08-07T23:53:27.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in bogofilter 0.96.2, 0.95.2, 0.94.14, 0.94.12, and other versions from 0.93.5 to 0.96.2, when using Unicode databases, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via "invalid input sequences" that lead to heap corruption when bogofilter or bogolexer converts character sets. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/240-1/ - http://bogofilter.sourceforge.net/security/bogofilter-SA-2005-01 - http://list
rences: - https://usn.ubuntu.com/240-1/ - http://bogofilter.sourceforge.net/security/bogofilter-SA-2005-01 - http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html - http://www.vupen.com/english/advisories/2006/0100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24118 - http://secunia.com/advisories/18717 - http://www.securityfocus.com/bid/16171 - http://secunia.com/advisories/18352 - http://secunia.com/advisories/18427
CVE ID: CVE-2005-4592 State: PUBLISHED Published: 2006-01-09T19:00:00 Last Updated: 2024-08-07T23:53:27.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in bogofilter and bogolexer 0.96.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via words that are longer than the input buffer used by flex. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24119 - http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html - http://www.vupen.com/english/advisories/2006/0100 - http://secunia.com/advisories/18717 - http://www.securityfo
1.html - http://www.vupen.com/english/advisories/2006/0100 - http://secunia.com/advisories/18717 - http://www.securityfocus.com/bid/16171 - http://bogofilter.sourceforge.net/security/bogofilter-SA-2005-02 - http://secunia.com/advisories/18352
CVE ID: CVE-2005-4593 State: PUBLISHED Published: 2006-01-01T23:00:00 Last Updated: 2024-08-07T23:53:27.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in phpDocumentor 1.3.0 rc4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary code via a URL in the (1) FORUM[LIB] parameter in Documentation/tests/bug-559668.php and (2) the root_dir parameter in docbuilder/file_dialog.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16080 - http://www.securityfocus.com/archive/1/420441/100/0/threaded - http://www.osvdb.org/22114 - https://exchange.xforce.ibmc