Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0789 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in LimeWire 3.9.6 through 4.6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in a magnet request. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200503-37.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/19695 - http://secunia.com/advisories/14555/ - http://marc.info/?l=bugtraq&m=111082448213238&w=2
CVE ID: CVE-2005-0790 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpAdsNew 2.0.4 allows remote attackers to obtain sensitive information via a direct request to (1) lib-xmlrpcs.inc.php, (2) maintenance-activation.php, (3) maintenance-cleantables.php, (4) maintenance-autotargeting.php, (5) maintenance-reports.php, (6) phpads.php, (7) remotehtmlview.php, (8) click.php, (9) adcontent.php, which reveal the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111083286926490&w=2 - https://exchange.xforce.ibmcloud.com/vulnerab
ntainer: References: - http://marc.info/?l=bugtraq&m=111083286926490&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19689 - http://securityreason.com/adv/%5BphpAdsNew%202.0.4-pr1%20Multiple%20vulnerabilities%20cXIb8O3.9%5D.asc - http://securitytracker.com/id?1013429
CVE ID: CVE-2005-0791 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in adframe.php in phpAdsNew 2.0.4-pr1, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the refresh parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19692 - http://marc.info/?l=bugtraq&m=111083286926490&w=2 - http://www.osvdb.org/14787 - http://securityreason.com/adv/%5BphpAdsNew%202.0.4-pr1%20Multiple%20vulnerabilities
0&w=2 - http://www.osvdb.org/14787 - http://securityreason.com/adv/%5BphpAdsNew%202.0.4-pr1%20Multiple%20vulnerabilities%20cXIb8O3.9%5D.asc - http://securitytracker.com/id?1013429 - http://www.securityfocus.com/bid/12803
CVE ID: CVE-2005-0792 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter to index.php or (2) page parameter to zpanel.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14602 - http://marc.info/?l=bugtraq&m=111142323616309&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19709 - http://marc.info/?l=bugtraq&m=111090324111053&w=2 - http://www.securityfocus.com/bid/12809
CVE ID: CVE-2005-0793 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in zpanel.php in ZPanel allows remote attackers to (1) execute arbitrary PHP code in ZPanel 2.0 or (2) include local files in ZPanel 2.5 beta 10 and earlier by modifying the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111142323616309&w=2 - http://marc.info/?l=bugtraq&m=111090324111053&w=2 - http://www.securityfocus.com/bid/12809
CVE ID: CVE-2005-0794 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZPanel 2.0 and 2.5 beta 10 does not remove or protect installation scripts after they have been used, which allows remote attackers to reinstall the software and possibly cause a denial of service via a direct request to install.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14602 - http://marc.info/?l=bugtraq&m=111142323616309&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19711 - http://marc.info/?l=bugtraq&m=111090324111053&w=2
CVE ID: CVE-2005-0795 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite arbitrary files via a modified vote_filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2005-03/0210.html - http://www.holacms.de/?content=changelog - http://secunia.com/advisories/14566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19672
CVE ID: CVE-2005-0796 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in HolaCMS 1.4.9-1 allows remote attackers to overwrite arbitrary files via a "holaDB/votes" followed by a .. (dot dot) in the vote_filename parameter, which bypasses the check by HolaCMS to ensure that the file is in the holaDB/votes directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.holacms.de/?content=changelog - http://secunia.com/advisories/14566 - http://marc.info/?l=bugtraq&m=111090966815089&w=2
CVE ID: CVE-2005-0797 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell iChain Mini FTP Server 2.3 displays different error messages if a user exists or not, which allows remote attackers to obtain sensitive information and facilitates brute force attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.infobyte.com.ar/adv/ISR-04.html - http://marc.info/?l=bugtraq&m=111091027000721&w=2 - http://www.securityfocus.com/bid/12811 - http://secunia.com/advisories/14607
CVE ID: CVE-2005-0798 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell iChain Mini FTP Server 2.3, and possibly earlier versions, does not limit the number of incorrect logins, which makes it easier for remote attackers to conduct brute force login attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/14648 - http://securitytracker.com/id?1013408 - http://www.infobyte.com.ar/adv/ISR-05.html - http://secunia.com/advisories/14607 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096887.htm - http://marc.info/?l=bugtraq&m=111091517007681&w=2
CVE ID: CVE-2005-0799 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service (application crash) via a use command followed by an MS-DOS device name such as (1) LPT1 or (2) PRN. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111091250923281&w=2 - http://bugs.mysql.com/bug.php?id=9148 - http://secunia.com/advisories/14564
CVE ID: CVE-2005-0800 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in install.php in mcNews 1.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the l parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2005-0720. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19726 - http://www.securityfocus.com/archive/1/445606/100/0/threaded - http://secunia.com/advisories/14528 - http://www.securityfocus.com/
.securityfocus.com/archive/1/445606/100/0/threaded - http://secunia.com/advisories/14528 - http://www.securityfocus.com/bid/12835 - http://marc.info/?l=bugtraq&m=111108900102438&w=2
CVE ID: CVE-2005-0801 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in includer.cgi in The Includer allows remote attackers to read arbitrary files via (1) a .. (dot dot) or (2) a full pathname in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111109052121557&w=2
CVE ID: CVE-2005-0802 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 through 1.1b allows remote attackers to execute arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/14861 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19728 - http://securitytracker.com/id?1013470 - http://www.securityfocus.com/bid/12836 - http://secunia.com/advisories/14625/ - http://marc.info/?l=bugtraq&m=111108840811698&w=2
CVE ID: CVE-2005-0803 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:27.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service (application crash) via a crafted Enhanced Metafile (EMF) file that causes invalid (1) end, (2) emreof, or (3) palent offsets to be used, aka "Enhanced Metafile Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1152 - http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf - http://www.osv
ition/oval%3Aorg.mitre.oval%3Adef%3A1152 - http://support.avaya.com/elmodocs2/security/ASA-2005-228.pdf - http://www.osvdb.org/20580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19727 - http://secunia.com/advisories/17461 - http://www.vupen.com/english/advisories/2005/2348 - http://www.kb.cert.org/vuls/id/134756 - http://secunia.com/advisories/14631 - http://www.securityfocus.com/bid/12834 - http://securitytracker.com/id?1015168 - http://www.us-cert.gov/cas/techalerts/TA05-312A.html - http://secunia.com/advisories/17223 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1240 - http://marc.info/?l=bugtraq&m=111108743527497&w=2 - https://docs.mic
rch/definition/oval%3Aorg.mitre.oval%3Adef%3A1240 - http://marc.info/?l=bugtraq&m=111108743527497&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-053 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1121 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1215 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A671
CVE ID: CVE-2005-0804 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in MailEnable 1.8 allows remote attackers to cause a denial of service (application crash) via format string specifiers in the mailto field. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111108519331738&w=2 - http://secunia.com/advisories/14627 - http://www.securityfocus.com/bid/12833
CVE ID: CVE-2005-0805 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Subdreamer Light, when magic_quotes_gpc is enabled, allows remote attackers to execute arbitrary SQL commands via certain parameters that are used as global variables, as demonstrated using the imageid parameter, which is not properly handled by imagegallery.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111116479910230&w=2 - http://www.subdreamer.com/forum/showthread.php?t=2501 - http://www.securityfocus.com/archive/1/437983/100/2
910230&w=2 - http://www.subdreamer.com/forum/showthread.php?t=2501 - http://www.securityfocus.com/archive/1/437983/100/200/threaded - http://www.securityfocus.com/bid/12839
CVE ID: CVE-2005-0806 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Evolution 2.0.3 allows remote attackers to cause a denial of service (application crash or hang) via crafted messages, possibly involving charsets in attachment filenames. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2005:059 - http://bugzilla.ximian.com/show_bug.cgi?id=72609 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10532 - http://www.redhat.com/support/errata/RHSA-2005-397.html - https://usn.ubuntu.com/16
val%3Aorg.mitre.oval%3Adef%3A10532 - http://www.redhat.com/support/errata/RHSA-2005-397.html - https://usn.ubuntu.com/166-1/
CVE ID: CVE-2005-0807 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:29.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via (1) an IKE packet with a large ID field that is not properly handled by the PSK sniffer filter, (2) the HTTP sniffer filter, or the (3) POP3, (4) SMTP, (5) IMAP, (6) NNTP, or (7) TDS sniffer filters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19744 - http://marc.info/?l=bugtraq&m=11111609731
er: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19744 - http://marc.info/?l=bugtraq&m=111116097313427&w=2 - http://www.securityfocus.com/bid/12840 - http://www.oxid.it/ - http://secunia.com/advisories/14630 - http://securitytracker.com/id?1013476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19742
CVE ID: CVE-2005-0808 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat before 5.x allows remote attackers to cause a denial of service (application crash) via a crafted AJP12 packet to TCP port 8007. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12795 - http://www.hitachi-support.com/security_e/vuls_e/HS05-006_e/index-e.html - http://www.kb.cert.org/vuls/id/JGEI-6A2LEF - http://www.kb.cert.org/vuls/id/204710 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19681
CVE ID: CVE-2005-0809 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak encryption scheme (fixed byte reordering) to protect the key, which allows remote attackers to obtain the key via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14617 - http://www.kb.cert.org/vuls/id/581068 - http://www.securityfocus.com/bid/12843
CVE ID: CVE-2005-0810 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in NotifyLink before 3.0 allows remote attackers to execute arbitrary SQL commands via the URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14617 - http://www.kb.cert.org/vuls/id/264097 - http://www.securityfocus.com/bid/12843
CVE ID: CVE-2005-0811 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:27.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users to bypass intended restrictions via a direct request to certain URLs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14617 - http://www.kb.cert.org/vuls/id/131828 - http://www.securityfocus.com/bid/12843
CVE ID: CVE-2005-0812 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page, which could allow remote attackers or local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14617 - http://www.kb.cert.org/vuls/id/770532 - http://www.securityfocus.com/bid/12843
CVE ID: CVE-2005-0813 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Initial Redirect (ir) Squid Proxy Plug-In 0.1 and 0.2 may allow attackers to cause a denial of service and execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12827 - http://secunia.com/advisories/13674 - http://www.osvdb.org/14832 - http://www.vanheusden.com/ir/
CVE ID: CVE-2005-0814 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in lshd in Lysator LSH 1.x and 2.x before 2.0.1 allows remote attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19724 - http://secunia.com/advisories/14609 - http://www.debian.org/security/2005/dsa-717 - http://lists.lysator.liu.se/pipermail/lsh-bugs/2005q1/000328.html
CVE ID: CVE-2005-0815 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to cause a denial of service or corrupt memory via a crafted filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19741 - http://www.redhat.com/support/errata/RHSA-2005-366.html - http://www.securityfocus.com/bid/12837 - http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.12-rc1 - http://www.
p://www.securityfocus.com/bid/12837 - http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.12-rc1 - http://www.redhat.com/support/errata/RHSA-2006-0190.html - http://www.securityfocus.com/archive/1/393590 - http://secunia.com/advisories/17002 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:072 - http://www.redhat.com/support/errata/RHSA-2005-663.html - http://www.vupen.com/english/advisories/2005/1878 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9307 - http://www.redhat.com/support/errata/RHSA-2006-0191.html
CVE ID: CVE-2005-0816 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in newgrp in Solaris 7 through 9 allows local users to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57710-1 - http://securitytracker.com/id?1013462 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19729 - http://www.securityfocus.com/bid/12838
CVE ID: CVE-2005-0817 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows remote attackers to poison the DNS cache and redirect users to malicious sites. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16423 - http://www.isc.sans.org/diary.php?date=2005-03-04 - http://securityresponse.symantec.com/avcenter/security/Content/2005.03.15.html - https://excha
ary.php?date=2005-03-04 - http://securityresponse.symantec.com/avcenter/security/Content/2005.03.15.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44530 - http://securitytracker.com/id?1013451 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0225.html - http://secunia.com/advisories/14595
CVE ID: CVE-2005-0818 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PunBB 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) email or (2) Jabber parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013446 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19725
CVE ID: CVE-2005-0819 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013460 - http://www.securityfocus.com/bid/12831 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971038.htm
CVE ID: CVE-2005-0820 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office InfoPath 2003 SP1 includes sensitive information in the Manifest.xsf file in a custom .xsn form, which allows attackers to obtain printer and network information, obtain the database name, username, and password, or obtain the internal web server name. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013454 - http://www.osvdb.org/14882 - http://www.securityfocus.com/bid/12824 - http://support.microsoft.com/kb/867443
CVE ID: CVE-2005-0821 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-07T21:28:28.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restrictions to control the keyboard and mouse. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19723 - http://securitytracker.com/id?1013457 - http://support.citrix.com/kb/entry.jspa?externalID=CTX105574 - http://www.securityfocus.com/bid/12821