Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-0428 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T21:13:54.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNSPacket::expand method in dnspacket.cc in PowerDNS before 2.9.17 allows remote attackers to cause a denial of service by sending a random stream of bytes. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19221 - http://www.gentoo.org/security/en/glsa/glsa-200502-15.xml - http://www.securityfocus.com/bid/12446 - http://doc.powerdns.com/changelog.html#CHANGELOG-2-9-17 - http://ds9a.nl/cgi-bin/cvstrac/pdns/tktview?tn=21
CVE ID: CVE-2005-0429 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T21:13:54.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when showforumusers is enabled, allows remote attackers to execute inject arbitrary PHP commands via the comma parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110840807415315&w=2 - http://www.securityfocus.com/bid/12542
CVE ID: CVE-2005-0430 State: PUBLISHED Published: 2005-02-16T05:00:00 Last Updated: 2024-08-07T21:13:54.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (shutdown game server) and possibly crash the server via a long infostring, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12534 - http://marc.info/?l=bugtraq&m=110824822224025&w=2 - http://aluigi.altervista.org/adv/q3infoboom-adv.txt
CVE ID: CVE-2005-0431 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T21:13:54.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barracuda Spam Firewall 3.1.10 and earlier does not restrict the domains that white-listed domains can send mail to, which allows members of white-listed domains to use Barracuda as an open mail relay for spam. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14243 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19283 - http://marc.info/?l=bugtraq&m=110805534732492&w=2
CVE ID: CVE-2005-0432 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T21:13:54.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates different login exceptions that suggest why an authentication attempt fails, which makes it easier for remote attackers to guess passwords via brute force attacks. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14298 - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA05-74.00.jsp
CVE ID: CVE-2005-0433 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T21:13:54.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Php-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or missing arguments to (1) db.php, (2) mainfile.php, (3) Downloads/index.php, or (4) Web_Links/index.php, which lists the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19344 - http://www.waraxe.us/advisory-40.html
CVE ID: CVE-2005-0434 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T21:13:54.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 7.5 allow remote attackers to inject arbitrary HTML or web script via (1) the newdownloadshowdays parameter in a NewDownloads operation or (2) the newlinkshowdays parameter in a NewLinks operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19346 - http://www.waraxe.us/advisory-40.html
CVE ID: CVE-2005-0435 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T21:13:54.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to read server web logs by setting the loadplugin and pluginmode parameters to rawlog. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19333 - http://www.securityfocus.com/archive/1/390368
CVE ID: CVE-2005-0436 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T21:13:54.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of Perl code via the PluginMode parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19336 - http://www.securityfocus.com/archive/1/390368 - http://www.osvdb.org/13832
CVE ID: CVE-2005-0437 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T21:13:54.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to include arbitrary Perl modules via .. (dot dot) sequences in the loadplugin parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14299 - http://www.securityfocus.com/archive/1/390368
CVE ID: CVE-2005-0438 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T21:13:54.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by setting the debug parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19477 - http://www.securityfocus.com/archive/1/390368
CVE ID: CVE-2005-0439 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T21:13:54.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the decode_post function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via attachments with long file names. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12556 - http://sourceforge.net/project/shownotes.php?group_id=40505&release_id=304880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19313 - http://midas.psi.ch/elogs/Forum/941
CVE ID: CVE-2005-0440 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T21:13:54.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a sensitive write password via a modified URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12556 - http://sourceforge.net/project/shownotes.php?group_id=40505&release_id=304880 - http://midas.psi.ch/elogs/Forum/941
CVE ID: CVE-2005-0441 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T21:13:54.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users to execute arbitrary code via the (1) attrib_valid function, (2) covert function, (3) declare statement, or (4) a crafted query plan, or remote authenticated users with database owner or "sa" role privileges to execute arbitrary code via (5) a crafted install java statement. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities
t. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19976 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19980 - http://www.ngssoftware.com/advisories/sybase-ase.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/19354 - http://www.securityfocus.com/archive/1/393851 - http://marc.info/?l=bugtraq&m=111272918117194&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19979 - http://www.sybase.com/detail/1%2C6904%2C1033894%2C00.html - http://secunia.com/advisories/13632 - http://www.sybase.com/detail?id=1034520 - http://www.sybase.com/detail?id=1034752 - http://www.securityfocus.com/bid/12080 - https://ex
se.com/detail?id=1034520 - http://www.sybase.com/detail?id=1034752 - http://www.securityfocus.com/bid/12080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19978 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19974 - http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.html
CVE ID: CVE-2005-0442 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T21:13:54.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php for CubeCart 2.0.4 allows remote attackers to read arbitrary files via the language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.cubecart.com/site/forums/index.php?showtopic=5741 - http://marc.info/?l=bugtraq&m=111281888605580&w=2 - http://www.securityfocus.com/bid/12549 - http://secunia.com/advisories/14272 - http://marc.info/?l=bugtraq&m=110842125901191&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19322
CVE ID: CVE-2005-0443 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T21:13:54.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in CubeCart 2.0.4 allows remote attackers to (1) obtain the full path for the web server or (2) conduct cross-site scripting (XSS) attacks via an invalid language parameter, which echoes the parameter in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/14064 - http://www.cubecart.com/site/forums/index.php?showtopic=5741 - http://www.securityfocus.com/bid/12549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19328 - http://marc.info/?l=bugtraq&m=11084212
ocus.com/bid/12549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19328 - http://marc.info/?l=bugtraq&m=110842125901191&w=2
CVE ID: CVE-2005-0444 State: PUBLISHED Published: 2005-02-15T05:00:00Z Last Updated: 2024-09-16T19:29:57.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writable temporary directory, which allows local users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200502-18.xml
CVE ID: CVE-2005-0445 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T21:13:54.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Open WebMail 2.x allows remote attackers to inject arbitrary HTML or web script via the domain name parameter (logindomain) in the login page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14253 - http://www.securityfocus.com/bid/12547 - http://turtle.ee.ncku.edu.tw/openwebmail/download/cert/patches/SA-05:01/2.5x.patch - https://exchange.xforce.ibmcloud.com/vulnerabilities/19335 - http://turtle.ee.ncku.edu.tw/openwebmail/doc/changes.tx
h - https://exchange.xforce.ibmcloud.com/vulnerabilities/19335 - http://turtle.ee.ncku.edu.tw/openwebmail/doc/changes.txt - http://securitytracker.com/id?1013172
CVE ID: CVE-2005-0446 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T21:13:54.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110901183320453&w=2 - http://www.gentoo.org/security/en/glsa/glsa-200502-25.xml - http://secunia.com/advisories/14271 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19332 - http
-200502-25.xml - http://secunia.com/advisories/14271 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19332 - http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE8-dns_assert.patch - http://www.redhat.com/support/errata/RHSA-2005-201.html - http://www.securityfocus.com/bid/12551 - http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE8-dns_assert - http://fedoranews.org/updates/FEDORA--.shtml - http://www.debian.org/security/2005/dsa-688 - http://www.redhat.com/support/errata/RHSA-2005-173.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11264 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931 - http://
inition/oval%3Aorg.mitre.oval%3Adef%3A11264 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:047
CVE ID: CVE-2005-0447 State: PUBLISHED Published: 2005-02-15T05:00:00 Last Updated: 2024-08-07T21:13:54.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (hang) via a flood of certain ARP packets. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19331 - http://www.securityfocus.com/bid/12553 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57673-1 - http://secunia.com/advisories/14286 - http://securitytracker.com/id?1013179
CVE ID: CVE-2005-0448 State: PUBLISHED Published: 2005-03-12T05:00:00 Last Updated: 2024-08-07T21:13:54.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-696 - http://www.securityfocus.com/advisories/8704 - http://www.redhat.com/support/errata/RHSA-2005-881.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:079 - http://secunia.com/advisories/55314 - http://s
.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:079 - http://secunia.com/advisories/55314 - http://secunia.com/advisories/18075 - http://www.securityfocus.com/bid/12767 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10475 - ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U - http://fedoranews.org/updates/FEDORA--.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A728 - http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml - http://secunia.com/advisories/18517 - http://www.redhat.com/support/errata/R
o.org/security/en/glsa/glsa-200501-38.xml - http://secunia.com/advisories/18517 - http://www.redhat.com/support/errata/RHSA-2005-674.html - http://secunia.com/advisories/17079 - http://secunia.com/advisories/14531 - https://usn.ubuntu.com/94-1/ - http://www.securityfocus.com/advisories/8704
CVE ID: CVE-2005-0449 State: PUBLISHED Published: 2005-02-16T05:00:00 Last Updated: 2024-08-07T21:13:54.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) or bypass firewall rules via crafted packets, which are not properly handled by the skb_checksum_help function. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10753 - http://www.redhat.com/support/errata/RHSA-2005-366.html - http://www.redhat.com/support/errata/RHSA-2005-283.html - http://secunia.com/adv
com/support/errata/RHSA-2005-366.html - http://www.redhat.com/support/errata/RHSA-2005-283.html - http://secunia.com/advisories/19369 - http://www.novell.com/linux/security/advisories/2005_18_kernel.html - http://www.debian.org/security/2006/dsa-1018 - http://secunia.com/advisories/19607 - https://usn.ubuntu.com/82-1/ - http://www.securityfocus.com/bid/12598 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532 - ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U - http://oss.sgi.com/archives/netdev/2005-01/msg01036.html - http://www.redhat.com/support/errata/RHSA-2005-293.html - http://www.redhat.com
/archives/netdev/2005-01/msg01036.html - http://www.redhat.com/support/errata/RHSA-2005-293.html - http://www.redhat.com/support/errata/RHSA-2005-284.html - http://www.debian.org/security/2006/dsa-1017 - http://secunia.com/advisories/19374 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945
CVE ID: CVE-2005-0450 State: PUBLISHED Published: 2005-02-16T05:00:00 Last Updated: 2024-08-07T21:13:54.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read arbitrary files via an HTTP request containing (1) .. (dot dot) or (2) "%2e%2e" (encoded dot dot) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013191 - http://secunia.com/advisories/14283
CVE ID: CVE-2005-0451 State: PUBLISHED Published: 2005-02-16T05:00:00 Last Updated: 2024-08-07T21:13:54.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sami HTTP Server 1.0.5 allows remote attackers to cause a denial of service via an HTTP request containing two CRLF sequences, which triggers a NULL dereference. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013191 - http://secunia.com/advisories/14283
CVE ID: CVE-2005-0452 State: PUBLISHED Published: 2005-02-16T05:00:00 Last Updated: 2024-08-07T21:13:54.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<". Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110867912714913&w=2 - http://secunia.com/advisories/14214 - http://www.securityfocus.com/bid/12574 - http://it-project.ru/andir/docs/aspxvuln/aspxv
//secunia.com/advisories/14214 - http://www.securityfocus.com/bid/12574 - http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml
CVE ID: CVE-2005-0453 State: PUBLISHED Published: 2005-02-16T05:00:00 Last Updated: 2024-08-07T21:13:54.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: The buffer_urldecode function in Lighttpd 1.3.7 and earlier does not properly handle control characters, which allows remote attackers to obtain the source code for CGI and FastCGI scripts via a URL with a %00 (null) character after the file extension. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200502-21.xml - http://secunia.com/advisories/14297 - http://article.gmane.org/gmane.comp.web.lighttpd/1171
CVE ID: CVE-2005-0454 State: PUBLISHED Published: 2005-02-16T05:00:00 Last Updated: 2024-08-07T21:13:54.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the lcat, doc, or uid parameters to index.php, or (2) the mid or bid parameters to forums.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/419280/100/0/threaded - http://www.securityfocus.com/bid/12573 - http://www.hackgen.org/advisories/hackgen-2005-003.txt - http://securityreason.com/securityalert/108 - https://exchange.xforce.ibmcl
ackgen.org/advisories/hackgen-2005-003.txt - http://securityreason.com/securityalert/108 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19361 - http://glide.stanford.edu/yichen/research/sec.pdf - http://marc.info/?l=bugtraq&m=110858497207809&w=2 - http://securitytracker.com/id?1013216
CVE ID: CVE-2005-0455 State: PUBLISHED Published: 2005-03-02T05:00:00 Last Updated: 2024-08-07T21:13:54.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1 allows remote attackers to execute arbitrary code via a .SMIL file with a large system-screen-size value. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=209&type=vulnerabilities - http://service.real.com/help/faq/security/050224_player - http://www.redhat.com/support/errat
209&type=vulnerabilities - http://service.real.com/help/faq/security/050224_player - http://www.redhat.com/support/errata/RHSA-2005-271.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10926 - http://www.redhat.com/support/errata/RHSA-2005-265.html
CVE ID: CVE-2005-0456 State: PUBLISHED Published: 2005-02-17T05:00:00 Last Updated: 2024-08-07T21:13:54.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 7.54 and earlier does not properly validate base64 encoded binary data in a data: (RFC 2397) URL, which causes the URL to be obscured in a download dialog, which may allow remote attackers to trick users into executing arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/882926 - http://secunia.com/advisories/13818/ - http://www.novell.com/linux/security/advisories/2005_31_opera.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18867 - http://www.gentoo
/security/advisories/2005_31_opera.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18867 - http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml - http://www.opera.com/linux/changelogs/754u2/
CVE ID: CVE-2005-0457 State: PUBLISHED Published: 2005-02-17T05:00:00 Last Updated: 2024-08-07T21:13:54.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privileges by inserting malicious libraries into the PORTAGE_TMPDIR (portage) temporary directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml - http://bugs.gentoo.org/show_bug.cgi?id=81747
CVE ID: CVE-2005-0458 State: PUBLISHED Published: 2005-02-17T05:00:00 Last Updated: 2024-08-07T21:13:54.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in contact_us.php in osCommerce 2.2-MS2 allows remote attackers to inject arbitrary web script or HTML via the enquiry parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110851122614995&w=2
CVE ID: CVE-2005-0459 State: PUBLISHED Published: 2005-02-17T05:00:00 Last Updated: 2024-08-07T21:13:54.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct request to select_lang.lib.php, which reveals the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013210