Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-2298 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T22:39:58.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell Internet Messaging System (NIMS) 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store data if the administrator does not change the credential by using the NMAP Credential Generator. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13377 - http://www.osvdb.org/12234 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10095545.htm
CVE ID: CVE-2004-2299 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-08T01:22:13.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GET request with a long Range header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10376 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16190 - http://www.securityfocus.com/archive/1/363651 - http://www.osvdb.org/12944
CVE ID: CVE-2004-2300 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-08T01:22:13.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this issue should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16245 - http://www.packetstormsecurity.org/0405-advisories/snmpdadv.txt - http:
ange.xforce.ibmcloud.com/vulnerabilities/16245 - http://www.packetstormsecurity.org/0405-advisories/snmpdadv.txt - http://www.securityfocus.com/bid/10396
CVE ID: CVE-2004-2301 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-08T01:22:13.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eudora before 6.1.1 allows remote attackers to cause a denial of service (crash) via an e-mail with a long "To:" field, possibly due to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.eudora.com/download/eudora/windows/6.1.1/RelNotes.txt - http://www.securityfocus.com/bid/10398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16246
CVE ID: CVE-2004-2302 State: PUBLISHED Published: 2005-08-08T04:00:00 Last Updated: 2024-08-08T01:22:13.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the sysfs_read_file and sysfs_write_file functions in Linux kernel before 2.6.10 allows local users to read kernel memory and cause a denial of service (crash) via large offsets in sysfs files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18056 - http://linux.bkbits.net:8080/linux-2.6/cset%404186a4deVoR88JjTwMa3ZnIp-_YJsA - http://www.securityfocus.com/bid/13091 - http://www.debian.org/security/2005/dsa-922 - http://www.mandriva.com/security/advisories?name=MD
yfocus.com/bid/13091 - http://www.debian.org/security/2005/dsa-922 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 - http://secunia.com/advisories/17826 - http://www.novell.com/linux/security/advisories/2005_44_kernel.html - http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 - http://kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.10-rc1/2.6.10-rc1-mm1/broken-out/fix-race-in-sysfs_read_file-and-sysfs_write_file.patch
CVE ID: CVE-2004-2303 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissions, which allows local users to read and overwrite files. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2004:016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15317 - http://www.securityfocus.com/bid/9746
CVE ID: CVE-2004-2304 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9489 - http://security.e-matters.de/advisories/022004.html - http://secunia.com/advisories/10973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15303 - http://securitytracker.com/id?1009220
om/advisories/10973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15303 - http://securitytracker.com/id?1009220 - http://lists.seifried.org/pipermail/security/2004-February/001869.html - http://www.osvdb.org/4056
CVE ID: CVE-2004-2305 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Computer Associates eTrust Antivirus EE 6.0 through 7.0 allows remote attackers to bypass virus scanning by including a password-protected file in a ZIP file, which causes eTrust to scan only the password protected file and skip the other files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15230 - http://www.securitytracker.com/alerts/2004/Feb/1009074.html - http://www.securityfocus.com/bid/9665
CVE ID: CVE-2004-2306 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Solaris 7 through 9, when Basic Security Module (BSM) is enabled and the SUNWscpu package has been removed as a result of security hardening, disables mail alerts from the audit_warn script, which might allow attackers to escape detection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15042 - http://www.ciac.org/ciac/bulletins/o-070.shtml - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57483-1
CVE ID: CVE-2004-2307 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service (browser crash) via a shell: URI with double backslashes (\\) in an HTML tag such as IFRAME or A. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15544 - http://www.securityfocus.com/archive/1/358043 - http://www.securityfocus.com/bid/9924
CVE ID: CVE-2004-2308 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cPanel 9.1.0 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the dir parameter in dohtaccess.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/357231 - http://www.securityfocus.com/bid/9853 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15485
CVE ID: CVE-2004-2309 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside the FTP root via multiple ../ (dot dot slash) in the DIR command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9546 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15028 - http://www.securityfocus.com/archive/1/352329 - http://secunia.com/advisories/10778/ - http://www.securitytracker.com/alerts/2004/Feb/1008908.html
CVE ID: CVE-2004-2310 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arbitrary web script or HTML via a Domino command in the Quick Console. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9901 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15502 - http://members.lycos.co.uk/r34ct/main/ibm_lotus_domino/lotus.txt - http://secunia.com/advisories/11143 - http://www.osvdb.org/4306
CVE ID: CVE-2004-2311 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to create folders or determine the existence of files via a .. (dot dot) in the new folder dialog. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9900 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15504 - http://members.lycos.co.uk/r34ct/main/ibm_lotus_domino/lotus.txt - http://secunia.com/advisories/11143
CVE ID: CVE-2004-2312 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long CC argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15554 - http://secunia.com/advisories/11158/ - http://www.securityfocus.com/bid/9903 - http://archives.neohapsis.com/archives/fulldisclosure/2004-03/0997.html - http://archives.neohapsis.com/archives/fulldisclosure/2004-03/1124.html
CVE ID: CVE-2004-2313 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct passwords on non-mail-enabled accounts (such as root), which allows remote attackers to guess the root password via brute force attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/352317 - http://www.securityfocus.com/bid/9541 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15058
CVE ID: CVE-2004-2314 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Telnet listener for Novell iChain Server before 2.2 Field Patch 3b 2.2.116 does not have a password by default, which allows remote attackers to gain access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/alerts/2004/Feb/1008961.html - http://www.ciac.org/ciac/bulletins/o-080.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/15068
CVE ID: CVE-2004-2315 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via an empty OPTIONS request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9494 - http://secunia.com/advisories/10710/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/14926
CVE ID: CVE-2004-2316 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via a GET request containing an MS-DOS device name such as COM1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9494 - http://secunia.com/advisories/10710/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/14926
CVE ID: CVE-2004-2317 State: PUBLISHED Published: 2005-08-16T04:00:00Z Last Updated: 2024-09-17T01:26:14.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers to obtain sensitive information via a user message that is generated when Mbedthis denies access. Additional Analyst Notes: - CVE Program Container: References: - http://www.mbedthis.com/products/appWeb/doc/product/newFeatures.html - http://www.securityfocus.com/bid/10673
CVE ID: CVE-2004-2318 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative interface (surgeftpmgr.cgi) for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause a temporary denial of service (crash) via requests with two percent (%) signs in the CMD parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15001 - http://members.lycos.co.uk/r34ct/main/surge_FTP/surge-ftp.txt - http://www.secunia.com/advisories/10758/ - http://www.osvdb.org/3788 - http://www.securityfocus.com/bid/9554 - http://secur
p://www.secunia.com/advisories/10758/ - http://www.osvdb.org/3788 - http://www.securityfocus.com/bid/9554 - http://securitytracker.com/id?1008898
CVE ID: CVE-2004-2319 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2) read arbitrary files via a symlink attack on a file in /tmp to onshowaudit. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3760 - http://www.securityfocus.com/bid/9511 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14969 - http://www.securityfocus.com/bid/9512 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14971 - http://secunia.com/a
ttp://www.securityfocus.com/bid/9512 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14971 - http://secunia.com/advisories/10737/ - http://www.osvdb.org/3758 - http://www-1.ibm.com/support/docview.wss?uid=swg21153336 - http://www.securityfocus.com/archive/1/351770
CVE ID: CVE-2004-2320 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14959 - http://www.kb.cert.org/vuls/id/867593 - http://dev2dev.bea.com/pub/advisory
.xforce.ibmcloud.com/vulnerabilities/14959 - http://www.kb.cert.org/vuls/id/867593 - http://dev2dev.bea.com/pub/advisory/68 - http://www.securityfocus.com/bid/9506 - http://secunia.com/advisories/10726 - http://www.securitytracker.com/alerts/2004/Jan/1008866.html - http://www.osvdb.org/3726
CVE ID: CVE-2004-2321 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and Express 8.1 SP1 and earlier allows local users in the Operator role to obtain administrator passwords via MBean attributes, including (1) ServerStartMBean.Password and (2) NodeManagerMBean.CertificatePassword. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14962 - http://www.securityfocus.com/bid/9505 - http://dev2dev.bea.com/pub/advisory/1 - http://www.securitytracker.com/alerts/2004/Jan/1008867.html
CVE ID: CVE-2004-2322 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the (1) announce and (2) notes modules of phpWebSite before 0.9.3-2 allows remote attackers to execute arbitrary SQL queries, as demonstrated using the ANN_id parameter to the announce module. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10878/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/15219 - http://www.systemsecure.org/advisories/ssadvisory13022004.php - http://www.zone-h.com/advisories/read/id=3955 - http://www.securitytracker.com/
.org/advisories/ssadvisory13022004.php - http://www.zone-h.com/advisories/read/id=3955 - http://www.securitytracker.com/alerts/2004/Feb/1009045.html - http://sourceforge.net/tracker/index.php?func=detail&aid=892174&group_id=15539&atid=115539 - http://www.osvdb.org/3852
CVE ID: CVE-2004-2323 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to obtain sensitive information, including the SQL server username and password, via a GET request for source or configuration files such as Web.config. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10747 - http://www.osvdb.org/3749 - http://www.securityfocus.com/bid/9518 - http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html - https://exchange.xforce.ibmcloud.com/vulnerabilit
p://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/14972
CVE ID: CVE-2004-2324 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to modify the backend database via the (1) table and (2) field parameters in LinkClick.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10747 - http://www.securityfocus.com/bid/9518 - http://www.osvdb.org/3750 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14973 - http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html
CVE ID: CVE-2004-2325 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EditModule.aspx for DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3751 - http://secunia.com/advisories/10747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14974 - http://www.securityfocus.com/bid/9518 - http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html
CVE ID: CVE-2004-2326 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in IP3 Networks NetAccess Appliance before firmware 3.1.18b13 allows remote attackers to bypass authentication via the (1) login or (2) password. NOTE: this issue was later reported to also affect firmware 4.0.34. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26106 - http://www.securityfocus.com/bid/9858 - http://www.securityfocus.com/archive/1/432007/100/0/threaded
CVE ID: CVE-2004-2327 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vizer Web Server 1.9.1 allows remote attackers to cause a denial of service (crash) via multiple malformed requests including (1) requests without GET, (2) GET requests without HTTP, (3) or long GET requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9678 - http://www.securityfocus.com/archive/1/354156 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15239
CVE ID: CVE-2004-2328 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite loop) via an e-mail with a crafted RAR archive attached. Additional Analyst Notes: - CVE Program Container: References: - http://www.secunia.com/advisories/10732/ - http://www.osvdb.org/3742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14979 - http://www.securityfocus.com/bid/9556
CVE ID: CVE-2004-2329 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall Configuration Files option, which does not drop privileges before opening the file loading dialog box. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14981 - http://www.tuneld.com/news/?id=30 - http://www.tuneld.com/_images/other/kpf_system_privileges.png - http://www.securitytrac
p://www.tuneld.com/news/?id=30 - http://www.tuneld.com/_images/other/kpf_system_privileges.png - http://www.securitytracker.com/alerts/2004/Jan/1008870.html - http://www.osvdb.org/3748 - http://secunia.com/advisories/10746/
CVE ID: CVE-2004-2330 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: ColdFusion MX 6.1 and 6.1 J2EE allows remote attackers to cause a denial of service via an HTTP request containing a large number of form fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.macromedia.com/devnet/security/security_zone/mpsb04-02.html - http://www.securityfocus.com/bid/9522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14983 - http://secunia.com/advisories/10743/
CVE ID: CVE-2004-2331 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: ColdFusion MX 6.1 and 6.1 J2EE allows local users to bypass sandbox security restrictions and obtain sensitive information by using Java reflection methods to access trusted Java objects without using the CreateObject function or cfobject tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.macromedia.com/devnet/security/security_zone/mpsb04-01.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/14984 - http://www.securityfocus.com/bid/9521 - http://secunia.com/advisories/10743/
CVE ID: CVE-2004-2332 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T01:22:13.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CPAN WWW::Form before 1.13 allow remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/unixfocus/5IP0L2KBPM.html - http://secunia.com/advisories/10751 - http://www.securityfocus.com/bid/9526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14985