Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-2984 State: PUBLISHED Published: 2005-09-19T04:00:00 Last Updated: 2024-08-07T22:53:29.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avocent CCM console server running firmware 2.1 CCM4850 allows remote authenticated attackers to bypass port restrictions by connecting to the server via SSH and using the connect command to access the serial port. Additional Analyst Notes: - CVE Program Container: References: - http://drwetter.org/cs-probs/avocent-sshbug.txt - http://www.securityfocus.com/bid/14853 - http://secunia.com/advisories/16836/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22302 - http://marc.info/?l=bugtraq&m=112680615103315&w=2
CVE ID: CVE-2005-2985 State: PUBLISHED Published: 2005-09-19T04:00:00 Last Updated: 2024-08-07T22:53:30.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search_result.php in AEwebworks aeDating Script 4.0 and earlier allows remote attackers to execute arbitrary SQL statements via the Country parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16831/ - http://www.securityfocus.com/bid/14847 - http://marc.info/?l=bugtraq&m=112681800009262&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22301
CVE ID: CVE-2005-2986 State: PUBLISHED Published: 2005-09-19T04:00:00 Last Updated: 2024-08-07T22:53:30.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: The v3flt2k.sys driver in AhnLab V3Pro 2004 Build 6.0.0.383, V3 VirusBlock 2005 Build 6.0.0.383, V3Net for Windows Server 6.0 Build 6.0.0.383 does not properly validate the source of the DeviceIoControl commands, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112680062609377&w=2 - http://info.ahnlab.com/english/advisory/01.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/22297 - http://www.securityfocus.com/bid/14847 -
dvisory/01.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/22297 - http://www.securityfocus.com/bid/14847 - http://secunia.com/advisories/15674/
CVE ID: CVE-2005-2987 State: PUBLISHED Published: 2005-09-19T04:00:00 Last Updated: 2024-08-07T22:53:29.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Digital Scribe 1.4 allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112680124115325&w=2 - http://www.securityfocus.com/bid/14843 - http://secunia.com/advisories/16841/ - http://securityreason.com/securityalert/10 - http://securitytracker.com/id?1014909 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22286 - http://www.vupen.com/english/advisories/
r.com/id?1014909 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22286 - http://www.vupen.com/english/advisories/2005/1757 - http://www.osvdb.org/19460 - http://rgod.altervista.org/dscribe14.html
CVE ID: CVE-2005-2988 State: PUBLISHED Published: 2005-09-19T04:00:00 Last Updated: 2024-08-07T22:53:30.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP LaserJet 2430, and possibly other printers that use Jetdirect controls, stores information about recently printed documents without proper protection, which could allow remote attackers to obtain sensitive information via SNMP. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112684965506652&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22289
CVE ID: CVE-2005-2989 State: PUBLISHED Published: 2005-09-19T04:00:00 Last Updated: 2024-08-07T22:53:29.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) tid parameter to topic.php, the uid parameter to (2) misc.php or (3) pm.php, or the fid parameter to (3) forums.php or (4) newpost.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/1752 - http://secunia.com/advisories/16819 - http://www.securityfocus.com/bid/14851
CVE ID: CVE-2005-2990 State: PUBLISHED Published: 2005-09-19T04:00:00 Last Updated: 2024-08-07T22:53:30.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: AuthInfo.java in LineContol Java Client (jlc) before 0.8.1 stores sensitive information such as user passwords in log files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14830 - http://www.vupen.com/english/advisories/2005/1737 - http://secunia.com/advisories/16817 - http://sourceforge.net/project/shownotes.php?release_id=356248
CVE ID: CVE-2005-2991 State: PUBLISHED Published: 2005-09-20T04:00:00 Last Updated: 2024-08-07T22:53:29.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: ncompress 4.2.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files using (1) zdiff or (2) zcmp, a different vulnerability than CVE-2004-0970. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/12 - http://marc.info/?l=full-disclosure&m=112688098630314&w=2 - http://marc.info/?l=bugtraq&m=112689772732098&w=2 - http://www.zataz.net/adviso/ncompress-09052005.txt
CVE ID: CVE-2005-2992 State: PUBLISHED Published: 2005-10-13T04:00:00 Last Updated: 2024-08-07T22:53:30.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/11 - http://secunia.com/advisories/16805 - http://marc.info/?l=bugtraq&m=112689596714383&w=2 - http://www.debian.org/security/2005/dsa-843 - http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0535.html - http://secunia.com/advisories/17068
CVE ID: CVE-2005-2993 State: PUBLISHED Published: 2005-09-20T04:00:00 Last Updated: 2024-08-07T22:53:30.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the FTP Daemon (ftpd) for HP Tru64 UNIX 4.0F PK8 and other versions up to HP Tru64 UNIX 5.1B-3, and HP-UX B.11.00, B.11.04, B.11.11, and B.11.23, allows remote authenticated users to cause a denial of service (hang). Additional Analyst Notes: - CVE Program Container: References: - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTU01227 - http://www.securityfocus.com/archive/1/422391/100/0/threaded - http://secunia.com/advisories/18569 - http://www.vupen.com/english/advisories/2005/1801
chive/1/422391/100/0/threaded - http://secunia.com/advisories/18569 - http://www.vupen.com/english/advisories/2005/1801 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5709 - http://secunia.com/advisories/18543 - http://support.avaya.com/elmodocs2/security/ASA-2006-018.htm - http://www.securityfocus.com/archive/1/422391/100/0/threaded - http://www.securityfocus.com/bid/16316 - http://www.vupen.com/english/advisories/2006/0264 - http://securityreason.com/securityalert/360 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTU01227 - http://securitytracker.com/id?1015506
CVE ID: CVE-2005-2994 State: PUBLISHED Published: 2005-09-20T04:00:00Z Last Updated: 2024-09-17T00:26:39.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the web client for IBM Rational ClearQuest 2002.05.00 and 2002.05.20, and 2003.06.00 through 2003.06.15 before SR5, allows remote attackers to execute XML Style Sheets (XSS). Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg21216901&loc=en_US&cs=utf-8&cc=us&lang=all - http://secunia.com/advisories/16717
CVE ID: CVE-2005-2995 State: PUBLISHED Published: 2005-09-20T04:00:00 Last Updated: 2024-08-07T22:53:30.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on (1) the temporary file used by autoconf/randpass when openssl is not available, or (2) the mtx.[PID] temporary file in mtx-changer.in. Additional Analyst Notes: - CVE Program Container: References: - http://www.zataz.net/adviso/bacula-09192005.txt - http://marc.info/?l=full-disclosure&m=112721654126735&w=2 - http://www.novell.com/linux/security/advisories/2005_22_sr.html - http://bugs.gentoo.org/show_bug.cgi?id=104986
CVE ID: CVE-2005-2996 State: PUBLISHED Published: 2005-09-20T04:00:00 Last Updated: 2024-08-07T22:53:30.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS Storage Exec Storage Exec 5.3 before Hotfix 9 and StorageCentral 5.2 before Hot Fix 2 allow remote attackers to execute arbitrary code via certain ActiveX controls. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/620497 - http://www.kb.cert.org/vuls/id/927793 - http://securityresponse.symantec.com/avcenter/security/Content/2005.09.19.html - http://secunia.com/advisories/16871
CVE ID: CVE-2005-2997 State: PUBLISHED Published: 2005-09-20T04:00:00Z Last Updated: 2024-09-16T22:30:13.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in PHP Advanced Transfer Manager 1.30 allow remote attackers to read arbitrary files via ".." sequences in (1) the currentdir parameter to txt.php, or the current_dir parameter to (2) htm.php or (3) html.php. Additional Analyst Notes: - CVE Program Container: References: - http://rgod.altervista.org/phpatm130.html - http://secunia.com/advisories/16867
CVE ID: CVE-2005-2998 State: PUBLISHED Published: 2005-09-20T04:00:00Z Last Updated: 2024-09-17T02:52:27.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Advanced Transfer Manager 1.30 has a default password for the administrator user, which allows remote attackers to upload and execute arbitrary PHP files. Additional Analyst Notes: - CVE Program Container: References: - http://rgod.altervista.org/phpatm130.html
CVE ID: CVE-2005-2999 State: PUBLISHED Published: 2005-09-20T04:00:00Z Last Updated: 2024-09-16T23:26:49.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Advanced Transfer Manager 1.30 allows remote attackers to obtain sensitive PHP configuration information via a direct request to test.php. Additional Analyst Notes: - CVE Program Container: References: - http://rgod.altervista.org/phpatm130.html - http://secunia.com/advisories/16867
CVE ID: CVE-2005-3000 State: PUBLISHED Published: 2005-09-20T04:00:00Z Last Updated: 2024-09-16T23:45:47.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in viewers/txt.php in PHP Advanced Transfer Manager 1.30 allow remote attackers to inject arbitrary web script or HTML via the (1) font, (2) normalfontcolor, or (3) mess[31] parameters. Additional Analyst Notes: - CVE Program Container: References: - http://rgod.altervista.org/phpatm130.html - http://secunia.com/advisories/16867
CVE ID: CVE-2005-3001 State: PUBLISHED Published: 2005-09-20T04:00:00 Last Updated: 2024-08-07T22:53:30.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the "tl" driver in Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/1788 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101899-1 - http://secunia.com/advisories/16874
CVE ID: CVE-2005-3002 State: PUBLISHED Published: 2005-09-20T04:00:00Z Last Updated: 2024-09-16T18:48:50.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multi-Computer Control System (MCCS) 1.0 allows remote attackers to cause a denial of service via a malformed UDP packet. Additional Analyst Notes: - CVE Program Container: References: - http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=93 - http://secunia.com/advisories/16865
CVE ID: CVE-2005-3003 State: PUBLISHED Published: 2005-09-21T04:00:00Z Last Updated: 2024-09-16T18:13:20.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in NooTopList 1.0.0 release 17 allows remote attackers to execute arbitrary SQL commands via the (1) o or (2) sort parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.systemsecure.org/ssforum/viewtopic.php?t=249 - http://securitytracker.com/id?1014931
CVE ID: CVE-2005-3004 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Interakt MX Shop 3.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) idp, (2) id_ctg, or (3) id_prd parameters to the pages module in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.systemsecure.org/ssforum/viewtopic.php?t=250 - http://securitytracker.com/id?1014932 - http://www.securityfocus.com/bid/14876 - http://www.osvdb.org/19611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/22328
CVE ID: CVE-2005-3005 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helpdesk Software Hesk allows remote attackers to bypass authentication for (1) admin.php and (2) admin_main.php by modifying the PHPSESSID session ID parameter or cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/1792 - http://marc.info/?l=bugtraq&m=112724743530521&w=2 - http://www.securityfocus.com/bid/14879 - http://secunia.com/advisories/16859 - http://www.phpjunkyard.com/extras/hesk_0931_patch.zip
CVE ID: CVE-2005-3006 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, which might allow remote attackers to inject arbitrary web script and spoof attachment filenames. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/1789 - http://www.securityfocus.com/bid/14880 - http://secunia.com/secunia_research/2005-42/advisory/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22335 - http://www.opera.com/docs/changelogs/window
-42/advisory/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22335 - http://www.opera.com/docs/changelogs/windows/850/ - http://www.opera.com/docs/changelogs/linux/850/ - http://www.securityfocus.com/advisories/9339 - http://marc.info/?l=bugtraq&m=112724692219695&w=2 - http://www.osvdb.org/19508 - http://secunia.com/advisories/16645
CVE ID: CVE-2005-3007 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." (dot), which might allow remote attackers to trick users into processing dangerous content. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/1789 - http://www.securityfocus.com/bid/14880 - http://secunia.com/secunia_research/2005-42/advisory/ - http://www.opera.com/docs/changelogs/windows/850/ - http://www.opera.com/docs/changelogs/linux/850/ - https://exch
ry/ - http://www.opera.com/docs/changelogs/windows/850/ - http://www.opera.com/docs/changelogs/linux/850/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/22337 - http://www.securityfocus.com/advisories/9339 - http://www.osvdb.org/19509 - http://marc.info/?l=bugtraq&m=112724692219695&w=2 - http://secunia.com/advisories/16645
CVE ID: CVE-2005-3008 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tofu 0.2 allows remote attackers to execute arbitrary Python code via crafted pickled objects, which Tofu unpickles and executes. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/19570 - http://secunia.com/advisories/16876 - http://soya.literati.org/ - http://www.securityfocus.com/bid/14865
CVE ID: CVE-2005-3009 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CuteNews allows remote attackers to inject arbitrary web script or HTML via the mod parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014929 - http://www.aria-security.net/advisory/portals/cutenews.txt - http://www.securityfocus.com/archive/1/432110/100/0/threaded
CVE ID: CVE-2005-3010 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:29.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and earlier allows remote attackers to execute arbitrary PHP code via the HTTP_CLIENT_IP header (Client-Ip), which is injected into data/flood.db.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14869 - http://www.securityfocus.com/archive/1/411057 - http://securityreason.com/securityalert/14
CVE ID: CVE-2005-3011 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=305530 - http://www.ubuntu.com/usn/usn-194-1 - http://www.redhat.com/support/errata/RHSA-2006-0727.html - http://www.vupen.com/english/advisories/2007/1939 - http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html - http://lists.apple.com/archives/
/2007/1939 - http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html - http://lists.apple.com/archives/security-announce/2007/May/msg00004.html - http://secunia.com/advisories/25402 - http://www.securityfocus.com/archive/1/464745/100/0/threaded - http://secunia.com/advisories/17076 - http://secunia.com/advisories/18401 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:175 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=328365 - http://secunia.com/advisories/17211 - http://www.vupen.com/english/advisories/2007/1267 - http://www.securityfocus.com/bid/14854 - http://secunia.com/advisories/23112 - http://www.vmware.com/support/vi3/doc/esx-2559638-patch.html - http
om/bid/14854 - http://secunia.com/advisories/23112 - http://www.vmware.com/support/vi3/doc/esx-2559638-patch.html - http://secunia.com/advisories/17093 - ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P - http://secunia.com/advisories/24788 - http://secunia.com/advisories/16816 - http://secunia.com/advisories/22929 - http://www.gentoo.org/security/en/glsa/glsa-200510-04.xml - http://secunia.com/advisories/17070 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:01.texindex.asc - http://securitytracker.com/id?1015468 - http://securitytracker.com/id?1014992 - http://www.vmware.com/support/vi3/doc/esx-1121906-patch.html - http://secunia.com/advisories/17215 -
r.com/id?1014992 - http://www.vmware.com/support/vi3/doc/esx-1121906-patch.html - http://secunia.com/advisories/17215 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10589 - http://www.debian.org/security/2006/dsa-1219 - http://www.novell.com/linux/security/advisories/2005_23_sr.html
CVE ID: CVE-2005-3012 State: PUBLISHED Published: 2005-09-21T04:00:00Z Last Updated: 2024-09-16T17:04:03.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MasterDataCD::createImage function in masterdatacd.cpp for SimpleCDR-X 1.3.3 creates the .temp temporary directory with insecure permissions, which allows local users to read sensitive ISO images. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14855 - http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037174.html - http://secunia.com/advisories/16835
CVE ID: CVE-2005-3013 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in liby2util in Yet another Setup Tool (YaST) for SuSE Linux 9.3 allows local users to execute arbitrary code via a long Loc entry. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24323 - http://www.novell.com/linux/security/advisories/2005_22_sr.html - http://www.securityfocus.com/bid/14861
CVE ID: CVE-2005-3014 State: PUBLISHED Published: 2005-09-21T04:00:00Z Last Updated: 2024-09-16T20:32:09.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Ensim webplliance allows remote attackers to inject arbitrary web script or HTML via the Login (OCW_login_username) field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14836 - http://membres.lycos.fr/newnst/exploit/Ensim_Autentification_XSS_By_ConcorDHacK.html - http://www.zataz.com/forum/viewtopic.php?id=113
CVE ID: CVE-2005-3015 State: PUBLISHED Published: 2005-09-21T04:00:00Z Last Updated: 2024-09-16T17:02:59.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 6.5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) BaseTarget or (2) Src parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16830 - http://www.securityfocus.com/bid/14846 - http://www.securityfocus.com/bid/14845 - http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg1LO07849&loc=en_US&cs=utf-8&cc=us&lang=all - http://www-1.ibm.com/support/docview.wss?uid=swg1LO07850
CVE ID: CVE-2005-3016 State: PUBLISHED Published: 2005-09-21T04:00:00Z Last Updated: 2024-09-16T17:38:06.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the WYSIWYG editor in PHP-Nuke before 7.9 Final have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpnuke.org/modules.php?name=News&file=article&sid=7435 - http://secunia.com/advisories/16843
CVE ID: CVE-2005-3017 State: PUBLISHED Published: 2005-09-21T04:00:00Z Last Updated: 2024-09-17T02:16:23.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP file inclusion vulnerability in index.php in Content2Web 1.0.1 allows remote attackers to include arbitrary files via the show parameter, which can lead to resultant errors such as path disclosure, SQL error messages, and cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014900
CVE ID: CVE-2005-3018 State: PUBLISHED Published: 2005-09-21T04:00:00 Last Updated: 2024-08-07T22:53:30.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari allows remote attackers to cause a denial of service (application crash) via a crafted data:// URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/22331 - http://marc.info/?l=bugtraq&m=112715234411672&w=2 - http://secunia.com/advisories/16875/ - http://www.securityfocus.com/bid/14868 - http://www.osvdb.org/19569