Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-0700 State: PUBLISHED Published: 2004-07-21T04:00:00 Last Updated: 2024-08-08T00:24:27.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function. Additional Analyst Notes: - CVE Program Container: References: - http://virulent.siyahsapka.org/ - http://www.osvdb.org/7929 - http://www.ubuntu.com/usn/usn-177-1 - http://www.securityfocus.com/bid/10736 - http://www.redhat.com/sup
svdb.org/7929 - http://www.ubuntu.com/usn/usn-177-1 - http://www.securityfocus.com/bid/10736 - http://www.redhat.com/support/errata/RHSA-2004-405.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16705 - http://packetstormsecurity.org/0407-advisories/modsslFormat.txt - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000857 - http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075 - http://www.debian.org/security/2004/dsa-532 - http://www.redhat.com/support/errata/RHSA-2004-408.html - https://bugzilla.fedora.us/show_bug.cgi?id=1888 - http://marc.info/?l=apache-modssl&m=109001100906749&w=2 - http://www.kb.cert.org/vuls/id/303448 - http://marc.info/?l=bu
http://marc.info/?l=apache-modssl&m=109001100906749&w=2 - http://www.kb.cert.org/vuls/id/303448 - http://marc.info/?l=bugtraq&m=109005001205991&w=2
CVE ID: CVE-2004-0701 State: PUBLISHED Published: 2004-07-21T04:00:00 Last Updated: 2024-08-08T00:24:27.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/7457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11905 - http://www.kb.cert.org/vuls/id/100780 - http://sunsolve.sun.com/pub-cgi/retrieve.pl?do
cloud.com/vulnerabilities/11905 - http://www.kb.cert.org/vuls/id/100780 - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F53922
CVE ID: CVE-2004-0702 State: PUBLISHED Published: 2004-07-21T04:00:00 Last Updated: 2024-08-08T00:24:27.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not running, which could allow remote attackers to gain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16673 - http://www.securityfocus.com/bid/10698 - http://marc.info/?l=bugtraq&m=108965446813639&w=2
CVE ID: CVE-2004-0703 State: PUBLISHED Published: 2004-07-21T04:00:00 Last Updated: 2024-08-08T00:24:27.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with "grant membership" privileges to grant memberships to groups that the user does not control. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16672 - http://www.securityfocus.com/bid/10698 - http://marc.info/?l=bugtraq&m=108965446813639&w=2
CVE ID: CVE-2004-0704 State: PUBLISHED Published: 2004-07-21T04:00:00 Last Updated: 2024-08-08T00:24:27.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in (1) duplicates.cgi and (2) buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.18 before 2.18rc1, when configured to hide products, allows remote attackers to view hidden products. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10698 - http://marc.info/?l=bugtraq&m=108965446813639&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16671
CVE ID: CVE-2004-0705 State: PUBLISHED Published: 2004-07-21T04:00:00 Last Updated: 2024-08-08T00:24:27.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) editcomponents.cgi, (2) editgroups.cgi, (3) editmilestones.cgi, (4) editproducts.cgi, (5) editusers.cgi, and (6) editversions.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allow remote attackers to execute arbitrary JavaScript as other users via a URL parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16670 - http://www.securityfocus.com/bid/10698 - http://marc.info/?l=bugtra
exchange.xforce.ibmcloud.com/vulnerabilities/16670 - http://www.securityfocus.com/bid/10698 - http://marc.info/?l=bugtraq&m=108965446813639&w=2 - http://bugzilla.mozilla.org/show_bug.cgi?id=235265
CVE ID: CVE-2004-0706 State: PUBLISHED Published: 2004-07-21T04:00:00 Last Updated: 2024-08-08T00:24:27.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password in the web server log files. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.mozilla.org/show_bug.cgi?id=235510 - http://www.securityfocus.com/bid/10698 - http://marc.info/?l=bugtraq&m=108965446813639&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16669
CVE ID: CVE-2004-0707 State: PUBLISHED Published: 2004-07-21T04:00:00 Last Updated: 2024-08-08T00:24:27.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.mozilla.org/show_bug.cgi?id=244272 - http://www.securityfocus.com/bid/10698 - http://marc.info/?l=bugtraq&m=108965446813639&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16668
CVE ID: CVE-2004-0708 State: PUBLISHED Published: 2004-07-21T04:00:00 Last Updated: 2024-08-08T00:24:27.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200407-09.xml - http://sourceforge.net/tracker/index.php?func=detail&aid=948103&group_id=8482&atid=108482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16465 - http://secunia.com/advisories/11807 - http://www.securityfocus.com/bid/10568 - http://www.osvdb.o
ulnerabilities/16465 - http://secunia.com/advisories/11807 - http://www.securityfocus.com/bid/10568 - http://www.osvdb.org/6704
CVE ID: CVE-2004-0709 State: PUBLISHED Published: 2004-07-21T04:00:00 Last Updated: 2024-08-08T00:24:27.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP OpenView Select Access 5.0 through 6.0 does not correctly decode UTF-8 encoded unicode characters in a URL, which could allow remote attackers to bypass access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/205766 - http://www.securityfocus.com/bid/10414 - http://www.securityfocus.com/advisories/6774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16247
CVE ID: CVE-2004-0710 State: PUBLISHED Published: 2004-07-21T04:00:00 Last Updated: 2024-08-08T00:24:27.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: IP Security VPN Services Module (VPNSM) in Cisco Catalyst 6500 Series Switch and the Cisco 7600 Series Internet Routers running IOS before 12.2(17b)SXA, before 12.2(17d)SXB, or before 12.2(14)SY03 could allow remote attackers to cause a denial of service (device crash and reload) via a malformed Internet Key Exchange (IKE) packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/904310 - http://www.cisco.com/warp/public/707/cisco-sa-20040408-vpnsm.shtml - https://oval.cisecurity.o
cert.org/vuls/id/904310 - http://www.cisco.com/warp/public/707/cisco-sa-20040408-vpnsm.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5696 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15797 - http://www.securityfocus.com/bid/10083
CVE ID: CVE-2004-0711 State: PUBLISHED Published: 2004-07-21T04:00:00 Last Updated: 2024-08-08T00:24:27.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "*" as wildcards as if they were the legal "/*" pattern, which could cause WebLogic 7.x to allow remote attackers to bypass intended access restrictions because the illegal patterns are properly rejected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10184 - http://www.kb.cert.org/vuls/id/184558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15927 - http://dev2dev.bea.com/re
/www.kb.cert.org/vuls/id/184558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15927 - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_56.00.jsp
CVE ID: CVE-2004-0712 State: PUBLISHED Published: 2004-07-21T04:00:00 Last Updated: 2024-08-08T00:24:27.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: The configuration tools (1) config.sh in Unix or (2) config.cmd in Windows for BEA WebLogic Server 8.1 through SP2 create a log file that contains the administrative username and password in cleartext, which could allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/574222 - http://www.securityfocus.com/bid/10188 - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_58.00.jsp - https://exchange.xforce.ibmcloud.com/vulnerabilities/
.bea.com/resourcelibrary/advisoriesnotifications/BEA04_58.00.jsp - https://exchange.xforce.ibmcloud.com/vulnerabilities/15926
CVE ID: CVE-2004-0713 State: PUBLISHED Published: 2004-07-21T04:00:00 Last Updated: 2024-08-08T00:24:27.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remove method in a stateful Enterprise JavaBean (EJB) in BEA WebLogic Server and WebLogic Express version 8.1 through SP2, 7.0 through SP4, and 6.1 through SP6, does not properly check EJB permissions before unexporting a bean, which allows remote authenticated users to remove EJB objects from remote views before the security exception is thrown. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15928 - http://www.securityfocus.com/bid/10185 - http://dev2d
es: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15928 - http://www.securityfocus.com/bid/10185 - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_57.00.jsp - http://www.kb.cert.org/vuls/id/658878
CVE ID: CVE-2004-0714 State: PUBLISHED Published: 2004-07-21T04:00:00 Last Updated: 2024-08-08T00:24:27.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Internetwork Operating System (IOS) 12.0S through 12.3T attempts to process SNMP solicited operations on improper ports (UDP 162 and a randomly chosen UDP port), which allows remote attackers to cause a denial of service (device reload and memory corruption). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15921 - http://www.kb.cert.org/vuls/id/162451 - http://www.us-cert.gov/cas/techalerts/TA04-111B.html - http://www.cisco.com/warp/public/707/cisco-sa
rg/vuls/id/162451 - http://www.us-cert.gov/cas/techalerts/TA04-111B.html - http://www.cisco.com/warp/public/707/cisco-sa-20040420-snmp.shtml - http://www.securityfocus.com/bid/10186 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5845
CVE ID: CVE-2004-0715 State: PUBLISHED Published: 2004-07-21T04:00:00 Last Updated: 2024-08-08T00:24:27.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 does not properly clear member relationships when a group is deleted, which can cause a new group with the same name to have the members of the old group, which allows group members to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_52.01.jsp - http://www.osvdb.org/5299 - http://www.kb.cert.org/vuls/id/470470
urcelibrary/advisoriesnotifications/BEA04_52.01.jsp - http://www.osvdb.org/5299 - http://www.kb.cert.org/vuls/id/470470 - http://securitytracker.com/id?1009763 - http://www.securityfocus.com/bid/10130 - http://secunia.com/advisories/11356 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15861
CVE ID: CVE-2004-0716 State: PUBLISHED Published: 2004-07-27T04:00:00 Last Updated: 2024-08-08T00:24:27.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the DCE daemon (DCED) for the DCE endpoint mapper (epmap) on HP-UX 11 allows remote attackers to execute arbitrary code via a request with a small fragment length and a large amount of data. Additional Analyst Notes: - CVE Program Container: References: - http://support.entegrity.com/private/patches/dce/ssrt4741.asp - http://www.kb.cert.org/vuls/id/259796 - http://www.atstake.com/research/advisories/2004/a072204-1.txt
CVE ID: CVE-2004-0717 State: PUBLISHED Published: 2004-07-23T04:00:00 Last Updated: 2024-08-08T00:24:27.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 7.51 for Windows and 7.50 for Linux does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/1598 - http://secunia.com/advisories/11978 - http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/
CVE ID: CVE-2004-0718 State: PUBLISHED Published: 2004-07-23T04:00:00 Last Updated: 2024-08-08T00:24:27.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-810 - http://www.debian.org/security/2005/dsa-777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1598 - ftp://ftp.sco.com
p://www.debian.org/security/2005/dsa-777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1598 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - http://www.novell.com/linux/security/advisories/2004_36_mozilla.html - http://www.redhat.com/support/errata/RHSA-2004-421.html - http://www.mandriva.com/security/advisories?name=MDKSA-2004:082 - http://marc.info/?l=bugtraq&m=109900315219363&w=2 - http://www.securityfocus.com/bid/15495 - http://secunia.com/advisories/11978 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4756 - http://bugzilla.mozilla.org/show_bug.cgi?id=246448 - http://secunia.com/multiple_browsers_frame_inject
al%3Adef%3A4756 - http://bugzilla.mozilla.org/show_bug.cgi?id=246448 - http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9997
CVE ID: CVE-2004-0719 State: PUBLISHED Published: 2004-07-23T04:00:00 Last Updated: 2024-08-08T00:24:27.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer for Mac 5.2.3, Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/1598 - http://secunia.com/advisories/11978 - http://secunia.com/advisories/11966 - http://secunia.com/multi
nerabilities/1598 - http://secunia.com/advisories/11978 - http://secunia.com/advisories/11966 - http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/
CVE ID: CVE-2004-0720 State: PUBLISHED Published: 2004-07-23T04:00:00 Last Updated: 2024-08-08T00:24:27.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/1598 - http://secunia.com/advisories/11978 - http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/
CVE ID: CVE-2004-0721 State: PUBLISHED Published: 2004-07-23T04:00:00 Last Updated: 2024-08-08T00:24:27.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/1598 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864 - http://secunia.com/advisories/11978 - https://oval.cisecurity.org/repository/s
om.br/atualizacoes/?id=a&anuncio=000864 - http://secunia.com/advisories/11978 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11371 - http://www.kde.org/info/security/advisory-20040811-3.txt - http://security.gentoo.org/glsa/glsa-200408-13.xml - http://marc.info/?l=bugtraq&m=109225538901170&w=2 - http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/
CVE ID: CVE-2004-0722 State: PUBLISHED Published: 2004-08-03T04:00:00 Last Updated: 2024-08-08T00:24:27.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - http://www.novell.com/linux/security/advisories/2004_36_mozilla.html - http://www.redhat.com/support/errata/RHSA-2004-421.html - http://bugzilla.mozilla.org/show_bug.cgi?id=236618 - https://oval.c
//www.redhat.com/support/errata/RHSA-2004-421.html - http://bugzilla.mozilla.org/show_bug.cgi?id=236618 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9378 - http://www.securityfocus.com/bid/15495 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16862 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4629 - http://www.idefense.com/application/poi/display?id=117&type=vulnerabilities
CVE ID: CVE-2004-0723 State: PUBLISHED Published: 2004-07-23T04:00:00 Last Updated: 2024-08-08T00:24:27.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Java virtual machine (VM) 5.0.0.3810 allows remote attackers to bypass sandbox restrictions to read or write certain data between applets from different domains via the "GET/Key" and "PUT/Key/Value" commands, aka "cross-site Java." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16666 - http://www.securityfocus.com/bid/10688 - http://marc.info/?l=bugtraq&m=108948405808522&w=2
CVE ID: CVE-2004-0724 State: PUBLISHED Published: 2004-07-23T04:00:00 Last Updated: 2024-08-08T00:24:27.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service (server or client crash) via an empty fragmented packet. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108966465302107&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16674 - http://www.securityfocus.com/bid/10700
CVE ID: CVE-2004-0725 State: PUBLISHED Published: 2004-07-23T04:00:00 Last Updated: 2024-08-08T00:24:27.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in help.php in Moodle 1.3.2 and 1.4 dev allows remote attackers to inject arbitrary web script or HTML via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.sourceforge.net/viewcvs.py/moodle/moodle/help.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/16684 - http://www.securityfocus.com/bid/10718 - http://marc.info/?l=bugtraq&m=108973588000027&w=2
CVE ID: CVE-2004-0726 State: PUBLISHED Published: 2004-07-23T04:00:00 Last Updated: 2024-08-08T00:24:27.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the local computer zone via an ASX filename that contains javascript, which is executed in the local context in a preview panel. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16704 - http://www.securityfocus.com/bid/10693 - http://marc.info/?l=bugtraq&m=108965512912175&w=2
CVE ID: CVE-2004-0727 State: PUBLISHED Published: 2004-07-23T04:00:00 Last Updated: 2024-08-08T00:24:27.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as demonstrated by SimilarMethodNameRedir, aka the "Similar Method Name Redirection Cross Domain Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://freehost07.websamba.com/greyhats/similarmethodnameredir.htm
Analyst Notes: - CVE Program Container: References: - http://freehost07.websamba.com/greyhats/similarmethodnameredir.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7448 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7496 - http://www.kb.cert.org/vuls/id/207264 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4702 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7906 - http://secunia.com/advisories/12048 - http://www.us-cert.gov/cas/techalerts/T
ition/oval%3Aorg.mitre.oval%3Adef%3A7906 - http://secunia.com/advisories/12048 - http://www.us-cert.gov/cas/techalerts/TA04-293A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16681 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6829 - http://marc.info/?l=bugtraq&m=108966512815373&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7084