Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-1129 State: PUBLISHED Published: 2005-04-16T04:00:00 Last Updated: 2024-08-07T21:35:59.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: eGroupWare 1.0.6 and earlier, when an e-mail is composed with an attachment but not sent, will send that attachment in the next e-mail, which may cause sensitive information to be sent to the wrong recipient. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14940 - http://archives.neohapsis.com/archives/bugtraq/2005-04/0157.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/20088 - http://www.securityfocus.com/bid/13137 - http://www.osvdb.org/15499
CVE ID: CVE-2005-1130 State: PUBLISHED Published: 2005-04-16T04:00:00 Last Updated: 2024-08-07T21:35:59.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Pinnacle Cart allows remote attackers to inject arbitrary web script or HTML via the pg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15485 - http://www.securityfocus.com/bid/13138 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20092 - http://secunia.com/advisories/14924 - http://systemsecure.org/board/index.php?showtopic=8
CVE ID: CVE-2005-1131 State: PUBLISHED Published: 2005-04-16T04:00:00 Last Updated: 2024-08-07T21:36:00.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Veritas i3 Focalpoint Server 7.1 and earlier has unknown attack vectors and unknown but "critical" impact. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/14934 - http://www.osvdb.org/15498 - http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0008.html - http://securitytracker.com/id?1013694 - http://www.securityfocus.com/bid/13142 - http://seer.support.veritas.com/docs/276119.htm
CVE ID: CVE-2005-1132 State: PUBLISHED Published: 2005-04-16T04:00:00 Last Updated: 2024-08-07T21:35:59.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: LG U8120 mobile phone allows remote attackers to cause a denial of service (device crash) via a malformed MIDI file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13154 - http://securitytracker.com/id?1013777 - http://www.securityfocus.com/archive/1/395714 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20091
CVE ID: CVE-2005-1133 State: PUBLISHED Published: 2005-04-16T04:00:00 Last Updated: 2024-08-07T21:36:00.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: The POP3 server in IBM iSeries AS/400 returns different error messages when the user exists or not, which allows remote attackers to determine valid user IDs on the server. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111358863001693&w=2 - http://www.securityfocus.com/bid/13156
CVE ID: CVE-2005-1134 State: PUBLISHED Published: 2005-04-16T04:00:00 Last Updated: 2024-08-07T21:35:59.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) url_id or (2) entry_id parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.s9y.org/5.html - http://www.osvdb.org/15542 - http://seclists.org/lists/bugtraq/2005/Apr/0195.html - http://secunia.com/advisories/15145 - http://www.s9y.org/63.html#A9 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20119 - http://securitytracker.com/id?1013699 - http://
3.html#A9 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20119 - http://securitytracker.com/id?1013699 - http://www.securityfocus.com/bid/13161
CVE ID: CVE-2005-1135 State: PUBLISHED Published: 2005-04-16T04:00:00 Last Updated: 2024-08-07T21:35:59.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php for Simple PHP Blog (sphpBlog) 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://echo.or.id/adv/adv12-y3dips-2005.txt - http://marc.info/?l=bugtraq&m=111359320312609&w=2 - http://www.waraxe.us/ftopict-651.html - http://www.securityfocus.com/bid/13170
CVE ID: CVE-2005-1136 State: PUBLISHED Published: 2005-04-16T04:00:00 Last Updated: 2024-08-07T21:36:00.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple PHP Blog (sphpBlog) 0.4.0 stores the (1) password.txt and (2) config.txt files under the web document root, which allows remote attackers to obtain sensitive information and crack passwords via a direct request to these files. Additional Analyst Notes: - CVE Program Container: References: - http://echo.or.id/adv/adv12-y3dips-2005.txt - http://marc.info/?l=bugtraq&m=111359320312609&w=2 - http://www.waraxe.us/ftopict-651.html
CVE ID: CVE-2005-1137 State: PUBLISHED Published: 2005-04-16T04:00:00 Last Updated: 2024-08-07T21:35:59.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple PHP Blog (sphpBlog) 0.4.0 allows remote attackers to obtain sensitive information via a direct request to sb_functions.php, which leaks the full pathname in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://echo.or.id/adv/adv12-y3dips-2005.txt - http://marc.info/?l=bugtraq&m=111359320312609&w=2
CVE ID: CVE-2005-1138 State: PUBLISHED Published: 2005-04-16T04:00:00 Last Updated: 2024-08-07T21:36:00.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in WebMail in Kerio MailServer before 6.0.9 allows remote attackers to cause a denial of service (CPU consumption) via certain e-mail messages. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013708 - http://www.kerio.com/kms_history.html
CVE ID: CVE-2005-1139 State: PUBLISHED Published: 2005-04-16T04:00:00 Last Updated: 2024-08-07T21:35:59.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 8 Beta 3, when using first-generation vetted digital certificates, displays the Organizational information of an SSL certificate, which is easily spoofed and can facilitate phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2005_31_opera.html - http://www.geotrust.com/resources/advisory/sslorg/sslorg-advisory.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/40503 - http://www.geotrust.com/resources/advisory/sslorg/index.htm - http:/
xchange.xforce.ibmcloud.com/vulnerabilities/40503 - http://www.geotrust.com/resources/advisory/sslorg/index.htm - http://www.securityfocus.com/bid/13176
CVE ID: CVE-2005-1140 State: PUBLISHED Published: 2005-04-16T04:00:00Z Last Updated: 2024-09-17T02:10:44.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in myBloggie 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the comments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13192 - http://www.securityfocus.com/archive/1/395988
CVE ID: CVE-2005-1141 State: PUBLISHED Published: 2005-04-16T04:00:00 Last Updated: 2024-08-07T21:36:00.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111358557823673&w=2 - http://www.overflow.pl/adv/gocr.txt
CVE ID: CVE-2005-1142 State: PUBLISHED Published: 2005-04-16T04:00:00 Last Updated: 2024-08-07T21:35:59.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the readpgm function in pnm.c for GOCR 0.40, when it is not using netpbm, allows remote attackers to execute arbitrary code via a P3 format PNM file with more data than implied by its width and height values. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111358557823673&w=2 - http://www.overflow.pl/adv/gocr.txt
CVE ID: CVE-2005-1143 State: PUBLISHED Published: 2005-04-16T04:00:00 Last Updated: 2024-08-07T21:35:59.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in EasyPHPCalendar before 6.2.8 allows remote attackers to inject arbitrary web script or HTML via the yr parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.snkenjoi.com/secadv/secadv4.txt - http://docs.easyphpcalendar.com/Change%20Log/changeLog.htm - http://securitytracker.com/id?1013704 - http://www.osvdb.org/15544
CVE ID: CVE-2005-1144 State: PUBLISHED Published: 2005-04-16T04:00:00 Last Updated: 2024-08-07T21:35:59.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: popup.php in EasyPHPCalendar before 6.2.8 allows remote attackers to obtain sensitive information via an invalid ev parameter, which reveals the full pathname of the web server in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15545 - http://www.snkenjoi.com/secadv/secadv4.txt - http://docs.easyphpcalendar.com/Change%20Log/changeLog.htm - http://securitytracker.com/id?1013704
CVE ID: CVE-2005-1145 State: PUBLISHED Published: 2005-04-16T04:00:00 Last Updated: 2024-08-07T21:35:59.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in calendar.pl in CalendarScript 3.20 allows remote attackers to inject arbitrary web script or HTML via the template parameter, a different vulnerability than CVE-2005-1146 Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15547 - http://securitytracker.com/id?1013705 - http://www.snkenjoi.com/secadv/secadv3.txt
CVE ID: CVE-2005-1146 State: PUBLISHED Published: 2005-04-16T04:00:00 Last Updated: 2024-08-07T21:36:00.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in the login command in calendar.pl in CalendarScript 3.21 allows remote attackers to inject arbitrary web script or HTML via the username parameter, a different vulnerability than CVE-2005-1145 Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20103 - http://securitytracker.com/id?1013705 - http://www.snkenjoi.com/secadv/secadv3.txt
CVE ID: CVE-2005-1147 State: PUBLISHED Published: 2005-04-16T04:00:00 Last Updated: 2024-08-07T21:35:59.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: calendar.pl in CalendarScript 3.20 allows remote attackers to obtain sensitive information via invalid (1) calendar or (2) template parameters, which leaks the full pathname and debug information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15546 - http://securitytracker.com/id?1013705 - http://www.snkenjoi.com/secadv/secadv3.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/20102
CVE ID: CVE-2005-1148 State: PUBLISHED Published: 2005-04-16T04:00:00 Last Updated: 2024-08-07T21:35:59.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: calendar.pl in CalendarScript 3.21 allows remote attackers to obtain sensitive information via invalid (1) year or (2) month parameters, which leaks the full pathname and debug information. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013705 - http://www.snkenjoi.com/secadv/secadv3.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/20102
CVE ID: CVE-2005-1149 State: PUBLISHED Published: 2005-04-16T04:00:00Z Last Updated: 2024-09-16T19:10:55.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/login.asp in aspclick.it ACNews 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15494 - http://securitytracker.com/id?1013681 - http://www.securityfocus.com/bid/13148
CVE ID: CVE-2005-1150 State: PUBLISHED Published: 2005-04-16T04:00:00Z Last Updated: 2024-09-16T19:04:57.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier, when running on Windows systems, allows attackers to cause a denial of service (hang). Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15504 - http://secunia.com/advisories/14961 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57760-1
CVE ID: CVE-2005-1151 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:35:59.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows local users to overwrite or create arbitrary files as root. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15505 - http://secunia.com/advisories/15478 - http://bugs.gentoo.org/show_bug.cgi?id=90622 - http://www.debian.org/security/2005/dsa-728 - http://secunia.com/advisories/15475 - http://www.gentoo.org/security/en/glsa/glsa-200505-17.xml
CVE ID: CVE-2005-1152 State: PUBLISHED Published: 2005-05-25T04:00:00 Last Updated: 2024-08-07T21:35:59.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with group or world-writable permissions. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/attachment.cgi?id=58329&action=view - http://secunia.com/advisories/15505 - http://secunia.com/advisories/15478 - http://bugs.gentoo.org/show_bug.cgi?id=90622 - http://www.debian.org/security/2005/dsa-728 - http://secunia.com/advisories/15475 - http://www.gentoo.org/security/en/glsa/glsa-2
w.debian.org/security/2005/dsa-728 - http://secunia.com/advisories/15475 - http://www.gentoo.org/security/en/glsa/glsa-200505-17.xml
CVE ID: CVE-2005-1153 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:35:59.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote attackers to execute arbitrary code via a javascript: URL that is executed when the user selects the "Show javascript" option. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-386.html - http://secunia.com/advisories/14992 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - http://www.mozilla.org/security/announce/mfsa2005-35.html - http://www.security
Server/SCOSA-2005.49/SCOSA-2005.49.txt - http://www.mozilla.org/security/announce/mfsa2005-35.html - http://www.securityfocus.com/bid/15495 - http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9584 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100023 - http://secunia.com/advisories/14938 - http://www.redhat.com/support/errata/RHSA-2005-384.html - https://bugzilla.mozilla.org/show_bug.cgi?id=289204 - http://www.redhat.com/support/errata/RHSA-2005-383.html
CVE ID: CVE-2005-1154 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:35:59.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka "Cross-site scripting through global scope pollution." Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-386.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100022 - http://secunia.com/adv
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100022 - http://secunia.com/advisories/14992 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - http://www.securityfocus.com/bid/13230 - http://www.securityfocus.com/bid/15495 - http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml - http://secunia.com/advisories/14938 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10339 - http://www.redhat.com/support/errata/RHSA-2005-384.html - http://www.redhat.com/support/errata/RHSA-2005-383.html - http://www.mozilla.org/security/announce/mfsa2005-36.html - https://bugzilla.mozilla.org/show_bug.
/RHSA-2005-383.html - http://www.mozilla.org/security/announce/mfsa2005-36.html - https://bugzilla.mozilla.org/show_bug.cgi?id=289675
CVE ID: CVE-2005-1155 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:36:00.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a <LINK rel="icon"> tag with a javascript: URL in the href attribute, aka "Firelinking." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10655 - http://www.redhat.com/support/errata/RHSA-2005-386.html - http://secunia.com/advisories/14992 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.
t/errata/RHSA-2005-386.html - http://secunia.com/advisories/14992 - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - https://bugzilla.mozilla.org/show_bug.cgi?id=290036 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100021 - http://www.mikx.de/firelinking/ - http://www.securityfocus.com/bid/15495 - http://www.kb.cert.org/vuls/id/973309 - http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml - http://secunia.com/advisories/14938 - http://www.redhat.com/support/errata/RHSA-2005-384.html - http://www.mozilla.org/security/announce/mfsa2005-37.html - http://www.securityfocus.com/bid/13216 - http://www.redhat.com/support/errat
la.org/security/announce/mfsa2005-37.html - http://www.securityfocus.com/bid/13216 - http://www.redhat.com/support/errata/RHSA-2005-383.html
CVE ID: CVE-2005-1156 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:35:59.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to execute arbitrary script and code via a new search plugin using sidebar.addSearchEngine, aka "Firesearching 1." Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-386.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11230 - http://secunia.com/advisories/14992 - http://www.mozilla.org/security/announce/mfsa2005-38.html - ftp://ftp.
f%3A11230 - http://secunia.com/advisories/14992 - http://www.mozilla.org/security/announce/mfsa2005-38.html - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - http://www.securityfocus.com/bid/15495 - http://www.gentoo.org/security/en/glsa/glsa-200504-18.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100020 - http://www.mikx.de/firesearching/ - http://securitytracker.com/id?1013745 - http://secunia.com/advisories/14938 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20125 - http://www.redhat.com/support/errata/RHSA-2005-384.html - http://www.redhat.com/support/errata/RHSA-2005-383.html - http://www.securityfocus.co
upport/errata/RHSA-2005-384.html - http://www.redhat.com/support/errata/RHSA-2005-383.html - http://www.securityfocus.com/bid/13211 - http://secunia.com/advisories/14996 - https://bugzilla.mozilla.org/show_bug.cgi?id=290037
CVE ID: CVE-2005-1157 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:36:00.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and the same filename as the target engine, which may not be displayed in the GUI, which could then be used to execute malicious script, aka "Firesearching 2." Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-386.html - http://secunia.com/advisories/14992 - http://www.mozilla.org/security/ann
redhat.com/support/errata/RHSA-2005-386.html - http://secunia.com/advisories/14992 - http://www.mozilla.org/security/announce/mfsa2005-38.html - ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt - http://www.securityfocus.com/bid/15495 - http://www.mikx.de/firesearching/ - http://secunia.com/advisories/14938 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20125 - http://www.redhat.com/support/errata/RHSA-2005-384.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9961 - http://www.redhat.com/support/errata/RHSA-2005-383.html - http://www.securityfocus.com/bid/13211 - http://secunia.com/advisories/14996 - https://bugzill
rata/RHSA-2005-383.html - http://www.securityfocus.com/bid/13211 - http://secunia.com/advisories/14996 - https://bugzilla.mozilla.org/show_bug.cgi?id=290037
CVE ID: CVE-2005-1158 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:44:05.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple "missing security checks" in Firefox before 1.0.3 allow remote attackers to inject arbitrary Javascript into privileged pages using the _search target of the Firefox sidebar. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/mfsa2005-39.html - http://www.securityfocus.com/bid/13231 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100019 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3
3Aorg.mitre.oval%3Adef%3A100019 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11734 - https://bugzilla.mozilla.org/show_bug.cgi?id=290079 - http://secunia.com/advisories/14938 - http://www.redhat.com/support/errata/RHSA-2005-383.html
CVE ID: CVE-2005-1159 State: PUBLISHED Published: 2005-04-18T04:00:00 Last Updated: 2024-08-07T21:44:05.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code by passing objects of the wrong type. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2005-