Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
_19_sr.html - http://www.redhat.com/support/errata/RHSA-2005-687.html - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html - http://www.securityfocus.com/bid/14399 - http://secunia.com/advisories/16225 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10059
CVE ID: CVE-2005-2363 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:22:49.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the (1) SMPP dissector, (2) 802.3 dissector, (3) DHCP, (4) MEGACO dissector, or (5) H1 dissector in Ethereal 0.8.15 through 0.10.11 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ethereal.com/appnotes/enpa-sa-00020.html - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml - http://www.novell.com/linux/secur
visories/2005_18_sr.html - http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml - http://www.novell.com/linux/security/advisories/2005_19_sr.html - http://www.redhat.com/support/errata/RHSA-2005-687.html - http://www.debian.org/security/2005/dsa-853 - http://secunia.com/advisories/16225/ - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html - http://www.securityfocus.com/bid/14399 - http://secunia.com/advisories/17102 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11271
CVE ID: CVE-2005-2364 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:22:49.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the (1) GIOP dissector, (2) WBXML, or (3) CAMEL dissector in Ethereal 0.8.20 through 0.10.11 allows remote attackers to cause a denial of service (application crash) via certain packets that cause a null pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.ethereal.com/appnotes/enpa-sa-00020.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10007 - http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml - http://w
ch/definition/oval%3Aorg.mitre.oval%3Adef%3A10007 - http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml - http://www.novell.com/linux/security/advisories/2005_19_sr.html - http://www.redhat.com/support/errata/RHSA-2005-687.html - http://www.debian.org/security/2005/dsa-853 - http://www.osvdb.org/18386 - http://secunia.com/advisories/16225/ - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html - http://www.securityfocus.com/bid/14399 - http://secunia.com/advisories/17102
CVE ID: CVE-2005-2365 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:22:49.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the SMB dissector in Ethereal 0.9.0 through 0.10.11 allows remote attackers to cause a buffer overflow or a denial of service (memory consumption) via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ethereal.com/appnotes/enpa-sa-00020.html - http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml - http://www.novell.com/linux/security/advisories/2005_19_sr.html - http://www.redhat.com/support/errata/RHSA-2005-687.html - https://oval.cisecurity.org/r
ity/advisories/2005_19_sr.html - http://www.redhat.com/support/errata/RHSA-2005-687.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9118 - http://www.debian.org/security/2005/dsa-853 - http://secunia.com/advisories/16225/ - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html - http://www.securityfocus.com/bid/14399 - http://secunia.com/advisories/17102
CVE ID: CVE-2005-2366 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:22:49.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the BER dissector in Ethereal 0.10.11 allows remote attackers to cause a denial of service (abort or infinite loop) via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ethereal.com/appnotes/enpa-sa-00020.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11239 - http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml - http://www.novell.com/linux/security/advisories/2005_19_sr.html - http://www.redhat.com/s
y/en/glsa/glsa-200507-27.xml - http://www.novell.com/linux/security/advisories/2005_19_sr.html - http://www.redhat.com/support/errata/RHSA-2005-687.html - http://www.debian.org/security/2005/dsa-853 - http://secunia.com/advisories/16225/ - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html - http://www.securityfocus.com/bid/14399 - http://secunia.com/advisories/17102
CVE ID: CVE-2005-2367 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:22:49.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the proto_item_set_text function in Ethereal 0.9.4 through 0.10.11, as used in multiple dissectors, allows remote attackers to write to arbitrary memory locations and gain privileges via a crafted AFP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.ethereal.com/appnotes/enpa-sa-00020.html - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml - http://www.novell.com/linux/security/advisories
18_sr.html - http://www.gentoo.org/security/en/glsa/glsa-200507-27.xml - http://www.novell.com/linux/security/advisories/2005_19_sr.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10765 - http://www.redhat.com/support/errata/RHSA-2005-687.html - http://www.debian.org/security/2005/dsa-853 - http://www.idefense.com/application/poi/display?id=289&type=vulnerabilities - http://secunia.com/advisories/16225/ - http://www.mandriva.com/security/advisories?name=MDKSA-2005:131 - http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html - http://www.securityfocus.com/bid/14399 - http://secunia.com/advisories/17102
CVE ID: CVE-2005-2368 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:22:49.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14374 - http://www.redhat.com/support/errata/RHSA-2005-745.html - http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/035402.html - http://www.guninski.com/where_do_you_want_billg_to_go_tod
.grok.org.uk/pipermail/full-disclosure/2005-July/035402.html - http://www.guninski.com/where_do_you_want_billg_to_go_today_5.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11302
CVE ID: CVE-2005-2369 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:22:49.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer signedness errors in libgadu, as used in ekg before 1.6rc2 and other packages, may allow remote attackers to cause a denial of service or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10281 - http://marc.info/?l=bugtraq&m=112198499417250&w=2 - http://www.securityfocus.com/bid/14415 - http://www.debian.org/security/2005/dsa-813
CVE ID: CVE-2005-2370 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:22:49.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message. Additional Analyst Notes: - CVE Program Container: References: - http://gaim.sourceforge.net/security/index.php?id=20 - http://www.securityfocus.com/archive/1/426078/100/0/threaded - http://www.securityfocus.com/bid/24600 - http://marc.info/?l=bugtraq&m=112198499417250&w=2 - http://secu
00/0/threaded - http://www.securityfocus.com/bid/24600 - http://marc.info/?l=bugtraq&m=112198499417250&w=2 - http://secunia.com/advisories/16265 - http://www.debian.org/security/2005/dsa-813 - http://www.debian.org/security/2007/dsa-1318 - http://www.redhat.com/support/errata/RHSA-2005-627.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10456
CVE ID: CVE-2005-2371 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:22:49.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) "..", (2) Windows drive letter (C:), and (3) absolute path sequences in the desname parameter. NOTE: this issue was probably fixed by REP06 in CPU Jan 2006, in which case it overlaps CVE-2006-0289. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://www.securityfocus.com/bid/14309 - http://secunia.com/advisories/184
e.xforce.ibmcloud.com/vulnerabilities/24321 - http://www.securityfocus.com/bid/14309 - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/archive/1/422257/30/7430/threaded - http://www.red-database-security.com/advisory/oracle_reports_overwrite_any_file.html - http://securitytracker.com/id?1014524 - http://marc.info/?l=bugtraq&m=112180096507467&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608
CVE ID: CVE-2005-2372 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:22:49.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Forms 4.5 through 10g starts form executables from arbitrary directories and executes them as the Oracle or System user, which allows attackers to execute arbitrary code by uploading a malicious .fmx file and referencing it using an absolute pathname argument in the (1) form or (2) module parameters to f90servlet. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_forms_run_any_os_command.html - http://marc.info/?l=bugtraq&m=112180805413784&w=2
CVE ID: CVE-2005-2373 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:22:49.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directory name to (1) LIST, (2) DELE or (3) RNFR commands. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014542 - http://www.whitsoftdev.com/slimftpd/ - http://secunia.com/advisories/16177 - http://marc.info/?l=bugtraq&m=112196537312610&w=2
CVE ID: CVE-2005-2374 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:22:49.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Belkin 54g wireless routers do not properly set an administrative password, which allows remote attackers to gain access via the (1) Telnet or (2) web administration interfaces. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112144089102115&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21412 - http://securitytracker.com/alerts/2005/Jul/1014493.html
CVE ID: CVE-2005-2375 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:22:49.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service (application crash) via format string specifiers in a (1) nickname or (2) chat message. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/rdrum-adv.txt - http://marc.info/?l=bugtraq&m=112171364923678&w=2
CVE ID: CVE-2005-2376 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:22:49.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service (application crash) via a long (1) nickname or (2) chat message. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/rdrum-adv.txt - http://marc.info/?l=bugtraq&m=112171364923678&w=2
CVE ID: CVE-2005-2377 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:22:49.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: nss_ldap 181 to versions before 213, as used in Mandrake Corporate Server and Mandrake 10.0, and other operating systems, does not properly handle a SIGPIPE signal when sending a search request to an LDAP directory server, which might allow remote attackers to cause a denial of service (crond and other application crash) if they can cause an LDAP server to become unavailable. NOTE: it is not clear whether this attack scenario is sufficient to include this item in CVE. Additional Analyst Notes: - CVE Program Container: Referenc
s attack scenario is sufficient to include this item in CVE. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/40501 - http://qa.mandriva.com/show_bug.cgi?id=13271 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:121
CVE ID: CVE-2005-2378 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:22:49.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Oracle Reports allows remote attackers to read arbitrary files via an absolute or relative path to the (1) CUSTOMIZE or (2) desformat parameters to rwservlet. NOTE: vector 2 is probably the same as CVE-2006-0289, and fixed in Jan 2006 CPU. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014527 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://www.securityfocus.com/archive/1/422256/30/7430/threaded - http://securitytracker.c
ud.com/vulnerabilities/24321 - http://www.securityfocus.com/archive/1/422256/30/7430/threaded - http://securitytracker.com/id?1014525 - http://marc.info/?l=bugtraq&m=112181242916757&w=2 - http://www.red-database-security.com/advisory/oracle_reports_read_any_file.html - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://marc.info/?l=bugtraq&m=112181054226520&w=2 - http://secunia.com/advisories/18608 - http://www.red-database-security.com/advisory/oracle_reports_read_any_xml_file.html
CVE ID: CVE-2005-2379 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:22:49.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Oracle Reports 9.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) debug parameter to showenv, (2) test parameter to parsequery, or (3) delimiter or (4) CELLWRAPPER parameter to rwservlet. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112181649831863&w=2 - http://www.red-database-security.com/advisory/oracle_reports_various_css.html
CVE ID: CVE-2005-2380 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:22:49.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting vulnerabilities in PHP Surveyor 0.98 allow remote attackers to inject arbitrary web script or HTML via the (1) sid, (2) start, and (3) id parameters to browse.php, or the sid parameter to (4) dataentry.php or (5) export.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16123 - http://marc.info/?l=bugtraq&m=112188282401681&w=2
CVE ID: CVE-2005-2381 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:22:49.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Surveyor 0.98 allows remote attackers to obtain sensitive information via a direct request to (1) question.php, (2) survey.php, or (3) group.php in the root directory, a direct request to (4) database.php, (5) sessioncontrol.php, (6) html.php, (7) sessioncontrol.php, an invalid (8) qid parameter to dumpquestion.php, or an invalid lid parameter to (9) labels.php or (10) dumplabel.php, which reveal the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/161
in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16123 - http://marc.info/?l=bugtraq&m=112188282401681&w=2
CVE ID: CVE-2005-2382 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:22:49.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oray PeanutHull 3.0.1.0 and earlier does not properly drop SYSTEM privileges when launched from the system tray, which allows local users to gain privileges by accessing the Help functionality. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16124 - http://www.securityfocus.com/bid/14330 - http://secway.org/advisory/AD20050720EN.txt - http://marc.info/?l=bugtraq&m=112190569628213&w=2
CVE ID: CVE-2005-2383 State: PUBLISHED Published: 2005-07-26T04:00:00 Last Updated: 2024-08-07T22:22:49.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the user parameter in an HTTP POST request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14333 - http://secunia.com/advisories/16148 - http://newsphp.sourceforge.net/changelog/changelog_1.30.txt - http://marc.info/?l=bugtraq&m=112189453304389&w=2
CVE ID: CVE-2005-2384 State: PUBLISHED Published: 2005-07-27T04:00:00 Last Updated: 2024-08-07T22:22:49.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to write arbitrary files via an ACE archive containing filenames with (1) .. or (2) absolute pathnames. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15776 - http://secunia.com/secunia_research/2005-20/advisory/ - http://www.avast.com/eng/av4_revision_history.html - http://securityt
//secunia.com/secunia_research/2005-20/advisory/ - http://www.avast.com/eng/av4_revision_history.html - http://securitytracker.com/id?1014544
CVE ID: CVE-2005-2385 State: PUBLISHED Published: 2005-07-27T04:00:00 Last Updated: 2024-08-07T22:22:49.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to execute arbitrary code via an ACE archive containing a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15776 - http://secunia.com/secunia_research/2005-20/advisory/ - http://www.avast.com/eng/av4_revision_history.html - http://securitytracker.com/id?1014544
CVE ID: CVE-2005-2386 State: PUBLISHED Published: 2005-07-27T04:00:00Z Last Updated: 2024-09-16T20:57:37.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ 1.20 allows remote attackers to inject arbitrary web script or HTML via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.hackerscenter.com/archive/view.asp?id=4008 - http://www.securityfocus.com/bid/14386
CVE ID: CVE-2005-2387 State: PUBLISHED Published: 2005-07-27T04:00:00 Last Updated: 2024-08-07T22:22:49.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in GoodTech SMTP server 5.16 allow remote attackers to execute arbitrary code via (1) a RCPT TO command with a long DNS name, or (2) a large number of RCPT TO commands with a long e-mail name arugment in the last command. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/lists/bugtraq/2005/Jul/0402.html - http://www.securityfocus.com/bid/14357
CVE ID: CVE-2005-2388 State: PUBLISHED Published: 2005-07-27T04:00:00 Last Updated: 2024-08-07T22:22:49.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in a certain USB driver, as used on Microsoft Windows, allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.eweek.com/article2/0%2C1759%2C1840131%2C00.asp - http://securitytracker.com/id?1014566 - http://secunia.com/advisories/16210 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21539 - http://www.osvdb.org/18493 - http://www.securityfocus.com/bid/14376
CVE ID: CVE-2005-2389 State: PUBLISHED Published: 2005-07-27T04:00:00Z Last Updated: 2024-09-16T18:33:22.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: NDMP server in Veritas NetBackup 5.1 allows attackers to cause a denial of service via a CONFIG message with an out-of-range timestamp, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.hat-squad.com/en/000170.html - http://secunia.com/advisories/16187
CVE ID: CVE-2005-2390 State: PUBLISHED Published: 2005-07-27T04:00:00 Last Updated: 2024-08-07T22:22:49.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in ProFTPD before 1.3.0rc2 allow attackers to cause a denial of service or obtain sensitive information via (1) certain inputs to the shutdown message from ftpshut, or (2) the SQLShowInfo mod_sql directive. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112604373503912&w=2 - http://www.securityfocus.com/bid/14381 - http://www.securityfocus.com/bid/14380 - http://www.debian.org/security/2005/dsa-795 - http://secunia.com/advisories/16181 - htt
ww.securityfocus.com/bid/14380 - http://www.debian.org/security/2005/dsa-795 - http://secunia.com/advisories/16181 - http://www.proftpd.org/docs/RELEASE_NOTES-1.3.0rc2
CVE ID: CVE-2005-2391 State: PUBLISHED Published: 2005-07-27T04:00:00Z Last Updated: 2024-09-17T01:07:04.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in 3Com OfficeConnect Wireless 11g Access Point before 1.03.12 allows remote attackers to obtain sensitive information via the web interface. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16207
CVE ID: CVE-2005-2392 State: PUBLISHED Published: 2005-07-27T04:00:00 Last Updated: 2024-08-07T22:22:49.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php for CMSimple 2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in the search function. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014556 - http://secunia.com/advisories/16147 - http://lostmon.blogspot.com/2005/07/cmsimple-search-variable-xss.html - http://www.cmsimple.dk/forum/viewtopic.php?t=2470 - http://www.securityfocus.com/bid/14346 - http://www.securityfocus.com/