Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-1988 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:06:57.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-mail containing a crafted JPEG image that causes memory corruption, aka "JPEG Image Rendering Memory Corruption Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16373/ - http://www.kb.cert.org/vuls/id/965206 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1335 - http://www.us-cert.gov/cas/
ttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1335 - http://www.us-cert.gov/cas/techalerts/TA05-221A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-038 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A390 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1140 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1216 - http://www.vupen.com/english/advisories/2005/1353
CVE ID: CVE-2005-1989 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:06:57.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder view using WebDAV, aka "Web Folder Behaviors Cross-Domain Vulnerability". Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A790 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A888 - https://oval.cisecurity.org/
ttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A888 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1319 - http://secunia.com/advisories/16373/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100081 - http://www.securityfocus.com/bid/14512 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100082 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-038 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A697 - http://www.vupen.com/english/advisories/2005/1353
CVE ID: CVE-2005-1990 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T22:06:57.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, including (1) devenum.dll, (2) diactfrm.dll, (3) wmm2filt.dll, (4) fsusd.dll, (5) dmdskmgr.dll, (6) browsewm.dll, (7) browseui.dll, (8) shell32.dll, (9) mshtml.dll, (10) inetcfg.dll, (11) infosoft.dll, (12) query.dll, (13) syncui.dll, (14) clbcatex.dll, (15) clbcatq.dll, (16) comsvcs.
(10) inetcfg.dll, (11) infosoft.dll, (12) query.dll, (13) syncui.dll, (14) clbcatex.dll, (15) clbcatq.dll, (16) comsvcs.dll, and (17) msconf.dll, which causes memory corruption, aka "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2087. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1235 - http://www.kb.cert.org/vuls/id/959049 - http://www.securityfocus.com/bid/14511 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1061 - http://secunia.com/advisories/16373/ - https://oval.cisecurity.org/repository/
tion/oval%3Aorg.mitre.oval%3Adef%3A1061 - http://secunia.com/advisories/16373/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1221 - http://www.us-cert.gov/cas/techalerts/TA05-221A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100082 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-038 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1337 - http://securitytracker.com/id?1014643 - http://www.vupen.com/english/advisories/2005/1353
CVE ID: CVE-2005-1992 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:06:57.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents "security protection" using handlers, which allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-748 - http://www.novell.com/linux/security/advisories/2005_18_sr.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=315064 - http://www.kb.cert.org/vuls/id/684913 - http://www.redhat.com/support/errata/RHSA-2005-54
bin/bugreport.cgi?bug=315064 - http://www.kb.cert.org/vuls/id/684913 - http://www.redhat.com/support/errata/RHSA-2005-543.html - http://www.ciac.org/ciac/bulletins/p-312.shtml - http://www.securityfocus.com/bid/14016 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10819 - http://www2.ruby-lang.org/en/20050701.html - http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-core/5237 - http://www.auscert.org.au/5509 - http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html - http://secunia.com/advisories/16920/
CVE ID: CVE-2005-1993 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:06:57.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11341 - http://www.securityfocus.com/archive/1/402741 - http://secunia.com/advisories/17813 - http://www.vupen.com/english/advisories/2005/2659 - http://www.debian.org/security/2005/dsa-735 - http://w
ories/17813 - http://www.vupen.com/english/advisories/2005/2659 - http://www.debian.org/security/2005/dsa-735 - http://www.vupen.com/english/advisories/2005/0821 - http://www.osvdb.org/17396 - http://www.redhat.com/support/errata/RHSA-2005-535.html - http://secunia.com/advisories/15744 - http://www.securityfocus.com/archive/1/425974/100/0/threaded - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161116 - http://docs.info.apple.com/article.html?artnum=302847 - http://www.securityfocus.com/bid/13993 - http://www.sudo.ws/sudo/alerts/path_race.html - http://www.securityfocus.com/bid/15647 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1242 - https:
cus.com/bid/15647 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1242 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21080 - http://www.novell.com/linux/security/advisories/2005_36_sudo.html
CVE ID: CVE-2005-1994 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:06:57.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Finjan SurfinGate 7.0SP2 and SP3 allows remote attackers to download blocked files via hex-encoded characters in a filename, as demonstrated using "%2e". Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/17324 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21010 - http://marc.info/?l=bugtraq&m=111877410528692&w=2 - http://www.vupen.com/english/advisories/2005/0778 - http://secunia.com/advisories/15711
CVE ID: CVE-2005-1995 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:06:57.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bitrix Site Manager 4.0.x allows remote attackers to obtain sensitive information via direct request to (1) subscr_form.php or (2) dbquery_error.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111885652331100&w=2 - http://www.osvdb.org/17348 - http://www.osvdb.org/17376 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21019
CVE ID: CVE-2005-1996 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:06:57.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in start.php in Bitrix Site Manager 4.0.x allows remote attackers to execute arbitrary PHP code via the _SERVER[DOCUMENT_ROOT] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/21018 - http://www.bitrixsoft.com/sitemanager/versions.php?module=main - http://marc.info/?l=bugtraq&m=111885605913761&w=2 - http://secunia.com/advisories/15726 - http://www.securityfocus.com/bid/13965 - http://www.vupen.com/english/adv
61&w=2 - http://secunia.com/advisories/15726 - http://www.securityfocus.com/bid/13965 - http://www.vupen.com/english/advisories/2005/0779 - http://www.bitrixsoft.com/support/forum/read.php?FID=10&TID=1872 - http://www.osvdb.org/17341
CVE ID: CVE-2005-1997 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:06:57.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: show.php in McGallery 1.1 allows remote attackers to connect to arbitrary databases, or gain sensitive information by triggering an error, via a modified host parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111885559100231&w=2 - http://securitytracker.com/id?1014215 - http://www.osvdb.org/17344 - http://secunia.com/advisories/15727
CVE ID: CVE-2005-1998 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:06:57.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin.php in McGallery 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111885505600482&w=2 - http://www.osvdb.org/17343 - http://securitytracker.com/id?1014215 - http://www.securityfocus.com/bid/13963 - http://secunia.com/advisories/15727
CVE ID: CVE-2005-1999 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:06:57.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in pafiledb.php in paFileDB 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) sortby or (2) filelist parameters to the category action (category.php), or (3) pages parameter in the viewall action (viewall.php). Additional Analyst Notes: - CVE Program Container: References: - http://www.phparena.net/ - http://marc.info/?l=bugtraq&m=111885787217807&w=2 - http://www.phparena.net/pafiledb_patch/ - http://www.gulftech.org/?node=research&article_id=00082
=111885787217807&w=2 - http://www.phparena.net/pafiledb_patch/ - http://www.gulftech.org/?node=research&article_id=00082-06142005
CVE ID: CVE-2005-2000 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:06:57.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary SQL commands via the formname parameter (1) in the login form, (2) in the team login form, or (3) to auth.php, (4) select, (5) id, or (6) query parameter to pafiledb.php, or (7) string parameter to search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.phparena.net/ - http://marc.info/?l=bugtraq&m=111885787217807&w=2 - http://www.phparena.net/pafiledb_patch/ - http://www.gulftech.org/?
http://marc.info/?l=bugtraq&m=111885787217807&w=2 - http://www.phparena.net/pafiledb_patch/ - http://www.gulftech.org/?node=research&article_id=00082-06142005
CVE ID: CVE-2005-2001 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:06:57.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pafiledb.php in paFileDB 3.1 and earlier allows remote attackers to include arbitrary files via a .. (dot dot) in the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.phparena.net/ - http://marc.info/?l=bugtraq&m=111885787217807&w=2 - http://www.phparena.net/pafiledb_patch/ - http://www.gulftech.org/?node=research&article_id=00082-06142005
CVE ID: CVE-2005-2002 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:06:57.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user_rating parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15710 - http://www.securityfocus.com/bid/13966 - http://securitytracker.com/id?1014222 - http://www.osvdb.org/17323 - http://mamboforge.net/frs/download.php/6153/CHANGELOG - http://marc.info/?l=bugtraq&m=111885974124936&w=2
CVE ID: CVE-2005-2003 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:06:57.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ultimate PHP Board (UPB) 1.9.6 GOLD allows remote attackers to obtain sensitive information via an invalid (zero) id parameter to (1) viewtopic.php, (2) profile.php, or (3) newpost.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111893777504821&w=2 - http://secunia.com/advisories/15732
CVE ID: CVE-2005-2004 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:06:57.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting vulnerabilities in Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ref parameter to login.php, (2) id or (3) page parameter to viewtopic.php, id parameter to (4) profile.php, (5) newpost.php, (6) email.php, (7) icq.php, or (8) aol.php, (9) t_id parameter to newpost.php, (10) ref parameter to getpass.php, or (11) sText parameter to search.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?
(11) sText parameter to search.php. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111893777504821&w=2 - http://secunia.com/advisories/15732
CVE ID: CVE-2005-2005 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:15:36.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier stores the users.dat file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information on registered users via a direct request to db/users.dat. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111893777504821&w=2 - http://secunia.com/advisories/15732
CVE ID: CVE-2005-2006 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:15:36.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: JBOSS 3.2.2 through 3.2.7 and 4.0.2 allows remote attackers to obtain sensitive information via a GET request (1) with a "%." (percent dot), which reveals the installation path or (2) with a % (percent) before a filename, which reveals the contents of the file. Additional Analyst Notes: - CVE Program Container: References: - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00597967 - http://www.vupen.com/english/advisories/2005/0815 - http://secunia.com/advisories/15746 - http://www.securityfocus.com/bid/13985 - http:/
com/english/advisories/2005/0815 - http://secunia.com/advisories/15746 - http://www.securityfocus.com/bid/13985 - http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0424.html - http://secunia.com/advisories/17559 - http://secunia.com/advisories/18789 - http://securitytracker.com/id?1015605 - http://www.securityfocus.com/archive/1/440641/100/100/threaded - http://www.vupen.com/english/advisories/2006/0497 - http://marc.info/?l=bugtraq&m=111911095424496&w=2 - http://securityreason.com/securityalert/439 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00597967
CVE ID: CVE-2005-2007 State: PUBLISHED Published: 2005-06-20T04:00:00Z Last Updated: 2024-09-16T16:13:40.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the id parameter to the (1) upload or (2) attachment scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.hardened-php.net/advisory-012005.php - http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034618.html - http://secunia.com/advisories/15752 - http://svn.edgewall.com/repos/trac/tags/trac-0.8.4/ChangeLog
CVE ID: CVE-2005-2008 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:15:36.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yaws Webserver 1.55 and earlier allows remote attackers to obtain the source code for yaws scripts via a request to a yaw script with a trailing %00 (null). Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/17375 - http://marc.info/?l=bugtraq&m=111927717726371&w=2 - http://yaws.hyber.org/yaws-1.55_to_1.56.patch - http://secunia.com/advisories/15740
CVE ID: CVE-2005-2009 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:15:36.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) ci, (2) d, or (3) m parameter to index.asp, or the (4) bi parameter to blog_comment.asp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111928552304897&w=2 - http://www.vupen.com/english/advisories/2005/0818 - http://echo.or.id/adv/adv18-theday-2005.txt
CVE ID: CVE-2005-2010 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:15:36.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the btitle parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111928552304897&w=2 - http://www.vupen.com/english/advisories/2005/0818 - http://echo.or.id/adv/adv18-theday-2005.txt - http://www.securityfocus.com/bid/13994
CVE ID: CVE-2005-2011 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:15:36.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in paFAQ 1.0 Beta 4 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the id parameter in a Question action. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111928841328681&w=2 - http://www.gulftech.org/?node=research&article_id=00083-06202005
CVE ID: CVE-2005-2012 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:15:36.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login in paFAQ 1.0 Beta 4 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) id parameters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111928841328681&w=2 - http://www.gulftech.org/?node=research&article_id=00083-06202005
CVE ID: CVE-2005-2013 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:15:36.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive information via a direct request to admin/backup.php, which contains a backup of the database including usernames and passwords. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111928841328681&w=2 - http://www.gulftech.org/?node=research&article_id=00083-06202005
CVE ID: CVE-2005-2014 State: PUBLISHED Published: 2005-06-20T04:00:00 Last Updated: 2024-08-07T22:15:36.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "upload a language pack" feature in paFAQ 1.0 Beta 4 allows remote authenticated administrators to execute arbitrary PHP commands by uploading a malicious language pack. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111928841328681&w=2 - http://www.gulftech.org/?node=research&article_id=00083-06202005
CVE ID: CVE-2005-2017 State: PUBLISHED Published: 2005-08-29T04:00:00Z Last Updated: 2024-09-16T22:21:03.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec AntiVirus 9 Corporate Edition allows local users to gain privileges via the "Scan for viruses" option, which launches a help window with raised privileges, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2002-1540. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/security/Content/2005.08.24.html - http://www.idefense.com/application/poi/display?id=298&type=vulnerabilities
CVE ID: CVE-2005-2019 State: PUBLISHED Published: 2005-06-30T04:00:00Z Last Updated: 2024-09-16T23:55:59.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor (SMP) or Uni Processor (UP) systems with the PREEMPTION kernel option enabled, does not sufficiently lock certain resources while performing table lookups, which can cause the cache results to be corrupted during multiple concurrent lookups, allowing remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:13.ipfw.asc
CVE ID: CVE-2005-2020 State: PUBLISHED Published: 2005-09-08T04:00:00 Last Updated: 2024-08-07T22:15:36.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web server for 3Com Network Supervisor 5.0.2 allows remote attackers to read arbitrary files via ".." sequences in the URL to TCP port 21700. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014836 - http://secunia.com/advisories/16639 - http://www.idefense.com/application/poi/display?id=300&type=vulnerabilities&flashstatus=true - http://www.vupen.com/english/advisories/2005/1611
CVE ID: CVE-2005-2021 State: PUBLISHED Published: 2005-06-21T04:00:00Z Last Updated: 2024-09-17T02:11:19.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the user parameter in the login page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13996