Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-1482 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bb_memberlist.php for phpBB 1.4.2 allows remote attackers to execute arbitrary SQL queries via the $sortby variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7253 - http://www.securityfocus.com/archive/1/219178 - http://www.securityfocus.com/bid/3411
CVE ID: CVE-2001-1483 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: One-Time Passwords In Everything (a.k.a OPIE) 2.32 and 2.4 allows remote attackers to determine the existence of user accounts by printing random passphrases if the user account does not exist and static passphrases if the user account does exist. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7572 - http://www.securityfocus.com/archive/1/20011115221226.7C93E186B0%40atlas.dgp.toronto.edu - http://www.securityfocus.com/bid/3549
CVE ID: CVE-2001-1484 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and configuration via a bounce attack from a system on the local area network (LAN) side, which is allowed to access TFTP without authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/211736 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6336 - http://www.cert.org/advisories/CA-2001-08.html
CVE ID: CVE-2001-1487 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7707 - http://www.securityfocus.com/archive/1/246069
CVE ID: CVE-2001-1488 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Projects Network Internet Relay Chat (IRC) daemon u2.10.05.18 does not perform a double-reverse DNS lookup, which allows remote attackers to spoof any valid hostname on the Internet. NOTE: a followup post suggests that this is not an issue in the daemon. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/220380 - http://www.securityfocus.com/archive/1/219388/2003-04-27/2003-05-03/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7283
CVE ID: CVE-2001-1489 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7709 - http://www.securityfocus.com/archive/1/245152 - http://www.securityfocus.com/bid/3684
CVE ID: CVE-2001-1490 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla 0.9.6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7709 - http://www.securityfocus.com/archive/1/245152 - http://www.securityfocus.com/bid/3684
CVE ID: CVE-2001-1491 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 5.11 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7709 - http://www.securityfocus.com/archive/1/245152 - http://www.securityfocus.com/bid/3684
CVE ID: CVE-2001-1492 State: REJECTED Published: 2005-06-21T04:00:00 Last Updated: 2005-07-12T09:00:00 Description: No description available.
CVE ID: CVE-2001-1494 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16280 - http://www.redhat.com/support/errata/RHSA-2005-782.html - http://seclists.org/bugtraq/2001/Dec/0123.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10723 -
traq/2001/Dec/0123.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10723 - http://seclists.org/bugtraq/2001/Dec/0122.html - http://secunia.com/advisories/16785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7718 - http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm - http://secunia.com/advisories/18502
CVE ID: CVE-2001-1495 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: network_query.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7322 - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-10/0179.html - http://www.securityfocus.com/bid/3455
CVE ID: CVE-2001-1496 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/241310 - http://www.securityfocus.com/archive/1/241953 - http://www.securityfocus.com/bid/3562 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7595
CVE ID: CVE-2001-1497 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alphanumeric characters used in a password by pressing certain control keys that jump between non-alphanumeric characters, which makes it easier to conduct a brute-force password guessing attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3563 - http://www.securityfocus.com/archive/1/241400 - http://www.securityfocus.com/archive/1/241323 - http://www.iss.net/se
- http://www.securityfocus.com/archive/1/241400 - http://www.securityfocus.com/archive/1/241323 - http://www.iss.net/security_center/static/7592.php
CVE ID: CVE-2001-1498 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script. Additional Analyst Notes: - CVE Program Container: References: - http://www.bugtraq.org/advisories/GOBBLES-15.txt - http://www.securityfocus.com/bid/3713 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7730
CVE ID: CVE-2001-1499 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3470 - http://www.securityfocus.com/archive/1/222366 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7343 - http://www.securityfocus.com/archive/1/222479 - http://www.osvdb.o
//exchange.xforce.ibmcloud.com/vulnerabilities/7343 - http://www.securityfocus.com/archive/1/222479 - http://www.osvdb.org/20210
CVE ID: CVE-2001-1500 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which allows remote attackers to bypass ACLs or cause an incorrect client hostname to be logged. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/212805 - http://www.securityfocus.com/bid/3310 - http://www.mandriva.com/security/advisories?name=MDKSA-2002:005 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000450 - https://exchange
ity/advisories?name=MDKSA-2002:005 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000450 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7126
CVE ID: CVE-2001-1501 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CPU and memory consumption) via commands with large numbers of wildcard and other special characters, as demonstrated using an ls command with multiple (1) "*/..", (2) "*/.*", or (3) ".*./*?/" sequences in the argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2002:005 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=
://www.mandriva.com/security/advisories?name=MDKSA-2002:005 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000450 - http://online.securityfocus.com/archive/1/169395
CVE ID: CVE-2001-1502 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7315 - http://www.securityfocus.com/archive/1/221688 - http://www.securityfocus.com/bid/3453
CVE ID: CVE-2001-1503 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host by typing finger 'a b c d e f g h'@host. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7334 - http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0016.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-27116-1 - http://www.securityfocus.com/bid/3457
CVE ID: CVE-2001-1504 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3458 - http://www.securityfocus.com/archive/1/221986 - http://www.securityfocus.com/archive/1/222212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7323
CVE ID: CVE-2001-1505 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: tinc 1.0pre3 and 1.0pre4 allows remote attackers to inject data into user sessions by sniffing and replaying packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/249142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7870 - http://www.securityfocus.com/bid/3837
CVE ID: CVE-2001-1506 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows additional user privileges on some files beyond what is specified in the file system protection rules, which allows local users to conduct unauthorized operations on restricted files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3468 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7342 - http://online.securityfocus.com/advisories/3618
CVE ID: CVE-2001-1507 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T04:58:11.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers to login unchallenged. Additional Analyst Notes: - CVE Program Container: References: - http://www.openbsd.org/errata30.html#sshd - http://msgs.securepoint.com/cgi-bin/get/bugtraq0111/114.html - http://www.securityfocus.com/bid/3560 - http://www.iss.net/security_center/static/7598.php
CVE ID: CVE-2001-1508 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T04:58:11.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2597 - ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.38/CSSA-2001-SCO.38.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/6413
CVE ID: CVE-2001-1509 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T04:58:11.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: geteuid in Itanium Architecture (IA) running on HP-UX 11.20 does not properly identify a user's effective user id, which could allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://hp.cso.uiuc.edu/ftp/pub/hp/patches/11.20/PHSS_25454 - http://www.securityfocus.com/advisories/3606 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5364 - http://www.securityfocus.com/bid/3452 - http://www.iss.net/security_center/static/7324.php
CVE ID: CVE-2001-1510 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T17:48:06.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) "%3f.jsp", (2) "?.jsp" or (3) "?" to the requested URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7623.php - http://www.securityfocus.com/bid/3592 - http://www.securityfocus.com/archive/1/243636 - http://online.securityfocus.com/archive/1/243203 - http:/
com/bid/3592 - http://www.securityfocus.com/archive/1/243636 - http://online.securityfocus.com/archive/1/243203 - http://online.securityfocus.com/archive/1/242843/2002-07-27/2002-08-02/2 - http://www.macromedia.com/v1/handlers/index.cfm?ID=22262&Method=Full
CVE ID: CVE-2001-1511 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-17T02:48:04.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: JRun 3.0 and 3.1 running on JRun Web Server (JWS) and IIS allows remote attackers to read arbitrary JavaServer Pages (JSP) source code via a request URL containing the source filename ending in (1) "jsp%00" or (2) "js%2570". Additional Analyst Notes: - CVE Program Container: References: - http://www.macromedia.com/v1/handlers/index.cfm?ID=22288&Method=Full - http://www.iss.net/security_center/static/7676.php
CVE ID: CVE-2001-1512 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T04:58:11.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Allaire JRun 3.1 allows remote attackers to directly access the WEB-INF and META-INF directories and execute arbitrary JavaServer Pages (JSP), a variant of CVE-2000-1050. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7677.php - http://www.securityfocus.com/bid/3662 - http://www.macromedia.com/v1/handlers/index.cfm?ID=22287
CVE ID: CVE-2001-1513 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T04:58:11.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as other users via a URL request for the web application directory without the trailing '/' (slash), as demonstrated using ctx. Additional Analyst Notes: - CVE Program Container: References: - http://www.macromedia.com/v1/handlers/index.cfm?ID=22260&Method=Full - http://www.iss.net/security_center/static/7680.php - http://www.securityfocus.com/bid/3600
CVE ID: CVE-2001-1514 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T22:51:24.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to "operating system," does not properly pass security context to (1) child processes created with <CFEXECUTE> and (2) child processes that call the CreateProcess function and are executed with <CFOBJECT> or end with the CFX extension, which allows attackers to execute programs with the permissions of the System account. Additional Analyst Notes: - CVE Program Container: References: - http://www.macromedia.com/v1/Handlers/index.cfm?ID=22
. Additional Analyst Notes: - CVE Program Container: References: - http://www.macromedia.com/v1/Handlers/index.cfm?ID=22263
CVE ID: CVE-2001-1515 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T04:58:11.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Macintosh clients, when using NT file system volumes on Windows 2000 SP1, create subdirectories and automatically modify the inherited NTFS permissions, which may cause the directories to have less restrictive permissions than intended. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3479 - http://securitytracker.com/id?1002626
CVE ID: CVE-2001-1516 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-17T03:49:03.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpReview 0.9.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via user-submitted reviews. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3380 - http://www.iss.net/security_center/static/7218.php
CVE ID: CVE-2001-1517 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T16:12:38.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: RunAs (runas.exe) in Windows 2000 stores cleartext authentication information in memory, which could allow attackers to obtain usernames and passwords by executing a process that is allocated the same memory page after termination of a RunAs command. NOTE: the vendor disputes this issue, saying that administrative privileges are already required to exploit it, and the original researcher did not respond to requests for additional information Additional Analyst Notes: - CVE Program Container: References: - http://www.securityf
equests for additional information Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3184 - http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0041.html - http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00100.html - http://www.iss.net/security_center/static/7531.php
CVE ID: CVE-2001-1518 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T17:38:23.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: RunAs (runas.exe) in Windows 2000 only creates one session instance at a time, which allows local users to cause a denial of service (RunAs hang) by creating a named pipe session with the authentication server without any request for service. NOTE: the vendor disputes this vulnerability, however the vendor also presents a scenario in which other users could be affected if running on a Terminal Server. Therefore this is a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://cert.uni-stuttgart.
ore this is a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00100.html - http://www.securityfocus.com/bid/3291 - http://www.iss.net/security_center/static/7533.php - http://online.securityfocus.com/archive/1/236113
CVE ID: CVE-2001-1519 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T22:03:22.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: RunAs (runas.exe) in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then capture cleartext usernames and passwords when clients connect to the service. NOTE: the vendor disputes this issue, saying that administrative privileges are already required to exploit it Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/240136 - http://online.securityfocus.com/archive/1/236111 - http://www.iss.net/security_center/static/7532.php - htt
e/1/240136 - http://online.securityfocus.com/archive/1/236111 - http://www.iss.net/security_center/static/7532.php - http://www.securityfocus.com/bid/3185
CVE ID: CVE-2001-1520 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-17T03:44:24.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal digital assistant (PDA) via Rextools, and capturing the cleartext PIN. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-11/0187.html - http://www.securityfocus.com/bid/3574 - http://www.iss.net/security_center/static/7584.php
CVE ID: CVE-2001-1521 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T04:58:11.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in user.php in PostNuke 0.64 allows remote attackers to inject arbitrary web script or HTML via the uname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/245691 - http://www.iss.net/security_center/static/7654.php - http://online.securityfocus.com/archive/82/243545 - http://www.securityfocus.com/bid/3609