Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
urityfocus.com/bid/10960 - http://secunia.com/advisories/12308 - http://marc.info/?l=bugtraq&m=109272483621038&w=2 - http://www.gentoo.org/security/en/glsa/glsa-200408-21.xml
CVE ID: CVE-2004-1738 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in page.php in JShop allows remote attackers to inject arbitrary web script or HTML via the xPage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://indohack.sourceforge.net/drponidi/jshop-vuln.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/17075 - http://secunia.com/advisories/12345 - http://marc.info/?l=bugtraq&m=109327547026265&w=2 - http://securitytracker.com/id?1011020
CVE ID: CVE-2004-1739 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bird Chat 1.61 allows remote attackers to cause a denial of service (crash) via invalid users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11010 - http://marc.info/?l=bugtraq&m=109327938924287&w=2 - http://secunia.com/advisories/12365 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17080 - http://www.autistici.org/fdonato/advisory/BirdChat1.61-adv.txt
CVE ID: CVE-2004-1740 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Music daemon (musicd) 0.0.3 and earlier allows remote attackers to read arbitrary files by calling LOAD with a full pathname, then calling SHOWLIST. Additional Analyst Notes: - CVE Program Container: References: - http://musicdaemon.sourceforge.net/ - http://marc.info/?l=bugtraq&m=109329098806595&w=2 - http://www.securityfocus.com/bid/11006 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17067
CVE ID: CVE-2004-1741 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Music daemon (musicd) 0.0.3 and earlier allows remote attackers to cause a denial of service (crash) by calling LOAD with a binary file as an argument, then calling SHOWLIST. Additional Analyst Notes: - CVE Program Container: References: - http://musicdaemon.sourceforge.net/ - http://marc.info/?l=bugtraq&m=109329098806595&w=2 - http://www.securityfocus.com/bid/11006 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17068 - http://securitytracker.com/id?1011025
CVE ID: CVE-2004-1742 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .. (dot dot) in the viewcat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109336268002879&w=2 - http://cornerstone.web-app.org/cgi-bin/index.cgi?action=downloadinfo&cat=updates&id=1 - http://secunia.com/advisories/12373 - http://www.securityfocus.com/bid/11028 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17100
CVE ID: CVE-2004-1743 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to view arbitrary files via an HTTP request for the disk_c virtual folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11034 - http://secunia.com/advisories/12372 - http://marc.info/?l=bugtraq&m=109341398102863&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17109 - http://www.gulftech.org/?node=research&article_id=00045-08242004 - http://securitytracker.com/id?1011045
CVE ID: CVE-2004-1744 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to cause a denial of service (CPU consumption or crash) via many large HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17110 - http://secunia.com/advisories/12372 - http://marc.info/?l=bugtraq&m=109341398102863&w=2 - http://www.securityfocus.com/bid/11036 - http://www.osvdb.org/9175 - http://www.gulftech.org/?node=research&article_id=00045-08242004 - http://securitytracker.com/id?1
/www.osvdb.org/9175 - http://www.gulftech.org/?node=research&article_id=00045-08242004 - http://securitytracker.com/id?1011045
CVE ID: CVE-2004-1745 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Painkiller 1.3.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/12367 - http://marc.info/?l=bugtraq&m=109339761608821&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17101 - http://www.securityfocus.com/bid/11029
CVE ID: CVE-2004-1746 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in PHP Code Snippet Library allows remote attackers to inject arbitrary web script or HTML via the (1) cat_select or (2) show parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11038 - http://nikyt0x.webcindario.com/0001.txt - http://secunia.com/advisories/12370 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17108 - http://marc.info/?l=bugtraq&m=109340580218818&w=2
CVE ID: CVE-2004-1747 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in NetworkEverywhere NR041 running firmware 1.2 Release 03 allows remote attackers to inject arbitrary web script or HTML via the DHCP HOSTNAME option. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17120 - http://marc.info/?l=bugtraq&m=109344996523392&w=2 - http://www.securityfocus.com/bid/11046
CVE ID: CVE-2004-1748 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: NtRegmon before 6.12 allows local users to cause a denial of service (crash), while NtRegmon is running, via invalid pointers to hook functions such as ZwSetQueryValue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11042 - http://marc.info/?l=bugtraq&m=109345177124374&w=2 - http://www.ngsec.com/docs/advisories/NGSEC-2004-7.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/17106
CVE ID: CVE-2004-1749 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed routing configuration, allows remote attackers to cause a denial of service (CPU consumption) via a large number of HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109345253016318&w=2 - http://www.securityfocus.com/bid/11049 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17125 - http://secunia.com/advisories/12390
CVE ID: CVE-2004-1750 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealVNC 4.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of connections to port 5900. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13143 - http://www.securityfocus.com/bid/11048 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17123 - http://marc.info/?l=bugtraq&m=109346198700529&w=2
CVE ID: CVE-2004-1751 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ground Control II: Operation Exodus 1.0.0.7 and earlier allows remote servers to cause a denial of service (client or server crash) via a large packet, which generates a "Message too long" socket error that is treated as a critical error. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=109357154602892&w=2 - http://aluigi.altervista.org/adv/gc2boom-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/17130 - http://www.securityfocus.com/bid/11058 - http://securitytracker.
://exchange.xforce.ibmcloud.com/vulnerabilities/17130 - http://www.securityfocus.com/bid/11058 - http://securitytracker.com/id?1011075
CVE ID: CVE-2004-1752 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Gaucho 1.4 Build 145 allows remote attackers to execute arbitrary code via a POP3 email with a long Content-Type header. Additional Analyst Notes: - CVE Program Container: References: - http://www.security.org.sg/vuln/gaucho140.html - http://securitytracker.com/id?1011032 - http://marc.info/?l=bugtraq&m=109364123707953&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17090 - http://www.securityfocus.com/bid/11023 - http://secunia.com/advisories/12387
CVE ID: CVE-2004-1753 State: PUBLISHED Published: 2005-02-26T05:00:00 Last Updated: 2024-08-08T01:00:37.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindow(NULL) calls, which allows Java applets from one tab to draw to other tabs and facilitates phishing attacks that spoof tabs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/373309 - http://secunia.com/advisories/12392 - http://www.securityfocus.com/archive/1/373080 - https://exchange.xforce.ibmcloud.
http://secunia.com/advisories/12392 - http://www.securityfocus.com/archive/1/373080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17137 - http://www.securityfocus.com/archive/1/373232 - http://www.securityfocus.com/bid/11059 - http://bugzilla.mozilla.org/show_bug.cgi?id=162134
CVE ID: CVE-2004-1754 State: PUBLISHED Published: 2005-03-09T05:00:00 Last Updated: 2024-08-08T01:00:37.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additional records. Additional Analyst Notes: - CVE Program Container: References: - http://lists.virus.org/bugtraq-0406/msg00234.html - http://www.securityfocus.com/bid/10557 - http://secunia.com/advisories/11888 - http://securityresponse.symantec.com/avcenter/security/Content/2004.06.21.html
CVE ID: CVE-2004-1755 State: PUBLISHED Published: 2005-03-10T05:00:00 Last Updated: 2024-08-08T01:00:37.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple certificates to connect to the same URL, may use the incorrect identity after the first connection, which could allow users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/858990 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15826 - http://secunia.com/advisories/10725 - http://www.securityfocus.com/bid/9502 - http://dev2dev.bea.com/re
bilities/15826 - http://secunia.com/advisories/10725 - http://www.securityfocus.com/bid/9502 - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_47.00.jsp
CVE ID: CVE-2004-1756 State: PUBLISHED Published: 2005-03-10T05:00:00 Last Updated: 2024-08-08T01:00:37.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a custom trust manager, may accept a certificate chain even if the trust manager rejects it, which allows remote attackers to spoof other users or servers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11358 - http://www.securityfocus.com/bid/10132 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15862 - http://securitytracker.com/id?1009765 - http://dev2dev.bea
https://exchange.xforce.ibmcloud.com/vulnerabilities/15862 - http://securitytracker.com/id?1009765 - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_54.00.jsp - http://www.kb.cert.org/vuls/id/566390
CVE ID: CVE-2004-1757 State: PUBLISHED Published: 2005-03-10T05:00:00 Last Updated: 2024-08-08T01:00:37.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10728 - http://www.kb.cert.org/vuls/id/350350 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14957 - http://www.securityfocus.com/bid/9501 - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_50.00.jsp
CVE ID: CVE-2004-1758 State: PUBLISHED Published: 2005-03-10T05:00:00 Last Updated: 2024-08-08T01:00:37.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database username and password for an untargeted JDBC connection pool in plaintext in config.xml, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1009764 - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_53.00.jsp - http://www.kb.cert.org/vuls/id/920238 - http://www.osvdb.org/5297 - http://www.securityfocus
fications/BEA04_53.00.jsp - http://www.kb.cert.org/vuls/id/920238 - http://www.osvdb.org/5297 - http://www.securityfocus.com/bid/10131 - http://secunia.com/advisories/11357 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15860
CVE ID: CVE-2004-1759 State: PUBLISHED Published: 2005-03-10T05:00:00 Last Updated: 2024-08-08T01:00:37.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 14247, as demonstrated using port scanning. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/721092 - http://secunia.com/advisories/10696 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14901 - http://www.securitytracker.com/id?1008814 - http://www.cisco.com/warp/public/707/cisco
cloud.com/vulnerabilities/14901 - http://www.securitytracker.com/id?1008814 - http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml - http://www.securityfocus.com/bid/9469 - http://www.osvdb.org/3691 - http://www.ciac.org/ciac/bulletins/o-066.shtml
CVE ID: CVE-2004-1760 State: PUBLISHED Published: 2005-03-10T05:00:00 Last Updated: 2024-08-08T01:00:37.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/14900 - http://www.osvdb.org/3692 - http://secunia.com/advisories/10696 - http://www.kb.cert.org/vuls/id/602734 - http://www.securitytracker.com/id?1008814 - http:/
ecunia.com/advisories/10696 - http://www.kb.cert.org/vuls/id/602734 - http://www.securitytracker.com/id?1008814 - http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml - http://www.securityfocus.com/bid/9468 - http://www.ciac.org/ciac/bulletins/o-066.shtml
CVE ID: CVE-2004-1761 State: PUBLISHED Published: 2005-03-10T05:00:00 Last Updated: 2024-08-08T01:00:37.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service (segmentation fault) via a malformed color filter file. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/695486 - http://www.redhat.com/support/errata/RHSA-2004-136.html - http://secunia.com/advisories/11185 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15572 - http://www.ethereal.com/appnotes/enpa-sa-00013.html - https://oval.cisecurity.org/repository/search/definition/oval%3
- http://www.ethereal.com/appnotes/enpa-sa-00013.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10013
CVE ID: CVE-2004-1762 State: PUBLISHED Published: 2005-03-10T05:00:00 Last Updated: 2024-08-08T01:00:37.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in F-Secure Anti-Virus (FSAV) 4.52 for Linux before Hotfix 3 allows the Sober.D worm to bypass FASV. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15432 - http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-linux-hotfixes.shtml - http://www.kb.cert.org/vuls/id/415734 - http://secunia.com/advisories/11089
CVE ID: CVE-2004-1763 State: PUBLISHED Published: 2005-03-10T05:00:00 Last Updated: 2024-08-08T01:00:37.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in hsrun.exe for HAHTsite Scenario Server 5.1 Patch 06 (build 91) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long project name. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=108091662105032&w=2 - http://secunia.com/advisories/11288 - http://www.kb.cert.org/vuls/id/705958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15717 - http://www.securityfocus.com/bid/10033 - http://www.protego.dk/a
://exchange.xforce.ibmcloud.com/vulnerabilities/15717 - http://www.securityfocus.com/bid/10033 - http://www.protego.dk/advisories/200405.html
CVE ID: CVE-2004-1764 State: PUBLISHED Published: 2005-03-10T05:00:00 Last Updated: 2024-08-08T01:00:37.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/o-057.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/14828 - http://www.kb.cert.org/vuls/id/406406 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5789 - http://www.securityfocus.com/advisories/6237
CVE ID: CVE-2004-1765 State: PUBLISHED Published: 2005-03-10T05:00:00 Last Updated: 2024-08-08T01:00:37.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=107945597331370&w=2 - http://www.securityfocus.com/bid/9885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15489 - http://secunia.com/advisories/11138 - http://www.s-quadra.com/advisories/Adv-20040315.txt - http://www.kb.cert.org/vuls/id/
p://secunia.com/advisories/11138 - http://www.s-quadra.com/advisories/Adv-20040315.txt - http://www.kb.cert.org/vuls/id/779438 - http://www.modsecurity.org/
CVE ID: CVE-2004-1766 State: PUBLISHED Published: 2005-03-10T05:00:00 Last Updated: 2024-08-08T01:00:37.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for communication with devices running ScreenOS 5.0, which allows remote attackers to obtain sensitive information via sniffing. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/927630 - http://www.kb.cert.org/vuls/id/CRDY-5VEU8N - http://www.securityfocus.com/bid/9455 - http://www.netscreen.com/services/security/alerts/1_19_04_58290.jsp - http://secunia.com/advisories/10675 - h
bid/9455 - http://www.netscreen.com/services/security/alerts/1_19_04_58290.jsp - http://secunia.com/advisories/10675 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14886 - http://www.osvdb.org/3613 - http://www.juniper.net/support/security/alerts/58290.txt
CVE ID: CVE-2004-1767 State: PUBLISHED Published: 2005-03-10T05:00:00 Last Updated: 2024-08-08T01:00:37.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly involving the modload function. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57479-1 - http://www.kb.cert.org/vuls/id/702526 - http://www.securityfocus.com/bid/9477 - https://exchange.xforce.ibmcloud.com/vulnerabilities/14917 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A45
ud.com/vulnerabilities/14917 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4532
CVE ID: CVE-2004-1768 State: PUBLISHED Published: 2005-03-10T05:00:00 Last Updated: 2024-08-08T01:00:37.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: The character converters in the Spamhunter and Language ID modules for Symantec Brightmail AntiSpam 6.0.1 before patch 132 allow remote attackers to cause a denial of service (crash) via messages with the ISO-8859-10 character set, which is not recognized by the converters. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/697598 - ftp://ftp.symantec.com/public/english_us_canada/products/sba/sba_60x/updates/p132_notes.htm - http://secunia.com/advisories/13489 - https://exchange.xfo
glish_us_canada/products/sba/sba_60x/updates/p132_notes.htm - http://secunia.com/advisories/13489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18530 - http://www.osvdb.org/12459
CVE ID: CVE-2004-1769 State: PUBLISHED Published: 2005-03-10T05:00:00 Last Updated: 2024-08-08T01:00:37.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/831534 - http://marc.info/?l=bugtraq&m=107904890724201&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15443 - http://www.securityfocus.com/archive/1/357064/2004-03-08/2004-03-14/0 - http://www.securityfocus.com/bid/98
ties/15443 - http://www.securityfocus.com/archive/1/357064/2004-03-08/2004-03-14/0 - http://www.securityfocus.com/bid/9848 - http://secunia.com/advisories/11111