Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-2294 State: PUBLISHED Published: 2005-07-17T04:00:00 Last Updated: 2024-08-07T22:22:48.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_forms_unsecure_temp_file_handling.html - http://marc.info/?l=bugtraq&m=112129398711846&w=2 - http://secunia.com/advisories/15991/ - https://exchange.x
ing.html - http://marc.info/?l=bugtraq&m=112129398711846&w=2 - http://secunia.com/advisories/15991/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/21347 - http://www.oracle.com/technology/deploy/security/pdf/cpujul2005.html
CVE ID: CVE-2005-2295 State: PUBLISHED Published: 2005-07-17T04:00:00 Last Updated: 2024-08-07T22:22:49.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetPanzer 0.8 and earlier allows remote attackers to cause a denial of service (infinite loop) via a packet with a zero datablock size. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112129258221823&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/21361 - http://secunia.com/advisories/16055 - http://aluigi.altervista.org/adv/panzone-adv.txt - http://www.securityfocus.com/bid/14257 - http://securitytracker.com/id?1014479
CVE ID: CVE-2005-2296 State: PUBLISHED Published: 2005-07-17T04:00:00 Last Updated: 2024-08-07T22:22:49.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: YabbSE 1.5.5c allows remote attackers to obtain sensitive information via a direct request to ssi_examples.php, which reveals the path. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112137300014760&w=2
CVE ID: CVE-2005-2297 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T22:22:48.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary code via a large javascript parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.sybase.com/detail?id=1036742 - http://securitytracker.com/id?1014497 - http://secunia.com/advisories/16108 - http://marc.info/?l=bugtraq&m=112146180532313&w=2 - http://www.spidynamics.com/spilabs/advisories/sybaseEAserverOverflow.htm
CVE ID: CVE-2005-2298 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T22:22:48.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: BitDefender Engine 1.6.1 and earlier does not properly scan all attachments, which allows remote attackers to bypass virus scanning via begin and end commands in the body of the e-mail, which BitDefender treats as a uuencoded attachment and stops scanning afterwards. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=112137542212322&w=2 - http://securitytracker.com/id?1014495
CVE ID: CVE-2005-2299 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T22:22:48.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers to inject arbitrary web script or HTML via the (1) FID parameter to forum.cfm, (2) UID parameter to user.cfm, (3) TID parameter to thread.cfm, or (4) PostDate parameter to search.cfm. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014494 - http://www.securityfocus.com/bid/14267 - http://marc.info/?l=bugtraq&m=112137585701087&w=2 - http://www.securityfocus.com/bid
//www.securityfocus.com/bid/14267 - http://marc.info/?l=bugtraq&m=112137585701087&w=2 - http://www.securityfocus.com/bid/14269 - http://www.securityfocus.com/bid/14266 - http://www.securityfocus.com/bid/14268
CVE ID: CVE-2005-2300 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T22:22:47.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skype 1.1.0.20 and earlier allows local users to overwrite arbitrary files via a symlink attack on the skype_profile.jpg temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16105 - http://marc.info/?l=bugtraq&m=112156036013818&w=2 - http://www.zone-h.org/advisories/read/id=7808
CVE ID: CVE-2005-2301 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T22:22:48.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerDNS before 2.9.18, when running with an LDAP backend, does not properly escape LDAP queries, which allows remote attackers to cause a denial of service (failure to answer ldap questions) and possibly conduct an LDAP injection attack. Additional Analyst Notes: - CVE Program Container: References: - http://doc.powerdns.com/changelog.html#CHANGELOG-2-9-18 - http://www.novell.com/linux/security/advisories/2005_19_sr.html - http://marc.info/?l=bugtraq&m=112155941310297&w=2 - http://securitytracker.com/id?1014504 - http://www.s
05_19_sr.html - http://marc.info/?l=bugtraq&m=112155941310297&w=2 - http://securitytracker.com/id?1014504 - http://www.securityfocus.com/bid/14290
CVE ID: CVE-2005-2302 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T22:22:48.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerDNS before 2.9.18, when allowing recursion to a restricted range of IP addresses, does not properly handle questions from clients that are denied recursion, which could cause a "blank out" of answers to those clients that are allowed to use recursion. Additional Analyst Notes: - CVE Program Container: References: - http://doc.powerdns.com/changelog.html#CHANGELOG-2-9-18 - http://www.novell.com/linux/security/advisories/2005_19_sr.html - http://marc.info/?l=bugtraq&m=112155941310297&w=2 - http://securitytracker.com/id?1014
rity/advisories/2005_19_sr.html - http://marc.info/?l=bugtraq&m=112155941310297&w=2 - http://securitytracker.com/id?1014504
CVE ID: CVE-2005-2303 State: REJECTED Published: 2005-07-19T04:00:00 Last Updated: 2005-08-10T09:00:00 Description: No description available.
CVE ID: CVE-2005-2304 State: PUBLISHED Published: 2005-07-19T04:00:00Z Last Updated: 2024-09-16T17:18:32.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft MSN Messenger 9.0 and Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) via an image with an ICC Profile with a large Tag Count. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/405377 - http://www.securityfocus.com/bid/14288
CVE ID: CVE-2005-2305 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T22:22:48.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: DG Remote Control Server 1.6.2 allows remote attackers to cause a denial of service (crash or CPU consumption) and possibly execute arbitrary code via a long message to TCP port 1071 or 1073, possibly due to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=72 - http://www.securityfocus.com/bid/14263 - http://secunia.com/advisories/16070
CVE ID: CVE-2005-2306 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T22:22:48.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes JRun to assign a duplicate authentication token to multiple sessions, which could allow authenticated users to gain privileges as other users. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16081 - http://securitytracker.com/id?1014489 - http://www.macromedia.com/devnet/security/security_zone/mpsb05-05.html
CVE ID: CVE-2005-2307 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T22:22:48.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Connections Service crash) via a large integer argument to a particular function, aka "Network Connection Manager Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14260 - http://secunia.com/advisories/16065 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1532 - https://oval.cisecurity.org/repository/search/d
ty.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1532 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1250 - http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1254 - http://secunia.com/advisories/17223 - http://secunia.com/advisories/17172 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-045 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1289 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A786
CVE ID: CVE-2005-2308 State: PUBLISHED Published: 2005-07-19T04:00:00Z Last Updated: 2024-09-17T03:48:26.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via certain crafted JPEG images, as demonstrated using (1) mov_fencepost.jpg, (2) cmp_fencepost.jpg, (3) oom_dos.jpg, or (4) random.jpg. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14285 - http://www.securityfocus.com/bid/14286 - http://lcamtuf.coredump.cx/crash - http://www.securityfocus.com/bid/14284 - http://
://www.securityfocus.com/bid/14286 - http://lcamtuf.coredump.cx/crash - http://www.securityfocus.com/bid/14284 - http://www.securityfocus.com/archive/1/405298
CVE ID: CVE-2005-2309 State: PUBLISHED Published: 2005-07-19T04:00:00Z Last Updated: 2024-09-16T19:04:38.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 8.01 allows remote attackers to cause a denial of service (CPU consumption) via a crafted JPEG image, as demonstrated using random.jpg. Additional Analyst Notes: - CVE Program Container: References: - http://lcamtuf.coredump.cx/crash - http://www.securityfocus.com/archive/1/405524/30/0/threaded - http://www.securityfocus.com/archive/1/405298
CVE ID: CVE-2005-2310 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T22:22:48.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as (1) ARTIST or (2) TITLE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14276 - http://securitytracker.com/id?1014483 - http://www.osvdb.org/17897 - http://www.vupen.com/english/advisories/2005/1106 - http://security.lss.hr/index.php?page=details&ID=LSS-2005-07-14 - http://secunia.com/advisories/16077
ories/2005/1106 - http://security.lss.hr/index.php?page=details&ID=LSS-2005-07-14 - http://secunia.com/advisories/16077 - http://www.winamp.com/player/version_history.php
CVE ID: CVE-2005-2311 State: PUBLISHED Published: 2005-07-19T04:00:00Z Last Updated: 2024-09-17T00:16:01.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: SMS 1.9.2m and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) request1 or (2) request2 temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.zataz.net/adviso/sms-06272005.txt - http://secunia.com/advisories/16038
CVE ID: CVE-2005-2312 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T22:22:48.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: management.php in Realnode Emilda 1.2.2 and earlier allows remote attackers to perform actions as other users by modifying the user_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=338551 - http://secunia.com/advisories/15857 - http://www.securityfocus.com/bid/14244
CVE ID: CVE-2005-2313 State: PUBLISHED Published: 2005-07-19T04:00:00Z Last Updated: 2024-09-16T22:08:34.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point SecuRemote NG with Application Intelligence R54 allows attackers to obtain credentials and gain privileges via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14221
CVE ID: CVE-2005-2314 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T22:22:48.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: inc.login.php in PHPsFTPd 0.2 through 0.4 allows remote attackers to obtain the administrator's username and password by setting the do_login parameter and performing an edit action using user.php, which causes the login check to be bypassed and leaks the password in the response. Additional Analyst Notes: - CVE Program Container: References: - http://cert.uni-stuttgart.de/archive/bugtraq/2005/07/msg00209.html - http://www.vupen.com/english/advisories/2005/1101 - http://www.securityfocus.com/bid/14222 - http://packetstorm.linu
l - http://www.vupen.com/english/advisories/2005/1101 - http://www.securityfocus.com/bid/14222 - http://packetstorm.linuxsecurity.com/0507-exploits/phpsftpd.txt - http://secunia.com/advisories/15879 - http://securitytracker.com/id?1014481
CVE ID: CVE-2005-2315 State: PUBLISHED Published: 2006-04-28T10:00:00 Last Updated: 2024-08-07T22:22:49.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to execute arbitrary code via a large number of large DNS packets with the Z and QR flags cleared. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014557 - http://secunia.com/advisories/16142 - http://www.FreeBSD.org/ports/portaudit/e72fd82b-fa01-11d9-bc08-0001020eed82.html - http://sourceforge.net/forum/forum.php?forum_id=482568
CVE ID: CVE-2005-2316 State: PUBLISHED Published: 2006-04-28T10:00:00Z Last Updated: 2024-09-17T01:46:21.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to cause a denial of service (infinite recursion) via a DNS packet that uses message compression in the QNAME and two pointers that point to each other (circular buffer). Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014557 - http://secunia.com/advisories/16142 - http://www.FreeBSD.org/ports/portaudit/e72fd82b-fa01-11d9-bc08-0001020eed82.html - http://sourceforge.net/forum/forum.php?forum_id=482568
CVE ID: CVE-2005-2317 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T22:22:49.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLIST_TTL is greater than 0 or MACLIST_DISPOSITION is set to ACCEPT, allows remote attackers with an accepted MAC address to bypass other firewall rules or policies. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14292 - http://www.debian.org/security/2005/dsa-849 - http://shorewall.net/News.htm#20050717 - http://secunia.com/advisories/17110 - http://www.ubuntu.com/usn/usn-197-1 - http://secunia.
wall.net/News.htm#20050717 - http://secunia.com/advisories/17110 - http://www.ubuntu.com/usn/usn-197-1 - http://secunia.com/advisories/17113 - http://secunia.com/advisories/16087 - http://www.gentoo.org/security/en/glsa/glsa-200507-20.xml - http://seclists.org/lists/fulldisclosure/2005/Jul/0409.html
CVE ID: CVE-2005-2318 State: PUBLISHED Published: 2005-07-19T04:00:00Z Last Updated: 2024-09-17T00:00:49.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in showerr.asp in DVBBS 7.1 SP2 allows remote attackers to inject arbitrary web script or HTML via the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14223
CVE ID: CVE-2005-2319 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T22:22:48.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in Yawp library 1.0.6 and earlier, as used in YaWiki and possibly other products, allows remote attackers to include arbitrary files via the _Yawp[conf_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14237 - http://www.securityfocus.com/archive/1/404948 - http://secunia.com/advisories/16049 - http://phpyawp.com/yawiki/index.php?page=ChangeLog - http://www.hardened-php.net/advisory-102005.php
CVE ID: CVE-2005-2320 State: PUBLISHED Published: 2005-07-19T04:00:00Z Last Updated: 2024-09-17T04:14:39.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebCalendar before 1.0.0 does not properly restrict access to assistant_edit.php, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14072
CVE ID: CVE-2005-2321 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T22:22:49.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in CaLogic 1.2.2 allows remote attackers to execute arbitrary code via the CLPATH parameter to (1) cl_minical.php, (2) clmcpreload.php, (3) mcconfig.php, or (4) mcpi-demo.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16090 - http://www.securityfocus.com/bid/14296 - http://www.calogic.de/modules/newbb/viewtopic.php?topic_id=333&forum=7 - http://www.albaniafuckgreece.org/adviso/calogic.txt
CVE ID: CVE-2005-2322 State: PUBLISHED Published: 2005-07-19T04:00:00Z Last Updated: 2024-09-16T16:17:56.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allows remote attackers to inject arbitrary web script or HTML via the (1) viewuser_id or (2) group parameter to users.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16078 - http://securitytracker.com/id?1014485 - http://www.securityfocus.com/bid/14261 - http://securitytracker.com/id?1014486 - http://lostmon.blogspot.com/2005/07/class-1-forum-software-cross-si
/bid/14261 - http://securitytracker.com/id?1014486 - http://lostmon.blogspot.com/2005/07/class-1-forum-software-cross-site.html - http://www.osvdb.org/17920
CVE ID: CVE-2005-2323 State: PUBLISHED Published: 2005-07-19T04:00:00 Last Updated: 2024-08-07T22:22:49.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote attackers to modify SQL statements via the (1) id parameter to viewattach.php, (2) viewuser_id parameter to users.php, or the (3) id or (4) forum parameter to viewforum.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16078 - http://www.osvdb.org/17923 - http://securitytracker.com/id?1014485 - http://www.osvdb.org/17921 - http://securitytracker.com/id?
ww.osvdb.org/17923 - http://securitytracker.com/id?1014485 - http://www.osvdb.org/17921 - http://securitytracker.com/id?1014486 - http://www.osvdb.org/17922 - http://lostmon.blogspot.com/2005/07/class-1-forum-software-cross-site.html
CVE ID: CVE-2005-2324 State: PUBLISHED Published: 2005-07-19T04:00:00Z Last Updated: 2024-09-17T03:59:54.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the searchtype or searchterm parameters to (1) results.php or (2) categorysearch.php. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2005/07/clever-copy-path-disclosure-and-xss.html
CVE ID: CVE-2005-2325 State: PUBLISHED Published: 2005-07-19T04:00:00Z Last Updated: 2024-09-16T22:14:15.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clever Copy 2.0 and 2.0a allows remote attackers to obtain the full path of the web root via a direct request to (1) ticker.php, (2) menu.php, (3) banned.php, (4) endlayout.php, (5) randomhlinesblock.php, (6) showlast.php, (7) showlast5class1.php, (8) showlast5phorum.php, (9) showlast5phorumblock.php, (10) showlastforumbb2.php, or (11) showlastforumbb2block.php. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2005/07/clever-copy-path-disclosure-and-xss.html
CVE ID: CVE-2005-2326 State: PUBLISHED Published: 2005-07-19T04:00:00Z Last Updated: 2024-09-16T17:14:21.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the yr parameter to calendar.php. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2005/07/clever-copy-calendarphp-yr-variable.html
CVE ID: CVE-2005-2327 State: PUBLISHED Published: 2005-07-20T04:00:00 Last Updated: 2024-08-07T22:22:48.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web script or HTML via nested [url] BBCode tags. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1014513 - https://www.exploit-db.com/exploits/1106
CVE ID: CVE-2005-2328 State: PUBLISHED Published: 2005-07-20T04:00:00 Last Updated: 2024-08-07T22:22:49.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in im.php in Laffer 0.3.2.6 and 0.3.2.7 allows remote attackers to execute arbitrary PHP code via the CFG_PATH variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14264 - http://sourceforge.net/tracker/index.php?func=detail&aid=1235463&group_id=101249&atid=629313 - http://laffer.sourceforge.net/cgi-bin/index.pl?page=news&key=373747410
CVE ID: CVE-2005-2329 State: PUBLISHED Published: 2005-07-20T04:00:00 Last Updated: 2024-08-07T22:22:49.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: MRV Communications In-Reach LX-8000S, LX-4000S, and LX-1000S 3.5.0, when using SSH public key authentication, does not properly restrict access to ports, which allows remote authenticated users to access the consoles of other users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/14300 - http://www.securityfocus.com/archive/1/405546 - http://securitytracker.com/id?1014517