Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2003-1152 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebTide 7.04 allows remote attackers to list arbitrary directories via an HTTP request for %3f.jsp (encoded "?"). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8909 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012811.html - http://secunia.com/advisories/10078 - http://securitytracker.com/id?1008016 - http://www.osvdb.org/2719 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13533
CVE ID: CVE-2003-1153 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: byteHoard 0.7 and 0.71 allows remote attackers to list arbitrary files and directories via a direct request to files.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012801.html - http://secunia.com/advisories/10082 - http://www.securityfocus.com/bid/8910 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13531 - http://www.osvdb.org/2700
CVE ID: CVE-2003-1154 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: MAILsweeper for SMTP 4.3 allows remote attackers to bypass virus protection via a mail message with a malformed zip attachment, as exploited by certain MIMAIL virus variants. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8982 - http://www.computerworld.co.nz/cw.nsf/0/BF9E8E6E2D313E5FCC256DD70016473F?OpenDocument&More= - https://exchange.xforce.ibmcloud.com/vulnerabilities/13611 - http://secunia.com/advisories/10148 - http://www.osvdb.org/2772
CVE ID: CVE-2003-1155 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: X-CD-Roast 0.98 alpha10 through alpha14 allows local users to overwrite arbitrary files via a symlink attack on an unknown file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10162 - http://www.osvdb.org/2786 - http://www.xcdroast.org/xcdr098/changelog-a15.html - http://www.securityfocus.com/bid/8983 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13612 - http://securitytracker.com/id?1008094
CVE ID: CVE-2003-1156 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Java Runtime Environment (JRE) and Software Development Kit (SDK) 1.4.2 through 1.4.2_02 allows local users to overwrite arbitrary files via a symlink attack on (1) unpack.log, as created by the unpack program, or (2) .mailcap1 and .mime.types1, as created by the RPM program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/343038 - http://www.securityfocus.com/bid/8937 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13570
CVE ID: CVE-2003-1157 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.asp in Citrix MetaFrame XP Server 1.0 allows remote attackers to inject arbitrary web script or HTML via the NFuse_Message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10127 - http://www.securityfocus.com/bid/8939 - http://www.securityfocus.com/archive/1/343040 - http://www.osvdb.org/2762 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40782 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13569 - http://
xchange.xforce.ibmcloud.com/vulnerabilities/40782 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13569 - http://www.securityfocus.com/bid/27948
CVE ID: CVE-2003-1158 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the FTP service in Plug and Play Web Server 1.0002c allow remote attackers to cause a denial of service (crash) via long (1) dir, (2) ls, (3) delete, (4) mkdir, (5) DELE, (6) RMD, or (7) MKD commands. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2003-09/0275.html - http://www.securityfocus.com/bid/8667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13219
CVE ID: CVE-2003-1159 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plug and Play Web Server Proxy 1.0002c allows remote attackers to cause a denial of service (server crash) via an invalid URI in an HTTP GET request to TCP port 8080. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10131 - http://www.osvdb.org/2764 - http://archives.neohapsis.com/archives/bugtraq/2003-10/0343.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/13572 - http://www.securityfocus.com/bid/8941
CVE ID: CVE-2003-1160 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain administrative privileges via an HTTP request to aindex.htm that contains double leading slashes (//). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10132 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13567 - http://packetstormsecurity.nl/0310-exploits/FlexWATCH.txt - http://www.securityfocus.com/bid/8942 - http://securitytracker.com/id?1008049 - http://www.osvdb.org/2842
CVE ID: CVE-2003-1161 State: PUBLISHED Published: 2005-05-10T04:00:00Z Last Updated: 2024-09-16T23:52:04.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: exit.c in Linux kernel 2.6-test9-CVS, as stored on kernel.bkbits.net, was modified to contain a backdoor, which could allow local users to elevate their privileges by passing __WCLONE|__WALL to the sys_wait4 function. Additional Analyst Notes: - CVE Program Container: References: - http://www.ussg.iu.edu/hypermail/linux/kernel/0311.0/0621.html - http://www.securityfocus.com/bid/8987 - http://www.ussg.iu.edu/hypermail/linux/kernel/0311.0/0630.html - http://www.ussg.iu.edu/hypermail/linux/kernel/0311.0/0627.html
CVE ID: CVE-2003-1162 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Tritanium Bulletin Board 1.2.3 allows remote attackers to read and reply to arbitrary messages by modifying the thread_id, forum_id, and sid parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8944 - http://secunia.com/advisories/10135 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13587 - http://archives.neohapsis.com/archives/bugtraq/2003-10/0348.html - http://www.osvdb.org/2770
CVE ID: CVE-2003-1163 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: hash.c in Ganglia gmond 2.5.3 allows remote attackers to cause a denial of service (segmentation fault) via a UDP packet that contains a single-byte name string, which is used as an out-of-bounds array index. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/2787 - http://www.securityfocus.com/bid/8988 - http://www.securityfocus.com/archive/1/343689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13631 - http://secunia.com/advisories/10166 - http://ganglia.sourceforge.net/
CVE ID: CVE-2003-1164 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mldonkey 2.5-4 allows remote attackers to inject arbitrary web script or HTML via the URI, which is injected into the HTML error page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10134 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/013070.html - http://www.securityfocus.com/bid/8946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13615
CVE ID: CVE-2003-1165 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with a long User-Agent header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/343111 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13571 - http://www.securityfocus.com/bid/8947
CVE ID: CVE-2003-1166 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in (1) Openfile.aspx and (2) Html.aspx in HTTP Commander 4.0 allows remote attackers to view arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/2780 - http://www.securityfocus.com/bid/8948 - http://www.http-com.com/Default.asp?section=Features - http://secunia.com/advisories/10125 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13622
CVE ID: CVE-2003-1167 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: misc.cpp in KPopup 0.9.1 trusts the PATH variable when executing killall, which allows local users to elevate their privileges by modifying the PATH variable to reference a malicious killall program. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/2742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13540 - http://www.securityfocus.com/bid/8915 - http://www.securityfocus.com/archive/1/342736 - http://secunia.com/advisories/10105
CVE ID: CVE-2003-1168 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTP Commander 4.0 allows remote attackers to obtain sensitive information via an HTTP request that contains a . (dot) in the file parameter, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8949 - http://secunia.com/advisories/10125
CVE ID: CVE-2003-1169 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: DATEV Nutzungskontrolle 2.1 and 2.2 has insecure write permissions for critical registry keys, which allows local users to bypass access restrictions by importing NukoInfo values in certain DATEV keys, which disables Nutzungskontrolle. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13589 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013113.html - http://www.securityfocus.com/bid/8950
CVE ID: CVE-2003-1170 State: PUBLISHED Published: 2005-05-10T04:00:00Z Last Updated: 2024-09-16T22:24:44.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in main.cpp in kpopup 0.9.1 and 0.9.5pre2 allows local users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via format string specifiers in command line arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8918 - http://www.securityfocus.com/archive/1/342736 - http://www.osvdb.org/3290 - http://secunia.com/advisories/10105
CVE ID: CVE-2003-1171 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the sec_filter_out function in mod_security 1.7RC1 through 1.7.1 in Apache 2 allows remote attackers to execute arbitrary code via a server side script that sends a large amount of data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8919 - http://www.securityfocus.com/archive/1/342767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13543 - http://secunia.com/advisories/10085 - http://adsystems.com.pl/adg-mod_security171.txt - http://securi
rabilities/13543 - http://secunia.com/advisories/10085 - http://adsystems.com.pl/adg-mod_security171.txt - http://securitytracker.com/id?1008025 - http://www.modsecurity.org/download/CHANGES
CVE ID: CVE-2003-1172 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the view-source sample file in Apache Software Foundation Cocoon 2.1 and 2.2 allows remote attackers to access arbitrary files via a .. (dot dot) in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/13499 - http://www.securiteam.com/securitynews/6W00L0U8KC.html - http://www.securityfocus.com/bid/8883 - http://secunia.com/advisories/10064 - http://www.osvdb.org/2749 - http://issues.apache.org/bugzilla
focus.com/bid/8883 - http://secunia.com/advisories/10064 - http://www.osvdb.org/2749 - http://issues.apache.org/bugzilla/show_bug.cgi?id=23949 - http://securitytracker.com/id?1007993
CVE ID: CVE-2003-1173 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Centrinity FirstClass 7.1 allows remote attackers to access sensitive information by appending search to the end of the URL and checking all of the search option checkboxes and leaving the text field blank, which will return all files in the searched directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/342765 - http://secunia.com/advisories/10084 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13546 - http://www.securityfocus.com/bid/8920 - http://www.securit
https://exchange.xforce.ibmcloud.com/vulnerabilities/13546 - http://www.securityfocus.com/bid/8920 - http://www.securityfocus.com/archive/1/342909 - http://www.osvdb.org/2723
CVE ID: CVE-2003-1174 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in NullSoft Shoutcast Server 1.9.2 allows local users to cause a denial of service via (1) icy-name followed by a long server name or (2) icy-url followed by a long URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/2776 - http://secunia.com/advisories/10146 - http://securitytracker.com/id?1008080 - http://www.securityfocus.com/bid/8954 - http://www.securityfocus.com/archive/1/343177 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13586
CVE ID: CVE-2003-1175 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Sympoll 1.5 allows remote attackers to inject arbitrary web script or HTML via the vo parameter. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/tracker/index.php?func=detail&aid=834374&group_id=64442&atid=507493 - http://www.osvdb.org/2790 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13630 - http://secunia.com/advisories/10165 - http://www.securityfocus.com/bid/8956
CVE ID: CVE-2003-1176 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: post_message_form.asp in Web Wiz Forums 6.34 through 7.5, when quote mode is used, allows remote attackers to read or write to private forums by modifying the FID (forum ID) parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8957 - http://www.osvdb.org/2768 - http://secunia.com/advisories/10137 - http://www.securityfocus.com/archive/1/343175 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13581 - http://www.securityfocus.com/archive/1/343314 - http://securitytrac
exchange.xforce.ibmcloud.com/vulnerabilities/13581 - http://www.securityfocus.com/archive/1/343314 - http://securitytracker.com/id?1008100
CVE ID: CVE-2003-1177 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) AUTH command to the POP3 server or (2) AUTHENTICATE command to the IMAP server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/8861 - http://secunia.com/advisories/10038 - http://www.securityfocus.com/bid/8889 - http://www.osvdb.org/2688 - http://archives.neohapsis.com/archives/fulldisclosure/2003-q4/
.securityfocus.com/bid/8889 - http://www.osvdb.org/2688 - http://archives.neohapsis.com/archives/fulldisclosure/2003-q4/1459.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/13468 - http://www.atrium-software.com/mail%20server/pub/mcr42sp3a.html - http://www.securiteam.com/windowsntfocus/6U00N1P8KC.html
CVE ID: CVE-2003-1178 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in comments.php in Advanced Poll 2.0.2 allows remote attackers to execute arbitrary PHP code via the (1) id, (2) template_set, or (3) action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/2743 - http://www.securityfocus.com/archive/1/342493 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29396 - http://www.securityfocus.com/bid/8890 - http://www.securityfocus.com/archive/1/448007/100/0/threaded - http://secunia.com/advisories/10068 - http://a
bid/8890 - http://www.securityfocus.com/archive/1/448007/100/0/threaded - http://secunia.com/advisories/10068 - http://attrition.org/pipermail/vim/2006-October/001080.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/13513
CVE ID: CVE-2003-1179 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Advanced Poll 2.0.2 allow remote attackers to execute arbitrary PHP code via the include_path parameter in (1) booth.php, (2) png.php, (3) poll_ssi.php, or (4) popup.php, the (5) base_path parameter to common.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/342493 - http://www.securityfocus.com/archive/1/440780/100/0/threaded - http://www.securityfocus.com/bid/19105 - http://www.phpsecure.info/v2/tutos/frog/Adv
m/archive/1/440780/100/0/threaded - http://www.securityfocus.com/bid/19105 - http://www.phpsecure.info/v2/tutos/frog/AdvancedPoll2.0.2.txt - http://www.solpotcrew.org/adv/solpot-adv-02.txt - http://www.securityfocus.com/bid/8890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13514 - http://secunia.com/advisories/10068 - http://www.osvdb.org/3291 - http://www.osvdb.org/28988
CVE ID: CVE-2003-1180 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Advanced Poll 2.0.2 allows remote attackers to read arbitrary files or inject arbitrary local PHP files via .. sequences in the base_path or pollvars[lang] parameters to the admin files (1) index.php, (2) admin_tpl_new.php, (3) admin_tpl_misc_new.php, (4) admin_templates_misc.php, (5) admin_templates.php, (6) admin_stats.php, (7) admin_settings.php, (8) admin_preview.php, (9) admin_password.php, (10) admin_logout.php, (11) admin_license.php, (12) admin_help.php, (13) admin_embed.php, (14) a
(9) admin_password.php, (10) admin_logout.php, (11) admin_license.php, (12) admin_help.php, (13) admin_embed.php, (14) admin_edit.php, or (15) admin_comment.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/342493 - http://www.securityfocus.com/bid/8890 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13514 - http://secunia.com/advisories/10068 - http://www.osvdb.org/3291
CVE ID: CVE-2003-1181 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advanced Poll 2.0.2 allows remote attackers to obtain sensitive information via an HTTP request to info.php, which invokes the phpinfo() function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/342493 - http://www.osvdb.org/3292 - http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0019.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/13515 - http://www.securityfocus.com/bid/8890 - http://secunia.com/advisories/10068
CVE ID: CVE-2003-1182 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MPM Guestbook 1.2 allows remote attackers to inject arbitrary web script or HTML via the lng parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/2754 - http://secunia.com/advisories/10122 - http://www.securityfocus.com/bid/8958 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13575
CVE ID: CVE-2003-1183 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:46.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebCache component in Oracle Files 9.0.3.1.0, 9.0.3.2.0, and 9.0.3.3.0 of Oracle Collaboration Suite Release 1 caches files despite the cacheability rules imposed by Oracle Files, which allows local users to gain access. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/2727 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13545 - http://www.oracle.com/technology/deploy/security/pdf/2003alert60.pdf - http://www.securityfocus.com/bid/8923 - http://secunia.com/advisories/10088
CVE ID: CVE-2003-1184 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T02:19:45.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ThWboard Beta 2.8 and 2.81 allow remote attackers to inject arbitrary web script or HTML via (1) time in board.php, (2) the profile Homepage-Feld, (3) pictures, and (4) other "Diverse XSS Bugs." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/10120 - https://exchange.xforce.ibmcloud.com/vulnerabilities/13582 - http://www.osvdb.org/4825 - http://sourceforge.net/project/shownotes.php?release_id=195009 - http://www.osvdb.org/4828
- http://www.osvdb.org/4825 - http://sourceforge.net/project/shownotes.php?release_id=195009 - http://www.osvdb.org/4828 - http://www.securityfocus.com/bid/8959 - http://www.osvdb.org/4829 - http://www.osvdb.org/4827 - http://www.osvdb.org/4826 - http://www.osvdb.org/3077