Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-1409 State: PUBLISHED Published: 2003-06-18T04:00:00 Last Updated: 2024-08-08T04:51:08.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666), which allows local users to replace or create files in the root file system. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-66-228529-1 - http://groups.google.com/groups?selm=20010829121505.A16004%40compusol.com.au - http://www.redhat.com/support/errata/RHSA-2003-067.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1017429.1-1
CVE ID: CVE-2001-1410 State: PUBLISHED Published: 2003-07-17T04:00:00 Last Updated: 2024-08-08T04:51:08.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via social engineering. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=105820229407274&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7313 - http://www.securityfocus.com/bid/3469 - http://marc.info/?l=bugtraq&m=105829174
orce.ibmcloud.com/vulnerabilities/7313 - http://www.securityfocus.com/bid/3469 - http://marc.info/?l=bugtraq&m=105829174431769&w=2 - http://www.systemintegra.com/ie-fullscreen/ - http://www.kb.cert.org/vuls/id/490708 - http://www.securityfocus.com/archive/1/221883 - http://www.guninski.com/popspoof.html - http://www.doxdesk.com/personal/posts/bugtraq/20030713-ie/
CVE ID: CVE-2001-1411 State: PUBLISHED Published: 2003-10-25T04:00:00 Last Updated: 2024-08-08T04:51:08.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in gm4 (aka m4) on Mac OS X may allow local users to gain privileges if gm4 is called by setuid programs. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/mhonarc/security-announce/msg00038.html - http://www.kb.cert.org/vuls/id/147587 - http://www.iss.net/security_center/static/10174.php - http://marc.info/?l=bugtraq&m=100368233714229&w=2
CVE ID: CVE-2001-1412 State: PUBLISHED Published: 2003-10-25T04:00:00 Last Updated: 2024-08-08T04:51:08.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: nidump on MacOS X before 10.3 allows local users to read the encrypted passwords from the password file by specifying passwd as a command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/mhonarc/security-announce/msg00038.html - http://securitytracker.com/id?1001946 - http://www.securiteam.com/securityreviews/5QP032A4UU.html - http://www.securemac.com/macosxnidump.php - http://lists.insecure.org/lists/bugtraq/2002/Sep/0128.html - http://marc.info/?l=bugtraq&m=99953038722104
sxnidump.php - http://lists.insecure.org/lists/bugtraq/2002/Sep/0128.html - http://marc.info/?l=bugtraq&m=99953038722104&w=2
CVE ID: CVE-2001-1413 State: PUBLISHED Published: 2004-10-20T04:00:00 Last Updated: 2024-08-08T04:51:08.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP server), may allow remote attackers to execute arbitrary code via a long filename argument. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200410-08.xml - http://seclists.org/lists/vuln-dev/2001/Nov/0202.html - http://www.redhat.com/support/errata/RHSA-2004-536.html - http://www.kb.cert.org/vuls/id/176363 - https://exchan
.html - http://www.redhat.com/support/errata/RHSA-2004-536.html - http://www.kb.cert.org/vuls/id/176363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10619
CVE ID: CVE-2001-1414 State: PUBLISHED Published: 2005-02-08T05:00:00 Last Updated: 2024-08-08T04:51:08.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain BSM audit files are not present under the FTP root. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-40521-1 - http://www.securityfocus.com/bid/7396 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11841
CVE ID: CVE-2001-1415 State: PUBLISHED Published: 2005-03-18T05:00:00 Last Updated: 2024-08-08T04:51:08.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: vi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as device nodes. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/191675 - ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.9/common/016_recover.patch - https://exchange.xforce.ibmcloud.com/vulnerabilities/10149
CVE ID: CVE-2001-1416 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-08T04:58:11.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messenger (AIM) 4.4 allow remote attackers to execute arbitrary web script or HTML via an image in the (1) DATA, (2) STYLE, or (3) BINARY tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/541384 - http://www.windowsitpro.com/Articles/Index.cfm?ArticleID=19811&DisplayTab=Article - http://www.kb.cert.org/vuls/id/JARL-56TPBQ
CVE ID: CVE-2001-1417 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-08T04:58:11.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application hang or crash) via a buddy icon GIF file whose length and width values are larger than the actual image data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3408 - http://www.kb.cert.org/vuls/id/JARL-56TQEN - https://exchange.xforce.ibmcloud.com/vulnerabilities/7255 - http://www.securityfocus.com/archive/1/218920 - http://www.kb.cert.org/vuls/id/710347 - http://www.securityfocus.c
255 - http://www.securityfocus.com/archive/1/218920 - http://www.kb.cert.org/vuls/id/710347 - http://www.securityfocus.com/archive/1/247707
CVE ID: CVE-2001-1418 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-08T04:58:11.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a malformed WAV file. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/990451 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10686 - http://www.securityfocus.com/archive/1/218920 - http://www.kb.cert.org/vuls/id/JARL-569M8X
CVE ID: CVE-2001-1419 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-08T04:58:11.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application crash) via an instant message that contains a large amount of "<!--" HTML comments. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/507771 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7233 - http://www.kb.cert.org/vuls/id/JARL-56TPTN - http://www.securityfocus.com/bid/3398 - http://www.securityfocus.com/archive/1/247707 - http://archives.neohapsis.com/archi
p://www.securityfocus.com/bid/3398 - http://www.securityfocus.com/archive/1/247707 - http://archives.neohapsis.com/archives/bugtraq/2001-10/0014.html
CVE ID: CVE-2001-1420 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-08T04:58:09.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a long filename, possibly caused by a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3407 - http://www.kb.cert.org/vuls/id/972499 - http://www.kb.cert.org/vuls/id/JARL-569MEK - http://www.securityfocus.com/archive/1/218920 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7254
CVE ID: CVE-2001-1421 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-08T04:58:11.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: AOL Instant Messenger (AIM) 4.7 and earlier allows remote attackers to cause a denial of service (application crash) via a large number of different fonts followed by an HTML HR tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/JARL-569MD7 - http://www.securityfocus.com/bid/3756 - http://www.securityfocus.com/archive/1/218920 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7757 - http://www.kb.cert.org/vuls/id/530299 - http://www.securityfocus.com/archive/1/247707
CVE ID: CVE-2001-1422 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-08T04:58:09.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2275 - http://www.kb.cert.org/vuls/id/303080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5992 - http://www1.corest.com/common/showdoc.php?idxseccion=10&idx=117
CVE ID: CVE-2001-1423 State: PUBLISHED Published: 2005-03-20T05:00:00 Last Updated: 2024-08-08T04:58:11.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advanced Poll before 1.61, when using a flat file database, allows remote attackers to gain privileges by setting the logged_in parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/140723 - http://securitytracker.com/id?1002516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7861
CVE ID: CVE-2001-1424 State: PUBLISHED Published: 2005-03-22T05:00:00 Last Updated: 2024-08-08T04:58:11.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default password, which allows remote attackers to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/212088 - http://security.sdsc.edu/self-help/alcatel/alcatel-bugs.html - http://www.securityfocus.com/archive/1/175229 - http://www.securityfocus.com/bid/2568 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6335 - http://www.cert.org/advisori
ww.securityfocus.com/bid/2568 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6335 - http://www.cert.org/advisories/CA-2001-08.html
CVE ID: CVE-2001-1425 State: PUBLISHED Published: 2005-03-22T05:00:00 Last Updated: 2024-08-08T04:58:11.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/243592 - http://security.sdsc.edu/self-help/alcatel/alcatel-bugs.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6354 - http://www.securi
.edu/self-help/alcatel/alcatel-bugs.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6354 - http://www.securityfocus.com/archive/1/175229 - http://www.securityfocus.com/bid/2568 - http://www.cert.org/advisories/CA-2001-08.html
CVE ID: CVE-2001-1426 State: PUBLISHED Published: 2005-03-22T05:00:00 Last Updated: 2024-08-08T04:58:09.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware versions or the device's configurations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2566 - http://www.kb.cert.org/vuls/id/490344 - http://www.securityfocus.com/archive/1/175229 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6336 - http://www.cert.org/advisories/CA-2001-08.html
CVE ID: CVE-2001-1427 State: PUBLISHED Published: 2005-03-22T05:00:00 Last Updated: 2024-08-08T04:58:09.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in ColdFusion Server 2.0 through 4.5.1 SP2 allows remote attackers to overwrite templates with zero byte files via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6840 - http://www.macromedia.com/devnet/security/security_zone/mpsb01-07.html - http://www.securityfocus.com/bid/3023 - http://www.kb.cert.org/vuls/id/321475
CVE ID: CVE-2001-1428 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-08T04:58:11.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) FTP and (2) Telnet services in Beck GmbH IPC@Chip are shipped with a default password, which allows remote attackers to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/46219 - http://www.securityfocus.com/bid/2770 - http://www.kb.cert.org/vuls/id/426459 - http://www.securityfocus.com/archive/1/186418 - http://www.securityfocus.com/bid/2769 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6597 - https://exchange.xforce.ibmcloud.com/vulnerabi
om/bid/2769 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6597 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6598
CVE ID: CVE-2001-1429 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-08T04:58:11.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in mcedit in Midnight Commander 4.5.1 allows local users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted text file. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/203203 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10630
CVE ID: CVE-2001-1430 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-08T04:58:09.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cayman 3220-H DSL Router 1.0 ship without a password set, which allows remote attackers to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/196083 - http://www.kb.cert.org/vuls/id/JARL-4ZTKY9 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6841 - http://www.kb.cert.org/vuls/id/557136 - http://www.securityfocus.com/bid/3017
CVE ID: CVE-2001-1431 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-08T04:58:11.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nokia Firewall Appliances running IPSO 3.3 and VPN-1/FireWall-1 4.1 Service Pack 3, IPSO 3.4 and VPN-1/FireWall-1 4.1 Service Pack 4, and IPSO 3.4 or IPSO 3.4.1 and VPN-1/FireWall-1 4.1 Service Pack 5, when SYN Defender is configured in Active Gateway mode, does not properly rewrite the third packet of a TCP three-way handshake to use the NAT IP address, which allows remote attackers to gain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilit
tion. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/8293 - http://www.kb.cert.org/vuls/id/258731
CVE ID: CVE-2001-1432 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-08T04:58:11.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0085.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7799 - http://www.securityfocus.com/bid/3772 - http://www.kb.cert.org/vuls/id/464827
CVE ID: CVE-2001-1433 State: PUBLISHED Published: 2005-03-24T05:00:00 Last Updated: 2024-08-08T04:58:10.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain privileges via other vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0085.html - http://www.kb.cert.org/vuls/id/245795 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7797 - http://www.securityfocus.com/bid/3771
CVE ID: CVE-2001-1434 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:09.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and topology information via an "snmp-server host" command, which creates a readable "community" community string if one has not been previously created. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/ios-snmp-community-vulns-pub.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/6178 - http://www.kb.cert.org/vuls/id/848944
CVE ID: CVE-2001-1435 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: inetd in Compaq Tru64 UNIX 5.1 allows attackers to cause a denial of service (network connection loss) by causing one of the services handled by inetd to core dump during startup, which causes inetd to stop accepting connections to all of its services. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/880624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6157 - http://www.securityfocus.com/archive/1/165535 - http://www.securityfocus.com/archive/1/165535
CVE ID: CVE-2001-1436 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier for users with physical access to conduct dictionary attacks against the device password. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2001/a011801-1.txt - http://www.kb.cert.org/vuls/id/178560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10625
CVE ID: CVE-2001-1437 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: easyScripts easyNews 1.5 allows remote attackers to obtain the full path of the web root via a view request with a non-integer news message id field, which leaks the path in a PHP error message when the script times out. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/597795 - http://www.securityfocus.com/bid/3649 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7660 - http://archives.neohapsis.com/archives/bugtraq/2001-12/0000.html
CVE ID: CVE-2001-1438 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Handspring Visor 1.0 and 1.0.1 with the VisorPhone Springboard module installed allows remote attackers to cause a denial of service (PalmOS crash and VisorPhone database corruption) by sending a large or crafted SMS image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/82/222110 - http://www.kb.cert.org/vuls/id/222739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10637
CVE ID: CVE-2001-1439 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the text editor functionality in HP-UX 10.01 through 11.04 on HP9000 Series 700 and Series 800 allows local users to cause a denial of service ("system availability") via text editors such as (1) e, (2) ex, (3) vi, (4) edit, (5) view, and (6) vedit. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/268848 - http://www.securityfocus.com/archive/1/163910 - http://www.auscert.org.au/render.html?it=1176 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6111
CVE ID: CVE-2001-1440 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in login for AIX 5.1L, when using loadable authentication modules, allows remote attackers to gain access to the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/249491 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY26302&apar=only - http://www.securityfocus.com/bid/6839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8269 - http://securitytracker.com/id?1003038
CVE ID: CVE-2001-1441 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaScript on other clients via the URL, which injects the script in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/270083 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6793 - http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html
CVE ID: CVE-2001-1442 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/943536 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6398 - http://securitytracker.com/id?1001353 - http://www.securityfocus.com/bid/2620 - http://www.securityfocus.com/archive/1/178011 - http://archives.neohapsis.com/archives/bugtraq/2001-04/0311.html
CVE ID: CVE-2001-1443 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support the requested encryption, which allows remote attackers to read communications via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://josefsson.org/ktelnet/kerberos-telnet.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10640 - http://www.kb.cert.org/vuls/id/390280