Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2005-1385 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:48.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16006 - http://marc.info/?l=bugtraq&m=111473570624498&w=2 - http://marc.info/?l=bugtraq&m=111479299730011&w=2 - http://marc.info/?l=bugtraq&m=111479346119272&w=2 - http://securitytracker.com/id?1013835
CVE ID: CVE-2005-1386 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:48.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Nuke 7.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) ipban.php, (2) db.php, (3) lang-norwegian.php, (4) lang-indonesian.php, (5) lang-greek.php, (6) a request to Web_Links with the portuguese language (lang-portuguese.php), (7) a request to Web_Links with the indonesian language (lang-indonesian.php), (8) a request to the survey module with the indonesian language (lang-indonesian.php), (9) a request to the Reviews module with the portuguese language, or (10) a request to
n language (lang-indonesian.php), (9) a request to the Reviews module with the portuguese language, or (10) a request to the Journal module with the portuguese language, which reveal the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=111478982629035&w=2
CVE ID: CVE-2005-1387 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:49.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in cleartext, which allows local users to gain sensitive information by running listing processes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13449 - http://marc.info/?l=bugtraq&m=111480898530362&w=2 - http://www.osvdb.org/16046 - http://secunia.com/advisories/15201
CVE ID: CVE-2005-1388 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:48.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SURVIVOR before 0.9.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13415 - http://www.osvdb.org/15905 - http://www.columbia.edu/acis/dev/projects/survivor/doc/todo.html#changelog
CVE ID: CVE-2005-1389 State: REJECTED Published: 2005-05-02T04:00:00 Last Updated: 2005-05-04T09:00:00 Description: No description available.
CVE ID: CVE-2005-1390 State: REJECTED Published: 2005-05-02T04:00:00 Last Updated: 2005-05-04T09:00:00 Description: No description available.
CVE ID: CVE-2005-1391 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:48.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the add_port function in APSIS Pound 1.8.2 and earlier allows remote attackers to execute arbitrary code via a long Host HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2005/dsa-934 - http://securitytracker.com/id?1013824 - http://www.apsis.ch/pound/pound_list/archive/2005/2005-04/1114516112000 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=307852 - http://www.osvdb.org/15963 - http://secunia.com/advisories/15202 - http://security.gentoo.org/gl
report.cgi?bug=307852 - http://www.osvdb.org/15963 - http://secunia.com/advisories/15202 - http://security.gentoo.org/glsa/glsa-200504-29.xml - http://www.vupen.com/english/advisories/2005/0437 - http://secunia.com/advisories/15679 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20316 - http://www.securityfocus.com/bid/13436 - http://secunia.com/advisories/18381 - http://secunia.com/advisories/15142
CVE ID: CVE-2005-1392 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:50.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SQL install script in phpMyAdmin 2.6.2 is created with world-readable permissions, which allows local users to obtain the initial database password by reading the script. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/16053 - http://www.vupen.com/english/advisories/2005/0436 - http://bugs.gentoo.org/show_bug.cgi?id=88831 - http://security.gentoo.org/glsa/glsa-200504-30.xml
CVE ID: CVE-2005-1393 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:49.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute arbitrary code via long command line arguments to (1) asmaster, (2) asuser, (3) asutility, (4) se, or (5) asrecovery. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=111489411524630&w=2 - http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=14&MetaID=1015 - http://secunia.com/advisories/15196 - http://www.digitalmunition.com/DMA%5B2005-0425a%5D.txt
Patch&PID=14&MetaID=1015 - http://secunia.com/advisories/15196 - http://www.digitalmunition.com/DMA%5B2005-0425a%5D.txt - http://securitytracker.com/id?1013852
CVE ID: CVE-2005-1394 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:48.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format string specifiers in the ARCHOME environment variable to (1) wservice or (2) lockmgr. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=111489411524630&w=2 - http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=14&MetaID=1015 - http://secunia.com/advisories/15196 - http://www.digitalmunition.com/DMA%5B2005-0425a%5D.txt - http://s
14&MetaID=1015 - http://secunia.com/advisories/15196 - http://www.digitalmunition.com/DMA%5B2005-0425a%5D.txt - http://securitytracker.com/id?1013852
CVE ID: CVE-2005-1395 State: PUBLISHED Published: 2005-05-02T04:00:00Z Last Updated: 2024-09-17T03:28:33.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier may allow local users to gain privileges via a long (1) XAPPLRESLANGPATH or (2) XAPPLRESDIR environment variable, or (3) command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033705.html - http://securitytracker.com/id?1013855 - http://secunia.com/advisories/15197 - http://www.digitalmunition.com/DMA%5B2005-0501a%5D.txt
CVE ID: CVE-2005-1396 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:48.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier allows local users to write to arbitrary files via a symlink attack on the ce_edit_log temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033705.html - http://securitytracker.com/id?1013855 - http://www.osvdb.org/16050 - http://secunia.com/advisories/15197 - http://www.digitalmunition.com/DMA%5B2005-0501a%5D.txt
CVE ID: CVE-2005-1397 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:50.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php for PHP-Calendar before 0.10.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/0418 - http://www.securityfocus.com/bid/13405 - http://www.osvdb.org/15866 - http://sourceforge.net/project/shownotes.php?release_id=323483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20297 - http://secunia.com/advisories/15116
CVE ID: CVE-2005-1398 State: PUBLISHED Published: 2005-05-02T04:00:00 Last Updated: 2024-08-07T21:51:48.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpcart.php in PHPCart 3.2 allows remote attackers to change product price information by modifying the (1) price or (2) postage parameters. NOTE: it was later reported that 3.4 through 4.6.4 are also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/495806/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/44766 - http://www.securityfocus.com/bid/13406 - http://secunia.com/advisories/15147 - http://lostmon.blogspot.com/2005/04/phpcart-price-man
ecurityfocus.com/bid/13406 - http://secunia.com/advisories/15147 - http://lostmon.blogspot.com/2005/04/phpcart-price-manipulation.html - http://www.securityfocus.com/bid/30887 - http://www.osvdb.org/15859
CVE ID: CVE-2005-1399 State: PUBLISHED Published: 2005-05-06T04:00:00Z Last Updated: 2024-09-17T02:21:56.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeBSD 4.6 to 4.11 and 5.x to 5.4 uses insecure default permissions for the /dev/iir device, which allows local users to execute restricted ioctl calls to read or modify data on hardware that is controlled by the iir driver. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:06.iir.asc
CVE ID: CVE-2005-1400 State: PUBLISHED Published: 2005-05-06T04:00:00Z Last Updated: 2024-09-16T18:33:52.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: The i386_get_ldt system call in FreeBSD 4.7 to 4.11 and 5.x to 5.4 allows local users to access sensitive kernel memory via arguments with negative or very large values. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:07.ldt.asc
CVE ID: CVE-2005-1401 State: PUBLISHED Published: 2005-05-03T04:00:00 Last Updated: 2024-08-07T21:51:48.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the client for Mtp-Target 1.2.2 and earlier allows remote attackers to execute arbitrary code via game messages or other text. Additional Analyst Notes: - CVE Program Container: References: - http://www.security-focus.com/archive/1/397304 - http://aluigi.altervista.org/adv/mtpbugs-adv.txt
CVE ID: CVE-2005-1402 State: PUBLISHED Published: 2005-05-03T04:00:00 Last Updated: 2024-08-07T21:51:50.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in certain older versions of the NeL library, as used in Mtp-Target 1.2.2 and earlier, and possibly other products, allows remote attackers to cause a denial of service (memory consumption or server crash) via a negative value in a STLport call, which is not caught by a signed comparison. Additional Analyst Notes: - CVE Program Container: References: - http://www.security-focus.com/archive/1/397304 - http://aluigi.altervista.org/adv/mtpbugs-adv.txt
CVE ID: CVE-2005-1403 State: PUBLISHED Published: 2005-05-03T04:00:00 Last Updated: 2024-08-07T21:51:50.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to inject arbitrary web script or HTML via the (1) image parameter to closeup.php, the (2) currentIsExpanded or (3) searchFor parameters to index.php, (4) the currentNumber parameter to software_CAD_Technical_60002_uk.htm, or (5) a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13419 - http://www.securityfocus.com/bid/13425 - http://www.securityfocus.com
rences: - http://www.securityfocus.com/bid/13419 - http://www.securityfocus.com/bid/13425 - http://www.securityfocus.com/bid/13426 - http://www.osvdb.org/15894 - http://www.securityfocus.com/bid/13427 - http://www.osvdb.org/15893 - http://www.osvdb.org/15892 - http://lostmon.blogspot.com/2005/04/amazon-webstore-script-injection-and.html - http://secunia.com/advisories/15155 - http://securitytracker.com/id?1013836
CVE ID: CVE-2005-1404 State: PUBLISHED Published: 2005-05-03T04:00:00Z Last Updated: 2024-09-16T19:55:46.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the (1) nbuser parameter to post.php or (2) sender parameter to privmsg.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.org/archive/1/397025 - http://www.osvdb.org/15903 - http://www.osvdb.org/15902 - http://www.securityfocus.com/bid/13430 - http://secunia.com/advisories/15166 - http://www.securityfocus.com/bid/13429
CVE ID: CVE-2005-1405 State: PUBLISHED Published: 2005-05-03T04:00:00 Last Updated: 2024-08-07T21:51:49.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTP response splitting vulnerability in the @SetHTTPHeader function in Lotus Domino 6.5.x before 6.5.4 and 6.0.x before 6.0.5 allows attackers to poison the web cache via malicious applications. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15365 - http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21202437 - http://secunia.com/advisories/14879 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20045 - http://www.kb.cert.org/vuls/id/699798 - http://securitytracker.com/id?1013839
CVE ID: CVE-2005-1406 State: PUBLISHED Published: 2005-05-06T04:00:00 Last Updated: 2024-08-07T21:51:49.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in FreeBSD 4.x to 4.11 and 5.x to 5.4 does not properly clear certain fixed-length buffers when copying variable-length data for use by applications, which could allow those applications to read previously used sensitive memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2256 - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:08.kmem.asc - http://secunia.com/advisories/17368 - http://lists.apple.com/archives/security-announce/2005/Oct/
SD-SA-05:08.kmem.asc - http://secunia.com/advisories/17368 - http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html - http://www.securityfocus.com/bid/15252 - http://www.securityfocus.com/bid/13526
CVE ID: CVE-2005-1407 State: PUBLISHED Published: 2005-05-03T04:00:00 Last Updated: 2024-08-07T21:51:48.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skype for Windows 1.2.0.0 to 1.2.0.46 allows local users to bypass the identity check for an authorized application, then call arbitrary Skype API functions by modifying or replacing that application. Additional Analyst Notes: - CVE Program Container: References: - http://www.skype.com/security/ssa-2005-01.html
CVE ID: CVE-2005-1408 State: PUBLISHED Published: 2005-05-26T04:00:00 Last Updated: 2024-08-07T21:51:49.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Keynote 2.0 and 2.0.1 allows remote attackers to read arbitrary files via the keynote: URI handler in a crafted Keynote presentation. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15508 - http://lists.apple.com/archives/security-announce/2005/May/msg00005.html - http://remahl.se/david/vuln/016/ - http://securitytracker.com/id?1014053
CVE ID: CVE-2005-1409 State: PUBLISHED Published: 2005-05-03T04:00:00 Last Updated: 2024-08-07T21:51:50.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL 7.3.x through 8.0.x gives public EXECUTE access to certain character conversion functions, which allows unprivileged users to call those functions with malicious values, with unknown impact, aka the "Character conversion vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A676 - http://www.redhat.com/support/errata/RHSA-2005-433.html - http://www.securityfocus.com/archive/1/426302/30/6680/threaded - htt
/www.redhat.com/support/errata/RHSA-2005-433.html - http://www.securityfocus.com/archive/1/426302/30/6680/threaded - http://www.vupen.com/english/advisories/2005/0453 - http://www.securityfocus.com/bid/13476 - http://archives.postgresql.org/pgsql-announce/2005-05/msg00001.php - http://www.postgresql.org/about/news.315 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10050 - http://www.novell.com/linux/security/advisories/2005_36_sudo.html
CVE ID: CVE-2005-1410 State: PUBLISHED Published: 2005-05-03T04:00:00 Last Updated: 2024-08-07T21:51:49.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the (1) dex_init, (2) snb_en_init, (3) snb_ru_init, (4) spell_init, and (5) syn_init functions as "internal" even when they do not take an internal argument, which allows attackers to cause a denial of service (application crash) and possibly have other impacts via SQL commands that call other functions that accept internal arguments. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m
lyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9343 - http://www.securityfocus.com/bid/13475 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1086 - http://www.redhat.com/support/errata/RHSA-2005-433.html - http://www.securityfocus.com/archive/1/426302/30/6680/threaded - http://www.vupen.com/english/advisories/2005/0453 - http://archives.postgresql.org/pgsql-announce/2005-05/msg00001.php - http://www.postgresql.org/about/news.315 - http://www.novell.com/linux/security/advisories/2005_36_sudo.html
CVE ID: CVE-2005-1411 State: PUBLISHED Published: 2005-05-03T04:00:00 Last Updated: 2024-08-07T21:51:50.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybration ICUII 7.0 stores passwords in plaintext in the world-readable icuii.ini file, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/ref/14/14688-icuii.txt - http://www.securityfocus.com/bid/13441 - http://securitytracker.com/id?1013828 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20321 - http://secunia.com/advisories/15171 - http://www.osvdb.org/14688
CVE ID: CVE-2005-1412 State: PUBLISHED Published: 2005-05-03T04:00:00Z Last Updated: 2024-09-17T03:18:13.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote attackers to execute arbitrary SQL commands via the AdminPWD parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15967 - http://secunia.com/advisories/15190
CVE ID: CVE-2005-1413 State: PUBLISHED Published: 2005-05-03T04:00:00 Last Updated: 2024-08-07T21:51:48.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the (1) username or (2) password parameters to admin_login.asp, or the (3) searchstring and possibly (4) ID parameters to default.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/15964 - http://www.securityfocus.com/bid/13439 - http://www.securityfocus.com/bid/24860 - http://secunia.com/advisories/15173 - http://www.osvdb.org/15966 - http://www.osvdb.org
ww.securityfocus.com/bid/24860 - http://secunia.com/advisories/15173 - http://www.osvdb.org/15966 - http://www.osvdb.org/15965 - http://securityvulns.ru/Rdocument425.html - http://digitalparadox.org/viewadvisories.ah?view=37 - http://securitytracker.com/id?1013843 - http://marc.info/?l=full-disclosure&m=118414271202945&w=2 - http://www.securityfocus.com/bid/13437 - http://www.securityfocus.com/bid/13440 - https://exchange.xforce.ibmcloud.com/vulnerabilities/20313
CVE ID: CVE-2005-1414 State: PUBLISHED Published: 2005-05-03T04:00:00 Last Updated: 2024-08-07T21:51:49.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: ExoticSoft FilePocket 1.2 stores sensitive proxy information, including proxy passwords, in plaintext in the registry, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1013823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26187 - http://www.securityfocus.com/bid/13445 - http://www.osvdb.org/14685
CVE ID: CVE-2005-1415 State: PUBLISHED Published: 2005-05-03T04:00:00 Last Updated: 2024-08-07T21:51:50.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote authenticated users to execute arbitrary code via a long FTP command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13454 - http://archives.neohapsis.com/archives/fulldisclosure/2005-04/0674.html - http://www.cuteftp.com/gsftps/history.asp
CVE ID: CVE-2005-1416 State: PUBLISHED Published: 2005-05-03T04:00:00 Last Updated: 2024-08-07T21:51:50.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in 04WebServer 1.81 allows remote attackers to read files outside of the web root but within the installation folder. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15230 - http://www.vupen.com/english/advisories/2005/0448 - http://www.soft3304.net/04WebServer/Security.html - http://www.osvdb.org/16067 - http://osvdb.org/ref/16/16067-04webserver.txt
CVE ID: CVE-2005-1417 State: PUBLISHED Published: 2005-05-03T04:00:00 Last Updated: 2024-08-07T21:51:49.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute arbitrary SQL commands via (1) article_popular.asp, (2) arguments to dl_popular.asp, (3) arguments to links_popular.asp, (4) arguments to pic_popular.asp, (5) article_rate.asp, (6) dl_rate.asp, (7) links_rate.asp, (8) pic_rates.asp, (9) article_toprated.asp, (10) dl_toprated.asp, (11) links_toprated.asp, (12) arguments to pic_toprated.asp, or (13) the TOPIC_ID or Forum_ID parameters to custom_link.asp. Additio
oprated.asp, (12) arguments to pic_toprated.asp, or (13) the TOPIC_ID or Forum_ID parameters to custom_link.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13466 - http://secunia.com/advisories/15214 - http://securitytracker.com/id?1013845 - http://www.maxwebportal.info/downloads/mwp_security_fixes.zip - http://www.maxwebportal.info/topic.asp?TOPIC_ID=2482&FORUM_ID=1&CAT_ID=1&Forum_Title=General+Chat&Topic_Title=Security+Update
CVE ID: CVE-2005-1418 State: PUBLISHED Published: 2005-05-03T04:00:00 Last Updated: 2024-08-07T21:51:49.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetLeaf Limited NotJustBrowsing 1.0.3 stores the View Lock Password in plaintext in the notjustbrowsing.prf file, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20319 - http://www.securityfocus.com/bid/13442 - http://securitytracker.com/id?1013826 - http://www.osvdb.org/14687 - http://secunia.com/advisories/15184