Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rityfocus.com/bid/10277 - http://secunia.com/advisories/11560 - http://www.osvdb.org/5898 - http://www.erfrakon.de/projects/kolab/download/kolab-server-1.0/src/Changelog - http://www.kolab.org/pipermail/kolab-users/2004-April/000215.html
CVE ID: CVE-2004-1998 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to gain sensitive information via an invalid show parameter to modules.php, which reveals the full path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/index.php?modname=sa&id=27 - http://marc.info/?l=bugtraq&m=108378804809891&w=2
CVE ID: CVE-2004-1999 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to inject arbitrary HTML and web script via the (1) ttitle or (2) sid parameters to modules.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16073 - http://www.waraxe.us/index.php?modname=sa&id=27 - http://secunia.com/advisories/11553 - http://marc.info/?l=bugtraq&m=108378804809891&w=2
CVE ID: CVE-2004-2000 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to execute arbitrary SQL via the (1) orderby or (2) sid parameters to modules.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/488452/100/0/threaded - http://www.securityfocus.com/bid/27932 - http://www.securityfocus.com/bid/10282 - http://www.waraxe.us/index.php?modname=sa&id=27 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16074 - http://secunia.com/advis
xe.us/index.php?modname=sa&id=27 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16074 - http://secunia.com/advisories/11553 - http://marc.info/?l=bugtraq&m=108378804809891&w=2 - http://osvdb.org/52223
CVE ID: CVE-2004-2001 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: ifconfig "-arp" in SGI IRIX 6.5 through 6.5.22m does not properly disable ARP requests from being sent or received. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20040502-01-P.asc - http://www.securityfocus.com/bid/10289
CVE ID: CVE-2004-2002 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in SGI IRIX 6.5 through 6.5.22m allows remote attackers to cause a denial of service via a certain UDP packet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16158 - ftp://patches.sgi.com/support/free/security/advisories/20040502-01-P.asc - http://www.securityfocus.com/bid/10287
CVE ID: CVE-2004-2003 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ssl_prcert function in the SSLway filter (sslway.c) for DeleGate 8.9.2 and earlier allows remote attackers to execute arbitrary code via a certificate with a long (1) subject or (2) issuer name field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11569 - http://marc.info/?l=bugtraq&m=108386181021070&w=2 - http://www.osvdb.org/5945 - http://www.securityfocus.com/bid/10295 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16078
CVE ID: CVE-2004-2004 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Live CD in SUSE LINUX 9.1 Personal edition is configured without a password for root, which allows remote attackers to gain privileges via SSH. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10297 - http://www.suse.de/de/security/2004_11_live_cd_91.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16084
CVE ID: CVE-2004-2005 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-mail with (1) a link to a long URL to the C drive or (2) a long attachment name. Additional Analyst Notes: - CVE Program Container: References: - http://www.eudora.com/download/eudora/windows/6.1.1/RelNotes.txt - http://www.securityfocus.com/bid/10298 - http://marc.info/?l=bugtraq&m=108395487628044&w=2 - http://secunia.com/advisories/11568 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16086 - http://l
628044&w=2 - http://secunia.com/advisories/11568 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16086 - http://lists.netsys.com/pipermail/full-disclosure/2004-May/021059.html
CVE ID: CVE-2004-2006 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro OfficeScan 3.0 - 6.0 has default permissions of "Everyone Full Control" on the installation directory and registry keys, which allows local users to disable virus protection. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108395366909344&w=2 - http://www.securityfocus.com/bid/10300 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16092 - http://secunia.com/advisories/11576 - http://www.osvdb.org/5990
CVE ID: CVE-2004-2007 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to inject arbitrary HTML or web script via the (1) cat parameter in a CatView function or (2) jokeid parameter in a JokeView function. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/index.php?modname=sa&id=28 - http://marc.info/?l=bugtraq&m=108404714232579&w=2 - http://www.securityfocus.com/bid/10306 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16096
CVE ID: CVE-2004-2008 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to execute arbitrary SQL via the jokeid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16099 - http://www.waraxe.us/index.php?modname=sa&id=28 - http://marc.info/?l=bugtraq&m=108404714232579&w=2 - http://secunia.com/advisories/11579 - http://www.securityfocus.com/bid/10306
CVE ID: CVE-2004-2009 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: NukeJokes 1.7 and 2 Beta allows remote attackers to obtain the full path of the server via (1) a direct call to mainfunctions.php, (2) an invalid jokeid parameter in a JokeView function or (3) an invalid cat parameter in a CatView function, which reveals the path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/index.php?modname=sa&id=28 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16094 - http://marc.info/?l=bugtraq&m=108404714232579&w=2
CVE ID: CVE-2004-2010 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in phpShop 0.7.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the base_dir parameter to reference a URL on a remote web server that contains phpshop.cfg. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10313 - http://secunia.com/advisories/11587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16107 - http://marc.info/?l=bugtraq&m=108420702317870&w=2 - http://www.fribble.net/advisories/
cloud.com/vulnerabilities/16107 - http://marc.info/?l=bugtraq&m=108420702317870&w=2 - http://www.fribble.net/advisories/phpshop_29-04-04.txt
CVE ID: CVE-2004-2011 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: msxml3.dll in Internet Explorer 6.0.2600.0 allows remote attackers to cause a denial of service (crash) via a single & (ampersand) in a <Ref href> link, which triggers a parsing error, possibly due to missing portions of the URI. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108422549617947&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16112
CVE ID: CVE-2004-2012 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108432258920570&w=2 - http://www.securityfocus.com/bid/10320 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16110 - http://secunia.com/advisories/11585 - ftp://ftp.Net
10320 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16110 - http://secunia.com/advisories/11585 - ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2004-007.txt.asc
CVE ID: CVE-2004-2013 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the SCTP_SOCKOPT_DEBUG_NAME SCTP socket option in socket.c in the Linux kernel 2.4.25 and earlier allows local users to execute arbitrary code via an optlen value of -1, which causes kmalloc to allocate 0 bytes of memory. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108456230815842&w=2 - http://archives.neohapsis.com/archives/bugtraq/2004-05/0091.html - http://lists.netsys.com/pipermail/full-disclosure/2004-May/021223.html - http://www.securityfocus.com/bid/
5/0091.html - http://lists.netsys.com/pipermail/full-disclosure/2004-May/021223.html - http://www.securityfocus.com/bid/10326 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16117
CVE ID: CVE-2004-2014 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=wget&m=108483270227139&w=2 - http://www.redhat.com/support/errata/RHSA-2005-771.html - https://usn.ubuntu.com/145-1/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9830 - http://secunia.com/advisories/17399 - http://marc.info/?l=wget&m=108482747906833&w=2 - http://www.securi
%3Adef%3A9830 - http://secunia.com/advisories/17399 - http://marc.info/?l=wget&m=108482747906833&w=2 - http://www.securityfocus.com/bid/10361 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16167 - http://marc.info/?l=bugtraq&m=108481268725276&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:204
CVE ID: CVE-2004-2015 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebCT Campus Edition allows remote attackers to inject arbitrary HTML or web script via (1) iframe, (2) img, or (3) object tags. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0851.html - http://www.securityfocus.com/bid/10357 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16156 - http://marc.info/?l=bugtraq&m=108481256731404&w=2
CVE ID: CVE-2004-2016 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the HTTP server in NetChat 7.3 and earlier allows remote attackers to execute arbitrary code via a long GET request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16165 - http://marc.info/?l=bugtraq&m=108481422130354&w=2 - http://www.securityfocus.com/bid/10353 - http://secunia.com/advisories/11637
CVE ID: CVE-2004-2017 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Turbo Traffic Trader C (TTT-C) 1.0 allow remote attackers to inject arbitrary HTML or web script, as demonstrated via (1) the link parameter to ttt-out, (2) the X-Forwarded-For header in a GET request to ttt-in, (3) the Referer header in a GET request to ttt-in, or the (4) site name or (5) site URL fields in the main control panel. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10359 - http://secunia.com/advisories/11623 -
s: - CVE Program Container: References: - http://www.securityfocus.com/bid/10359 - http://secunia.com/advisories/11623 - http://marc.info/?l=bugtraq&m=108481571131866&w=2 - http://www.osvdb.org/6340 - http://www.osvdb.org/6341 - http://www.osvdb.org/6342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16164 - http://www.osvdb.org/6344 - http://www.osvdb.org/6339 - http://www.icefire.org/security/ttt-bugreport.txt - http://www.osvdb.org/6343
CVE ID: CVE-2004-2018 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Php-Nuke 6.x through 7.3 allows remote attackers to execute arbitrary PHP code by modifying the modpath parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/index.php?modname=sa&id=29 - http://www.osvdb.org/6222 - http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0870.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16218 - http://secunia.com
hives/fulldisclosure/2004-05/0870.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16218 - http://secunia.com/advisories/11625 - http://marc.info/?l=bugtraq&m=108482888621896&w=2 - http://www.securityfocus.com/bid/10365
CVE ID: CVE-2004-2019 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebLinks module in Php-Nuke 6.x through 7.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which displays the full path in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/index.php?modname=sa&id=29 - http://www.securityfocus.com/bid/10367 - http://marc.info/?l=bugtraq&m=108482957715299&w=2 - http://secunia.com/advisories/11625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16170
CVE ID: CVE-2004-2020 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 6.x through 7.3 allow remote attackers to inject arbitrary HTML or web script into the (1) optionbox parameter in the News module, (2) date parameter in the Statistics module, (3) year, month, and month_1 parameters in the Stories_Archive module, (4) mode, order, and thold parameters in the Surveys module, or (5) a SQL statement to index.php, as processed by mainfile.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/index.p
processed by mainfile.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.waraxe.us/index.php?modname=sa&id=29 - http://www.osvdb.org/6226 - http://www.securityfocus.com/bid/10367 - http://marc.info/?l=bugtraq&m=108482957715299&w=2 - http://www.osvdb.org/6225 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16172 - http://secunia.com/advisories/11625
CVE ID: CVE-2004-2021 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in file_manager.php in osCommerce 2.2 allows remote attackers to view arbitrary files via a .. (dot dot) in the filename argument. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1010176 - http://marc.info/?l=bugtraq&m=108482902101519&w=2 - http://www.excluded.org/advisories/advisory13.txt - http://www.osvdb.org/6308 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16174 - http://www.securityfocus.com/bid/10364 - http://archives.neohapsis.co
change.xforce.ibmcloud.com/vulnerabilities/16174 - http://www.securityfocus.com/bid/10364 - http://archives.neohapsis.com/archives/bugtraq/2005-03/0378.html - http://secunia.com/advisories/11624
CVE ID: CVE-2004-2022 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: ActivePerl 5.8.x and others, and Larry Wall's Perl 5.6.1 and others, when running on Windows systems, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long argument to the system command, which leads to a stack-based buffer overflow. NOTE: it is unclear whether this bug is in Perl or the OS API that is used by Perl. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16169 - http://www.perlmonks.org/index.pl?node_id
er: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16169 - http://www.perlmonks.org/index.pl?node_id=354145 - http://marc.info/?l=full-disclosure&m=108489112131099&w=2 - http://marc.info/?l=bugtraq&m=108489894009025&w=2 - http://www.oliverkarow.de/research/ActivePerlSystemBOF.txt - http://marc.info/?l=full-disclosure&m=108483058514596&w=2 - http://marc.info/?l=full-disclosure&m=108482796105922&w=2 - http://www.securityfocus.com/bid/10375 - http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0905.html
CVE ID: CVE-2004-2023 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Zen Cart 1.1.2d, 1.1.4 before patch 1, and possibly other versions allows remote attackers to execute arbitrary SQL via the (1) admin_name or (2) admin_pass parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/16176 - http://www.securityfocus.com/archive/1/434237/30/4950/threaded - http://securitytracker.com/id?1010172 - http://www.zen-cart.com/modules/ipb/index.php?showtopic=4835 - http://www.packetstormsec
ecuritytracker.com/id?1010172 - http://www.zen-cart.com/modules/ipb/index.php?showtopic=4835 - http://www.packetstormsecurity.org/0405-advisories/zencart112d.txt - http://www.securityfocus.com/bid/10378 - http://www.osvdb.org/6298 - http://marc.info/?l=bugtraq&m=108489697219781&w=2 - http://secunia.com/advisories/11649 - http://www.zen-cart.com/modules/mydownloads/viewcat.php?cid=31&orderby=dateD
CVE ID: CVE-2004-2024 State: PUBLISHED Published: 2005-05-10T04:00:00Z Last Updated: 2024-09-16T18:23:44.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval functionality, which allows attackers to gain administrative privileges via password_forgotten.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.zen-cart.com/modules/ipb/index.php?showtopic=4873 - http://www.zen-cart.com/modules/mydownloads/viewcat.php?cid=31&orderby=dateD
CVE ID: CVE-2004-2025 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in application_top.php for Zen Cart 1.1.3 before patch 2 may allow remote attackers to execute arbitrary SQL commands via the products_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.zen-cart.com/modules/ipb/index.php?showtopic=3731 - http://www.zen-cart.com/modules/mydownloads/viewcat.php?cid=31&orderby=dateD
CVE ID: CVE-2004-2026 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via format string specifiers in syslog messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.apsis.ch/pound/pound_list/archive/2003/2003-12/1070234315000#1070234315000 - http://securitytracker.com/id?1010034 - http://secunia.com/advisories/11528 - http://www.osvdb.org/5746 - http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0343.html - https://exchan
8 - http://www.osvdb.org/5746 - http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0343.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16033 - http://security.gentoo.org/glsa/glsa-200405-08.xml - http://www.securityfocus.com/bid/10267
CVE ID: CVE-2004-2027 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Icecast 2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a long Basic Authorization header that triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200405-10.xml - http://www.securityfocus.com/bid/10311 - http://secunia.com/advisories/11578 - http://www.xiph.org/archives/icecast/7144.html - http://www.osvdb.org/6075 - http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0378.html - htt
st/7144.html - http://www.osvdb.org/6075 - http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0378.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/16103
CVE ID: CVE-2004-2028 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T01:15:01.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in stats.php in e107 allows remote attackers to inject arbitrary web script or HTML via the referer parameter to log.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/11693 - http://www.osvdb.org/6345 - http://marc.info/?l=bugtraq&m=108515632622796&w=2 - http://www.securityfocus.com/bid/10395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16231