deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-3043
Published: 2005-09-22
Description: SQL injection vulnerability in AddItem.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idOption_Dropdown_2 parameter.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.org/0509-exploits/mall23.txt; http://secunia.com/advisories/16903; http://systemsecure.org/ssforum/viewtopic.php?t=277
CVE: CVE-2005-3044
Published: 2005-09-22
Description: Multiple vulnerabilities in Linux kernel before 2.6.13.2 allow local users to cause a denial of service (kernel OOPS from null dereference) via (1) fput in a 32-bit ioctl on 64-bit x86 systems or (2) sockfd_put in the 32-bit routing_ioctl function on 64-bit systems.
CVSS Score: 2.1 (LOW)
References: http://kernel.org/git/?p=linux/kernel/git/aegl/linux-2.6.git%3Ba=commitdiff%3Bh=35311d6478077f7bfe35c1c653193e658bf32686; http://kernel.org/git/?p=linux/kernel/git/chrisw/linux-2.6.13.y.git%3Ba=commit%3Bh=98debffa9114b60138b3dbd4d02ce13f01a07ab4; http://secunia.com/advisories/17826
CVE: CVE-2005-2701
Published: 2005-09-23
Description: Heap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to execute arbitrary code via an XBM image file that ends in a large number of spaces instead of the expected end tag.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt; http://secunia.com/advisories/16911; http://secunia.com/advisories/16917
CVE: CVE-2005-2702
Published: 2005-09-23
Description: Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt; http://secunia.com/advisories/16911; http://secunia.com/advisories/16917
CVE: CVE-2005-2703
Published: 2005-09-23
Description: Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-94
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt; http://secunia.com/advisories/16911; http://secunia.com/advisories/16917
CVE: CVE-2005-2704
Published: 2005-09-23
Description: Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control that implements an internal XPCOM interface.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt; http://secunia.com/advisories/16911; http://secunia.com/advisories/16917
CVE: CVE-2005-2705
Published: 2005-09-23
Description: Integer overflow in the JavaScript engine in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 might allow remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt; http://secunia.com/advisories/16911; http://secunia.com/advisories/16917
CVE: CVE-2005-2706
Published: 2005-09-23
Description: Firefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute Javascript with chrome privileges via an about: page such as about:mozilla.
CVSS Score: 6.4 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt; http://secunia.com/advisories/16911; http://secunia.com/advisories/16917
CVE: CVE-2005-2707
Published: 2005-09-23
Description: Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows without user interface components such as the address and status bar, which could be used to conduct spoofing or phishing attacks.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt; http://secunia.com/advisories/16911; http://secunia.com/advisories/16917
CVE: CVE-2005-3045
Published: 2005-09-24
Description: SQL injection vulnerability in search.php in My Little Forum 1.5 and 1.6 beta allows remote attackers to execute arbitrary SQL commands via the phrase field.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6983&w=2; http://rgod.altervista.org/mylittle15_16b.html; http://secunia.com/advisories/16913/
CVE: CVE-2005-3046
Published: 2005-09-24
Description: SQL injection vulnerability in password.php in PhpMyFaq 1.5.1 allows remote attackers to modify SQL queries and gain administrator privileges via the user field.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4091&w=2; http://rgod.altervista.org/phpmyfuck151.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4091&w=2
CVE: CVE-2005-3047
Published: 2005-09-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFaq 1.5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) PMF_CONF[version] parameter to footer.php or (2) PMF_LANG[metaLanguage] to header.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4091&w=2; http://rgod.altervista.org/phpmyfuck151.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4091&w=2
CVE: CVE-2005-3048
Published: 2005-09-24
Description: Directory traversal vulnerability in index.php in PhpMyFaq 1.5.1 allows remote attackers to read arbitrary files or include arbitrary PHP files via a .. (dot dot) in the LANGCODE parameter, which also allows direct code injection via the User Agent field in a request packet, which can be activated by using LANGCODE to reference the user tracking data file.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4091&w=2; http://rgod.altervista.org/phpmyfuck151.html; http://www.osvdb.org/19672
CVE: CVE-2005-3049
Published: 2005-09-24
Description: PhpMyFaq 1.5.1 stores data files under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain sensitive information via a direct request to the data/tracking[DATE] file.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4091&w=2; http://rgod.altervista.org/phpmyfuck151.html; http://secunia.com/advisories/16933
CVE: CVE-2005-3050
Published: 2005-09-24
Description: PhpMyFaq 1.5.1 allows remote attackers to obtain sensitive information via a LANGCODE parameter that does not exist, which reveals the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4091&w=2; http://rgod.altervista.org/phpmyfuck151.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4091&w=2
CVE: CVE-2005-3051
Published: 2005-09-24
Description: Stack-based buffer overflow in the ARJ plugin (arj.dll) 3.9.2.0 for 7-Zip 3.13, 4.23, and 4.26 BETA, as used in products including Turbo Searcher, allows remote attackers to execute arbitrary code via a large ARJ block.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3258&w=2; http://secunia.com/advisories/16664/; http://secunia.com/advisories/23004
CVE: CVE-2005-3052
Published: 2005-09-24
Description: SQL injection vulnerability in module/down.inc.php in jportal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the search field to download.php.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6316&w=2; http://securityreason.com/securityalert/20; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6316&w=2
CVE: CVE-2005-3053
Published: 2005-09-26
Description: The sys_set_mempolicy function in mempolicy.c in Linux kernel 2.6.x allows local users to cause a denial of service (kernel BUG()) via a negative first argument.
CVSS Score: 2.1 (LOW)
References: http://linux.bkbits.net:8080/linux-2.6/cset%4042eef8b09C5r6iI0LuMe5Uy3k05c5g; http://secunia.com/advisories/17141; http://secunia.com/advisories/17364
CVE: CVE-2005-3054
Published: 2005-09-26
Description: fopen_wrappers.c in PHP 4.4.0, and possibly other versions, does not properly restrict access to other directories when the open_basedir directive includes a trailing slash, which allows PHP scripts in one directory to access files in other directories whose names are substrings of the original directory.
CVSS Score: 2.1 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323585; http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html; http://secunia.com/advisories/17229
CVE: CVE-2005-3055
Published: 2005-09-26
Description: Linux kernel 2.6.8 to 2.6.14-rc2 allows local users to cause a denial of service (kernel OOPS) via a userspace process that issues a USB Request Block (URB) to a USB device and terminates before the URB is finished, which leads to a stale pointer reference.
CVSS Score: 2.1 (LOW)
CWE: CWE-20
References: http://marc.info/?l=linux-kernel&m=[PII_REDACTED]3883; http://secunia.com/advisories/17826; http://secunia.com/advisories/17917
CVE: CVE-2005-3059
Published: 2005-09-26
Description: Multiple unspecified vulnerabilities in Opera 8.50 on Linux and Windows have unknown impact and attack vectors, related to (1) " handling of must-revalidate cache directive for HTTPS pages" or (2) a "display issue with cookie comment encoding."
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/16645; http://www.opera.com/docs/changelogs/linux/850/; http://www.opera.com/docs/changelogs/windows/850/
CVE: CVE-2005-3061
Published: 2005-09-27
Description: Multiple stack-based buffer overflows in PowerArchiver 8.10 through 9.5 Beta 4 and Beta 5 allow remote attackers to execute arbitrary code via a long filename in a (1) ACE or (2) ARJ archive.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1458&w=2; http://secunia.com/advisories/16713/; http://secunia.com/secunia_research/2005-50/advisory/
CVE: CVE-2005-3062
Published: 2005-09-27
Description: PHP remote file inclusion vulnerability in index.php in AlstraSoft E-Friends 4.0 allows remote attackers to execute arbitrary PHP code via the mode parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7112&w=2; http://secunia.com/advisories/16941/; http://securityreason.com/securityalert/22
CVE: CVE-2005-3063
Published: 2005-09-27
Description: SQL injection vulnerability in MailGust 1.9 allows remote attackers to execute arbitrary SQL commands via the email field on the password reminder page.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8234&w=2; http://rgod.altervista.org/maildisgust.html; http://secunia.com/advisories/16937/
CVE: CVE-2005-3064
Published: 2005-09-27
Description: MultiTheftAuto 0.5 patch 1 and earlier does not properly verify client privileges when running command 40, which allows remote attackers to change or delete the message of the day (motd.txt).
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/mtaboom-adv.txt; http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037384.html; http://secunia.com/advisories/16926/
CVE: CVE-2005-3065
Published: 2005-09-27
Description: MultiTheftAuto 0.5 patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted command 40 that causes a -1 length to be used and triggers an out-of-bounds read.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037384.html; http://secunia.com/advisories/16926/; http://securityreason.com/securityalert/26
CVE: CVE-2005-3066
Published: 2005-09-27
Description: Cross-site scripting (XSS) vulnerability in perldiver.pl in PerlDiver 1.x allows remote attackers to inject arbitrary web script or HTML via the query string.  NOTE: this issue was originally disputed by the vendor, but it has since been acknowledged.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0543.html; http://exploitlabs.com/files/advisories/EXPL-A-2005-014-perldiver.txt; http://securitytracker.com/id?1015146
CVE: CVE-2005-3067
Published: 2005-09-27
Description: Cross-site scripting (XSS) vulnerability in perldiver.cgi in PerlDiver 2.x allows remote attackers to inject arbitrary web script or HTML via the module parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0543.html; http://exploitlabs.com/files/advisories/EXPL-A-2005-014-perldiver.txt; http://securitytracker.com/id?1015146
CVE: CVE-2005-3068
Published: 2005-09-27
Description: Unspecified vulnerability in Eric Integrated Development Environment (eric3) before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/16993; http://secunia.com/advisories/17269; http://securitytracker.com/id?1014947
CVE: CVE-2005-3069
Published: 2005-09-27
Description: xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the xferfax$$ temporary file.
CVSS Score: 2.1 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=329384; http://secunia.com/advisories/16906; http://secunia.com/advisories/17022
CVE: CVE-2005-3070
Published: 2005-09-27
Description: HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file.
CVSS Score: 3.6 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=329384; http://secunia.com/advisories/17107; http://www.mandriva.com/security/advisories?name=MDKSA-2005:177
CVE: CVE-2005-3071
Published: 2005-09-27
Description: Unspecified vulnerability in Unix File System (UFS) on Solaris 8 and 9, when logging is enabled, allows local users to cause a denial of service ("soft hang") via certain write operations to UFS.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/16924; http://sunsolve.sun.com/search/document.do?assetkey=1-26-101940-1; http://www.osvdb.org/19640
CVE: CVE-2005-3072
Published: 2005-09-27
Description: SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16923; http://www.osvdb.org/19652; http://www.securityfocus.com/bid/14931
CVE: CVE-2005-3073
Published: 2005-09-27
Description: Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the (1) "mike", (2) "standard", or (3) "foundation" demo, allows attackers to inject Interchange Tag Language (ITL) elements into the forum/submit.html page.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/16923; http://www.icdevgroup.org/pipermail/interchange-announce/2005/000049.html; http://www.icdevgroup.org/pipermail/interchange-announce/2005/000050.html
CVE: CVE-2005-3074
Published: 2005-09-27
Description: SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute arbitrary SQL commands via crafted syslog messages.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16947; http://www.rsyslog.com/Article35.phtml; http://secunia.com/advisories/16947
CVE: CVE-2005-3075
Published: 2005-09-27
Description: SQL injection vulnerability in Zengaia before 0.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16896; http://www.mpc-donkey.de/zengaia/ChangeLog.txt; http://secunia.com/advisories/16896
CVE: CVE-2005-3076
Published: 2005-09-27
Description: Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error messages via invalid (1) pid, (2) blogid, (3) cid, or (4) m parameters to archive.php, or the (5) blogid parameter to blogadmin.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16881; http://securityreason.com/securityalert/755; http://www.securityfocus.com/bid/14897
CVE: CVE-2005-2710
Published: 2005-09-27
Description: Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the (1) image handle or (2) timeformat attribute in a RealPix (.rp) or RealText (.rt) file.
CVSS Score: 5.1 (MEDIUM)
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=168078; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5326&w=2; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8219&w=2
CVE: CVE-2005-3077
Published: 2005-09-27
Description: Microsoft Internet Explorer 5.2.3 for Mac OS allows remote attackers to cause a denial of service (crash) via a web page with malformed attributes in a BGSOUND tag, possibly involving double-quotes in an about: URI.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/14899; http://www.securityfocus.com/bid/14899
CVE: CVE-2005-3078
Published: 2005-09-27
Description: Cross-site scripting (XSS) vulnerability in PunBB before 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the "forgotten e-mail" feature.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/16908; http://www.punbb.org/changelogs/1.2.7_to_1.2.8.txt; http://secunia.com/advisories/16908
CVE: CVE-2005-3079
Published: 2005-09-27
Description: PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/16908; http://www.punbb.org/changelogs/1.2.7_to_1.2.8.txt; http://secunia.com/advisories/16908
CVE: CVE-2005-3080
Published: 2005-09-27
Description: contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary files via the language field without a source field set.
CVSS Score: 5.0 (MEDIUM)
References: http://sourceforge.net/project/shownotes.php?release_id=358285; http://www.securityfocus.com/bid/14903; http://sourceforge.net/project/shownotes.php?release_id=358285
CVE: CVE-2005-3081
Published: 2005-09-27
Description: wzdftpd 0.5.4 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the SITE command.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0646.html; http://secunia.com/advisories/16936; http://www.debian.org/security/2006/dsa-1006
CVE: CVE-2005-3082
Published: 2005-09-27
Description: SQL injection vulnerability in admin.php in SEO-Board 1.0.2 allows remote attackers to execute arbitrary SQL commands via the user_pass_sha1 value in a cookie.
CVSS Score: 7.5 (HIGH)
References: http://forum.ghc.ru/showthread.php?fid=32&tid=179&old_block=0; http://forums.seo-board.com/article280.htm; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8282&w=2
CVE: CVE-2005-3083
Published: 2005-09-27
Description: Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 0.10 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8373&w=2; http://www.securityfocus.com/bid/14937; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8373&w=2
CVE: CVE-2005-3084
Published: 2005-09-27
Description: Buffer overflow in the TIFF library in the Photo Viewer for Sony PSP 2.0 firmware allows remote attackers to cause a denial of service via a crafted TIFF image.
CVSS Score: 5.0 (MEDIUM)
References: http://pspupdates.qj.net/2005/09/20-overflow-found-and-working.html; http://secunia.com/advisories/16922; http://pspupdates.qj.net/2005/09/20-overflow-found-and-working.html
CVE: CVE-2005-3085
Published: 2005-09-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in rss.php in Riverdark Studios RSS Syndicator module 2.1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) forum or (2) topic parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://securitytracker.com/id?1014969; http://securitytracker.com/id?1014969
CVE: CVE-2005-3086
Published: 2005-09-27
Description: Directory traversal vulnerability in admin/about.php in contentServ 3.1 allows remote attackers to read or include arbitrary files via ".." sequences in the ctsWebsite parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0650.html; http://secunia.com/advisories/16929; http://www.securityfocus.com/bid/14943
CVE: CVE-2005-3087
Published: 2005-09-27
Description: The SecureW2 3.0 TLS implementation uses weak random number generators (rand and srand from system time) during generation of the pre-master secret (PMS), which makes it easier for attackers to guess the secret and decrypt sensitive data.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037352.html; http://secunia.com/advisories/16909; http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037352.html
CVE: CVE-2005-3089
Published: 2005-09-28
Description: Firefox 1.0.6 allows attackers to cause a denial of service (crash) via a Proxy Auto-Config (PAC) script that uses an eval statement. NOTE: it is not clear whether an untrusted party has any role in triggering this issue, so it might not be a vulnerability.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/16977; http://securitytracker.com/id?1014949; http://www.mozilla.org/products/firefox/releases/1.0.7.html
CVE: CVE-2005-2557
Published: 2005-09-28
Description: Cross-site scripting (XSS) vulnerability in view_all_set.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the dir parameter, as identified by bug#0005959, and a different vulnerability than CVE-2005-3090.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6276&w=2; http://secunia.com/advisories/16506; http://www.debian.org/security/2005/dsa-778
CVE: CVE-2005-2964
Published: 2005-09-28
Description: Stack-based buffer overflow in AbiWord before 2.2.10 allows attackers to execute arbitrary code via the RTF import mechanism.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16982; http://secunia.com/advisories/16990; http://secunia.com/advisories/17012
CVE: CVE-2005-3090
Published: 2005-09-28
Description: Cross-site scripting (XSS) vulnerability in bug_actiongroup_page.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the summary of the bug, which is not quoted when view_all_bug_page.php is used to delete the bug, as identified by bug#0006002, a different vulnerability than CVE-2005-2557.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6276&w=2; http://www.debian.org/security/2005/dsa-778; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6276&w=2
CVE: CVE-2005-3091
Published: 2005-09-28
Description: Cross-site scripting (XSS) vulnerability in Mantis before 1.0.0rc1 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, as identified by bug#0005751 "thraxisp".
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/16506; http://secunia.com/advisories/17654; http://www.debian.org/security/2005/dsa-905
CVE: CVE-2005-3092
Published: 2005-09-28
Description: Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to execute arbitrary code via a .flp file that contains a long path to a (1) .mid or (2) .wav file.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2945&w=2; http://secunia.com/advisories/16958/; http://securityreason.com/securityalert/25
CVE: CVE-2005-3093
Published: 2005-09-28
Description: Nokia 7610 and 3210 phones allows attackers to cause a denial of service via certain characters in the filename of a Bluetooth OBEX transfer.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/14948; http://www.securityfocus.com/bid/14948