deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-1513
Published: 2005-05-11
Description: Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large SMTP request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0101.html; http://packetstormsecurity.com/files/157805/Qualys-Security-Advisory-Qmail-Remote-Code-Execution.html; http://packetstormsecurity.com/files/158203/Qmail-Local-Privilege-Escalation-Remote-Code-Execution.html
CVE: CVE-2005-1514
Published: 2005-05-11
Description: commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SMTP command without a space character, which causes an array to be referenced with a negative index.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0101.html; http://packetstormsecurity.com/files/157805/Qualys-Security-Advisory-Qmail-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2020/May/42
CVE: CVE-2005-1515
Published: 2005-05-11
Description: Integer signedness error in the qmail_put and substdio_put functions in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of SMTP RCPT TO commands.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0101.html; http://packetstormsecurity.com/files/157805/Qualys-Security-Advisory-Qmail-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2020/May/42
CVE: CVE-2005-1516
Published: 2005-05-11
Description: DList (dlist.exe) in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a sendlog command with an incorrect password hash, which is not properly handled by the _cmd_sendlog function.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15242; http://www.security.org.sg/vuln/dmail31a.html; http://www.securityfocus.com/bid/13497
CVE: CVE-2005-1517
Published: 2005-05-11
Description: Unknown vulnerability in Cisco Firewall Services Module (FWSM) 2.3.1 and earlier, when using URL, FTP, or HTTPS filtering exceptions, allows certain TCP packets to bypass access control lists (ACLs).
CVSS Score: 7.5 (HIGH)
References: http://www.cisco.com/warp/public/707/cisco-sa-20050511-url.shtml; http://www.vupen.com/english/advisories/2005/0527; http://www.cisco.com/warp/public/707/cisco-sa-20050511-url.shtml
CVE: CVE-2005-1518
Published: 2005-05-11
Description: Unknown vulnerability in Solaris 7 through 9, when using Federated Naming Services (FNS), autofs, and FNS X.500 configuration, allows local users to cause a denial of service (automountd crash) when "accessing" /xfn/_x500.
CVSS Score: 2.1 (LOW)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-57786-1; http://www.vupen.com/english/advisories/2005/0517; http://sunsolve.sun.com/search/document.do?assetkey=1-26-57786-1
CVE: CVE-2005-1519
Published: 2005-05-11
Description: Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups.
CVSS Score: 6.4 (MEDIUM)
References: http://fedoranews.org/updates/FEDORA--.shtml; http://secunia.com/advisories/15294; http://www.debian.org/security/2005/dsa-751
CVE: CVE-2005-1557
Published: 2005-05-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in WebApp Guestbook PRO 3.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) content of a message.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0150&w=2; http://secunia.com/advisories/15290/; http://securitytracker.com/id?1013940
CVE: CVE-2005-1558
Published: 2005-05-11
Description: The web module in Neteyes Nexusway allows remote attackers to bypass authentication and gain administrator privileges by setting the cyclone500_auth cookie.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0225.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2066&w=2; http://secunia.com/advisories/15150
CVE: CVE-2005-1559
Published: 2005-05-11
Description: The web module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via hex-encoded shell metacharacters in the ip parameter for (1) nslookup.cgi or (2) ping.cgi.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033945.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2066&w=2; http://secunia.com/advisories/15150
CVE: CVE-2005-1560
Published: 2005-05-11
Description: The SSH module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via shell metacharacters in arguments to certain commands, as demonstrated using ping and traceroute.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033945.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2066&w=2; http://secunia.com/advisories/15150
CVE: CVE-2005-1561
Published: 2005-05-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in post.asp in MaxWebPortal 1.3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mod, (2) M, or (3) type parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7605&w=2; http://secunia.com/advisories/15329; http://www.hackerscenter.com/archive/view.asp?id=2542
CVE: CVE-2005-1562
Published: 2005-05-11
Description: Multiple SQL injection vulnerabilities in MaxWebPortal 1.3.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) fpassword parameter to inc_functions.asp, (2) txtAddress, (3) message, or (4) subject parameter to post_info.asp, (5) andor parameter to search.asp, (6) verkey parameter to pop_profile.asp, or (7) Remove or (8) Delete parameter to pm_delete2.asp.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7605&w=2; http://secunia.com/advisories/15329; http://www.hackerscenter.com/archive/view.asp?id=2542
CVE: CVE-2005-1572
Published: 2005-05-11
Description: ShowOff! 1.5.4 allows remote attackers to cause a denial of service (server crash) via a malformed request to port 8083.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/15300; http://www.osvdb.org/16333; http://secunia.com/advisories/15300
CVE: CVE-2005-1573
Published: 2005-05-11
Description: SQL injection vulnerability in admin_login.asp for ASP Virtual News Manager allows remote attackers to execute arbitrary SQL commands via the password parameter.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1013933; http://www.under9round.com/avn13.txt; http://securitytracker.com/id?1013933
CVE: CVE-2005-1580
Published: 2005-05-11
Description: users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which allows remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15312; http://www.kernelpanik.org/docs/kernelpanik/bmachines.txt; http://www.osvdb.org/16334
CVE: CVE-2005-1585
Published: 2005-05-11
Description: Multiple SQL injection vulnerabilities in Quick.Forum 2.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) iCategory or (2) page parameter to index.php, or (3) iCategory parameter in the query string to the forum directory.
CVSS Score: 7.5 (HIGH)
References: http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html; http://secunia.com/advisories/15200; http://www.osvdb.org/16326
CVE: CVE-2005-1588
Published: 2005-05-11
Description: SQL injection vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to execute arbitrary SQL commands via the iCategory parameter.  NOTE: the vendor has privately disputed this issue, saying that Quick.cart does not even use SQL and therefore can not be vulnerable to SQL injection
CVSS Score: 7.5 (HIGH)
References: http://lostmon.blogspot.com/2005/05/quickcart-sword-variable-xss-and.html; http://www.osvdb.org/16331; http://lostmon.blogspot.com/2005/05/quickcart-sword-variable-xss-and.html
CVE: CVE-2005-0969
Published: 2005-05-12
Description: Heap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via crafted parameters.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html; http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html
CVE: CVE-2005-0971
Published: 2005-05-12
Description: Stack-based buffer overflow in the semop system call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html; http://www.kb.cert.org/vuls/id/212190; http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html
CVE: CVE-2005-0972
Published: 2005-05-12
Description: Integer overflow in the searchfs system call in Mac OS X 10.3.9 and earlier allows local users to execute arbitrary code via crafted parameters.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html; http://www.kb.cert.org/vuls/id/185702; http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html
CVE: CVE-2005-0973
Published: 2005-05-12
Description: Unknown vulnerability in the setsockopt system call in Mac OS X 10.3.9 and earlier allows local users to cause a denial of service (memory exhaustion) via crafted arguments.
CVSS Score: 2.1 (LOW)
References: http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html; http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html
CVE: CVE-2005-0974
Published: 2005-05-12
Description: Unknown vulnerability in the nfs_mount call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html; http://lists.apple.com/archives/security-announce/2005/May/msg00004.html; http://www.kb.cert.org/vuls/id/713614
CVE: CVE-2005-1271
Published: 2005-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-1343.  Reason: This candidate is a reservation duplicate of CVE-2005-1343.  Notes: All CVE users should reference CVE-2005-1343 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-1531
Published: 2005-05-12
Description: Firefox before 1.0.4 and Mozilla Suite before 1.7.8 does not properly implement certain security checks for script injection, which allows remote attackers to execute script via "Wrapped" javascript: URLs, as demonstrated using (1) a javascript: URL in a view-source: URL, (2) a javascript: URL in a jar: URL, or (3) "a nested variant."
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt; http://securitytracker.com/id?1013962; http://securitytracker.com/id?1013963
CVE: CVE-2005-1532
Published: 2005-05-12
Description: Firefox before 1.0.4 and Mozilla Suite before 1.7.8 do not properly limit privileges of Javascript eval and Script objects in the calling context, which allows remote attackers to conduct unauthorized activities via "non-DOM property overrides," a variant of CVE-2005-1160.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt; http://secunia.com/advisories/19823; http://securitytracker.com/id?1013964
CVE: CVE-2005-1564
Published: 2005-05-12
Description: post_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to "enter bugs into products that are closed for bug entry" by modifying the URL to specify the name of the product.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2962&w=2; http://secunia.com/advisories/15338; http://www.bugzilla.org/security/2.16.8/
CVE: CVE-2005-1565
Published: 2005-05-12
Description: Bugzilla 2.17.1 through 2.18, 2.19.1, and 2.19.2, when a user is prompted to log in while attempting to view a chart, displays the password in the URL, which may allow local users to gain sensitive information from web logs or browser history.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=001040; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2962&w=2; http://secunia.com/advisories/15338
CVE: CVE-2005-1567
Published: 2005-05-12
Description: SQL injection vulnerability in topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to execute arbitrary SQL commands via the topic parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3514&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3514&w=2
CVE: CVE-2005-1568
Published: 2005-05-12
Description: topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to obtain sensitive information via an invalid topic parameter, which reveals the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3514&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3514&w=2
CVE: CVE-2005-1576
Published: 2005-05-12
Description: The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when "Save to Disk" is selected, which allows remote attackers to hide the real file types of downloaded files.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/12979; http://secunia.com/secunia_research/2004-11/advisory/; http://www.osvdb.org/16432
CVE: CVE-2005-1579
Published: 2005-05-12
Description: Apple QuickTime Player 7.0 on Mac OS X 10.4 allows remote attackers to obtain sensitive information via a .mov file with a Quartz Composer composition (.qtz) file that uses certain patches to read local information, then other patches to send the information to the attacker.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0265.html; http://docs.info.apple.com/article.html?artnum=301714; http://lists.apple.com/archives/quartzcomposer-dev/2005/May/msg00250.html
CVE: CVE-2005-0758
Published: 2005-05-13
Description: zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.
CVSS Score: 4.6 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.58/SCOSA-2005.58.txt; ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc; http://bugs.gentoo.org/show_bug.cgi?id=90626
CVE: CVE-2005-1578
Published: 2005-05-13
Description: EnCase Forensic Edition 4.18a does not support Device Configuration Overlays (DCO), which allows attackers to hide information without detection.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/15340; http://www.securityfocus.com/archive/104/398021; http://secunia.com/advisories/15340
CVE: CVE-2005-1544
Published: 2005-05-14
Description: Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt; ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt; http://bugs.gentoo.org/show_bug.cgi?id=91584
CVE: CVE-2005-1545
Published: 2005-05-14
Description: Integer overflow in the ELF parser in HT Editor before 0.8.0 allows remote attackers to execute arbitrary code via a crafted ELF file, which leads to a heap-based buffer overflow.
CVSS Score: 5.1 (MEDIUM)
References: http://www.debian.org/security/2005/dsa-743; http://www.gentoo.org/security/en/glsa/glsa-200505-08.xml; http://www.debian.org/security/2005/dsa-743
CVE: CVE-2005-1546
Published: 2005-05-14
Description: Buffer overflow in the PE parser in HT Editor before 0.8.0 allows remote attackers to execute arbitrary code via a crafted PE file.
CVSS Score: 5.1 (MEDIUM)
References: http://www.debian.org/security/2005/dsa-743; http://www.gentoo.org/security/en/glsa/glsa-200505-08.xml; http://www.debian.org/security/2005/dsa-743
CVE: CVE-2005-1547
Published: 2005-05-14
Description: Heap-based buffer overflow in the demo version of Bakbone Netvault, and possibly other versions, allows remote attackers to execute arbitrary commands via a large packet to port 20031.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1242&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1242&w=2
CVE: CVE-2005-1548
Published: 2005-05-14
Description: SQL injection vulnerability in index.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arbitrary SQL commands via the entry parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1193&w=2; http://www.securityfocus.com/bid/13548; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1193&w=2
CVE: CVE-2005-1549
Published: 2005-05-14
Description: Directory traversal vulnerability in easymsgb.pl in Easy Message Board allows remote attackers to read arbitrary files via a .. (dot dot) in the print parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5844&w=2; http://www.osvdb.org/16162; http://www.securityfocus.com/bid/13551
CVE: CVE-2005-1550
Published: 2005-05-14
Description: easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the print parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5844&w=2; http://secunia.com/advisories/15295; http://www.osvdb.org/16163
CVE: CVE-2005-1551
Published: 2005-05-14
Description: Sophos Anti-Virus 3.93 does not check downloaded files for viruses when they have only been written, which creates a race condition and may allow remote attackers to bypass virus protection if the file is executed before the antivirus starts on system reboot.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1376&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/20519; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1376&w=2
CVE: CVE-2005-1552
Published: 2005-05-14
Description: GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0, when set to create JPEG images, does not properly protect an image even when a password and username is assigned, which may allow remote attackers to gain sensitive information via a direct request to the image.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5737&w=2; http://secunia.com/advisories/15330; http://www.esqo.com/research/advisories/2005/100505-1.txt
CVE: CVE-2005-1553
Published: 2005-05-14
Description: GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via sniffing.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5737&w=2; http://www.esqo.com/research/advisories/2005/100505-1.txt; http://www.osvdb.org/16341
CVE: CVE-2005-1554
Published: 2005-05-14
Description: SQL injection vulnerability in view_user.php in WowBB 1.6, 1.61, and 1.62 allows remote attackers to execute arbitrary SQL commands via the sort_by parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2831&w=2; http://secunia.com/advisories/12843; http://www.osvdb.org/16543
CVE: CVE-2005-1556
Published: 2005-05-14
Description: Gamespy cd-key validation system allows remote attackers to cause a denial of service (cd-key already in use) by capturing and replaying a cd-key authorization session.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/gskeyinuse-adv.txt; http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0065.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6969&w=2
CVE: CVE-2005-1563
Published: 2005-05-14
Description: Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 displays a different error message depending on whether a product exists or not, which allows remote attackers to determine hidden products.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=001040; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2962&w=2; http://secunia.com/advisories/15338
CVE: CVE-2005-1566
Published: 2005-05-14
Description: Acrowave AAP-3100AR wireless router allows remote attackers to bypass authentication by pressing CTRL-C at the username or password prompt in a telnet session, which causes the shell to crash and restart, then leave the user in the new shell.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1677&w=2; http://secunia.com/advisories/15343; http://www.osvdb.org/16445
CVE: CVE-2005-1569
Published: 2005-05-14
Description: Cross-site scripting (XSS) vulnerability in DirectTopics 2.1 and 2.2 allows remote attackers to inject arbitrary web script via a javascript: URL in (1) a thread or (2) an IMG tag.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3514&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3514&w=2
CVE: CVE-2005-1570
Published: 2005-05-14
Description: forum.asp in bttlxeForum 2.0 allows remote attackers to obtain full path information via a certain hex-encoded argument to the page parameter, possibly due to a SQL injection vulnerability.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1013934; http://securitytracker.com/id?1013934
CVE: CVE-2005-1571
Published: 2005-05-14
Description: Multiple directory traversal vulnerabilities in ShowOff! 1.5.4 allow remote attackers to read arbitrary files via ".." sequences in arguments to the (1) ShowAlbum, (2) ShowVideo, or (3) ShowGraphic scripts.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/15300; http://www.osvdb.org/16332; http://secunia.com/advisories/15300
CVE: CVE-2005-1574
Published: 2005-05-14
Description: Windows Media Player 9 and 10, in certain cases, allows content protected by Windows Media Digital Rights Management (WMDRM) to redirect the user to a web site to obtain a license, even when the "Acquire licenses automatically for protected content" setting is not enabled.
CVSS Score: 7.5 (HIGH)
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B892313; http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B892313
CVE: CVE-2005-1575
Published: 2005-05-14
Description: The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to hide the real file types of downloaded files via the Content-Type HTTP header and a filename containing whitespace, dots, or ASCII byte 160.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/12979; http://secunia.com/secunia_research/2004-11/advisory/; http://www.osvdb.org/16431
CVE: CVE-2005-1577
Published: 2005-05-14
Description: APG Technology ClassMaster does not properly restrict access to sensitive folders, which allows remote attackers to access folders via a network share.
CVSS Score: 7.5 (HIGH)
References: http://www.securiteam.com/windowsntfocus/5SP0D0AFPQ.html; http://www.securityfocus.com/bid/13604; http://www.securiteam.com/windowsntfocus/5SP0D0AFPQ.html
CVE: CVE-2005-1581
Published: 2005-05-14
Description: Cross-site scripting (XSS) vulnerability in Bug Report 1.0 allows remote attackers to inject arbitrary web script or HTML via various fields to bug_report.php, which are not filtered or quoted when processed by bug_list.php or admin/index.php.
CVSS Score: 4.3 (MEDIUM)
References: http://securitytracker.com/id?1013957; http://securitytracker.com/id?1013957