morpheuslord/cve-llm-training huggingface dataset:
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0881.

assistant: Cross-site scripting (XSS) vulnerability in articles.newcomment for Interspire ArticleLive 2005 allows remote attackers to inject arbitrary web script or HTML via the Articleld parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0882.

assistant: SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) userpw parameters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0883.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in base.php for DigitalHive 2.0 allow remote attackers to inject arbitrary web script or HTML via (1) the mt parameter to the membres.php page or (2) the -afs-1- query string to the msg.php page.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0884.

assistant: DigitalHive 2.0 allows remote attackers to re-install the product by directly accessing the install script.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0885.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in XMB Forum 1.9.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Mood or (2) "Send To" fields.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0886.

assistant: Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0887.

assistant: Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in (1) functions.inc.php or (2) main.php, which causes code to be injected into an eval statement.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0888.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote attackers to inject arbitrary web script or HTML via the (1) class or (2) method name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0889.

assistant: Cross-site scripting (XSS) vulnerability in index.php for Dream4 Koobi CMS 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the area parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0890.

assistant: SQL injection vulnerability in Dream4 Koobi CMS 4.2.3 allows remote attackers to execute arbitrary SQL commands via the area parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0891.

assistant: Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0892.

assistant: Buffer overflow in smail 3.2.0.120 allows remote attackers or local users to execute arbitrary code via a long string in the MAIL FROM command and possibly other SMTP commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0893.

assistant: modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0894.

assistant: OpenmosixCollector and OpenMosixView in OpenMosixView 1.5 allow local users to overwrite or delete arbitrary files via a symlink attack on (1) temporary files in the openmosixcollector directory or (2) nodes.tmp.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0895.

assistant: Netcomm 1300NB DSL Modem allows remote attackers to cause a denial of service (device hang) via a large number of ping packets.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0896.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in review.php in phpMyDirectory 10.1.3-rel allow remote attackers to inject arbitrary web script or HTML via the (1) subcat, (2) page, or (3) subsubcat parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0897.

assistant: PHP remote file inclusion vulnerability in catalog.php in E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary PHP code by modifying the menu and main parameters to reference a URL on a remote web server that contains the code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0898.

assistant: Cross-site scripting (XSS) vulnerability in downloadform.php in E-Store Kit-2 PayPal Edition allows remote attackers to inject arbitrary web script or HTML via the txn_id parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0899.

assistant: AS/400 running OS400 5.2 installs and enables LDAP by default, which allows remote authenticated users to obtain OS/400 user profiles by performing a search.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0900.

assistant: marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to obtain sensitive information via an invalid (1) file or (2) category parameter, which reveal the path in an error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0901.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in NukeBookmarks 0.6 for PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via the (1) catname, (2) markname, (3) comment, or (4) category parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0902.

assistant: SQL injection vulnerability in marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the category parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0903.

assistant: Buffer overflow in QuickTime PictureViewer 6.5.1 allows remote attackers to cause a denial of service (application crash) via a JPEG file with crafted Huffman Table (marker DHT) data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0904.

assistant: Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote attackers to shut down the system by executing TSShutdn.exe.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0905.

assistant: Maxthon 1.2.0 allows remote malicious web sites to obtain potentially sensitive data from the search bar via the m2_search_text property.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0906.

assistant: Buffer overflow in a player logging function in the Tincat network library 2.x before 2.0.28, as used in games such as Sacred and The Settlers: Heritage of Kings, allows remote attackers to execute arbitrary code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0907.

assistant: Multiple SQL injection vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to category.php, (2) the id parameter to item.php, (3) the lang parameter to index.php, (4) the searchQuery parameter to search_result.php, (5) or the searchTopCategoryID parameter to search_result.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0908.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter to index.php or (2) the searchTopCategoryID parameter to search_result.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0909.

assistant: PHP remote file inclusion vulnerability in shoutact.php for TKai's Shoutbox allows remote attackers to execute arbitrary PHP code via the query parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0910.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in exoops allow remote attackers to inject arbitrary web script or HTML via (1) the sortdays parameter to viewforum.php or (2) the viewcat parameter to index.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0911.

assistant: Multiple SQL injection vulnerabilities in exoops may allow remote attackers to execute arbitrary SQL commands via (1) the viewcat parameter to index.php or (2) the artid parameter in the viewarticle action for index.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0912.

assistant: Unknown vulnerabilities in deplate before 0.7.2 have unknown impact, possibly involving elements.rb.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0913.

assistant: Unknown vulnerability in the regex_replace modifier (modifier.regex_replace.php) in Smarty before 2.6.8 allows attackers to execute arbitrary PHP code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0914.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in CPG Dragonfly 9.0.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) the profile parameter to index.php or (2) the cat parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0915.

assistant: Webmasters-Debutants WD Guestbook 2.8 allows remote attackers to bypass authentication and perform certain administrator actions via a direct HTTP POST request to (1) ajout_admin2.php or (2) suppr.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0916.

assistant: AIO in the Linux kernel 2.6.11 on the PPC64 or IA64 architectures with CONFIG_HUGETLB_PAGE enabled allows local users to cause a denial of service (system panic) via a process that executes the io_queue_init function but exits without running io_queue_release, which causes exit_aio and is_hugepage_only_range to fail.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0917.

assistant: PHP remote file inclusion vulnerability in index_header.php for EncapsBB 0.3.2_fixed, and possibly other versions, allows remote attackers to execute arbitrary PHP code via the root parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0918.

assistant: The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops loading, which indicates whether the file exists or not.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0919.

assistant: Adventia Chat 3.1 and Server Pro 3.0 allows remote attackers to inject arbitrary web script or HTML into the chat space, which leaves other users vulnerable to cross-site scripting (XSS) attacks.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0920.

assistant: Multiple SQL injection vulnerabilities in Bugtracker.NET 2.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0921.

assistant: Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0922.

assistant: Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (system hang or crash) by triggering a scan of a certain file type.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0923.

assistant: The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (CPU consumption and system crash) by renaming a file on a network share.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0924.

assistant: Cross-site scripting (XSS) vulnerability in Adventia E-Data 2.0 allows remote attackers to inject arbitrary web script or HTML via a query keyword.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0925.

assistant: Cross-site scripting (XSS) vulnerability in login.asp for Ublog Reload 1.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0926.

assistant: Buffer overflow in Sylpheed before 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attachments with MIME-encoded file names.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0927.

assistant: Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharacters or .. sequences.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0928.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 5.x allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) password, (3) ppuser, (4) sort, or (5) si parameters to showgallery.php, the (6) ppuser, (7) sort, or (8) si parameters to showmembers.php, or (9) the photo parameter to slideshow.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0929.

assistant: SQL injection vulnerability in PhotoPost PHP Pro 5.x may allow remote attackers to execute arbitrary SQL commands via (1) the sl parameter to showmembers.php or (2) the photo parameter to showphoto.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0930.

assistant: Cross-site scripting (XSS) vulnerability in message.php in Chatness 2.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the user field or (2) the message parameter to message.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0931.

assistant: PHP remote file inclusion vulnerability in The Includer 1.0 and 1.1 allows remote attackers to execute arbitrary PHP code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0932.

assistant: Multiple SQL injection vulnerabilities in phpCOIN 1.2.1b and earlier allow remote attackers to execute arbitrary SQL commands (1) via the search engine, (2) the username or email fields in the "forgotten password" feature, or (3) the domain name in a package order.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0933.

assistant: Directory traversal vulnerability in auxpage.php for phpCOIN 1.2.1b and earlier allows remote attackers to read arbitrary files via the page parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0934.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in WackoWiki R4 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0935.

assistant: Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the (1) idpages parameter to pages.php or the (2) id2 parameter to products1.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0936.

assistant: Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitrary web script or HTML via the id parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0937.

assistant: Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the mmap_sem semaphore, which could allow local users to cause a deadlock condition in do_page_fault by triggering get_user faults while another thread is executing mmap or other functions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0938.

assistant: Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows remote attackers to read usernames and hashed passwords via a direct request to ublogreload.mdb.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0941.

assistant: The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0942.

assistant: The XP Server process (xp_server) in Sybase Adaptive Server Enterprise (ASE) XP Server 12.x before 12.5.3 ESD#1 allows attackers to cause a denial of service (process crash) via malformed data sent to the XP Server TCP port.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0943.

assistant: Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted HTTPS packet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0944.

assistant: Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0, related to insufficient data validation, allows remote attackers to execute arbitrary code via a crafted mdb file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0945.

assistant: Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1 allows remote attackers to inject arbitrary web script or HTML via onmouseover or onload events in (1) img, (2) link, or (3) mail tags.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0946.

assistant: SQL injection vulnerability in phpCoin 1.2.1b and earlier allows remote attackers to execute arbitrary SQL commands via the (1) term/keywords field on the search page, (2) username or (3) e-mail field on the forgot password page, or (4) domain name on the ordering new package page.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0947.

assistant: Directory traversal vulnerability in auxpage.php in phpCoin 1.2.1b and earlier allows remote attackers to read and execute arbitrary files via a .. (dot dot) in the page parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0948.

assistant: SQL injection vulnerability in ad_click.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via the banner_id parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0949.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject arbitrary web script or HTML via the (1) contenttype or (2) keywords parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0950.

assistant: Directory traversal vulnerability in FastStone 4in1 Browser 1.2 allows remote attackers to read arbitrary files via a (1) ... (triple dot) or (2) ..\ (dot dot backslash) in the URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0952.

assistant: Cross-site scripting vulnerability in pafiledb.php in PaFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0953.

assistant: Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0954.

assistant: Windows Explorer and Internet Explorer in Windows 2000 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a malformed Windows Metafile (WMF) file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0955.

assistant: SQL injection vulnerability in InterAKT MX Shop 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id_ctg parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0956.

assistant: Multiple SQL injection vulnerabilities in index.php in InterAKT MX Kart 1.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) idp, (2) id_ctg, or (3) id_man parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0957.

assistant: Bay Technical Associates RPC-3 Telnet Host 3.05 allows remote attackers to bypass authentication by pressing the escape and enter keys at the username prompt.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0958.

assistant: Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0959.

assistant: Buffer overflow in the mt_do_dir function in YepYep mtftpd 0.0.3 may allow attackers to execute arbitrary code via a long path.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0960.

assistant: Multiple vulnerabilities in the SACK functionality in (1) tcp_input.c and (2) tcp_usrreq.c OpenBSD 3.5 and 3.6 allow remote attackers to cause a denial of service (memory exhaustion or system crash).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0961.

assistant: Cross-site scripting (XSS) vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary web script or HTML via the parent frame title.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0962.

assistant: SQL injection vulnerability in index.php for Lighthouse Squirrelcart allows remote attackers to execute arbitrary SQL commands via the (1) crn parameter in a show action or (2) rn parameter in a show_detail action.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0963.

assistant: An error in the Toshiba ACPI BIOS 1.6 causes the BIOS to only examine the first slot in the Master Boot Record (MBR) table for an active partition, which prevents the system from booting even though the MBR is not malformed.  NOTE: it has been debated as to whether or not this issue poses a security vulnerability, since administrative privileges would be required, and other DoS attacks are possible with such privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0964.

assistant: Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a malicious process that impersonates a legitimate process that has fewer restrictions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0965.

assistant: The gaim_markup_strip_html function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a string that contains malformed HTML, which causes an out-of-bounds read.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0966.

assistant: The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows (1) remote attackers to inject arbitrary Gaim markup via irc_msg_kick, irc_msg_mode, irc_msg_part, irc_msg_quit, (2) remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via irc_msg_invite, or (3) malicious IRC servers to cause a denial of service (application crash) by injecting certain Pango markup into irc_msg_badmode, irc_msg_banned, irc_msg_unknown, irc_msg_nochan functions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0967.

assistant: Gaim 1.2.0 allows remote attackers to cause a denial of service (application crash) via a malformed file transfer request to a Jabber user, which leads to an out-of-bounds read.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0968.

assistant: Computer Associates (CA) eTrust Intrusion Detection 3.0 allows remote attackers to cause a denial of service via large size values that are not properly validated before calling the CPImportKey function in the Crypto API.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0969.

assistant: Heap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via crafted parameters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0970.

assistant: Mac OS X 10.3.9 and earlier allows users to install, create, and execute setuid/setgid scripts, contrary to the intended design, which may allow attackers to conduct unauthorized activities with escalated privileges via vulnerable scripts.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0971.

assistant: Stack-based buffer overflow in the semop system call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0972.

assistant: Integer overflow in the searchfs system call in Mac OS X 10.3.9 and earlier allows local users to execute arbitrary code via crafted parameters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0973.

assistant: Unknown vulnerability in the setsockopt system call in Mac OS X 10.3.9 and earlier allows local users to cause a denial of service (memory exhaustion) via crafted arguments.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0974.

assistant: Unknown vulnerability in the nfs_mount call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0975.

assistant: Integer signedness error in the parse_machfile function in the mach-o loader (mach_loader.c) for the Darwin Kernel as used in Mac OS X 10.3.7, and other versions before 10.3.9, allows local users to cause a denial of service (CPU consumption) via a crafted mach-o header.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0976.

assistant: AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated using automatically mounted disk images and file:// URLs.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0977.

assistant: The shmem_nopage function in shmem.c for the tmpfs driver in Linux kernel 2.6 does not properly verify the address argument, which allows local users to cause a denial of service (kernel crash) via an invalid address.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0978.

assistant: Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. (dot dot) in a PUSH command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0979.

assistant: Multiple buffer overflows in RUMBA 7.3 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted values in a profile file, as demonstrated using a long SysName field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0980.

assistant: PHP remote file inclusion vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary PHP code by modifying the view parameter to reference a URL on a remote web server that contains the code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0981.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft EPay Pro 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) payment or (2) send parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0982.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in Yet Another Forum.net 0.9.9 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) location, or (3) Subject field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0983.

assistant: Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0984.

assistant: Buffer overflow in the G_Printf function in Star Wars Jedi Knight: Jedi Academy 1.011 and earlier allows remote attackers to execute arbitrary code via a long message using commands such as (1) say and (2) tell.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0985.

assistant: Unspecified vulnerability in the Mac OS X kernel before 10.3.8 allows local users to cause a denial of service (temporary hang) via unspecified attack vectors related to the fan control unit (FCU) driver.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0986.

assistant: NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service (deep recursion and nHTTP.exe process crash) via a long GET request containing UNICODE decimal value 430 characters, which causes the stack to be exhausted.  NOTE: IBM has reported that it is unable to replicate this issue.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0987.

assistant: Unknown vulnerability in IRC Services NickServ LISTLINKS before 5.0.50 allows remote attackers to obtain the links of a nick.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0988.

assistant: Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0989.

assistant: The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0990.

assistant: unshar (unshar.c) in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0991.

assistant: RC.BOOT in IBM AIX 5.1, 5.2, and 5.3 does not "use a secure location for temporary files," which allows local users to have an unknown impact, probably by overwriting files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0992.

assistant: Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0993.

assistant: Buffer overflow in nwprint in SCO OpenServer 5.0.7 allows local users to execute arbitrary code via a long command line argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0994.

assistant: Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via (1) the Category or resultCnt parameters to advSearch_h.asp, and possibly (2) the offset parameter to tarinasworld_butterflyjournal.asp. NOTE: it is possible that item (2) is the result of a typo or editing error from the original research report.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0995.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in ProductCart 2.7 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter to advSearch_h.asp, (2) the redirectUrl parameter to NewCust.asp, (3) the country parameter to storelocator_submit.asp, or (4) the error parameter to techErr.asp. NOTE: it has been reported that storelocator_submit.asp does not exist in ProductCart.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0996.

assistant: Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the email or url parameters in the Add function, (2) the min parameter in the viewsdownload function, or (3) the min parameter in the search function.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0997.

assistant: Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 7.6 allow remote attackers to execute arbitrary SQL commands via (1) the email or url parameters in the Add function, (2) the url parameter in the modifylinkrequestS function, (3) the orderby or min parameters in the viewlink function, (4) the orderby, min, or show parameters in the search function, or (5) the ratenum parameter in the MostPopular function.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0998.

assistant: The Web_Links module for PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via an invalid show parameter, which triggers a division by zero PHP error that leaks the full pathname of the server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0999.

assistant: SQL injection vulnerability in the Top module for PHP-Nuke 6.x through 7.6 allows remote attackers to execute arbitrary SQL commands via the querylang parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1000.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the bid parameter to the EmailStats op in banners.pgp, (2) the ratenum parameter in the TopRated and MostPopular actions in the Web_Links module, (3) the ttitle parameter in the viewlinkdetails, viewlinkeditorial, viewlinkcomments, and ratelink actions in the Web_Links module, or (4) the username parameter in the Your_Account module.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1001.

assistant: PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1) the Surveys module with the file parameter set to comments or (2) 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1002.

assistant: logwebftbs2000.exe in Logics Software File Transfer (LOG-FT) allows remote attackers to read arbitrary files via modified (1) VAR_FT_LANG and (2) VAR_FT_TMPL parameters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1003.

assistant: Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. (dot dot) sequences in the modID parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1004.

assistant: Cross-site scripting (XSS) vulnerability in usrdetails.php in ProfitCode PayProCart 3.0 allows remote attackers to inject arbitrary web script or HTML via the sgnuptype parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1005.

assistant: ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php with hex-encoded .. sequences in the ftoedit parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1006.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in SonicWALL SOHO 5.1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) the user login name, which is not filtered when the administrator views the log file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1007.

assistant: Unknown vulnerability in the LIST functionality in CommuniGate Pro before 4.3c3 allows remote attackers to cause a denial of service (server crash) via certain multipart messages.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1008.

assistant: Cross-site scripting (XSS) vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1009.

assistant: Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or (2) local users to execute arbitrary code via a long Name entry in the configure.cfg file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1010.

assistant: Cross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject arbitrary web script or HTML via the account username.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1011.

assistant: SQL injection vulnerability in content.asp in SiteEnable allows remote attackers to execute arbitrary SQL commands via the sortby parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1012.

assistant: Cross-site scripting (XSS) vulnerability in Iatek SiteEnable allows remote attackers to inject arbitrary web script or HTML via (1) the contenttype parameter to content.asp, (2) the title, or (3) the description.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1013.

assistant: The SMTP service in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to cause a denial of service (server crash) via an EHLO command with a Unicode string.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1014.

assistant: Buffer overflow in the IMAP service for MailEnable Enterprise 1.04 and earlier and Professional 1.54 allows remote attackers to execute arbitrary code via a long AUTHENTICATE command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1015.

assistant: Buffer overflow in MailEnable Imapd (MEIMAP.exe) allows remote attackers to execute arbitrary code via a long LOGIN command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1016.

assistant: Cross-site scripting (XSS) vulnerability in links_add_form.asp for MaxWebPortal 1.33 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URL in a banner URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1017.

assistant: SQL injection vulnerability in the Update_Events function in events_functions.asp in MaxWebPortal 1.33 and earlier allows remote attackers to execute arbitrary SQL commands via the EVENT_ID parameter, as demonstrated using events.asp.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1018.

assistant: Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticated users to cause a denial of service or execute arbitrary code via an agent request to TCP port 6050 with a large argument before the option field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1019.

assistant: Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1020.

assistant: Secure Shell (SSH) 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service (device reload) (1) via a username that contains a domain name when using a TACACS+ server to authenticate, (2) when a new SSH session is in the login phase and a currently logged in user issues a send command, or (3) when IOS is logging messages and an SSH session is terminated while the server is sending data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1021.

assistant: Memory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a TACACS+ server, allows remote attackers to cause a denial of service (memory consumption) via an incorrect username or password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1022.

assistant: ColdFusion 6.1 Updater 1 places Java .class files under the web root in the /WEB-INF/cfclasses directory, which allows remote attackers to obtain sensitive information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1023.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x to 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) min parameter to the Search module, (2) the categories parameter to the FAQ module, or (3) the ltr parameter to the Encyclopedia module.  NOTE: the bid parameter issue in banners.php is already an item in CVE-2005-1000.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1024.

assistant: modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) my_headlines, (2) userinfo, or (3) search, which reveals the path in a PHP error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1025.

assistant: The FTP server in AS/400 4.3, when running in IFS mode, allows remote attackers to obtain sensitive information via a symlink attack using RCMD and the ADDLNK utility, as demonstrated using the QSYS.LIB library.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1026.

assistant: Multiple SQL injection vulnerabilities in SnailSource phpBB 2.0.x mods allow remote attackers to execute arbitrary SQL commands via the (1) file_id parameter to dlman.php in DLMan Pro or (2) id parameter to links.php in Linkz Pro (aka LinksLinks Pro).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1027.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x through 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter in the Your_Account module, (2) avatarcategory parameter in the Your_Account module, or (3) lid parameter in the Downloads module.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1028.

assistant: PHP-Nuke 6.x through 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) index.php with the forum_admin parameter set, (2) the Surveys module, or (3) the Your_Account module, which reveals the path in a PHP error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1029.

assistant: Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) itemID parameter to ItemInfo.asp, or (5) Email field to sendpassword.asp.