morpheuslord/cve-llm-training huggingface dataset:
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1651.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in the registration page in phpScheduleIt 1.0.0 RC1 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Lastname fields during new user registration, or (3) the Schedule Name field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1652.

assistant: phpScheduleIt 1.0.0 RC1 does not clear administrative privileges if the administrator logs in as a normal user, which allows users with physical access to gain administrative privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1653.

assistant: The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, when configured with an anonymous access program such as AnonCVS.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1654.

assistant: SQL injection vulnerability in the calendar module in phpWebsite 0.9.3-4 and earlier allows remote attackers to execute arbitrary SQL commands via cal_template.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1655.

assistant: Cross-site scripting (XSS) vulnerability in phpWebsite 0.9.3-4 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) CM_pid parameter in the comments module or (2) the subject or message fields in the notes module.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1656.

assistant: CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the redirecturl parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1657.

assistant: Cross-site scripting (XSS) vulnerability in the Activity and Events Viewer for Newtelligence DasBlog allows remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Referrer HTTP headers.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1658.

assistant: Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Application Security feature and execute arbitrary processes by directly writing to \device\physicalmemory to restore the running kernel's SDT ServiceTable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1659.

assistant: Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Administrator, Editor, Journalist or Commenter privileges to inject arbitrary web script or HTML via the mod parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1660.

assistant: PHP remote file inclusion vulnerability in CuteNews 1.3.6 and earlier allows remote attackers to execute arbitrary PHP code via the cutepath parameter to (1) show_archives.php or (2) show_news.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1661.

assistant: MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "auth=1" and "uId=1."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1662.

assistant: YaBB SE 1.5.1 allows remote attackers to obtain sensitive information via a direct HTTP request to Admin.php, which reveals the full path in a PHP error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1663.

assistant: Engenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM DS4100 (formerly FastT 100) and Brocade SilkWorm Switches, allow remote attackers to cause a denial of service (freeze and possible data corruption) via crafted TCP packets.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1664.

assistant: Call of Duty 1.4 and earlier allows remote attackers to cause a denial of service (game end) via a large (1) query or (2) reply packet, which is not properly handled by the buffer overflow protection mechanism. NOTE: this issue might overlap CVE-2005-0430.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1665.

assistant: Cross-site scripting (XSS) vulnerability in index.php in PsNews 1.1 allows remote attackers to inject arbitrary web script or HTML via the no parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1666.

assistant: Buffer overflow in the MSN module in Trillian 0.74i allows remote MSN servers to execute arbitrary code via a long string that ends in a newline character.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1667.

assistant: Off-by-one error in Halo Combat Evolved 1.04 and earlier allows remote attackers to cause a denial of service (server crash) via a long client response.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1668.

assistant: Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute arbitrary SQL commands via the (1) pageid, (2) subid, or (3) catid parameters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1669.

assistant: Cross-site scripting (XSS) vulnerability in MERAK Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to execute arbitrary web script or HTML via the (1) User name parameter to accountsettings.html or (2) Search string parameter to search.html.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1670.

assistant: Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote attackers to (1) create arbitrary directories via a .. (dot dot) in the user parameter to viewaction.html or (2) rename arbitrary files via a ....// (doubled dot dot) in the folderold or folder parameters to folders.html.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1671.

assistant: Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to gain sensitive information via a direct request to (1) accountsettings_add.html or (2) topmenu.html.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1672.

assistant: attachment.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to view other users' attachments by specifying the username and message ID in an HTTP request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1673.

assistant: accountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via the accountid parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1674.

assistant: viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to (1) delete arbitrary files via the originalfolder parameter or (2) move arbitrary files via the messageid parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1675.

assistant: Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQUE (STOU) command with an MS-DOS device name argument such as (1) COM1, (2) LPT1, (3) PRN, or (4) AUX.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1676.

assistant: Heap-based buffer overflow in the image sending feature in Gadu-Gadu 6.0 build 149 allows remote attackers to execute arbitrary code via a crafted GG_MSG_IMAGE_REPLY message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1677.

assistant: pdesk.cgi in PerlDesk allows remote attackers to gain sensitive information via an invalid lang parameter, which includes pathname information in an error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1678.

assistant: Directory traversal vulnerability in pdesk.cgi in PerlDesk allows remote attackers to read portions of arbitrary files and possibly execute arbitrary Perl modules via ".." sequences terminated by a %00 (null) character in the lang parameter, which can leak portions of the requested files if a compilation error message occurs.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1679.

assistant: Directory traversal vulnerability in TwinFTP 1.0.3 R2 allows remote attackers to create arbitrary files via a .../ (triple dot) in the (1) CWD, (2) STOR, or (3) RETR commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1680.

assistant: application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to cause a denial of service (VxWorks OS crash) via a long HTTP GET request, possibly triggering a buffer overflow.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1681.

assistant: Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI for QNX RTP 6.1 allow local users to gain privileges via a long -s (server) command line parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1682.

assistant: Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1683.

assistant: A race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying the PATH environment variable to reference a malicious io-graphics program before is executed by crrtrap.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1684.

assistant: Zyxel P681 running ZyNOS Vt020225a contains portions of memory in an ARP request, which allows remote attackers to obtain sensitive information by sniffing the network.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1685.

assistant: SMC routers SMC7004VWBR running firmware 1.00.014 and SMC7008ABR EU running firmware 1.42.003 allow remote attackers to bypass authentication by connecting to it from the same IP address as the administrator who is logged in, then accessing the setup_status.htm or status.HTM pages.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1686.

assistant: Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTML page that contains an Internet Explorer formatted comment between the DOCTYPE tag and the HTML tag, as demonstrated using the DesignScience MathPlayer ActiveX plugin.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1687.

assistant: CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1688.

assistant: Pigeon Server 3.02.0143 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a long login name sent to port 3103.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1689.

assistant: sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1690.

assistant: Cross-site scripting (XSS) vulnerability in the Web Server in DNS4Me 3.0.0.4 allows remote attackers to execute arbitrary web script or HTML via the URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1691.

assistant: The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service (CPU consumption and crash) via a large amount of data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1692.

assistant: Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary web script or HTML via the (1) Itemid, (2) mosmsg, or (3) limit parameters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1693.

assistant: PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_absolute_path parameter to reference a URL on a remote web server that contains the code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1694.

assistant: Symantec ON Command CCM 5.4.x and iCommand 3.0.x has four default usernames and passwords, one of which is hardcoded, which allows remote attackers to gain unauthorized access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1695.

assistant: EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL that contains an extra leading / (slash).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1696.

assistant: EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to cause a denial of service (application crash) via a sequence of carriage returns sent to TCP port 66.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1697.

assistant: The "Forgot your Password" link in Computer Associates (CA) Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could allow remote attackers to guess valid usernames.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1698.

assistant: The Base64 function in PopMessenger 1.60 (before 20 Sep 2004) and earlier allows remote attackers to cause a denial of service (application crash) via invalid characters in a message, which causes several alert dialogs to be displayed and leads to a crash.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1699.

assistant: SettingsBase.php in Pinnacle ShowCenter 1.51 allows remote attackers to cause a denial of service (web interface errors) via an invalid Skin parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1700.

assistant: Cross-site scripting (XSS) vulnerability in SettingsBase.php in Pinnacle ShowCenter 1.51 build 121 allows remote attackers to inject arbitrary HTML or web script via the Skin parameter, which is echoed in an error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1701.

assistant: Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitrary code via a long SAUTH command during RSA authentication.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1702.

assistant: The AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 does not properly check the return value of the ReceiveTransaction function, which leads to a failed malloc call and triggers to a null dereference, which allows remote attackers to cause a denial of service (crash).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1703.

assistant: Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the signup action, which is executed when the administrator's browser loads the page with the img tag.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1704.

assistant: WpQuiz 2.60b1 through 2.60b8 allows remote attackers to gain privileges via a direct request to adminrestore.php in the extras directory.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1705.

assistant: Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1706.

assistant: The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service (device crash) and possibly execute arbitrary code via an HTTP GET request with a long version string.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1707.

assistant: The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1708.

assistant: Webbsyte Chat 0.9.0 allows remote attackers to cause a denial of service (crash) via a large number of connections.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1709.

assistant: Datakey Rainbow iKey2032 USB token, when using the CIP client package, does not encrypt communications between the token and the driver, which could allow local users to obtain the PINs of other users.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1710.

assistant: page.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the url parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1711.

assistant: Cross-site scripting (XSS) vulnerability in post.php in Moodle before 1.3 allows remote attackers to inject arbitrary web script or HTML via the reply parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1712.

assistant: Cross-site scripting (XSS) vulnerability in TypePad allows remote attackers to inject arbitrary Javascript via the name parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1713.

assistant: Unknown vulnerability in HP Process Resource Manager (PRM) C.02.01[.01] and earlier, as used by HP-UX Workload Manager (WLM), allows local users to corrupt data files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1714.

assistant: BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service (crash) or modify configuration, as demonstrated by modifying firewall.ini to contain a large firewall rule.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1715.

assistant: Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via "..\\", "..\", and similar dot dot sequences in the URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1716.

assistant: Cross-site scripting (XSS) vulnerability in PForum before 1.26 allows remote attackers to inject arbitrary web script or HTML via the (1) IRC Server or (2) AIM ID fields in the user profile.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1717.

assistant: Multiple buffer overflows in the psscan function in ps.c for gv (ghostview) allow remote attackers to execute arbitrary code via a Postscript file with a long (1) BoundingBox, (2) comment, (3) Orientation, (4) PageOrder, or (5) Pages value.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1718.

assistant: The ZwOpenSection function in Integrity Protection Driver (IPD) 1.4 and earlier allows local users to cause a denial of service (crash) via an invalid pointer in the "oa" argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1719.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) category, (2) cserver, (3) ext, (4) global, (5) showgroups, (6) or showlite parameters to address.html, or the (7) spage or (8) autoresponder parameters to settings.html, the (9) folder parameter to readmail.html, or the (10) attachmentpage_text_error parameter to attachment.html, (11) folder, (12) ct, or (13) cv parameters to calendar.html, (14) an <img> tag, or (15) the subject of an e-mail message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1720.

assistant: The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sensitive information via an invalid HTTP request, which reveals the installation path. NOTE: it is unclear whether the calendar.html is an exposure, since the path is leaked in web logs that may only be available to the administrators, who would have access to the path through legitimate means.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1721.

assistant: The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1722.

assistant: SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL statements via the schedule parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1723.

assistant: The (1) updateuser.php and (2) forums_prune.php scripts in PHP-Fusion 4.00 allow remote attackers to obtain sensitive information via a direct HTTP request, which reveals the installation path in an error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1724.

assistant: The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups directory to world read/write/execute (777), which allows remote attackers to download or view database backups, which have easily guessable filenames and contain the administrator username and password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1725.

assistant: Stack-based buffer overflow in xvbmp.c in XV allows remote attackers to execute arbitrary code via a crafted image file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1726.

assistant: Multiple integer overflows in (1) xviris.c, (2) xvpcx.c, and (3) xvpm.c in XV allow remote attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1727.

assistant: BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number of connections from the same IP address.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1728.

assistant: Buffer overflow in British National Corpus SARA (sarad) allows remote attackers to execute arbitrary code by calling the client with a long string.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1729.

assistant: Cross-site scripting (XSS) vulnerability in Nihuo Web Log Analyzer 1.6 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1730.

assistant: Cross-site scripting (XSS) vulnerability in Mantis bugtracker allows remote attackers to inject arbitrary web script or HTML via (1) the return parameter to login_page.php, (2) e-mail field in signup.php, (3) action parameter to login_select_proj_page.php, or (4) hide_status parameter to view_all_set.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1731.

assistant: signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and providing the same e-mail address.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1732.

assistant: SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1733.

assistant: Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered users to read arbitrary files via .. (dot dot) sequences in the URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1734.

assistant: PHP remote file inclusion vulnerability in Mantis 0.19.0a allows remote attackers to execute arbitrary PHP code by modifying the (1) t_core_path parameter to bug_api.php or (2) t_core_dir parameter to relationship_api.php to reference a URL on a remote web server that contains the code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1735.

assistant: Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticated users to inject arbitrary web script or HTML via the description field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1736.

assistant: Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and possibly other php files, which reveal the installation path in a PHP error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1737.

assistant: SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1738.

assistant: Cross-site scripting (XSS) vulnerability in page.php in JShop allows remote attackers to inject arbitrary web script or HTML via the xPage parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1739.

assistant: Bird Chat 1.61 allows remote attackers to cause a denial of service (crash) via invalid users.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1740.

assistant: Music daemon (musicd) 0.0.3 and earlier allows remote attackers to read arbitrary files by calling LOAD with a full pathname, then calling SHOWLIST.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1741.

assistant: Music daemon (musicd) 0.0.3 and earlier allows remote attackers to cause a denial of service (crash) by calling LOAD with a binary file as an argument, then calling SHOWLIST.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1742.

assistant: Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .. (dot dot) in the viewcat parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1743.

assistant: Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to view arbitrary files via an HTTP request for the disk_c virtual folder.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1744.

assistant: Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to cause a denial of service (CPU consumption or crash) via many large HTTP requests.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1745.

assistant: Buffer overflow in Painkiller 1.3.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1746.

assistant: Cross-site scripting (XSS) vulnerability in index.php in PHP Code Snippet Library allows remote attackers to inject arbitrary web script or HTML via the (1) cat_select or (2) show parameters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1747.

assistant: Cross-site scripting (XSS) vulnerability in NetworkEverywhere NR041 running firmware 1.2 Release 03 allows remote attackers to inject arbitrary web script or HTML via the DHCP HOSTNAME option.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1748.

assistant: NtRegmon before 6.12 allows local users to cause a denial of service (crash), while NtRegmon is running, via invalid pointers to hook functions such as ZwSetQueryValue.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1749.

assistant: Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed routing configuration, allows remote attackers to cause a denial of service (CPU consumption) via a large number of HTTP requests.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1750.

assistant: RealVNC 4.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of connections to port 5900.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1751.

assistant: Ground Control II: Operation Exodus 1.0.0.7 and earlier allows remote servers to cause a denial of service (client or server crash) via a large packet, which generates a "Message too long" socket error that is treated as a critical error.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1752.

assistant: Stack-based buffer overflow in Gaucho 1.4 Build 145 allows remote attackers to execute arbitrary code via a POP3 email with a long Content-Type header.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1753.

assistant: The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindow(NULL) calls, which allows Java applets from one tab to draw to other tabs and facilitates phishing attacks that spoof tabs.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1754.

assistant: The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additional records.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1755.

assistant: The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple certificates to connect to the same URL, may use the incorrect identity after the first connection, which could allow users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1756.

assistant: BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a custom trust manager, may accept a certificate chain even if the trust manager rejects it, which allows remote attackers to spoof other users or servers.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1757.

assistant: BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1758.

assistant: BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database username and password for an untargeted JDBC connection pool in plaintext in config.xml, which allows local users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1759.

assistant: Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 14247, as demonstrated using port scanning.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1760.

assistant: The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1761.

assistant: Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service (segmentation fault) via a malformed color filter file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1762.

assistant: Unknown vulnerability in F-Secure Anti-Virus (FSAV) 4.52 for Linux before Hotfix 3 allows the Sober.D worm to bypass FASV.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1763.

assistant: Buffer overflow in hsrun.exe for HAHTsite Scenario Server 5.1 Patch 06 (build 91) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long project name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1764.

assistant: Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1765.

assistant: Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1766.

assistant: The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for communication with devices running ScreenOS 5.0, which allows remote attackers to obtain sensitive information via sniffing.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1767.

assistant: The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly involving the modload function.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1768.

assistant: The character converters in the Spamhunter and Language ID modules for Symantec Brightmail AntiSpam 6.0.1 before patch 132 allow remote attackers to cause a denial of service (crash) via messages with the ISO-8859-10 character set, which is not recognized by the converters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1769.

assistant: The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1770.

assistant: The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in the user parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1771.

assistant: Scalable OGo (SOGo) 1.0 allows remote authenticated users to bypass intended permissions and view private appointments of other users.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1772.

assistant: Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1773.

assistant: Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1774.

assistant: Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1775.

assistant: Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers to read and modify device configuration via the read-write community string.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1776.

assistant: Cisco IOS 12.1(3) and 12.1(3)T allows remote attackers to read and modify device configuration data via the cable-docsis read-write community string used by the Data Over Cable Service Interface Specification (DOCSIS) standard.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1777.

assistant: A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of service (application crash) via long command line arguments or a long callto:// URL, a different vulnerability than CVE-2004-1114.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1778.

assistant: Skype 0.92.0.12 and 1.0.0.1 for Linux, and possibly other versions, creates the /usr/share/skype/lang directory with world-writable permissions, which allows local users to modify language files and possibly conduct social engineering or other attacks.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1779.

assistant: Cross-site scripting (XSS) vulnerability in board.php for ThWboard before beta 2.84 allows remote attackers to inject arbitrary web script or HTML via the lastvisited parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1780.

assistant: Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1781.

assistant: Info Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating system via the CMD_CREDITCARD_CHARGE command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1782.

assistant: athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1783.

assistant: Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary files via a /.. (slash dot dot).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1784.

assistant: Buffer overflow in the web server of Webcam Watchdog 3.63 allows remote attackers to execute arbitrary code via a long HTTP GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1785.

assistant: SQL injection vulnerability in calendar.php for Invision Power Board 1.3 allows remote attackers to execute arbitrary SQL commands via the m parameter, which sets the $this->chosen_month variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1786.

assistant: PortalApp places user credentials under the web root with insufficient access control, which allows remote attackers to gain access to sensitive information via a direct request to 8275.mdb.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1787.

assistant: SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search queries.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1788.

assistant: ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to main.mdb.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1789.

assistant: Cross-site scripting (XSS) vulnerability in the web management interface in ZyWALL 10 4.07 allows remote attackers to inject arbitrary web script or HTML via the rpAuth_1 page.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1790.

assistant: Cross-site scripting (XSS) vulnerability in the web management interface in Edimax AR-6004 ADSL Routers allows remote attackers to inject arbitrary web script or HTML via the URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1791.

assistant: The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password, which also appear as the default login text for the management interface, which allows remote attackers to gain access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1792.

assistant: swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a long packet with two CRLF sequences to the service management port (TCP 8000).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1793.

assistant: Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1794.

assistant: Cross-site scripting (XSS) vulnerability in the VCard4J Toolkit allows remote attackers to inject arbitrary web script or HTML via the NICKNAME tag in a vCard.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1795.

assistant: Info Touch Surfnet kiosk allows local users to access the underlying filesystem via a 'file://' URI.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1796.

assistant: PHP remote file inclusion vulnerability in HotNews 0.7.2 and earlier allows remote attackers to execute arbitrary PHP code via the (1) config[header] parameter to hotnews-engine.inc.php3 or (2) config[incdir] parameter to hnmain.inc.php3.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1797.

assistant: Cross-site scripting (XSS) vulnerability in search.php for FreznoShop 1.3.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1798.

assistant: RealOne player 6.0.11.868 allows remote attackers to execute arbitrary script in the "My Computer" zone via a Synchronized Multimedia Integration Language (SMIL) presentation with a "file:javascript:" URL, which is executed in the security context of the previously loaded URL, a different vulnerability than CVE-2003-0726.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1799.

assistant: PF in certain OpenBSD versions, when stateful filtering is enabled, does not limit packets for a session to the original interface, which allows remote attackers to bypass intended packet filters via spoofed packets to other interfaces.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1800.

assistant: Unknown vulnerability in Sysbotz SimpleData 4.0.1 and possibly earlier versions allows remote attackers to gain access via a crafted URL and a certain cookie.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1801.

assistant: Directory traversal vulnerability in PWebServer 0.3.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1802.

assistant: Chat Anywhere 2.72 and earlier allows remote attackers to hide their IP address by using %00 before the nickname, which causes the IP address to be displayed as $IP$ on the administration web page.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2004-1804.

assistant: wMCam server 2.1.348 allows remote attackers to cause a denial of service (no new connections) via multiple malformed HTTP requests without the GET command.