rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-4065 
SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4066 
Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCX_FTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrated by the W32.Gudeb worm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-07T11:00:00.000Z
CVE-2005-4068 
Unspecified "absolute path vulnerability" in umountall in IBM AIX 5.1 through 5.3 allows local users to cause unknown impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T01:00:00.000Z
CVE-2005-4069 
SunnComm MediaMax DRM 5.0.21.0, as used by Sony BMG, assigns insecure Everyone/Full Control permissions to the "SunnComm Shared" directory, which allows local users to gain privileges by modifying programs installed in that directory, such as MMX.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T01:00:00.000Z
CVE-2005-4071 
Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ForumID parameter in view_forum.cfm, and (2) ForumID, (3) Thread, and (4) ThreadID parameters in view_thread.cfm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T01:00:00.000Z
CVE-2005-4072 
Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the Words parameter in search_forums.cfm, as used in the "Search For:" field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T01:00:00.000Z
CVE-2005-4073 
SQL injection vulnerability in view_archive.cfm in CFMagic Magic List Pro 2.5 allows remote attackers to execute arbitrary SQL commands via the ListID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T01:00:00.000Z
CVE-2005-4074 
Directory traversal vulnerability in index.cfm in CF_Nuke 4.6 and earlier, when Sandbox Security is disabled, allows remote attackers to include arbitrary local .cfm files via a .. (dot dot) in the (1) sector or (2) page parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T01:00:00.000Z
CVE-2005-4075 
Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in CF_Nuke 4.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) topic and (2) newsid parameter in the news sector, and (3) cat parameter in the links sector.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T01:00:00.000Z
CVE-2005-4076 
Buffer overflow in Appfluent Technology Database IDS 2.0 allows local users to execute arbitrary code via a long APPFLUENT_HOME environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T01:00:00.000Z
CVE-2005-4077 
Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that (1) are malformed in a way that prevents a terminating null byte from being added to either a hostname or path buffer, or (2) contain a "?"  separator in the hostname portion, which causes a "/" to be prepended to the resulting string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T01:00:00.000Z
CVE-2005-4078 
Multiple cross-site scripting (XSS) vulnerabilities in Ideal BB.NET 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) forumID, (2) boardID, and (3) topicRepeater1-p parameters in topics.aspx, (4) boardID parameter in categoryindex.aspx, (5) postID parameter in posts.aspx, (6) catID parameter in forums.aspx, and (7) memberID parameter in member.aspx.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T01:00:00.000Z
CVE-2005-4079 
The register_globals emulation in phpMyAdmin 2.7.0 rc1 allows remote attackers to exploit other vulnerabilities in phpMyAdmin by modifying the import_blacklist variable in grab_globals.php, which can then be used to overwrite other variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T01:00:00.000Z
CVE-2005-4080 
Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via UTF16 encoded attachments and strings that will be executed when viewed using Internet Explorer, which ignores the characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T01:00:00.000Z
CVE-2005-4081 
Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and possibly execute arbitrary SQL commands via the username and password parameters in (1) the user login and (2) administrator login pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T01:00:00.000Z
CVE-2005-4082 
The dhcp.client program for QNX 4.25 vmware is setuid, possibly by default, which allows local users to modify the NIC configuration and conduct other attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T01:00:00.000Z
CVE-2005-4083 
Directory traversal vulnerability in xs_edit.php in the eXtreme Styles phpBB module 2.2.1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the edit parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T01:00:00.000Z
CVE-2005-4084 
xs_edit.php in the phpBB eXtreme Styles module 2.2.1 and earlier allows remote attackers to obtain the installation path of the application via an invalid viewbackup parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T01:00:00.000Z
CVE-2005-4085 
Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-06T11:00:00.000Z
CVE-2005-4086 
Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the beanFiles array parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T11:00:00.000Z
CVE-2005-4087 
PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the beanFiles array parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T11:00:00.000Z
CVE-2005-4088 
SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) parent and (2) day parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T11:00:00.000Z
CVE-2005-4089 
Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files from other domains that are not valid Cascading Style Sheets (CSS) files, as demonstrated using Google Desktop, aka "CSSXSS" and "CSS Cross-Domain Information Disclosure Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T11:00:00.000Z
CVE-2005-4090 
Unspecified vulnerability in HP-UX B.11.00 to B.11.23, when IPSEC is running, allows remote attackers to have unknown impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T11:00:00.000Z
CVE-2005-4091 
Cross-site scripting (XSS) vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T11:00:00.000Z
CVE-2005-4092 
Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 (3) and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a .mov file with (1) a Movie Resource atom with a large size value, or (2) an stsd atom with a modified Sample Description Table size value, and possibly other vectors involving media files.  NOTE: item 1 was originally identified by CVE-2005-4127 for a pre-patch announcement, and item 2 was originally identified by CVE-2005-4128 for a pre-patch announcement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T11:00:00.000Z
CVE-2005-4093 
Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to bypass security policies by modifying the local copy of the local.scv policy file after it has been downloaded from the VPN Endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T11:00:00.000Z
CVE-2005-4094 
connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload command to upload a file that appears to be an image but contains PHP script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T11:00:00.000Z
CVE-2005-4095 
Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to list arbitrary files and directories via ".." sequences in the Type parameter in a GetFoldersAndFiles command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-08T11:00:00.000Z
CVE-2005-4126 
** UNVERIFIABLE, PRERELEASE **  NOTE: this issue describes a problem that can not be independently verified as of 20051208.  Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows attackers to execute arbitrary code.  NOTE: the information regarding this issue is extremely vague and does not provide any verifiable information.  It has been posted by a reliable reporter with a prerelease disclosure policy.  This item has only been assigned a CVE identifier for tracking purposes, and to serve as a concrete example for discussion of the newly emerging UNVERIFIABLE and PRERELEASE content decisions in CVE, which must be discussed by the Editorial Board.  Without additional details or independent verification by reliable sources, it is possible that this item might be RECAST or REJECTED.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-09T11:00:00.000Z
CVE-2005-4130 
** UNVERIFIABLE, PRERELEASE **  NOTE: this issue describes a problem that can not be independently verified as of 20051208.  Unspecified vulnerability in unspecified versions of Real Networks RealPlayer allows remote attackers to execute arbitrary code.  NOTE: it is not known whether this issue should be MERGED with CVE-2005-4126.  The information regarding this issue is extremely vague and does not provide any verifiable information.  It has been posted by a reliable reporter with a prerelease disclosure policy.  This item has only been assigned a CVE identifier for tracking purposes, and to serve as a concrete example for discussion of the newly emerging UNVERIFIABLE and PRERELEASE content decisions in CVE, which must be discussed by the Editorial Board.  Without additional details or independent verification by reliable sources, it is possible that this item might be RECAST or REJECTED.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-09T11:00:00.000Z
CVE-2005-4131 
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to the msvcrt.memmove function, aka "Brand new Microsoft Excel Vulnerability," as originally placed for sale on eBay as item number 7203336538.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-09T11:00:00.000Z
CVE-2005-4132 
Unspecified "security leak" vulnerability in Contenido before 4.6.4, when register_globals is on and allow_url_fopen is true, has unspecified impact and attack vectors.  NOTE: it is likely that this is a PHP remote file include vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-09T11:00:00.000Z
CVE-2005-4133 
Sun Update Connection in Sun Solaris 10, when configured to use a web proxy, allows local users to obtain the proxy authentication password via (1) an unspecified vector and (2) proxy log files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-09T15:00:00.000Z
CVE-2005-4134 
Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup.  NOTE: despite initial reports, the Mozilla vendor does not believe that this issue can be used to trigger a crash or buffer overflow in Firefox.  Also, it has been independently reported that Netscape 8.1 does not have this issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-09T15:00:00.000Z
CVE-2005-4135 
Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header (possibly the name parameter or variable), which is then written to data/topics.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-09T15:00:00.000Z
CVE-2005-4136 
Cross-site scripting (XSS) vulnerability in login.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web script or HTML via the customerEmailAddress parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-09T15:00:00.000Z
CVE-2005-4137 
SQL injection vulnerability in viewinvoice.php in DRZES HMS 3.2 allows remote attackers to execute arbitrary SQL commands via the invoiceID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-09T15:00:00.000Z
CVE-2005-4138 
Multiple cross-site scripting (XSS) vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to inject arbitrary web script or HTML via the (1) Wohnort and (2) Beruf fields in editprofile.php, (3) user parameter array in v_profile.php, and (4) the action parameter in misc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-09T15:00:00.000Z
CVE-2005-4139 
Multiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) year parameter in calendar.php, (2) user parameter array in v_profile.php, and (3) the userid parameter in misc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-09T15:00:00.000Z
CVE-2005-4140 
SQL injection vulnerability in admin/login/index.php in Website Baker 2.6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter, as used by the user field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-09T15:00:00.000Z
CVE-2005-4141 
Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via the (1) harf parameter in kullanicilistesi.asp and (2) baslik parameter in forum.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-09T15:00:00.000Z
CVE-2005-4142 
The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line wrap feature, allows remote attackers to execute arbitrary list administration commands via LFCR (%0A%0D) sequences in the pw parameter.  NOTE: it is not clear whether this is a variant of a CRLF injection vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-10T11:00:00.000Z
CVE-2005-4143 
SQL injection vulnerability in Lyris ListManager 5.0 through 8.9a allows remote attackers to execute arbitrary SQL commands via SQL code after a numeric argument to a /read/attachment URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-10T11:00:00.000Z
CVE-2005-4144 
Lyris ListManager 5.0 through 8.9a allows remote attackers to add "ORDER BY" columns to SQL queries via unusual whitespace characters in the orderby parameter, such as (1) newlines and (2) 0xFF (ASCII 255) characters, which are interpreted as whitespace.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-10T11:00:00.000Z
CVE-2005-4145 
The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with a small search space ("lyris" and up to 5 digits, possibly from the process ID), which allows remote attackers to gain access via a brute force attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-10T11:00:00.000Z
CVE-2005-4146 
Lyris ListManager before 8.9b allows remote attackers to obtain sensitive information via a request to the TCLHTTPd status module, which provides sensitive server configuration information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-10T11:00:00.000Z
CVE-2005-4147 
The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitrary .tml (TCL) files via (1) a request with a trailing null byte (%00), which might also require (2) an authentication bypass step that involves a username with a trailing "@" characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-10T11:00:00.000Z
CVE-2005-4148 
Lyris ListManager 8.5, and possibly other versions before 8.8, includes sensitive information in the env hidden variable, which allows remote attackers to obtain information such as the installation path by requesting a non-existent page and reading the env variable from the resulting error message page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-10T11:00:00.000Z
CVE-2005-4149 
Lyris ListManager 8.8 through 8.9b allows remote attackers to obtain sensitive information by causing errors in TML scripts, such as via direct requests, which leaks the installation path, SQL queries, or product code in diagnostic messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-10T11:00:00.000Z
CVE-2005-4150 
Cross-site scripting (XSS) vulnerability in the portal login page in Computer Associates CleverPath 4.7 allows remote attackers to execute Javascript via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-10T11:00:00.000Z
CVE-2005-4151 
The Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and earlier does not clear file slack space in the last cluster for the file, which allows local users to access the previous contents of the disk.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-10T11:00:00.000Z
CVE-2005-4152 
Soti Pocket Controller-Professional 5.0 allows remote attackers to turn off, reboot, or hard reset a PDA via a series of initialization, command, and reset packets sent to port 5492.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-11T02:00:00.000Z
CVE-2005-4153 
Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message that causes the server to "fail with an Overflow on bad date data in a processed message," a different vulnerability than CVE-2005-3573.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-11T02:00:00.000Z
CVE-2005-4154 
Unspecified vulnerability in PEAR installer 1.4.2 and earlier allows user-assisted attackers to execute arbitrary code via a crafted package that can execute code when the pear command is executed or when the Web/Gtk frontend is loaded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-11T02:00:00.000Z
CVE-2005-4155 
registration.PHP in ATutor 1.5.1 pl2 allows remote attackers to execute arbitrary SQL commands via an e-mail address that ends in a NULL character, which bypasses the PHP regular expression check. NOTE: it is possible that this is actually a bug in PHP code, in which case this should not be treated as a vulnerability in ATutor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-11T02:00:00.000Z
CVE-2005-4156 
Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (1.0.9), with magic_quotes_gpc disabled, allows remote attackers to read arbitrary files and possibly cause a denial of service via a query string that ends with a NULL character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-11T02:00:00.000Z
CVE-2005-4157 
Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to authenticate to the service using an account that has been disabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-11T02:00:00.000Z
CVE-2005-4158 
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-11T02:00:00.000Z
CVE-2005-4159 
NOTE: this issue has been disputed by the vendor and third parties. SQL injection vulnerability in Memberlist.php in Simple Machines Forum (SMF) 1.1 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter.  NOTE: the vendor says that since only one character can be modified, there is no SQL injection. Thus this might be an "invalid SQL syntax error."  Multiple followups support the vendor
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-11T11:00:00.000Z
CVE-2005-4160 
Directory traversal vulnerability in getdox.php in Torrential 1.2 allows remote attackers to read arbitrary files via "../" sequences in the query string argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-11T11:00:00.000Z