rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-4565 
Format string vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attackers to have an unknown impact via format string specifiers in crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4566 
Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attackers to have an unknown impact via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4567 
Multiple cross-site scripting (XSS) vulnerabilities in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (Build 4.4.000 Oct 26 2005) allow remote attackers to inject arbitrary web script or HTML by sending (1) the href parameter to index.fts, or the param1 parameter to (2) /domains/index.fts, (3) /config/licence.fts, or (4) /config/systemacl.fts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4568 
Multiple format string vulnerabilities in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (aka Build 4.4.000 Oct 26 2005) allow remote attackers to execute arbitrary code via format string specifiers in the (1) USER, (2) PASS, and (3) TOP commands to the POP3 server; and the (4) LIST and (5) AUTHENTICATE commands to the IMAP server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4569 
Stack-based buffer overflow in index.fts in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (aka Build 4.4.000 Oct 26 2005) allows remote attackers to execute arbitrary code via a long tzoffset value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4570 
The Internet Key Exchange version 1 (IKEv1) implementations in Fortinet FortiOS 2.50, 2.80 and 3.0, FortiClient 2.0,; and FortiManager 2.80 and 3.0 allow remote attackers to cause a denial of service (termination of a process that is automatically restarted) via IKE packets with invalid values of certain IPSec attributes, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of details in the vendor advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4571 
Cross-site scripting (XSS) vulnerability in myEZshop Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4572 
Multiple SQL injection vulnerabilities in myEZshop Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) GroupsId and (2) ItemsId parameters in admin.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4573 
PHP remote file include vulnerability in plog-admin-functions.php in Plogger Beta 2 allows remote attackers to execute arbitrary code via a URL in the config[basedir] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4574 
Cross-site scripting (XSS) vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the bNewWindow parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4575 
PaperThin CommonSpot Content Server 4.5 and earlier allow remote attackers to obtain sensitive information via an invalid errmsg parameter to loader.cfm with a url parameter set to email-login-info.cfm, which leaks the full pathname in the resulting error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4576 
Multiple cross-site scripting (XSS) vulnerabilities in the UpdateEngine program in Fatwire UpdateEngine 6.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) COUNTRYNAME, (2) EMAIL, and (3) FUELAP_TEMPLATENAME parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4577 
Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Business Logic - Container (BLC) P-2443-9114 01-00 through 02-06 on Windows, and P-1M43-9111 01-01 through 02-00 on AIX, allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in an unspecified input form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4578 
Multiple SQL injection vulnerabilities in Hitachi Business Logic - Container (BLC) P-2443-9114 01-00 through 02-06 on Windows, and P-1M43-9111 01-01 through 02-00 on AIX, allow remote attackers to execute arbitrary SQL commands via unknown attack vectors in an unspecified input form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4579 
Multiple HTTP response splitting vulnerabilities in Hitachi Business Logic - Container (BLC) P-2443-9114 01-00 through 02-06 on Windows, and P-1M43-9111 01-01 through 02-00 on AIX, allow remote attackers to inject arbitrary HTTP headers via unknown attack vectors in an unspecified input form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4580 
Cross-site scripting (XSS) vulnerability in Day Communique 4 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4581 
Buffer overflow in Electric Sheep 2.6.3 client allows local users to execute arbitrary code via a long window-id parameter. NOTE: because the program is not setuid and not normally called from remote programs, there may not be a typical attack vector for the issue that crosses privilege boundaries.  Therefore this may not be a vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4582 
Electric Sheep 2.6.3 does not require authentication or integrity checks from the server to the client, which allows remote attackers to download and display arbitrary MPEG movie files via (1) DNS spoofing, (2) a URL on the command line, or (3) a URL in the configuration file. NOTE: the same attack vectors apply to common web browsers that are able to communicate with untrusted web servers, and other problems related to DNS design issues.  Therefore this may not be a specific vulnerability.  However, a client would reasonably expect to receive content only from the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4583 
Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 December 2005 allows "remote code execution in the Web browser" via unspecified attack vectors, probably related to cross-site scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4584 
BZFlag server 2.0.4 and earlier allows remote attackers to cause a denial of service (application crash) via a callsign that is not followed by a NULL (\0) character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4585 
Unspecified vulnerability in the GTP dissector for Ethereal 0.9.1 to 0.10.13 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-29T11:00:00.000Z
CVE-2005-4586 
Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL commands via the (1) sql parameter in browse.php and the (2) sid, (3) lid, (4) gid, and (5) token parameters in certain PHP scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-30T11:00:00.000Z
CVE-2005-4587 
Juniper NetScreen-Security Manager (NSM) 2004 FP2 and FP3 allow remote attackers to cause a denial of service (crash or hang of server components that are automatically restarted) via a long crafted string on (1) port 7800 (the GUI Server port) or (2) port 7801 (the Device Server port).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-30T11:00:00.000Z
CVE-2005-4588 
Cross-site scripting (XSS) vulnerability in Koobi 5 allows remote attackers to inject arbitrary web script or HTML via nested, malformed url BBCode tags.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-30T11:00:00.000Z
CVE-2005-4589 
Spb Kiosk Engine 1.0.0.1 stores the administrator's passcode in the registry in plaintext, which allows local users to obtain the passcode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-30T11:00:00.000Z
CVE-2005-4590 
Spb Kiosk Engine 1.0.0.1 allows local users to bypass restrictions on allowed applications via (1) removable media containing a program that will execute because of the autorun setting and (2) applications that are able to invoke other applications, as demonstrated by a file: URL specifying a .exe file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-30T11:00:00.000Z
CVE-2005-4591 
Heap-based buffer overflow in bogofilter 0.96.2, 0.95.2, 0.94.14, 0.94.12, and other versions from 0.93.5 to 0.96.2, when using Unicode databases, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via "invalid input sequences" that lead to heap corruption when bogofilter or bogolexer converts character sets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-09T19:00:00.000Z
CVE-2005-4592 
Heap-based buffer overflow in bogofilter and bogolexer 0.96.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via words that are longer than the input buffer used by flex.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-09T19:00:00.000Z
CVE-2005-4593 
PHP remote file inclusion vulnerability in phpDocumentor 1.3.0 rc4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary code via a URL in the (1) FORUM[LIB] parameter in Documentation/tests/bug-559668.php and (2) the root_dir parameter in docbuilder/file_dialog.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-01T23:00:00.000Z
CVE-2005-4594 
Stack-based buffer overflow in TUGZip 3.4.0.0 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-01T23:00:00.000Z
CVE-2005-4595 
Untrusted search path vulnerability (RPATH) in XnView 1.70 and NView 4.51 on Gentoo Linux allows local users to execute arbitrary code via a malicious library in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-01T23:00:00.000Z
CVE-2005-4596 
Cross-site scripting (XSS) vulnerability in read.php in AdesGuestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the totalRows_rsRead parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-01T23:00:00.000Z
CVE-2005-4597 
Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 1.7 allows remote attackers to inject arbitrary web script or HTML via the email parameter, as used by the email field, when signing a guestbook.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-01T23:00:00.000Z
CVE-2005-4598 
Cross-site scripting (XSS) vulnerability in home.php in OoApp Guestbook 2.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-01T23:00:00.000Z
CVE-2005-4599 
Cross-site scripting (XSS) vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to inject arbitrary web script or HTML via the index parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-01T23:00:00.000Z
CVE-2005-4600 
Directory traversal vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to read or include arbitrary files via a trailing null byte (%00) in the (1) theme, (2) language, (3) plugins, or (4) lang parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-01T23:00:00.000Z
CVE-2005-4601 
The delegate code in ImageMagick 6.2.4.5-0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename that is processed by the display command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-01T23:00:00.000Z
CVE-2005-4602 
SQL injection vulnerability in inc/function_upload.php in MyBB before 1.0.1 allows remote attackers to execute arbitrary SQL commands via the file extension of an uploaded file attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-02T00:00:00.000Z
CVE-2005-4603 
Cross-site scripting (XSS) vulnerability in printthread.php in MyBB 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a thread message, which is not properly sanitized in the print view of the thread.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-02T00:00:00.000Z
CVE-2005-4604 
Buffer overflow in MTink in the printer-filters-utils package allows local users to execute arbitrary code via a long HOME environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-02T00:00:00.000Z
CVE-2005-4605 
The procfs code (proc_misc.c) in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers to read sensitive kernel memory via unspecified vectors in which a signed value is added to an unsigned value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-03T16:00:00.000Z
CVE-2005-4606 
SQL injection vulnerability in check_user.asp in multiple Web Wiz products including (1) Site News 3.06 and earlier, (2) Journal 1.0 and earlier, (3) Polls 3.06 and earlier, and (4) and Database Login 1.71 and earlier allows remote attackers to execute arbitrary SQL commands via the txtUserName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-03T22:00:00.000Z
CVE-2005-4607 
Cross-site scripting (XSS) vulnerability in index.php in BugPort 1.147 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) ids[0], (2) action, (3) report_id, (4) devWherePair[1][1], and (5) binds[0] parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-04T00:00:00.000Z
CVE-2005-4608 
SQL injection vulnerability in index.php in BugPort 1.147 allows remote attackers to execute arbitrary SQL commands via the (1) devWherePair[0], (2) orderBy, and (3) where parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-04T00:00:00.000Z
CVE-2005-4609 
index.php in BugPort 1.147 and earlier allows remote attackers to obtain sensitive information such as full path and system configuration via an invalid action parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-04T00:00:00.000Z
CVE-2005-4610 
Format string vulnerability in the server for Dopewars before 1.5.12, when running as an NT service, allows remote attackers to execute arbitrary code via unspecified attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-04T01:00:00.000Z
CVE-2005-4611 
SQL injection vulnerability in search.php in Free ClickBank 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the keywords parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-04T11:00:00.000Z
CVE-2005-4612 
Multiple SQL injection vulnerabilities in VUBB alpha rc1 allow remote attackers to execute arbitrary SQL commands via the (1) f parameter to viewforum.php, (2) t parameter to viewtopic.php, and (3) view parameter to usercp.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-04T11:00:00.000Z
CVE-2005-4613 
Cross-site scripting (XSS) vulnerability in VUBB alpha rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified fields in the user edit profile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-04T11:00:00.000Z
CVE-2005-4614 
Multiple SQL injection vulnerabilities in digiSHOP 3.1.17 and earlier allow remote attackers to execute arbitrary SQL commands or obtain the full installation path via (1) the c parameter in cart.php and (2) unspecified search module parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-04T11:00:00.000Z
CVE-2005-4615 
SQL injection vulnerability in news.php in DapperDesk 3.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-04T11:00:00.000Z
CVE-2005-4616 
SQL injection vulnerability in index.php in iSupport 1.06 allows remote attackers to execute arbitrary SQL commands via the include_file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-04T11:00:00.000Z
CVE-2005-4617 
SQL injection vulnerability in tickets.php in cSupport 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-04T11:00:00.000Z
CVE-2005-4618 
Buffer overflow in sysctl in the Linux Kernel 2.6 before 2.6.15 allows local users to corrupt user memory and possibly cause a denial of service via a long string, which causes sysctl to write a zero byte outside the buffer.  NOTE: since the sysctl is called from a userland program that provides the argument, this might not be a vulnerability, unless a legitimate user-assisted or setuid scenario can be identified.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-05T11:00:00.000Z
CVE-2005-4619 
SQL injection vulnerability in index.php in phpoutsourcing Zorum Forum 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the rollid parameter in the showhtmllist method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-05T11:00:00.000Z
CVE-2005-4620 
Buffer overflow in WinRAR 3.50 and earlier allows local users to execute arbitrary code via a long command-line argument.  NOTE: because this program executes with the privileges of the invoking user, and because remote programs do not normally have the ability to specify a command-line argument for this program, there may not be a typical attack vector for the issue that crosses privilege boundaries. Therefore this may not be a vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-06T11:00:00.000Z
CVE-2005-4621 
Cross-site scripting (XSS) vulnerability in the editavatar page in vBulletin 3.5.1 allows remote attackers to inject arbitrary web script or HTML via a URL in the remote avatar url field, in which the URL generates a parsing error, and possibly requiring a trailing extension such as .jpg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-06T11:00:00.000Z
CVE-2005-4622 
Directory traversal vulnerability in eFileGo 3.01 allows remote attackers to execute arbitrary code, read arbitrary files, and upload arbitrary files via a ... (triple dot) in (1) the URL on port 608 and (2) the argument to upload.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-06T11:00:00.000Z
CVE-2005-4623 
upload.exe in eFileGo 3.01 allows remote attackers to cause a denial of service (CPU consumption) via an argument with an invalid directory name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-06T11:00:00.000Z
CVE-2005-4624 
The m_join function in channel.c for PTnet ircd 1.5 and 1.6 allows remote attackers to cause a denial of service (memory exhaustion that triggers a daemon restart) via a large number of requests to join a "charmed channel" such as PTnet, #PTnoticias and #*.log, which causes ircd to open the channel even though it does not have any valid users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-06T11:00:00.000Z
CVE-2005-4625 
Drivers for certain display adapters, including (1) an unspecified ATI driver and (2) an unspecified Intel driver, might allow remote attackers to cause a denial of service (system crash) via a large JPEG image, as demonstrated in Internet Explorer using stoopid.jpg with a width and height of 9999999.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-06T11:00:00.000Z
CVE-2005-4626 
The default configuration of Recruitment Software installs admin/site.xml under the web document root with insufficient access control, which might allow remote attackers to obtain sensitive information (MySQL database credentials) via a direct request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-06T11:00:00.000Z
CVE-2005-4627 
Cross-site scripting (XSS) vulnerability in index.php in (1) GmailSite 1.0 through 1.0.4 and (2) GFHost 0.1.1 through 0.4.2 allows remote attackers to inject arbitrary web script or HTML via the lng parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-06T11:00:00.000Z
CVE-2005-4628 
SQL injection vulnerability in index.php in HelpDeskPoint 2.38 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-07T01:00:00.000Z
CVE-2005-4629 
SQL injection vulnerability in SMBCMS 2.1 allows remote attackers to execute arbitrary SQL commands via unspecified search parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-07T01:00:00.000Z