rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-0233 
The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-07T05:00:00.000Z
CVE-2005-0234 
The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-07T05:00:00.000Z
CVE-2005-0235 
The International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-07T05:00:00.000Z
CVE-2005-0236 
The International Domain Name (IDN) support in Omniweb 5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-07T05:00:00.000Z
CVE-2005-0237 
The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-07T05:00:00.000Z
CVE-2005-0238 
The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-07T05:00:00.000Z
CVE-2005-0239 
viewcert.php in the S/MIME plugin 0.4 and 0.5 for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the cert parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-07T05:00:00.000Z
CVE-2005-0240 
Format string vulnerability in chdev on IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command line argument, which is not properly handled when printing an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-07T05:00:00.000Z
CVE-2005-0241 
The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote attackers to poison the cache or bypass access controls based on header size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-08T05:00:00.000Z
CVE-2005-0242 
The Audio Setup Wizard (asw.dll) in Yahoo! Messenger 6.0.0.1750, and possibly other versions, allows attackers to arbitrary code by placing a malicious ping.exe program into the Messenger program directory, which is installed with weak default permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-18T05:00:00.000Z
CVE-2005-0243 
Yahoo! Messenger 6.0.0.1750, and possibly other versions before 6.0.0.1921, does not properly display long filenames in file dialog boxes, which could allow remote attackers to trick users into downloading and executing programs via file names containing a large number of spaces and multiple file extensions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-18T05:00:00.000Z
CVE-2005-0244 
PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-08T05:00:00.000Z
CVE-2005-0245 
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large number of arguments to a refcursor function (gram.y), which leads to a heap-based buffer overflow, a different vulnerability than CVE-2005-0247.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-08T05:00:00.000Z
CVE-2005-0246 
The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service (crash) via crafted arrays.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-08T05:00:00.000Z
CVE-2005-0247 
Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql_construct function, (2) a large number of INTO variables in a SELECT statement being handled by the make_select_stmt function, (3) a large number of arbitrary variables in a SELECT statement being handled by the make_select_stmt function, and (4) a large number of INTO variables in a FETCH statement being handled by the make_fetch_stmt function, a different set of vulnerabilities than CVE-2005-0245.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-08T05:00:00.000Z
CVE-2005-0248 
The Solaris Management Console (SMC) GUI for Solaris 8 and 9, when creating user accounts that are configured for password aging, creates the accounts with a blank password, which allows remote or local attackers to break into those accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-08T05:00:00.000Z
CVE-2005-0249 
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-08T05:00:00.000Z
CVE-2005-0250 
Format string vulnerability in auditselect on IBM AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via format string specifiers in a command line argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-08T05:00:00.000Z
CVE-2005-0251 
Cross-site scripting (XSS) vulnerability in bibindex.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the search parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-17T05:00:00.000Z
CVE-2005-0252 
SQL injection vulnerability in BibORB 1.3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-17T05:00:00.000Z
CVE-2005-0253 
Directory traversal vulnerability in index.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to delete arbitrary files via a Delete action and .. (dot dot) sequences in the database_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-17T05:00:00.000Z
CVE-2005-0254 
BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to other users with PDF or PS icons, which may trick some users into downloading and executing those files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-17T05:00:00.000Z
CVE-2005-0255 
String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::Replace function, do not properly check the return values of other functions that resize the string, which allows remote attackers to cause a denial of service and possibly execute arbitrary code by forcing an out-of-memory state that causes a reallocation to fail and return a pointer to a fixed address, which leads to heap corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-28T05:00:00.000Z
CVE-2005-0256 
The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a large number of * (wildcard) characters, as demonstrated using the dir command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-25T05:00:00.000Z
CVE-2005-0258 
Directory traversal vulnerability in (1) usercp_register.php and (2) usercp_avatar.php for phpBB 2.0.11, and possibly other versions, with gallery avatars enabled, allows remote attackers to delete (unlink) arbitrary files via "/../" sequences in the avatarselect parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-22T05:00:00.000Z
CVE-2005-0259 
phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by providing both a local and remote location for an avatar, then modifying the "Upload Avatar from a URL:" field to reference the target file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-22T05:00:00.000Z
CVE-2005-0260 
Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbitrary code via a long packet to UDP port 41524, which is not properly handled in a recvfrom call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0261 
lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users to read one line of arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0262 
Buffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0263 
Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0264 
Multiple cross-site scripting (XSS) vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) expand or (2) order parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0265 
Multiple SQL injection vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to execute arbitrary SQL commands via the (1) parent or (2) sortposted parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0266 
Cross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote attackers to inject arbitrary web script or HTML via the (1) return_module, (2) return_action, (3) name, (4) module, or (5) record parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0267 
index.php in FlatNuke 2.5.1 allows remote attackers to create an administrator account via carriage returns and #10 in the url_avatar field, which is interpreted as a sensitive directive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0268 
Direct code injection vulnerability in FlatNuke 2.5.1 allows remote attackers to execute arbitrary PHP code by placing the code into the url_avatar field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0269 
The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0270 
Multiple cross-site scripting (XSS) vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to inject arbitrary web script or HTML via the (1) si parameter to showcat.php, (2) cat or (3) page parameter to showproduct.php, or (4) report parameter to reportproduct.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0271 
Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showcat.php or (2) product parameter to addfav.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0272 
ReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary PHP files by posting a review file with multiple extensions, which bypasses the intended restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0273 
Multiple SQL injection vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) ppuser parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0274 
Multiple cross-site scripting (XSS) vulnerabilities in showgallery.php in PhotoPost before 4.86 allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) si, (3) page, or (4) ppuser parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0275 
TFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) via a GET request containing an MS-DOS device name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0276 
Multiple format string vulnerabilities in the FTP service in 3Com 3CDaemon 2.0 revision 10 allow remote attackers to cause a denial of service (application crash) via format string specifiers in (1) the username, (2) cd, (3) delete, (4) rename, (5) rmdir, (6) literal, (7) stat, or (8) CWD commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0277 
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via (1) a long username in the USER command or (2) an FTP command that contains a long argument, such as cd, send, or ls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0278 
The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command that contains an MS-DOS device name, which reveals the installation path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0279 
Soldner Secret Wars 30830 and earlier does not properly handle the "message too long" socket error, which allows remote attackers to cause a denial of service (socket termination) via a long UDP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0280 
Format string vulnerability in Soldner Secret Wars 30830 and earlier allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in a message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0281 
Cross-site scripting (XSS) vulnerability in the web interface in Soldner Secret Wars 30830 allows remote attackers to inject arbitrary web script or HTML via a user message, which is not filtered or quoted when the administrator views the server logs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0282 
SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL commands via the uid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0283 
Directory traversal vulnerability in index.php in QwikiWiki allows remote attackers to read arbitrary files via a .. (dot dot) and a %00 at the end of the filename in the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0284 
SQL injection vulnerability in addentry.php in Woltlab Burning Book 1.0 Gold, 1.1.1e, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the user-agent parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0285 
Webseries Payment Application does not properly restrict privileged operations, which allows remote authenticated users to gain privileges by directly accessing certain URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0286 
eMotion MediaPartner Web Server 5.0 and 5.1 allows remote attackers to obtain sensitive information via an HTTP request for a .bhtml file that contains a (1) . (dot) or (2) + (plus sign) at the end, which returns the source code for that file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0287 
Bottomline Webseries Payment Application allows remote attackers to read arbitrary files on the network via a report template with modified ReportPath or ReportName values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0288 
The change password functionality in Bottomline Webseries Payment Application does not require the old password when users enter a new password, which could allow remote authenticated users to change other users' passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0289 
Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Service (WDS), allows remote attackers to cause a denial of service (device freeze) by connecting to UDP port 161 and before link-state change occurs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0290 
NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to bypass the filters using hex encoded URLs, as demonstrated using a hex encoded file extension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0291 
Cross-site scripting (XSS) vulnerability in the log viewer in NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via a blocked URL phrase.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0292 
Multiple SQL injection vulnerabilities in index.php in PHP Gift Registry (phpGiftReg) 1.4.0, and possibly other versions before 1.5.0b1, allow remote attackers to execute arbitrary SQL commands via the (1) messageid, (2) shopper, (3) shopfor, or (4) itemid parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0293 
Directory traversal vulnerability in minis.php in Minis 0.2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the month parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0294 
minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service (infinite loop) via an HTTP request for a file that the web server does not have permission to read, as demonstrated using the month parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0295 
npptnt2.sys in nProtect Gameguard provides unrestricted I/O to any process that calls it, which allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0296 
NOTE: this issue has been disputed by the vendor.  The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as the version, via an incorrect login and a modified (1) error or (2) modify parameter that returns template files or the "about" information page.  NOTE: the vendor has disputed this issue
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0297 
SQL injection vulnerability in Oracle Database 9i and 10g allows remote attackers to execute arbitrary SQL commands and gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0298 
The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0299 
Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the (1) dir parameter to controller.php or (2) dir_name parameter to controlleroo.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0300 
Directory traversal vulnerability in session.php in JSBoard 2.0.9 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the table parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z
CVE-2005-0301 
comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to the program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-10T05:00:00.000Z