Provide references for further information: Can you share references or external links related to CVE-2005-0881?

{'name': 'articlelive-articleid-xss(19817)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19817'}, {'name': '20050323 Interspire ArticleLive 2005 (php version) is vulnerable to XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/394069'}, {'name': '14708', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14708'}, {'name': '20050823 Re: Interspire ArticleLive 2005 (php version) is vulnerable to XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=112483966331737&w=2'}, {'name': '12879', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12879'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0881?


Explain the CVE ID: What does the identifier CVE-2005-0882 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0882.

SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) userpw parameters.


Provide references for further information: Can you share references or external links related to CVE-2005-0882?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://birdblog.sourceforge.net/ChangeLog'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.sourceforge.net/viewcvs.py/birdblog/birdblog/admin/admincore.php?r1=1.4&r2=1.5'}, {'name': 'birdblog-admincore-sql-injection(19799)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19799'}, {'name': '12880', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12880'}, {'name': '1013548', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013548'}, {'name': '14676', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14676'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0882?


Explain the CVE ID: What does the identifier CVE-2005-0883 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0883.

Multiple cross-site scripting (XSS) vulnerabilities in base.php for DigitalHive 2.0 allow remote attackers to inject arbitrary web script or HTML via (1) the mt parameter to the membres.php page or (2) the -afs-1- query string to the msg.php page.


Provide references for further information: Can you share references or external links related to CVE-2005-0883?

{'name': '12883', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12883'}, {'name': '14702', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14702'}, {'name': 'digitalhive-basephp-xss(19803)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19803'}, {'name': '1013516', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013516'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0883?


Explain the CVE ID: What does the identifier CVE-2005-0884 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0884.

DigitalHive 2.0 allows remote attackers to re-install the product by directly accessing the install script.


Provide references for further information: Can you share references or external links related to CVE-2005-0884?

{'name': '1013516', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013516'}, {'name': 'digitalhive-reinstall(19802)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19802'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0884?


Explain the CVE ID: What does the identifier CVE-2005-0885 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0885.

Multiple cross-site scripting (XSS) vulnerabilities in XMB Forum 1.9.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Mood or (2) "Send To" fields.


Provide references for further information: Can you share references or external links related to CVE-2005-0885?

{'name': '12886', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12886'}, {'name': '1013515', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013515'}, {'tags': ['x_refsource_MISC'], 'url': 'https://docs.xmbforum2.com/index.php?title=Security_Issue_History'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0885?


Explain the CVE ID: What does the identifier CVE-2005-0886 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0886.

Cross-site scripting (XSS) vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request.


Provide references for further information: Can you share references or external links related to CVE-2005-0886?

{'name': '12888', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12888'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0886?


Explain the CVE ID: What does the identifier CVE-2005-0887 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0887.

Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in (1) functions.inc.php or (2) main.php, which causes code to be injected into an eval statement.


Provide references for further information: Can you share references or external links related to CVE-2005-0887?

{'name': '14688', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14688'}, {'name': 'dcl-file-include(19806)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19806'}, {'name': '1013559', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013559'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=315144'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0887?


Explain the CVE ID: What does the identifier CVE-2005-0888 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0888.

Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote attackers to inject arbitrary web script or HTML via the (1) class or (2) method name.


Provide references for further information: Can you share references or external links related to CVE-2005-0888?

{'name': 'dcl-xss(19805)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19805'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=315160'}, {'name': '14688', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14688'}, {'name': '1013559', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013559'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0888?


Explain the CVE ID: What does the identifier CVE-2005-0889 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0889.

Cross-site scripting (XSS) vulnerability in index.php for Dream4 Koobi CMS 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the area parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0889?

{'name': '12895', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12895'}, {'name': '1013558', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013558'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0889?


Explain the CVE ID: What does the identifier CVE-2005-0890 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0890.

SQL injection vulnerability in Dream4 Koobi CMS 4.2.3 allows remote attackers to execute arbitrary SQL commands via the area parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0890?

{'name': '12896', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12896'}, {'name': '1013558', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013558'}, {'name': '14696', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14696'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0890?


Explain the CVE ID: What does the identifier CVE-2005-0891 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0891.

Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image.


Provide references for further information: Can you share references or external links related to CVE-2005-0891?

{'name': '12950', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12950'}, {'name': 'CLSA-2005:958', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000958'}, {'name': 'RHSA-2005:343', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-343.html'}, {'name': 'MDKSA-2005:214', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:214'}, {'name': 'FLSA-2005:155510', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/419771/100/0/threaded'}, {'name': 'RHSA-2005:344', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-344.html'}, {'name': 'oval:org.mitre.oval:def:9710', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9710'}, {'name': '17657', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17657'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0891?


Explain the CVE ID: What does the identifier CVE-2005-0892 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0892.

Buffer overflow in smail 3.2.0.120 allows remote attackers or local users to execute arbitrary code via a long string in the MAIL FROM command and possibly other SMTP commands.


Provide references for further information: Can you share references or external links related to CVE-2005-0892?

{'name': 'DSA-722', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-722'}, {'name': '20050325 smail remote and local root holes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111177045217717&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0892?


Explain the CVE ID: What does the identifier CVE-2005-0893 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0893.

modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc.


Provide references for further information: Can you share references or external links related to CVE-2005-0893?

{'name': '20050325 smail remote and local root holes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111177045217717&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0893?


Explain the CVE ID: What does the identifier CVE-2005-0894 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0894.

OpenmosixCollector and OpenMosixView in OpenMosixView 1.5 allow local users to overwrite or delete arbitrary files via a symlink attack on (1) temporary files in the openmosixcollector directory or (2) nodes.tmp.


Provide references for further information: Can you share references or external links related to CVE-2005-0894?

{'name': '12902', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12902'}, {'name': '14693', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14693'}, {'name': '20050325 RX250305 - OpenMosixView : Multiple Race conditions - advisory and exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111176899423078&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0894?


Explain the CVE ID: What does the identifier CVE-2005-0895 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0895.

Netcomm 1300NB DSL Modem allows remote attackers to cause a denial of service (device hang) via a large number of ping packets.


Provide references for further information: Can you share references or external links related to CVE-2005-0895?

{'name': '20050325 Netcomm 1300NB DSL Modem Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111177093020587&w=2'}, {'name': '12901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12901'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0895?


Explain the CVE ID: What does the identifier CVE-2005-0896 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0896.

Multiple cross-site scripting (XSS) vulnerabilities in review.php in phpMyDirectory 10.1.3-rel allow remote attackers to inject arbitrary web script or HTML via the (1) subcat, (2) page, or (3) subsubcat parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0896?

{'name': '12900', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12900'}, {'name': '20050325 phpMyDirectory 10.1.3-rel Cross site scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111176904423360&w=2'}, {'name': '14692', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14692'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0896?


Explain the CVE ID: What does the identifier CVE-2005-0897 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0897.

PHP remote file inclusion vulnerability in catalog.php in E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary PHP code by modifying the menu and main parameters to reference a URL on a remote web server that contains the code.


Provide references for further information: Can you share references or external links related to CVE-2005-0897?

{'name': '20050325 File inclusion and XSS vulnerability in E-Store Kit-2 PayPal Edition', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111186424600509&w=2'}, {'name': '12910', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12910'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0897?


Explain the CVE ID: What does the identifier CVE-2005-0898 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0898.

Cross-site scripting (XSS) vulnerability in downloadform.php in E-Store Kit-2 PayPal Edition allows remote attackers to inject arbitrary web script or HTML via the txn_id parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0898?

{'name': '20050325 File inclusion and XSS vulnerability in E-Store Kit-2 PayPal Edition', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111186424600509&w=2'}, {'name': '12909', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12909'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0898?


Explain the CVE ID: What does the identifier CVE-2005-0899 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0899.

AS/400 running OS400 5.2 installs and enables LDAP by default, which allows remote authenticated users to obtain OS/400 user profiles by performing a search.


Provide references for further information: Can you share references or external links related to CVE-2005-0899?

{'name': '20050325 AS/400 LDAP user accounts disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111186209318029&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0899?


Explain the CVE ID: What does the identifier CVE-2005-0900 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0900.

marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to obtain sensitive information via an invalid (1) file or (2) category parameter, which reveal the path in an error message.


Provide references for further information: Can you share references or external links related to CVE-2005-0900?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://nukebookmarks.sourceforge.net/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zone-h.org/advisories/read/id=7356'}, {'name': '20050325 ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111186145609320&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0900?


Explain the CVE ID: What does the identifier CVE-2005-0901 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0901.

Multiple cross-site scripting (XSS) vulnerabilities in NukeBookmarks 0.6 for PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via the (1) catname, (2) markname, (3) comment, or (4) category parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0901?


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0901?


Explain the CVE ID: What does the identifier CVE-2005-0902 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0902.

SQL injection vulnerability in marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the category parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0902?


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0902?


Explain the CVE ID: What does the identifier CVE-2005-0903 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0903.

Buffer overflow in QuickTime PictureViewer 6.5.1 allows remote attackers to cause a denial of service (application crash) via a JPEG file with crafted Huffman Table (marker DHT) data.


Provide references for further information: Can you share references or external links related to CVE-2005-0903?

{'name': '12905', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12905'}, {'name': '20050326 QuickTime malformed JPEG buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111186277521713&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0903?


Explain the CVE ID: What does the identifier CVE-2005-0904 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0904.

Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote attackers to shut down the system by executing TSShutdn.exe.


Provide references for further information: Can you share references or external links related to CVE-2005-0904?

{'name': 'windows-desktop-tsshutdnexe-dos(19819)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19819'}, {'name': '1013552', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013552'}, {'name': '889323', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/kb/889323'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0904?


Explain the CVE ID: What does the identifier CVE-2005-0905 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0905.

Maxthon 1.2.0 allows remote malicious web sites to obtain potentially sensitive data from the search bar via the m2_search_text property.


Provide references for further information: Can you share references or external links related to CVE-2005-0905?

{'tags': ['x_refsource_MISC'], 'url': 'http://forum.maxthon.com/forum/index.php?showtopic=18207'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.raffon.net/advisories/maxthon/searchbarid.html'}, {'name': '12898', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12898'}, {'name': '20050325 Maxthon browser search bar information disclosure', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=111175236620942&w=2'}, {'name': '14712', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14712'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0905?


Explain the CVE ID: What does the identifier CVE-2005-0906 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0906.

Buffer overflow in a player logging function in the Tincat network library 2.x before 2.0.28, as used in games such as Sacred and The Settlers: Heritage of Kings, allows remote attackers to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2005-0906?

{'name': '14762', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14762'}, {'name': '20050328 Buffer-overflow in Tincat 2 minor than 2.0.28 (Sacred, Settlers 5 and others)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/394404'}, {'name': '14767', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14767'}, {'name': '12912', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12912'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/tincat2bof-adv.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0906?


Explain the CVE ID: What does the identifier CVE-2005-0907 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0907.

Multiple SQL injection vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to category.php, (2) the id parameter to item.php, (3) the lang parameter to index.php, (4) the searchQuery parameter to search_result.php, (5) or the searchTopCategoryID parameter to search_result.php.


Provide references for further information: Can you share references or external links related to CVE-2005-0907?

{'name': '20050327 Multiple sql injection, and xss vulnerabilities in Vladersoft Shopping Cart v.3.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/394406/2005-03-26/2005-04-01/2'}, {'name': '1013565', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013565'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0907?


Explain the CVE ID: What does the identifier CVE-2005-0908 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0908.

Multiple cross-site scripting (XSS) vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter to index.php or (2) the searchTopCategoryID parameter to search_result.php.


Provide references for further information: Can you share references or external links related to CVE-2005-0908?


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0908?


Explain the CVE ID: What does the identifier CVE-2005-0909 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0909.

PHP remote file inclusion vulnerability in shoutact.php for TKai's Shoutbox allows remote attackers to execute arbitrary PHP code via the query parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0909?

{'name': "20050328 THai's Shoutbox correction name", 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=111202260908735&w=2'}, {'name': '12914', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12914'}, {'name': "20050327 THai's Shoutbox XSS (Spoofing URL) BUG", 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/lists/fulldisclosure/2005/Mar/0900.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0909?


Explain the CVE ID: What does the identifier CVE-2005-0910 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0910.

Multiple cross-site scripting (XSS) vulnerabilities in exoops allow remote attackers to inject arbitrary web script or HTML via (1) the sortdays parameter to viewforum.php or (2) the viewcat parameter to index.php.


Provide references for further information: Can you share references or external links related to CVE-2005-0910?

{'name': '1013566', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013566'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0910?


Explain the CVE ID: What does the identifier CVE-2005-0911 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0911.

Multiple SQL injection vulnerabilities in exoops may allow remote attackers to execute arbitrary SQL commands via (1) the viewcat parameter to index.php or (2) the artid parameter in the viewarticle action for index.php.


Provide references for further information: Can you share references or external links related to CVE-2005-0911?


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0911?


Explain the CVE ID: What does the identifier CVE-2005-0912 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0912.

Unknown vulnerabilities in deplate before 0.7.2 have unknown impact, possibly involving elements.rb.


Provide references for further information: Can you share references or external links related to CVE-2005-0912?

{'name': '1013555', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013555'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=315034'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0912?


Explain the CVE ID: What does the identifier CVE-2005-0913 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0913.

Unknown vulnerability in the regex_replace modifier (modifier.regex_replace.php) in Smarty before 2.6.8 allows attackers to execute arbitrary PHP code.


Provide references for further information: Can you share references or external links related to CVE-2005-0913?

{'name': '14729', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14729/'}, {'name': '12941', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12941'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://news.php.net/php.smarty.dev/2673'}, {'name': 'GLSA-200503-35', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200503-35.xml'}, {'name': 'smarty-regexreplace-security-bpass(19880)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19880'}, {'name': '1013556', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013556'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0913?


Explain the CVE ID: What does the identifier CVE-2005-0914 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0914.

Multiple cross-site scripting (XSS) vulnerabilities in CPG Dragonfly 9.0.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) the profile parameter to index.php or (2) the cat parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0914?

{'name': '1013573', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013573'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.talte.net/content/view/252/46/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0914?


Explain the CVE ID: What does the identifier CVE-2005-0915 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0915.

Webmasters-Debutants WD Guestbook 2.8 allows remote attackers to bypass authentication and perform certain administrator actions via a direct HTTP POST request to (1) ajout_admin2.php or (2) suppr.php.


Provide references for further information: Can you share references or external links related to CVE-2005-0915?

{'name': '1013570', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013570'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0915?


Explain the CVE ID: What does the identifier CVE-2005-0916 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0916.

AIO in the Linux kernel 2.6.11 on the PPC64 or IA64 architectures with CONFIG_HUGETLB_PAGE enabled allows local users to cause a denial of service (system panic) via a process that executes the io_queue_init function but exits without running io_queue_release, which causes exit_aio and is_hugepage_only_range to fail.


Provide references for further information: Can you share references or external links related to CVE-2005-0916?

{'name': 'SUSE-SA:2005:050', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_50_kernel.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://groups-beta.google.com/group/linux.kernel/browse_thread/thread/13b43bd5783842f6/7ce3c5a514a497ab?q=io_queue_init&rnum=3#7ce3c5a514a497ab'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://linux.bkbits.net:8080/linux-2.6/cset%404248c8c0es30_4YVdwa6vteKi7h_nw'}, {'name': '12987', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12987'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0916?


Explain the CVE ID: What does the identifier CVE-2005-0917 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0917.

PHP remote file inclusion vulnerability in index_header.php for EncapsBB 0.3.2_fixed, and possibly other versions, allows remote attackers to execute arbitrary PHP code via the root parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0917?

{'name': '1013569', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013569'}, {'name': '15078', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15078'}, {'name': '14761', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14761'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0917?


Explain the CVE ID: What does the identifier CVE-2005-0918 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0918.

The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src property to the target filename and using Javascript to determine if the web page immediately stops loading, which indicates whether the file exists or not.


Provide references for further information: Can you share references or external links related to CVE-2005-0918?

{'name': '1013890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013890'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/techdocs/323585.html'}, {'name': '15255', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15255'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hyperdose.com/advisories/H2005-07.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0918?


Explain the CVE ID: What does the identifier CVE-2005-0919 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0919.

Adventia Chat 3.1 and Server Pro 3.0 allows remote attackers to inject arbitrary web script or HTML into the chat space, which leaves other users vulnerable to cross-site scripting (XSS) attacks.


Provide references for further information: Can you share references or external links related to CVE-2005-0919?

{'name': '12927', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12927'}, {'name': '12940', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12940'}, {'tags': ['x_refsource_MISC'], 'url': 'http://exploitlabs.com/files/advisories/EXPL-A-2005-003-adventiachat.txt'}, {'name': '1013588', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013588'}, {'name': 'adventia-chat-field-xss(21317)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/21317'}, {'name': '20050329 Adventia Chat', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=111211930330410&w=2'}, {'name': '15156', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15156'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0919?


Explain the CVE ID: What does the identifier CVE-2005-0920 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0920.

Multiple SQL injection vulnerabilities in Bugtracker.NET 2.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2005-0920?

{'name': '12925', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12925'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=315830'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0920?


Explain the CVE ID: What does the identifier CVE-2005-0921 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0921.

Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy.


Provide references for further information: Can you share references or external links related to CVE-2005-0921?

{'name': '896093', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/kb/896093'}, {'name': '12913', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12913'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0921?


Explain the CVE ID: What does the identifier CVE-2005-0922 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0922.

Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (system hang or crash) by triggering a scan of a certain file type.


Provide references for further information: Can you share references or external links related to CVE-2005-0922?

{'name': '12923', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12923'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2005.03.28.html'}, {'name': '1013586', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013586'}, {'name': 'VU#146020', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/146020'}, {'name': '1013587', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013587'}, {'name': '1013585', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013585'}, {'name': '14741', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14741'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0922?


Explain the CVE ID: What does the identifier CVE-2005-0923 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0923.

The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (CPU consumption and system crash) by renaming a file on a network share.


Provide references for further information: Can you share references or external links related to CVE-2005-0923?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://securityresponse.symantec.com/avcenter/security/Content/2005.03.28.html'}, {'name': '1013586', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013586'}, {'name': 'VU#713620', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/713620'}, {'name': '1013587', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013587'}, {'name': '12924', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12924'}, {'name': '1013585', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013585'}, {'name': '14741', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14741'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0923?


Explain the CVE ID: What does the identifier CVE-2005-0924 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0924.

Cross-site scripting (XSS) vulnerability in Adventia E-Data 2.0 allows remote attackers to inject arbitrary web script or HTML via a query keyword.


Provide references for further information: Can you share references or external links related to CVE-2005-0924?

{'name': '14739', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14739'}, {'name': '20050329 E-Data', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=111211945505635&w=2'}, {'name': '12927', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12927'}, {'name': '1013589', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013589'}, {'tags': ['x_refsource_MISC'], 'url': 'http://exploitlabs.com/files/advisories/EXPL-A-2005-004-edata.txt'}, {'name': 'edata-new-user-xss(19889)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19889'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0924?


Explain the CVE ID: What does the identifier CVE-2005-0925 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0925.

Cross-site scripting (XSS) vulnerability in login.asp for Ublog Reload 1.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0925?

{'name': '1013603', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013603'}, {'name': '12931', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12931'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.persianhacker.net/news/news-2945.html'}, {'name': '15121', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15121'}, {'name': '20050329 [PersianHacker.NET 200503-11]Ublog reload 1.0.4 and prior', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111214393101387&w=2'}, {'name': '14725', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14725'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0925?


Explain the CVE ID: What does the identifier CVE-2005-0926 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0926.

Buffer overflow in Sylpheed before 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attachments with MIME-encoded file names.


Provide references for further information: Can you share references or external links related to CVE-2005-0926?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sylpheed.good-day.net/changelog.html.en'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0926?


Explain the CVE ID: What does the identifier CVE-2005-0927 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0927.

Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharacters or .. sequences.


Provide references for further information: Can you share references or external links related to CVE-2005-0927?

{'name': '14716', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14716'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=195'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=316038'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0927?


Explain the CVE ID: What does the identifier CVE-2005-0928 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0928.

Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 5.x allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) password, (3) ppuser, (4) sort, or (5) si parameters to showgallery.php, the (6) ppuser, (7) sort, or (8) si parameters to showmembers.php, or (9) the photo parameter to slideshow.php.


Provide references for further information: Can you share references or external links related to CVE-2005-0928?

{'name': '15098', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15098'}, {'name': '14742', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14742'}, {'name': '20050328 Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111205342909640&w=2'}, {'name': '15097', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15097'}, {'name': '15096', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15096'}, {'name': '1013581', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013581'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0928?


Explain the CVE ID: What does the identifier CVE-2005-0929 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0929.

SQL injection vulnerability in PhotoPost PHP Pro 5.x may allow remote attackers to execute arbitrary SQL commands via (1) the sl parameter to showmembers.php or (2) the photo parameter to showphoto.php.


Provide references for further information: Can you share references or external links related to CVE-2005-0929?

{'name': '14742', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14742'}, {'name': '15100', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15100'}, {'name': '20050328 Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111205342909640&w=2'}, {'name': '15099', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15099'}, {'name': '20050328 Re: Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111213719017716&w=2'}, {'name': '1013581', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013581'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0929?


Explain the CVE ID: What does the identifier CVE-2005-0930 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0930.

Cross-site scripting (XSS) vulnerability in message.php in Chatness 2.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the user field or (2) the message parameter to message.php.


Provide references for further information: Can you share references or external links related to CVE-2005-0930?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.persianhacker.net/news/news-2946.html'}, {'name': '20050329 [PersianHacker.NET 200503-12]Chatness 2.5.1 and prior XSS Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/394526'}, {'name': '12929', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12929'}, {'name': '1013604', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013604'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0930?


Explain the CVE ID: What does the identifier CVE-2005-0931 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0931.

PHP remote file inclusion vulnerability in The Includer 1.0 and 1.1 allows remote attackers to execute arbitrary PHP code.


Provide references for further information: Can you share references or external links related to CVE-2005-0931?

{'name': '12926', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12926'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0931?


Explain the CVE ID: What does the identifier CVE-2005-0932 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0932.

Multiple SQL injection vulnerabilities in phpCOIN 1.2.1b and earlier allow remote attackers to execute arbitrary SQL commands (1) via the search engine, (2) the username or email fields in the "forgotten password" feature, or (3) the domain name in a package order.


Provide references for further information: Can you share references or external links related to CVE-2005-0932?

{'name': '12917', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12917'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00065-03292005'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0932?


Explain the CVE ID: What does the identifier CVE-2005-0933 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0933.

Directory traversal vulnerability in auxpage.php for phpCOIN 1.2.1b and earlier allows remote attackers to read arbitrary files via the page parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0933?


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0933?


Explain the CVE ID: What does the identifier CVE-2005-0934 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0934.

Multiple cross-site scripting (XSS) vulnerabilities in WackoWiki R4 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2005-0934?

{'name': '14720', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14720'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wackowiki.com/WackoDownload/InEnglish#h4828-4'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0934?


Explain the CVE ID: What does the identifier CVE-2005-0935 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0935.

Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the (1) idpages parameter to pages.php or the (2) id2 parameter to products1.php.


Provide references for further information: Can you share references or external links related to CVE-2005-0935?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.hackerscenter.com/Archive/view.asp?id=1774'}, {'name': '15057', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15057'}, {'name': '20050330 Multiple sql injection, and xss vulnerabilities in Pay pal Storefront', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111221890614271&w=2'}, {'name': '1013563', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013563'}, {'name': '14711', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14711'}, {'name': '12903', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12903'}, {'name': '15058', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15058'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0935?


Explain the CVE ID: What does the identifier CVE-2005-0936 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0936.

Cross-site scripting vulnerability in products1h.php in ESMI PayPal Storefront allows remote attackers to inject arbitrary web script or HTML via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0936?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.hackerscenter.com/Archive/view.asp?id=1774'}, {'name': '20050330 Multiple sql injection, and xss vulnerabilities in Pay pal Storefront', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111221890614271&w=2'}, {'name': '12904', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12904'}, {'name': '1013563', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013563'}, {'name': '14711', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14711'}, {'name': '15059', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15059'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0936?


Explain the CVE ID: What does the identifier CVE-2005-0937 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0937.

Some futex functions in futex.c for Linux kernel 2.6.x perform get_user calls while holding the mmap_sem semaphore, which could allow local users to cause a deadlock condition in do_page_fault by triggering get_user faults while another thread is executing mmap or other functions.


Provide references for further information: Can you share references or external links related to CVE-2005-0937?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://linux.bkbits.net:8080/linux-2.6/cset%40421cfc11zFsK9gxvSJ2t__FCmuUd3Q'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lkml.org/lkml/2005/2/22/123'}, {'name': 'oval:org.mitre.oval:def:10037', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10037'}, {'name': 'RHSA-2005:420', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-420.html'}, {'name': 'FLSA:157459-3', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/427980/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0937?


Explain the CVE ID: What does the identifier CVE-2005-0938 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0938.

Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows remote attackers to read usernames and hashed passwords via a direct request to ublogreload.mdb.


Provide references for further information: Can you share references or external links related to CVE-2005-0938?

{'name': '1013603', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013603'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.persianhacker.net/news/news-2945.html'}, {'name': '20050329 [PersianHacker.NET 200503-11]Ublog reload 1.0.4 and prior', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111214393101387&w=2'}, {'name': '14725', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14725'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0938?


Explain the CVE ID: What does the identifier CVE-2005-0940 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0940.


Provide references for further information: Can you share references or external links related to CVE-2005-0940?


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0940?


Explain the CVE ID: What does the identifier CVE-2005-0941 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0941.

The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit length values, but process memory using 32 bit values, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a DOC document with certain length values, which leads to a heap-based buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2005-0941?

{'name': 'RHSA-2005:375', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-375.html'}, {'name': '13092', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13092'}, {'name': 'SUSE-SR:2005:021', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_21_sr.html'}, {'name': 'oval:org.mitre.oval:def:9106', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9106'}, {'name': 'GLSA-200504-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200504-13.xml'}, {'name': '20050412 OpenOffice DOC document Heap Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/395516'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openoffice.org/issues/show_bug.cgi?id=46388'}, {'name': '17027', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17027'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0941?


Explain the CVE ID: What does the identifier CVE-2005-0942 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0942.

The XP Server process (xp_server) in Sybase Adaptive Server Enterprise (ASE) XP Server 12.x before 12.5.3 ESD#1 allows attackers to cause a denial of service (process crash) via malformed data sent to the XP Server TCP port.


Provide references for further information: Can you share references or external links related to CVE-2005-0942?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/sybase-ase.txt'}, {'name': 'sybase-adaptive-server(19354)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19354'}, {'name': '20050321 Details of Sybase ASE bugs withheld', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/393851'}, {'name': '20050405 Sybase ASE Multiple Security Issues (#NISR05042005)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111272918117194&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sybase.com/detail/1%2C6904%2C1033894%2C00.html'}, {'name': '13632', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/13632'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sybase.com/detail?id=1034520'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sybase.com/detail?id=1034752'}, {'name': '12080', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12080'}, {'name': '20041222 Sybase ASE 12.5.2 vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0942?


Explain the CVE ID: What does the identifier CVE-2005-0943 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0943.

Cisco VPN 3000 series Concentrator running firmware 4.1.7.A and earlier allows remote attackers to cause a denial of service (device reload or drop user connection) via a crafted HTTPS packet.


Provide references for further information: Can you share references or external links related to CVE-2005-0943?

{'name': '20050330 Cisco VPN 3000 Concentrator Vulnerable to Crafted SSL Attack', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20050330-vpn3k.shtml'}, {'name': '12948', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12948'}, {'name': '14784', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14784'}, {'name': 'cisco-vpn-3000-dos(19903)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19903'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0943?


Explain the CVE ID: What does the identifier CVE-2005-0944 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0944.

Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0, related to insufficient data validation, allows remote attackers to execute arbitrary code via a crafted mdb file.


Provide references for further information: Can you share references or external links related to CVE-2005-0944?

{'name': '20060808 Re: Will Microsoft patch remarkable old Msjet40.dll issue?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/442610/100/100/threaded'}, {'name': '20050331 [HV-HIGH] Microsoft Jet DB engine vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111231465920199&w=2'}, {'name': '20060804 Will Microsoft patch remarkable old Msjet40.dll issue?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/442446/100/100/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hexview.com/docs/20050331-1.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blogs.securiteam.com/?p=535'}, {'name': 'VU#176380', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/176380'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0944?


Explain the CVE ID: What does the identifier CVE-2005-0945 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0945.

Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1 allows remote attackers to inject arbitrary web script or HTML via onmouseover or onload events in (1) img, (2) link, or (3) mail tags.


Provide references for further information: Can you share references or external links related to CVE-2005-0945?

{'name': '14744', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14744/'}, {'name': '1013584', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013584'}, {'name': '20050328 Multiple XSS vulnerabilities in ACS Blog', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111214069029812&w=2'}, {'name': 'acsblog-tags-xss(19864)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19864'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0945?


Explain the CVE ID: What does the identifier CVE-2005-0946 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0946.

SQL injection vulnerability in phpCoin 1.2.1b and earlier allows remote attackers to execute arbitrary SQL commands via the (1) term/keywords field on the search page, (2) username or (3) e-mail field on the forgot password page, or (4) domain name on the ordering new package page.


Provide references for further information: Can you share references or external links related to CVE-2005-0946?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00065-03292005'}, {'name': '20050329 Multiple phpCoin Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111214190111520&w=2'}, {'name': '12917', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12917'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0946?


Explain the CVE ID: What does the identifier CVE-2005-0947 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0947.

Directory traversal vulnerability in auxpage.php in phpCoin 1.2.1b and earlier allows remote attackers to read and execute arbitrary files via a .. (dot dot) in the page parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0947?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00065-03292005'}, {'name': 'phpcoin-auxpage-file-include(19896)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19896'}, {'name': '20050329 Multiple phpCoin Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111214190111520&w=2'}, {'name': '12917', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12917'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0947?


Explain the CVE ID: What does the identifier CVE-2005-0948 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0948.

SQL injection vulnerability in ad_click.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via the banner_id parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0948?

{'name': '14749', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14749'}, {'name': '20050329 Multiple sql injection, and xss vulnerabilities in PortalApp', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111213291118273&w=2'}, {'name': '1013591', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013591'}, {'tags': ['x_refsource_MISC'], 'url': 'http://icis.digitalparadox.org/~dcrab/portalapp.txt'}, {'name': 'portalapp-adclick-sql-injection(19892)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19892'}, {'name': '12936', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12936'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0948?


Explain the CVE ID: What does the identifier CVE-2005-0949 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0949.

Multiple cross-site scripting (XSS) vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject arbitrary web script or HTML via the (1) contenttype or (2) keywords parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0949?

{'name': '14749', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14749'}, {'name': '20050329 Multiple sql injection, and xss vulnerabilities in PortalApp', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111213291118273&w=2'}, {'name': '1013591', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013591'}, {'tags': ['x_refsource_MISC'], 'url': 'http://icis.digitalparadox.org/~dcrab/portalapp.txt'}, {'name': '12936', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12936'}, {'name': 'portalapp-contentasp-xss(19891)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19891'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0949?


Explain the CVE ID: What does the identifier CVE-2005-0950 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0950.

Directory traversal vulnerability in FastStone 4in1 Browser 1.2 allows remote attackers to read arbitrary files via a (1) ... (triple dot) or (2) ..\ (dot dot backslash) in the URL.


Provide references for further information: Can you share references or external links related to CVE-2005-0950?

{'name': '1013596', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013596'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.autistici.org/fdonato/advisory/FastStone4in1Browser1.2-adv.txt'}, {'name': '20050329 directory traversal in FastStone 4in1 Browser 1.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111213034206802&w=2'}, {'name': 'faststone-dotdot-directory-traversal(19900)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19900'}, {'name': '12937', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12937'}, {'name': '14743', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14743'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0950?


Explain the CVE ID: What does the identifier CVE-2005-0951 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0951.


Provide references for further information: Can you share references or external links related to CVE-2005-0951?


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0951?


Explain the CVE ID: What does the identifier CVE-2005-0952 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0952.

Cross-site scripting vulnerability in pafiledb.php in PaFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0952?

{'tags': ['x_refsource_MISC'], 'url': 'http://digitalparadox.org/advisories/pafdb.txt'}, {'name': '20061008 XSS IN paFileDB 3.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/448017/100/100/threaded'}, {'name': '20050330 PaFileDB Version 3.1 and below are exploitable via a XSS and a SQL injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111221940107161&w=2'}, {'name': 'pafiledb-action-xss(29394)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/29394'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0952?


Explain the CVE ID: What does the identifier CVE-2005-0953 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0953.

Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.


Provide references for further information: Can you share references or external links related to CVE-2005-0953?

{'name': 'oval:org.mitre.oval:def:1154', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1154'}, {'name': 'FLSA:158801', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_158801__Updated_bzip2_packages_fix_security_issues.html'}, {'name': '26444', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/26444'}, {'name': 'NetBSD-SA2008-004', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-004.txt.asc'}, {'name': 'bzip2-toctou-symlink(19926)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19926'}, {'name': 'DSA-730', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2005/dsa-730'}, {'name': 'OpenPKG-SA-2007.002', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.002.html'}, {'name': 'oval:org.mitre.oval:def:10902', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10902'}, {'name': '27274', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/27274'}, {'name': '20070109 rPSA-2007-0004-1 bzip2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/456430/30/8730/threaded'}, {'name': '200191', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-200191-1'}, {'name': 'APPLE-SA-2007-11-14', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=307041'}, {'name': 'ADV-2007-3525', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/3525'}, {'name': 'ADV-2007-3868', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/3868'}, {'name': '29940', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29940'}, {'name': '20060301-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc'}, {'name': '27643', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/27643'}, {'name': '12954', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12954'}, {'name': '19183', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19183'}, {'name': 'MDKSA-2006:026', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:026'}, {'name': 'RHSA-2005:474', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-474.html'}, {'name': 'TA07-319A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA07-319A.html'}, {'name': '20050330 bzip2 TOCTOU file-permissions vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111229375217633&w=2'}, {'name': '103118', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-103118-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0953?


Explain the CVE ID: What does the identifier CVE-2005-0954 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0954.

Windows Explorer and Internet Explorer in Windows 2000 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a malformed Windows Metafile (WMF) file.


Provide references for further information: Can you share references or external links related to CVE-2005-0954?

{'name': '20050331 WindowsXP malformed .wmf files DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111231106513788&w=2'}, {'name': '9892', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/9892'}, {'name': 'winxp-explorer-wmf-dos(15507)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/15507'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/windowsntfocus/5CP081FFFY.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0954?


Explain the CVE ID: What does the identifier CVE-2005-0955 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0955.

SQL injection vulnerability in InterAKT MX Shop 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id_ctg parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0955?

{'name': '20050331 MX Shop 1.1.1 and MX Kart 1.1.2 are vulnerable to multiple SQL injection vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111230101127767&w=2'}, {'name': '12957', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12957'}, {'name': '14793', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14793'}, {'tags': ['x_refsource_MISC'], 'url': 'http://icis.digitalparadox.org/~dcrab/mxmk.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0955?


Explain the CVE ID: What does the identifier CVE-2005-0956 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0956.

Multiple SQL injection vulnerabilities in index.php in InterAKT MX Kart 1.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) idp, (2) id_ctg, or (3) id_man parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-0956?

{'name': '20050331 MX Shop 1.1.1 and MX Kart 1.1.2 are vulnerable to multiple SQL injection vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111230101127767&w=2'}, {'name': '14793', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14793'}, {'tags': ['x_refsource_MISC'], 'url': 'http://icis.digitalparadox.org/~dcrab/mxmk.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0956?


Explain the CVE ID: What does the identifier CVE-2005-0957 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0957.

Bay Technical Associates RPC-3 Telnet Host 3.05 allows remote attackers to bypass authentication by pressing the escape and enter keys at the username prompt.


Provide references for further information: Can you share references or external links related to CVE-2005-0957?

{'name': '20050331 Bay Technical Associates telnet server logon bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111230568025271&w=2'}, {'name': '12955', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12955'}, {'name': 'rpc3-logon-bypass-authentication(19921)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19921'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0957?


Explain the CVE ID: What does the identifier CVE-2005-0958 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0958.

Format string vulnerability in the log_do function in log.c for YepYep mtftpd 0.0.3, when the statistics option is enabled, allows remote attackers to execute arbitrary code via the CWD command.


Provide references for further information: Can you share references or external links related to CVE-2005-0958?

{'name': '12947', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12947'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.tripbit.org/advisories/TA-040305.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://unl0ck.org/files/papers/mtftpd.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/exploits/5KP0W0AF5K.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0958?


Explain the CVE ID: What does the identifier CVE-2005-0959 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0959.

Buffer overflow in the mt_do_dir function in YepYep mtftpd 0.0.3 may allow attackers to execute arbitrary code via a long path.


Provide references for further information: Can you share references or external links related to CVE-2005-0959?

{'name': '12947', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12947'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.tripbit.org/advisories/TA-040305.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0959?


Explain the CVE ID: What does the identifier CVE-2005-0960 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0960.

Multiple vulnerabilities in the SACK functionality in (1) tcp_input.c and (2) tcp_usrreq.c OpenBSD 3.5 and 3.6 allow remote attackers to cause a denial of service (memory exhaustion or system crash).


Provide references for further information: Can you share references or external links related to CVE-2005-0960?

{'name': '20050330 [3.5] 030: RELIABILITY FIX: March 30, 2005', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata35.html#sack'}, {'name': '1013611', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013611'}, {'name': '12951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12951'}, {'name': '20050330 [3.6] 013: RELIABILITY FIX: March 30, 2005', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata.html#sack'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0960?


Explain the CVE ID: What does the identifier CVE-2005-0961 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0961.

Cross-site scripting (XSS) vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary web script or HTML via the parent frame title.


Provide references for further information: Can you share references or external links related to CVE-2005-0961?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.horde.org/archives/announce/2005/000176.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.49&r2=1.515.2.93&ty=h'}, {'name': 'SUSE-SR:2005:016', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_16_sr.html'}, {'name': '14730', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14730'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0961?


Explain the CVE ID: What does the identifier CVE-2005-0962 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0962.

SQL injection vulnerability in index.php for Lighthouse Squirrelcart allows remote attackers to execute arbitrary SQL commands via the (1) crn parameter in a show action or (2) rn parameter in a show_detail action.


Provide references for further information: Can you share references or external links related to CVE-2005-0962?

{'tags': ['x_refsource_MISC'], 'url': 'http://digitalparadox.org/advisories/sqc.txt'}, {'name': 'squirrelcart-index-sql-injection(19904)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19904'}, {'name': '12944', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12944'}, {'name': '14770', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14770'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0962?


Explain the CVE ID: What does the identifier CVE-2005-0963 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0963.

An error in the Toshiba ACPI BIOS 1.6 causes the BIOS to only examine the first slot in the Master Boot Record (MBR) table for an active partition, which prevents the system from booting even though the MBR is not malformed.  NOTE: it has been debated as to whether or not this issue poses a security vulnerability, since administrative privileges would be required, and other DoS attacks are possible with such privileges.


Provide references for further information: Can you share references or external links related to CVE-2005-0963?

{'name': '20050331 Re: Portcullis Security Advisory 05-011 ACPI 1.6 BIOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111229708208629&w=2'}, {'name': '20050331 RE: Portcullis Security Advisory 05-011 ACPI 1.6 BIOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111229803502643&w=2'}, {'name': 'toshiba-acpi-bios-dos(19895)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19895'}, {'name': '20050329 Portcullis Security Advisory 05-011 ACPI 1.6 BIOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111214319914810&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0963?


Explain the CVE ID: What does the identifier CVE-2005-0964 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0964.

Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a malicious process that impersonates a legitimate process that has fewer restrictions.


Provide references for further information: Can you share references or external links related to CVE-2005-0964?

{'name': '12946', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12946'}, {'name': '14717', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14717'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kerio.com/security_advisory.html#0503'}, {'name': 'kerio-firewall-rule-security-bypass(19893)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19893'}, {'name': '1013607', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013607'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0964?


Explain the CVE ID: What does the identifier CVE-2005-0965 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0965.

The gaim_markup_strip_html function in Gaim 1.2.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application crash) via a string that contains malformed HTML, which causes an out-of-bounds read.


Provide references for further information: Can you share references or external links related to CVE-2005-0965?

{'name': 'MDKSA-2005:071', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:071'}, {'name': 'FLSA:158543', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/426078/100/0/threaded'}, {'name': 'oval:org.mitre.oval:def:11292', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11292'}, {'name': '14815', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14815'}, {'name': '12999', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/12999'}, {'name': 'RHSA-2005:365', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-365.html'}, {'name': '20050401 multiple remote denial of service vulnerabilities in Gaim', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111238715307356&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gaim.sourceforge.net/security/index.php?id=13'}, {'name': 'SUSE-SA:2005:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_36_sudo.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0965?


Explain the CVE ID: What does the identifier CVE-2005-0966 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0966.

The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows (1) remote attackers to inject arbitrary Gaim markup via irc_msg_kick, irc_msg_mode, irc_msg_part, irc_msg_quit, (2) remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via irc_msg_invite, or (3) malicious IRC servers to cause a denial of service (application crash) by injecting certain Pango markup into irc_msg_badmode, irc_msg_banned, irc_msg_unknown, irc_msg_nochan functions.


Provide references for further information: Can you share references or external links related to CVE-2005-0966?

{'name': 'MDKSA-2005:071', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:071'}, {'name': 'FLSA:158543', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/426078/100/0/threaded'}, {'name': 'oval:org.mitre.oval:def:9185', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9185'}, {'name': '14815', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14815'}, {'name': 'gaim-ircmsginvite-dos(19939)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19939'}, {'name': '13003', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13003'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gaim.sourceforge.net/security/index.php?id=14'}, {'name': 'gaim-irc-plugin-bo(19937)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/19937'}, {'name': 'RHSA-2005:365', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-365.html'}, {'name': '20050401 multiple remote denial of service vulnerabilities in Gaim', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111238715307356&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?group_id=235&release_id=317750'}, {'name': 'SUSE-SA:2005:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_36_sudo.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0966?


Explain the CVE ID: What does the identifier CVE-2005-0967 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0967.

Gaim 1.2.0 allows remote attackers to cause a denial of service (application crash) via a malformed file transfer request to a Jabber user, which leads to an out-of-bounds read.


Provide references for further information: Can you share references or external links related to CVE-2005-0967?

{'name': 'MDKSA-2005:071', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2005:071'}, {'name': 'FLSA:158543', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.securityfocus.com/archive/1/426078/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/tracker/?func=detail&aid=1172115&group_id=235&atid=100235'}, {'name': 'oval:org.mitre.oval:def:9657', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9657'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gaim.sourceforge.net/security/?id=15'}, {'name': '14815', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14815'}, {'name': 'RHSA-2005:365', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-365.html'}, {'name': '13004', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13004'}, {'name': 'SUSE-SA:2005:036', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_36_sudo.html'}, {'name': '1013645', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013645'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0967?


Explain the CVE ID: What does the identifier CVE-2005-0968 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0968.

Computer Associates (CA) eTrust Intrusion Detection 3.0 allows remote attackers to cause a denial of service via large size values that are not properly validated before calling the CPImportKey function in the Crypto API.


Provide references for further information: Can you share references or external links related to CVE-2005-0968?

{'name': '20050405 Computer Associates eTrust Intrusion Detection System CPImportKey DoS Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=223&type=vulnerabilities'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0968?


Explain the CVE ID: What does the identifier CVE-2005-0969 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-0969.

Heap-based buffer overflow in the syscall emulation functionality in Mac OS X before 10.3.9 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via crafted parameters.


Provide references for further information: Can you share references or external links related to CVE-2005-0969?

{'name': 'APPLE-SA-2005-04-15', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Apr/msg00000.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-0969?