Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1442?


Explain the CVE ID: What does the identifier CVE-2005-1443 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1443.

Multiple cross-site scripting (XSS) vulnerabilities in index.php for Invision Power Board (IPB) 2.0.3 and 2.1 Alpha 2 allows remote attackers to inject arbitrary web script or HTML via the (1) act, (2) Members, (3) calendar, or (4) HID parameters.


Provide references for further information: Can you share references or external links related to CVE-2005-1443?

{'name': '1013863', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013863'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1443?


Explain the CVE ID: What does the identifier CVE-2005-1444 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1444.

Multiple cross-site scripting (XSS) vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to inject arbitrary web script or HTML via (1) the v, show, or sec_name parameters to main.php, (2) the inadmin, newsev, or postid parameters to 5.php, or (3) the id parameter to 0.php.


Provide references for further information: Can you share references or external links related to CVE-2005-1444?

{'name': '16264', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16264'}, {'name': '16262', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16262'}, {'name': '15213', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15213'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00072-05032005'}, {'name': '16263', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16263'}, {'tags': ['x_refsource_MISC'], 'url': 'http://forum.sitepanel2.com/index.php?showtopic=271'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1444?


Explain the CVE ID: What does the identifier CVE-2005-1445 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1445.

Multiple directory traversal vulnerabilities in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to (1) delete arbitrary files via the id parameter in a rmattach action to 5.php, or (2) read arbitrary files via the lang parameter to index.php.


Provide references for further information: Can you share references or external links related to CVE-2005-1445?

{'name': '16266', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16266'}, {'name': '15213', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15213'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00072-05032005'}, {'tags': ['x_refsource_MISC'], 'url': 'http://forum.sitepanel2.com/index.php?showtopic=271'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1445?


Explain the CVE ID: What does the identifier CVE-2005-1446 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1446.

SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to upload and execute arbitrary files such as PHP scripts via an attachment to a trouble ticket.


Provide references for further information: Can you share references or external links related to CVE-2005-1446?

{'name': '15213', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15213'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00072-05032005'}, {'tags': ['x_refsource_MISC'], 'url': 'http://forum.sitepanel2.com/index.php?showtopic=271'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1446?


Explain the CVE ID: What does the identifier CVE-2005-1447 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1447.

PHP remote file inclusion vulnerability in main.php in SitePanel 2.6.1 and earlier (SitePanel2) allows remote attackers to execute arbitrary PHP code via the p parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-1447?

{'name': '16268', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16268'}, {'name': '15213', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15213'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00072-05032005'}, {'tags': ['x_refsource_MISC'], 'url': 'http://forum.sitepanel2.com/index.php?showtopic=271'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1447?


Explain the CVE ID: What does the identifier CVE-2005-1448 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1448.

Cross-site scripting (XSS) vulnerability in the BBCode plugin for Serendipity before 0.8 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2005-1448?

{'name': '13411', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13411'}, {'name': '15145', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15145'}, {'name': '15876', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15876'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.s9y.org/63.html#A9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1448?


Explain the CVE ID: What does the identifier CVE-2005-1449 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1449.

Unknown vulnerability in serendipity_config_local.inc.php for Serendipity before 0.8 has unknown impact.


Provide references for further information: Can you share references or external links related to CVE-2005-1449?

{'name': '15145', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15145'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.s9y.org/63.html#A9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1449?


Explain the CVE ID: What does the identifier CVE-2005-1450 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1450.

Unknown vulnerability in "the function used to validate path-names for uploading media" in Serendipity before 0.8 has unknown impact.


Provide references for further information: Can you share references or external links related to CVE-2005-1450?

{'name': '15145', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15145'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.s9y.org/63.html#A9'}, {'name': '15877', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15877'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1450?


Explain the CVE ID: What does the identifier CVE-2005-1451 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1451.

The media manager in Serendipity before 0.8 allows remote attackers to upload and execute arbitrary (1) .php or (2) .shtml files.


Provide references for further information: Can you share references or external links related to CVE-2005-1451?

{'name': '15878', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15878'}, {'name': '15145', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15145'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.s9y.org/63.html#A9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1451?


Explain the CVE ID: What does the identifier CVE-2005-1452 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1452.

Serendipity before 0.8 allows Chief users to "hide plugins installed by other users."


Provide references for further information: Can you share references or external links related to CVE-2005-1452?


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1452?


Explain the CVE ID: What does the identifier CVE-2005-1453 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1453.

fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (crash) by closing the connection while fetchnews is reading (1) an article header or (2) an article body, which also prevents fetchnews from querying other servers.


Provide references for further information: Can you share references or external links related to CVE-2005-1453?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://leafnode.sourceforge.net/leafnode-SA-2005-01.txt'}, {'name': 'ADV-2005-0468', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0468'}, {'name': '20050504 leafnode security announcement leafnode-SA-2005-01', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0037.html'}, {'name': '15252', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15252'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1453?


Explain the CVE ID: What does the identifier CVE-2005-1454 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1454.

SQL injection vulnerability in the radius_xlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via (1) group_membership_query, (2) simul_count_query, or (3) simul_verify_query configuration entries.


Provide references for further information: Can you share references or external links related to CVE-2005-1454?

{'name': 'SUSE-SR:2005:014', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_14_sr.html'}, {'name': '13540', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13540'}, {'name': 'oval:org.mitre.oval:def:9610', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9610'}, {'name': '1013909', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2005/May/1013909.html'}, {'name': '20050520 ERRATA: [ GLSA 200505-13 ] FreeRADIUS: SQL injection and Denial of Service vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-05/0492.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.freeradius.org/security.html'}, {'name': 'GLSA-200505-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200505-13.xml'}, {'name': 'RHSA-2005:524', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-524.html'}, {'name': 'freeradius-xlat-sql-injection(20449)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20449'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1454?


Explain the CVE ID: What does the identifier CVE-2005-1455 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1455.

Buffer overflow in the sql_escape_func function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote attackers to cause a denial of service (crash).


Provide references for further information: Can you share references or external links related to CVE-2005-1455?

{'name': 'SUSE-SR:2005:014', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2005_14_sr.html'}, {'name': 'oval:org.mitre.oval:def:9579', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9579'}, {'name': '1013909', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2005/May/1013909.html'}, {'name': '20050520 ERRATA: [ GLSA 200505-13 ] FreeRADIUS: SQL injection and Denial of Service vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-05/0492.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.freeradius.org/security.html'}, {'name': 'GLSA-200505-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200505-13.xml'}, {'name': 'RHSA-2005:524', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-524.html'}, {'name': '13541', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13541'}, {'name': 'freeradius-sqlescapefunc-bo(20450)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20450'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1455?


Explain the CVE ID: What does the identifier CVE-2005-1456 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1456.

Multiple unknown vulnerabilities in the (1) DHCP and (2) Telnet dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (abort).


Provide references for further information: Can you share references or external links related to CVE-2005-1456?

{'name': 'oval:org.mitre.oval:def:9700', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9700'}, {'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1456?


Explain the CVE ID: What does the identifier CVE-2005-1457 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1457.

Multiple unknown vulnerabilities in the (1) AIM, (2) LDAP, (3) FibreChannel, (4) GSM_MAP, (5) SRVLOC, and (6) NTLMSSP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash).


Provide references for further information: Can you share references or external links related to CVE-2005-1457?

{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'name': 'oval:org.mitre.oval:def:9825', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9825'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1457?


Explain the CVE ID: What does the identifier CVE-2005-1458 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1458.

Multiple unknown "other problems" in the KINK dissector in Ethereal before 0.10.11 have unknown impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2005-1458?

{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}, {'name': 'oval:org.mitre.oval:def:11348', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11348'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1458?


Explain the CVE ID: What does the identifier CVE-2005-1459 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1459.

Multiple unknown vulnerabilities in the (1) WSP, (2) BER, (3) SMB, (4) NDPS, (5) IAX2, (6) RADIUS, (7) TCAP, (8) MRDISC, (9) 802.3 Slow, (10) SMBMailslot, or (11) SMB PIPE dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error).


Provide references for further information: Can you share references or external links related to CVE-2005-1459?

{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'oval:org.mitre.oval:def:11494', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11494'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1459?


Explain the CVE ID: What does the identifier CVE-2005-1460 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1460.

Multiple unknown dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (assert error) via an invalid protocol tree item length.


Provide references for further information: Can you share references or external links related to CVE-2005-1460?

{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'oval:org.mitre.oval:def:9970', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9970'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1460?


Explain the CVE ID: What does the identifier CVE-2005-1461 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1461.

Multiple buffer overflows in the (1) SIP, (2) CMIP, (3) CMP, (4) CMS, (5) CRMF, (6) ESS, (7) OCSP, (8) X.509, (9) ISIS, (10) DISTCC, (11) FCELS, (12) Q.931, (13) NCP, (14) TCAP, (15) ISUP, (16) MEGACO, (17) PKIX1Explitit, (18) PKIX_Qualified, (19) Presentation dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2005-1461?

{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'oval:org.mitre.oval:def:9853', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9853'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1461?


Explain the CVE ID: What does the identifier CVE-2005-1462 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1462.

Double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2005-1462?

{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'name': 'oval:org.mitre.oval:def:9713', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9713'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1462?


Explain the CVE ID: What does the identifier CVE-2005-1463 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1463.

Multiple format string vulnerabilities in the (1) DHCP and (2) ANSI A dissectors in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2005-1463?

{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'name': 'oval:org.mitre.oval:def:10713', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10713'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1463?


Explain the CVE ID: What does the identifier CVE-2005-1464 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1464.

Multiple unknown vulnerabilities in the (1) KINK, (2) L2TP, (3) MGCP, (4) EIGRP, (5) DLSw, (6) MEGACO, (7) LMP, and (8) RSVP dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (infinite loop).


Provide references for further information: Can you share references or external links related to CVE-2005-1464?

{'name': 'oval:org.mitre.oval:def:9534', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9534'}, {'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1464?


Explain the CVE ID: What does the identifier CVE-2005-1465 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1465.

Unknown vulnerability in the NCP dissector in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (long loop).


Provide references for further information: Can you share references or external links related to CVE-2005-1465?

{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'oval:org.mitre.oval:def:10224', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10224'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1465?


Explain the CVE ID: What does the identifier CVE-2005-1466 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1466.

Unknown vulnerability in the DICOM dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service (large memory allocation) via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2005-1466?

{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'name': 'oval:org.mitre.oval:def:11024', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11024'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1466?


Explain the CVE ID: What does the identifier CVE-2005-1467 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1467.

Unknown vulnerability in the NDPS dissector in Ethereal before 0.10.11 allows remote attackers to cause a denial of service (memory exhaustion) via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2005-1467?

{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'oval:org.mitre.oval:def:9654', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9654'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1467?


Explain the CVE ID: What does the identifier CVE-2005-1468 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1468.

Multiple unknown vulnerabilities in the (1) WSP, (2) Q.931, (3) H.245, (4) KINK, (5) MGCP, (6) RPC, (7) SMBMailslot, and (8) SMB NETLOGON dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) via unknown vectors that lead to a null dereference.


Provide references for further information: Can you share references or external links related to CVE-2005-1468?

{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'name': 'oval:org.mitre.oval:def:10049', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10049'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1468?


Explain the CVE ID: What does the identifier CVE-2005-1469 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1469.

Unknown vulnerability in the GSM dissector in Ethereal before 0.10.11 allows remote attackers to cause the dissector to access an invalid pointer.


Provide references for further information: Can you share references or external links related to CVE-2005-1469?

{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'name': 'oval:org.mitre.oval:def:9598', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9598'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1469?


Explain the CVE ID: What does the identifier CVE-2005-1470 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1470.

Multiple unknown vulnerabilities in the (1) TZSP, (2) MGCP, (3) ISUP, (4) SMB, or (5) Bittorrent dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (segmentation fault) via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2005-1470?

{'name': '13504', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13504'}, {'name': 'RHSA-2005:427', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-427.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00019.html'}, {'name': 'FLSA-2006:152922', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html'}, {'name': 'CLSA-2005:963', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/news/item_20050504_01.html'}, {'name': 'oval:org.mitre.oval:def:11804', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11804'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1470?


Explain the CVE ID: What does the identifier CVE-2005-1471 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1471.

Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote attackers to execute arbitrary code via crafted chunked-encoding data.


Provide references for further information: Can you share references or external links related to CVE-2005-1471?

{'name': '20050506 [SEC-1 LTD] RSA SecurID Web Agent Heap Overflow', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=111537013104724&w=2'}, {'name': '15222', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15222'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1471?


Explain the CVE ID: What does the identifier CVE-2005-1472 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1472.

Certain system calls in Apple Mac OS X 10.4.1 do not properly enforce the permissions of certain directories without the POSIX read bit set, but with the execute bits set for group or other, which allows local users to list files in otherwise restricted directories.


Provide references for further information: Can you share references or external links related to CVE-2005-1472?

{'name': 'APPLE-SA-2005-05-19', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/May/msg00004.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1472?


Explain the CVE ID: What does the identifier CVE-2005-1473 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1473.

SecurityAgent in Apple Mac OS X 10.4.1 allows attackers with physical access to bypass the locked screensaver and launch background applications by opening a URL from a text input field.


Provide references for further information: Can you share references or external links related to CVE-2005-1473?


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1473?


Explain the CVE ID: What does the identifier CVE-2005-1474 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1474.

Dashboard in Apple Mac OS X 10.4.1 allows remote attackers to install widgets via Safari without prompting the user, a different vulnerability than CVE-2005-1933.


Provide references for further information: Can you share references or external links related to CVE-2005-1474?

{'name': 'APPLE-SA-2005-05-19', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/May/msg00004.html'}, {'name': '13694', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13694'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1474?


Explain the CVE ID: What does the identifier CVE-2005-1475 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1475.

The XMLHttpRequest object in Opera 8.0 Final Build 1095 allows remote attackers to bypass access restrictions and perform unauthorized actions on other domains via a redirect.


Provide references for further information: Can you share references or external links related to CVE-2005-1475?

{'name': '13970', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13970'}, {'name': '15008', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15008'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2005-4/advisory/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1475?


Explain the CVE ID: What does the identifier CVE-2005-1476 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1476.

Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing the browser to navigate to a previous javascript: URL, which can lead to arbitrary code execution when combined with CVE-2005-1477.


Provide references for further information: Can you share references or external links related to CVE-2005-1476?

{'name': 'VU#534710', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/534710'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=292691'}, {'name': 'SCOSA-2005.49', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt'}, {'name': 'RHSA-2005:435', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-435.html'}, {'name': '1013913', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013913'}, {'name': '15292', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15292'}, {'name': '15495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/15495'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=293302'}, {'name': '20050508 Firefox Remote Compromise Technical Details', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=111556301530553&w=2'}, {'name': '13544', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13544'}, {'name': 'oval:org.mitre.oval:def:10045', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10045'}, {'tags': ['x_refsource_MISC'], 'url': 'http://greyhatsecurity.org/vulntests/ffrc.htm'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/mfsa2005-42.html'}, {'name': 'mozilla-javascript-code-execution(20443)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20443'}, {'name': 'oval:org.mitre.oval:def:100002', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100002'}, {'tags': ['x_refsource_MISC'], 'url': 'http://greyhatsecurity.org/firefox.htm'}, {'name': 'RHSA-2005:434', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-434.html'}, {'name': 'ADV-2005-0493', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0493'}, {'name': '20050508 Firefox Remote Compromise Leaked', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=111553138007647&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1476?


Explain the CVE ID: What does the identifier CVE-2005-1477 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1477.

The install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as update.mozilla.org or addon.mozilla.org, to execute arbitrary Javascript with chrome privileges, leading to arbitrary code execution on the system when combined with vulnerabilities such as CVE-2005-1476, as demonstrated using a javascript: URL as the package icon and a cross-site scripting (XSS) attack on a vulnerable whitelist site.


Provide references for further information: Can you share references or external links related to CVE-2005-1477?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=292691'}, {'name': 'SCOSA-2005.49', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt'}, {'name': 'oval:org.mitre.oval:def:9231', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9231'}, {'name': 'RHSA-2005:435', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-435.html'}, {'name': '1013913', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013913'}, {'name': '15292', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15292'}, {'name': '15495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/15495'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=293302'}, {'name': '20050508 Firefox Remote Compromise Technical Details', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=111556301530553&w=2'}, {'name': 'oval:org.mitre.oval:def:100001', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100001'}, {'name': '13544', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13544'}, {'tags': ['x_refsource_MISC'], 'url': 'http://greyhatsecurity.org/vulntests/ffrc.htm'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/mfsa2005-42.html'}, {'name': 'mozilla-javascript-code-execution(20443)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20443'}, {'tags': ['x_refsource_MISC'], 'url': 'http://greyhatsecurity.org/firefox.htm'}, {'name': 'RHSA-2005:434', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-434.html'}, {'name': 'ADV-2005-0493', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0493'}, {'name': 'VU#648758', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/648758'}, {'name': '20050508 Firefox Remote Compromise Leaked', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=111553138007647&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1477?


Explain the CVE ID: What does the identifier CVE-2005-1478 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1478.

Format string vulnerability in dSMTP (dsmtp.exe) in DMail 3.1a allows remote attackers to execute arbitrary code via format string specifiers in the xtellmail command.


Provide references for further information: Can you share references or external links related to CVE-2005-1478?

{'name': '15242', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15242'}, {'name': '20050505 dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531804617905&w=2'}, {'name': 'dmail-dsmtpexe-format-string(20414)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20414'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.org.sg/vuln/dmail31a.html'}, {'name': '1013885', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013885'}, {'name': '13505', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13505'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1478?


Explain the CVE ID: What does the identifier CVE-2005-1479 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1479.

SQL injection vulnerability in jgs_portal.php in JGS-Portal 3.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-1479?

{'name': '15219', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15219'}, {'name': '1013866', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013866'}, {'name': '13451', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13451'}, {'name': 'jgsportal-sql-injection(20371)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20371'}, {'name': '20050516 [SePro Bugtraq] WBB Portal - JGS-Portal <= 3.0.2 - Multiple Vulnerabilities (09.05.05)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111627681218415&w=2'}, {'name': '20050430 JGS-Portal 3.0.1 SQL-Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111506870504598&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1479?


Explain the CVE ID: What does the identifier CVE-2005-1480 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1480.

Directory traversal vulnerability in RaidenFTPD before 2.4.2241 allows remote attackers to read arbitrary files via a "..\\" (dot dot backslash) in the urlget site command.


Provide references for further information: Can you share references or external links related to CVE-2005-1480?

{'name': '13292', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13292'}, {'name': '15713', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/15713'}, {'name': '20050502 Directory Traversal Vuln - RaidenFTPD 2.4 < Build 2241', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111507556127582&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://forum.raidenftpd.com/showflat.php?Board=UBB13&Number=45685'}, {'name': 'raidenftpd-directory-traversal(20368)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20368'}, {'name': '15037', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15037'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1480?


Explain the CVE ID: What does the identifier CVE-2005-1481 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1481.

Multiple SQL injection vulnerabilities in Aaron Outpost ASP Inline Corporate Calendar allow remote attackers to execute arbitrary SQL commands via the Event_ID parameter to (1) defer.asp or (2) details.asp.


Provide references for further information: Can you share references or external links related to CVE-2005-1481?

{'name': '1013884', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013884'}, {'name': '16192', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16192'}, {'name': '16193', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16193'}, {'name': '15239', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15239'}, {'name': 'asp-inline-corporate-calendar-sql-injection(20416)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20416'}, {'name': '20050503 [HSC Security Group] ASP Inline Corporate Calendar SQL injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530675909673&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1481?


Explain the CVE ID: What does the identifier CVE-2005-1482 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1482.

ArticleLive 2005 allows remote attackers to gain privileges by modifying the (1) auth and (2) userId fields in a cookie.


Provide references for further information: Can you share references or external links related to CVE-2005-1482?

{'name': '20050503 Authentication bypass, sql injections and xss in ArticleLive 2005', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530871724865&w=2'}, {'name': '13493', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13493'}, {'name': '15250', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15250'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalparadox.org/advisories/inal.txt'}, {'name': 'articlelive-bypass-security(20431)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20431'}, {'name': '1013895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013895'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1482?


Explain the CVE ID: What does the identifier CVE-2005-1483 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1483.

Multiple cross-site scripting (XSS) vulnerabilities in ArticleLive 2005 allow remote attackers to inject arbitrary web script or HTML via the (1) Query, (2) Username, (3) LastName, (4) Biography, or (5) BlogId parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-1483?

{'name': '20050503 Authentication bypass, sql injections and xss in ArticleLive 2005', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530871724865&w=2'}, {'name': '13493', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13493'}, {'name': '15250', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15250'}, {'name': 'articlelive-multiple-xss(20430)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20430'}, {'name': '16183', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16183'}, {'name': '1013895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013895'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1483?


Explain the CVE ID: What does the identifier CVE-2005-1484 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1484.

Directory traversal vulnerability in Golden FTP server pro 2.52 allows remote attackers to read arbitrary files via a "\.." (backward slash dot dot) with a leading '"' (double quote) in the GET command.


Provide references for further information: Can you share references or external links related to CVE-2005-1484?

{'name': '13479', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13479'}, {'name': 'goldenftp-dotdot-directory-traversal(20668)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20668'}, {'name': '20050504 Golden Ftp Server Pro - Directory Traversal Vuln', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530871716145&w=2'}, {'name': '15175', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15175'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1484?


Explain the CVE ID: What does the identifier CVE-2005-1485 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1485.

Golden FTP Server Pro 2.52 allows remote attackers to obtain sensitive information via a GET request for a file that does not exist, which reveals the absolute path of the FTP server in the resulting FTP error message.


Provide references for further information: Can you share references or external links related to CVE-2005-1485?

{'name': '15175', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15175/'}, {'name': 'goldenftp-information-disclosure(20674)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20674'}, {'name': '20050504 Golden Ftp Server Pro - Directory Traversal Vuln', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530871716145&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1485?


Explain the CVE ID: What does the identifier CVE-2005-1486 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1486.

Multiple cross-site scripting vulnerabilities in FishCart 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) trackingnum, (2) reqagree, or (3) m parameter to upstracking.php or (4) nlst parameter to display.php.  NOTE: the vendor was not able to reproduce some of the reported vectors but believes that they have been addressed.  The original researcher is known to be unreliable.


Provide references for further information: Can you share references or external links related to CVE-2005-1486?

{'name': '20050504 Multiple SQL injections and XSS in FishCart 3.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530799109755&w=2'}, {'name': '16280', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16280'}, {'name': '20070123 Re: Multiple SQL injections and XSS in FishCart 3.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/457754/100/200/threaded'}, {'name': '15232', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15232/'}, {'name': 'fishcart-multiple-xss(20384)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20384'}, {'name': '16281', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16281'}, {'name': '[fishcart] 20050521 Re: Concerned about security', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.fishcart.org/archives/200505/msg00028.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalparadox.org/advisories/fishc.txt'}, {'name': '13499', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13499'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1486?


Explain the CVE ID: What does the identifier CVE-2005-1487 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1487.

Multiple SQL injection vulnerabilities in FishCart 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) cartid parameter to upstnt.php or (2) psku parameter to display.php.  NOTE: the vendor disputes this report, saying that they are forced SQL errors.  The original researcher is known to be unreliable


Provide references for further information: Can you share references or external links related to CVE-2005-1487?

{'name': '16283', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16283'}, {'name': '20050504 Multiple SQL injections and XSS in FishCart 3.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530799109755&w=2'}, {'name': '20070123 Re: Multiple SQL injections and XSS in FishCart 3.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/457754/100/200/threaded'}, {'name': '15232', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15232/'}, {'name': '16282', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16282'}, {'name': 'fishcart-multiple-sql-injection(20386)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20386'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalparadox.org/advisories/fishc.txt'}, {'name': '13499', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13499'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1487?


Explain the CVE ID: What does the identifier CVE-2005-1488 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1488.

Multiple cross-site scripting (XSS) vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) the E-mail address, Note, or Public Certificate fields to address.html, (2) addressaction.html, (3) the Signature field to settings.html, or (4) the Shared calendars to calendarsettings.html.


Provide references for further information: Can you share references or external links related to CVE-2005-1488?

{'name': '20050504 Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530933016434&w=2'}, {'name': 'merak-icewarp-script-xss(20467)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20467'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1488?


Explain the CVE ID: What does the identifier CVE-2005-1489 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1489.

Unknown vulnerability in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to obtain the full path of the server via certain requests to (1) calendar_addevent.html, (2) calendar_event.html, or (3) calendar_task.html.


Provide references for further information: Can you share references or external links related to CVE-2005-1489?

{'name': '20050504 Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530933016434&w=2'}, {'name': '15249', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15249'}, {'name': 'merak-icewarp-script-path-disclosure(20469)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20469'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1489?


Explain the CVE ID: What does the identifier CVE-2005-1490 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1490.

Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2, when the mailbox.dat file does not exist, allows remote authenticated users to determine if a file exists via the folder parameter to attachment.html.


Provide references for further information: Can you share references or external links related to CVE-2005-1490?

{'name': '20050504 Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530933016434&w=2'}, {'name': '15249', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15249'}, {'name': 'merak-icewarp-file-existence(20472)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20472'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1490?


Explain the CVE ID: What does the identifier CVE-2005-1491 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1491.

Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to (1) move their home directory via viewaction.html or (2) move arbitrary files via the importfile parameter to importaction.html.


Provide references for further information: Can you share references or external links related to CVE-2005-1491?

{'name': '20050504 Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111530933016434&w=2'}, {'name': '15249', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15249'}, {'name': 'merak-icewarp-directory-relocation(20471)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20471'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1491?


Explain the CVE ID: What does the identifier CVE-2005-1492 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1492.

Cross-site scripting (XSS) vulnerability in user.cgi in Gossamer Threads Links SQL 2.x and 3.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-1492?

{'name': '15253', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15253'}, {'name': '1013891', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1013891'}, {'name': '16189', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16189'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.gossamer-threads.com/forum/Gossamer_Links_3.0.1_Released_P280986/'}, {'name': 'links-usercgi-addcgi-xss(20415)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20415'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gossamer-threads.com/perl/gforum/gforum.cgi?post=281029%3B'}, {'name': '13484', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13484'}, {'name': '20050504 Gossamer Threads Links SQL login XSS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531023916998&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1492?


Explain the CVE ID: What does the identifier CVE-2005-1493 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1493.

Directory traversal vulnerability in SimpleCam 1.2 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the URL.


Provide references for further information: Can you share references or external links related to CVE-2005-1493?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.autistici.org/fdonato/advisory/SimpleCam1.2-adv.txt'}, {'name': 'simplecam-dotdot-directory-traversal(20411)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20411'}, {'name': '13495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13495'}, {'name': '1013888', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/alerts/2005/May/1013888.html'}, {'name': '20050504 directory traversal in SimpleCam 1.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531466319161&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1493?


Explain the CVE ID: What does the identifier CVE-2005-1494 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1494.

Multiple cross-site scripting (XSS) vulnerabilities in admin.cgi in MegaBook 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) entryid or (2) password parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-1494?

{'name': 'megabook-admincgi-xss(20669)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20669'}, {'name': '13522', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13522'}, {'name': '20050508 Re: MegaBook V2.0 - Cross Site Scripting Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/397809'}, {'name': '20050505 MegaBook V2.0 - Cross Site Scripting Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531609618182&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1494?


Explain the CVE ID: What does the identifier CVE-2005-1495 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1495.

Oracle Database 9i and 10g disables Fine Grained Audit (FGA) after the SYS user executes a SELECT statement on an FGA object, which makes it easier for attackers to escape detection.


Provide references for further information: Can you share references or external links related to CVE-2005-1495?

{'name': '16258', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16258'}, {'name': 'VU#777773', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/777773'}, {'name': 'oracle-audit-data-manipulation(20407)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20407'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.red-database-security.com/advisory/oracle-fine-grained-auditing-issue.html'}, {'name': '20050505 Oracle 9i / 10g Fine Grained Auditing Issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531683824209&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1495?


Explain the CVE ID: What does the identifier CVE-2005-1496 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1496.

The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user.


Provide references for further information: Can you share references or external links related to CVE-2005-1496?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.red-database-security.com/exploits/oracle_exploit_dbms_scheduler_select_user.html'}, {'name': '20050505 Oracle 10g DBMS_SCHEDULER SESSION_USER issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531740305049&w=2'}, {'name': '13509', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13509'}, {'name': 'oracle10g-gain-privileges(20410)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20410'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1496?


Explain the CVE ID: What does the identifier CVE-2005-1497 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1497.

index.php in myBloggie 2.1.1 allows remote attackers to obtain sensitive information via an invalid post_id parameter, which reveals the path in an error message.


Provide references for further information: Can you share references or external links related to CVE-2005-1497?

{'tags': ['x_refsource_MISC'], 'url': 'http://mywebland.com/forums/viewtopic.php?t=180'}, {'name': 'mybloggie-postid-path-disclosure(20433)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20433'}, {'name': '20050505 Multiple vulnerabilities in myBloggie 2.1.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531904608224&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1497?


Explain the CVE ID: What does the identifier CVE-2005-1498 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1498.

Multiple cross-site scripting (XSS) vulnerabilities in myBloggie 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) year parameter in viewmode.php, or the (2) cat_id, (3) month_no, or (4) post_id parameter in index.php, which are not properly sanitized before they are displayed in an error message.  NOTE: issues 2, 3, and 4 may be due to a problem in associated products rather than myBloggie itself.


Provide references for further information: Can you share references or external links related to CVE-2005-1498?

{'tags': ['x_refsource_MISC'], 'url': 'http://mywebland.com/forums/viewtopic.php?t=180'}, {'name': 'mybloggie-script-injection(20436)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20436'}, {'name': '20050505 Multiple vulnerabilities in myBloggie 2.1.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531904608224&w=2'}, {'name': 'mybloggie-viewmodephp-xss(20434)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20434'}, {'name': '13507', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13507'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1498?


Explain the CVE ID: What does the identifier CVE-2005-1499 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1499.

delcomment.php in myBloggie 2.1.1 allows remote attackers to delete arbitrary comments by modifying the comment_id parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-1499?

{'tags': ['x_refsource_MISC'], 'url': 'http://mywebland.com/forums/viewtopic.php?t=180'}, {'name': '20050505 Multiple vulnerabilities in myBloggie 2.1.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531904608224&w=2'}, {'name': '14980', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14980'}, {'name': '13507', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13507'}, {'name': 'mybloggie-delcomment-bypass-security(20437)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20437'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1499?


Explain the CVE ID: What does the identifier CVE-2005-1500 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1500.

Multiple SQL injection vulnerabilities in myBloggie 2.1.1 allow remote attackers to execute arbitrary SQL commands via (1) the keyword parameter in search.php; or (2) the date_no parameter in viewdate mode, (3) the cat_id parameter in viewcat mode, the (4) month_no or (5) year parameter in viewmonth mode, or (6) post_id parameter in viewid mode to index.php.  NOTE: item (1) was discovered to affect 2.1.3 as well.


Provide references for further information: Can you share references or external links related to CVE-2005-1500?

{'tags': ['x_refsource_MISC'], 'url': 'http://mywebland.com/forums/viewtopic.php?t=180'}, {'name': '20050505 Multiple vulnerabilities in myBloggie 2.1.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111531904608224&w=2'}, {'name': '20050527 SQL Injection Exploit for myBloggie 2.1.1 - 2.1.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111722848308367&w=2'}, {'name': '14980', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/14980'}, {'name': '13507', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13507'}, {'name': 'mybloggie-sql-injection(20439)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20439'}, {'name': '15017', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/15017'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1500?


Explain the CVE ID: What does the identifier CVE-2005-1501 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1501.

MidiCart PHP Shopping Cart allows remote attackers to obtain sensitive information via a direct request to (1) search_list.php, (2) item_list.php, or (3) item_show.php, which reveal the path in a PHP error message.


Provide references for further information: Can you share references or external links related to CVE-2005-1501?

{'name': '16172', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16172'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hackgen.org/advisories/hackgen-2005-004.txt'}, {'name': 'midicart-path-disclosure(20425)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20425'}, {'name': '20050505 [hackgen-2005-#004] - Multiple bugs in MidiCart PHP Shopping Cart', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111533057918993&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1501?


Explain the CVE ID: What does the identifier CVE-2005-1502 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1502.

Cross-site scripting (XSS) vulnerability in MidiCart PHP Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the (1) searchstring parameter to search_list.php or the (2) secondgroup or (3) maingroup parameters to item_list.php.


Provide references for further information: Can you share references or external links related to CVE-2005-1502?

{'name': '13516', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13516'}, {'name': 'midicart-xss(20427)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20427'}, {'name': '13517', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13517'}, {'name': '16173', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16173'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hackgen.org/advisories/hackgen-2005-004.txt'}, {'name': '16174', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16174'}, {'name': '13518', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13518'}, {'name': '15269', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15269'}, {'name': '20050505 [hackgen-2005-#004] - Multiple bugs in MidiCart PHP Shopping Cart', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111533057918993&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1502?


Explain the CVE ID: What does the identifier CVE-2005-1503 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1503.

Multiple SQL injection vulnerabilities in MidiCart PHP Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) searchstring parameter to search_list.php, the (2) maingroup or (3) secondgroup parameters to item_list.php, or (4) code_no parameter to item_show.php.


Provide references for further information: Can you share references or external links related to CVE-2005-1503?

{'name': '16176', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16176'}, {'name': '13512', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13512'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hackgen.org/advisories/hackgen-2005-004.txt'}, {'name': '13514', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13514'}, {'name': '13515', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13515'}, {'name': '16177', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16177'}, {'name': '15269', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15269'}, {'name': '13513', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13513'}, {'name': 'midicart-sql-injection(20428)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20428'}, {'name': '20050505 [hackgen-2005-#004] - Multiple bugs in MidiCart PHP Shopping Cart', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111533057918993&w=2'}, {'name': '16175', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16175'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1503?


Explain the CVE ID: What does the identifier CVE-2005-1504 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1504.

GameSpy SDK CD-Key Validation Toolkit, as used by many online games, allows remote attackers to bypass the CD key validation by sending a spoofed \disc\ command, which tells the server the CD key is no longer in use.


Provide references for further information: Can you share references or external links related to CVE-2005-1504?

{'name': '15254', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15254/'}, {'name': 'gamespy-sdk-cdkey-gain-access(20422)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20422'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/gskeyinuse-adv.txt'}, {'name': '20050504 Gamespy cd-key validation system: Cd-key never in use', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111539740212818&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1504?


Explain the CVE ID: What does the identifier CVE-2005-1505 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1505.

The new account wizard in Mail.app 2.0 in Mac OS 10.4, when configuring an IMAP mail account and checking the credentials, does not prompt the user to use SSL until after the password has already been sent, which causes the password to be sent in plaintext.


Provide references for further information: Can you share references or external links related to CVE-2005-1505?

{'name': 'mailapp-account-wizard-plaintext-password(20670)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20670'}, {'name': '20050504 Mac OS 10.4: new-account-wizzard in Mail 2.0 sends clear-text passwords', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111539448630095&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1505?


Explain the CVE ID: What does the identifier CVE-2005-1506 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1506.

SQL injection vulnerability in out.php in CJ Ultra (CJUltra) Plus 1.0.3 and 1.0.4 allows remote attackers to execute arbitrary SQL commands via the perm parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-1506?

{'name': '20050505 Sql Injection in CJ Ultra Plus v1.0.3-1.0.4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111539589013911&w=2'}, {'name': '15281', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15281'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1506?


Explain the CVE ID: What does the identifier CVE-2005-1507 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1507.

Buffer overflow in the Tomcat plugin in 4d WebSTAR 5.33 and 5.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long URL.


Provide references for further information: Can you share references or external links related to CVE-2005-1507?

{'name': '16154', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16154'}, {'name': '13538', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13538'}, {'name': '4d-webstar-plugin-bo(20478)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20478'}, {'name': '15278', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15278'}, {'name': '20050506 4d WebSTAR 5.x Web Server Mac OS X Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111541709402784&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1507?


Explain the CVE ID: What does the identifier CVE-2005-1508 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1508.

Multiple cross-site scripting (XSS) vulnerabilities in PwsPHP 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) month or (2) annee parameters to the news module, (3) nbractif or (4) annee parameters to the stats module, (5) id parameter to profil.php, (6) mb_lettre or (7) lettre parameter to memberlist.php, or (8) chaine_search, or (9) auteur_search parameter to the recherche module.


Provide references for further information: Can you share references or external links related to CVE-2005-1508?

{'name': '16232', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16232'}, {'name': 'pwsphp-mulitple-scripts-xss(20500)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20500'}, {'name': '16228', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16228'}, {'name': '20050507 PwsPHP v1.2.2 Final - Multiples vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111565808024581&w=2'}, {'name': '16229', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16229'}, {'name': 'ADV-2005-0503', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2005/0503'}, {'name': '15315', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15315'}, {'name': '16231', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16231'}, {'name': '16230', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16230'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1508?


Explain the CVE ID: What does the identifier CVE-2005-1509 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1509.

SQL injection vulnerability in profil.php in PwsPHP 1.2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2005-1509?

{'name': '16233', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16233'}, {'name': '13563', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/13563'}, {'name': '20050507 PwsPHP v1.2.2 Final - Multiples vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111565808024581&w=2'}, {'name': 'pwsphp-id-sql-injection(20501)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20501'}, {'name': '15315', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15315'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1509?


Explain the CVE ID: What does the identifier CVE-2005-1510 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1510.

PwsPHP 1.2.2 allows remote attackers to obtain sensitive information via a direct request to the admin directory, which reveals the path in an error message.


Provide references for further information: Can you share references or external links related to CVE-2005-1510?

{'name': '16234', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16234'}, {'name': '20050507 PwsPHP v1.2.2 Final - Multiples vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111565808024581&w=2'}, {'name': '15315', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15315'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1510?


Explain the CVE ID: What does the identifier CVE-2005-1511 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1511.

PwsPHP 1.2.2 allows remote attackers to bypass authentication and post arbitrary comments via the Pseudo cookie.


Provide references for further information: Can you share references or external links related to CVE-2005-1511?

{'name': '16235', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16235'}, {'name': '20050507 PwsPHP v1.2.2 Final - Multiples vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111565808024581&w=2'}, {'name': 'pwsphp-cookie-spoof-identity(20503)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20503'}, {'name': '15315', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15315'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1511?


Explain the CVE ID: What does the identifier CVE-2005-1512 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1512.

The Admin panel in PwsPHP 1.2.2 does not properly verify uploaded picture files, which allows remote attackers to upload and possibly execute arbitrary files.


Provide references for further information: Can you share references or external links related to CVE-2005-1512?

{'name': '16236', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/16236'}, {'name': 'pwsphp-admin-panel-file-upload(20508)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/20508'}, {'name': '20050507 PwsPHP v1.2.2 Final - Multiples vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=111565808024581&w=2'}, {'name': '15315', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15315'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1512?


Explain the CVE ID: What does the identifier CVE-2005-1513 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1513.

Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large SMTP request.


Provide references for further information: Can you share references or external links related to CVE-2005-1513?

{'name': '20050506 64 bit qmail fun', 'tags': ['mailing-list'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0101.html'}, {'url': 'http://www.guninski.com/where_do_you_want_billg_to_go_today_4.html'}, {'name': '1013911', 'tags': ['vdb-entry'], 'url': 'http://securitytracker.com/id?1013911'}, {'name': '[oss-security] 20200519 Remote Code Execution in qmail (CVE-2005-1513)', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2020/05/19/8'}, {'name': '[oss-security] 20200520 Re: Remote Code Execution in qmail (CVE-2005-1513)', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2020/05/20/2'}, {'name': '[oss-security] 20200520 Re: Remote Code Execution in qmail (CVE-2005-1513)', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2020/05/20/5'}, {'name': '20200522 Remote Code Execution in qmail (CVE-2005-1513)', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2020/May/42'}, {'url': 'http://packetstormsecurity.com/files/157805/Qualys-Security-Advisory-Qmail-Remote-Code-Execution.html'}, {'name': 'DSA-4692', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2020/dsa-4692'}, {'name': '[debian-lts-announce] 20200604 [SECURITY] [DLA 2234-1] netqmail security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/06/msg00002.html'}, {'name': '[oss-security] 20200616 Re: Remote Code Execution in qmail (CVE-2005-1513)', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2020/06/16/2'}, {'name': '20200623 Re: Remote Code Execution in qmail (CVE-2005-1513)', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2020/Jun/27'}, {'url': 'http://packetstormsecurity.com/files/158203/Qmail-Local-Privilege-Escalation-Remote-Code-Execution.html'}, {'name': 'GLSA-202007-01', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202007-01'}, {'name': 'USN-4556-1', 'tags': ['vendor-advisory'], 'url': 'https://usn.ubuntu.com/4556-1/'}, {'name': '[oss-security] 20230606 LPE and RCE in RenderDoc: CVE-2023-33865, CVE-2023-33864, CVE-2023-33863', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2023/06/06/3'}, {'name': '20230607 LPE and RCE in RenderDoc: CVE-2023-33865, CVE-2023-33864, CVE-2023-33863', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2023/Jun/2'}, {'url': 'http://packetstormsecurity.com/files/172804/RenderDoc-1.26-Local-Privilege-Escalation-Remote-Code-Execution.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2005-1513?


Explain the CVE ID: What does the identifier CVE-2005-1514 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2005-1514.

commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SMTP command without a space character, which causes an array to be referenced with a negative index.