5781 matches found
CVE-2005-2133
CVE-2005-2133 is a duplicate of CVE-2005-1915. The connected CVE-2005-1915 describes a vulnerability in log4sh_readProperties for log4sh versions up to 1.2.5, where local users can overwrite arbitrary files via a symlink attack on predictable log4sh.$$ filenames. Affected product: log4sh (
CVE-2005-2116
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1921. Reason: This candidate is a duplicate of CVE-2005-1921. Notes: All CVE users should reference CVE-2005-1921 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2005-2133
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1915. Reason: This candidate is a duplicate of CVE-2005-1915. Notes: All CVE users should reference CVE-2005-1915 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2005-2116
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1921. Reason: This candidate is a duplicate of CVE-2005-1921. Notes: All CVE users should reference CVE-2005-1921 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2005-2116
CVE-2005-2116 is a duplicate of CVE-2005-1921 and is reserved in the public CVE set. The connected documents provide concrete details for the related issue: PHPXMLRPC (XML_RPC for PHP) is vulnerable to a remote PHP code execution vulnerability in the PEAR XML_RPC library. The vulnerability allows...
CVE-2004-2141
CVE-2004-2141 is a duplicate of CVE-2004-1827 and is not a separate active entry. Connected details for CVE-2004-1827 show a Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final, allowing remote attackers to inject arbitrary web script via the background:url prop...
CVE-2005-1690
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1250. Reason: This candidate is a duplicate of CVE-2005-1250. Notes: this duplicate occurred as a result of multiple independent discoveries and insufficient coordination by the vendor and CNA. All CVE users should reference...
CVE-2005-1938
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1250. Reason: This candidate is a duplicate of CVE-2005-1250. Notes: this duplicate occurred as a result of multiple independent discoveries and insufficient coordination by the vendor and CNA. All CVE users should reference...
CVE-2005-1690
CVE-2005-1690 is a duplicate of CVE-2005-1250. The connected docs describe a SQL injection vulnerability in Ipswitch WhatsUp Professional 2005 SP1, affecting the web front-end Login.asp (NmConsole/Login.asp) via parameters sUserName and sPassword, enabling arbitrary SQL execution and potential ad...
CVE-2005-1938
CVE-2005-1938 is a duplicate of CVE-2005-1250; this entry has been superseded. The connected advisory data describe a SQL injection in Ipswitch WhatsUp Professional 2005 SP1/Web login (NmConsole/Login.asp) that allows remote execution of arbitrary SQL via the sUserName or sPassword fields. The co...
CVE-2005-1277
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1766. Reason: This candidate is a duplicate of CVE-2005-1766. Notes: This duplicate occurred due to insufficient coordination across three separate parties. All CVE users should reference CVE-2005-1766 instead of this...
CVE-2005-1277
CVE-2005-1277 is a duplicate of CVE-2005-1766. The connected documents provide concrete details for CVE-2005-1766: a heap/buffer overflow vulnerability in the RealText parser used by RealPlayer/HelixPlayer that could allow remote code execution when processing RealMedia/RealText content. The root...
CVE-2001-1492
CVE-2001-1492 is a refinement duplicate of CVE-2001-1460 and has been removed from active use; the connected records show that CVE-2001-1460 documents a SQL injection vulnerability in PostNuke 0.62–0.64 (article.php) that allows remote bypass of authentication via the user parameter. No additiona...
CVE-2005-1958
CVE-2005-1958 is rejected; this candidate is a duplicate of CVE-2005-1855 per the description.
CVE-2005-1958
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1855. Reason: This candidate is a duplicate of CVE-2005-1855. Notes: All CVE users should reference CVE-2005-1855 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2005-1334
CVE-2005-1334 is rejected/not used; it is a duplicate of CVE-2005-1579 and not an active vulnerability entry.
CVE-2005-1334
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1579. Reason: This candidate is a duplicate of CVE-2005-1579. Notes: All CVE users should reference CVE-2005-1579 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2005-1271
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1343. Reason: This candidate is a reservation duplicate of CVE-2005-1343. Notes: All CVE users should reference CVE-2005-1343 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2005-1271
CVE-2005-1271 is a reservation duplicate of CVE-2005-1343 and should not be used as an active entry. The concrete vulnerability is CVE-2005-1343: a stack-based buffer overflow in the Mac OS X VPN daemon vpnd (Server_id via -i) allows a local user to execute arbitrary code with root privileges on ...