Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2006-1947
Multiple SQL injection vulnerabilities in plexum.php in NicPlex Plexum X5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) pagesize, (2) maxrec, and (3) startpos parameters.
Affected Products: n/a
References: [{'name': '19720', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19720'}, {'name': 'ADV-2006-1423', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1423'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/plexum-x5-sql-vuln.html'}, {'name': 'plexum-multiple-sql-injection(25918)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25918'}, {'name': '17617', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17617'}]
CVE State: PUBLISHED
Explain CVE-2006-1948
The "Add Sender to Address Book" operation (AddSenderToAddressBook.lss) and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store information in the Personal Address Book when multiple messages are checked and a message uses AltFrom, which might allow user-assisted remote attackers to trick a user into sending e-mail to an unauthorized recipient.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21232945'}, {'name': '1015914', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015914'}]
CVE State: PUBLISHED
Explain CVE-2006-1949
SQL injection vulnerability in plexcart.pl in NicPlex PlexCart X3 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter.
Affected Products: n/a
References: [{'name': '18033', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18033'}, {'name': 'plexcartx3-catid-sql-injection(25917)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25917'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/plexcart-x3-sql-inj.html'}]
CVE State: PUBLISHED
Explain CVE-2006-1950
Multiple cross-site scripting (XSS) vulnerabilities in banners.cgi in PerlCoders BannerFarm 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) aff and (2) cat parameters.
Affected Products: n/a
References: [{'name': 'bannerfarm-banners-xss(25919)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25919'}, {'name': '24728', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24728'}, {'name': 'ADV-2006-1410', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1410'}, {'name': '17613', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17613'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/bannerfarm-xss-vuln.html'}, {'name': '19718', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19718'}]
CVE State: PUBLISHED
Explain CVE-2006-1951
Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering.
Affected Products: n/a
References: [{'name': '17648', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17648'}, {'name': '20060421 Rapid7 Advisory R7-0019: Directory traversal vulnerability in SolarWinds TFTP Server for Windows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431729/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/advisories/R7-0019.html'}, {'name': 'tftp-dotdotdotdot-directory-traversal(25969)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25969'}, {'name': '20060421 Rapid7 Advisory R7-0019: Directory traversal vulnerability in SolarWinds TFTP Server for Windows', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0009.html'}, {'name': 'ADV-2006-1561', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1561'}, {'name': '19848', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19848'}, {'name': '778', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/778'}]
CVE State: PUBLISHED
Explain CVE-2006-1952
Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." (triple dot) sequences in a GET request.
Affected Products: n/a
References: [{'name': 'ADV-2006-1562', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1562'}, {'name': '17718', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17718'}, {'name': 'tftp-dotdotdot-directory-traversal(25971)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25971'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/advisories/R7-0020.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.winagents.com/en/news/410.php'}, {'name': '19844', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19844'}]
CVE State: PUBLISHED
Explain CVE-2006-1953
Directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to read arbitrary files via a "C:%5C" (encoded drive letter) in a URL.
Affected Products: n/a
References: [{'name': '18005', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/18005'}, {'name': '20060516 Caucho Resin Windows Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/434150/100/0/threaded'}, {'name': 'ADV-2006-1831', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1831'}, {'name': 'resin-webserver-directory-traversal(26478)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26478'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/advisories/R7-0024.html'}, {'name': '1016109', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016109'}, {'name': '25570', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/25570'}, {'name': '904', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/904'}, {'name': '20125', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20125'}, {'name': '20060516 Caucho Resin Windows Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0026.html'}]
CVE State: PUBLISHED
Explain CVE-2006-1954
SQL injection vulnerability in authent.php4 in Nicolas Fischer (aka NFec) RechnungsZentrale V2 1.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the User field.
Affected Products: n/a
References: [{'name': 'ADV-2006-1425', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1425'}, {'name': 'rechnungszentrale-authent-sql-injection(25911)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25911'}, {'name': '20060419 RechnungsZentrale V2 - SQL injection and Remote PHP inclusion vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-04/0384.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.g-0.org/code/rz2-adv.html'}, {'name': '1699', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1699'}, {'name': '24752', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24752'}, {'name': '17588', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17588'}, {'name': '19728', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19728'}]
CVE State: PUBLISHED
Explain CVE-2006-1955
PHP remote file inclusion vulnerability in authent.php4 in Nicolas Fischer (aka NFec) RechnungsZentrale V2 1.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter.
Affected Products: n/a
References: [{'name': 'ADV-2006-1425', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1425'}, {'name': '24753', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24753'}, {'name': '20060419 RechnungsZentrale V2 - SQL injection and Remote PHP inclusion vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-04/0384.html'}, {'name': '17589', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17589'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.g-0.org/code/rz2-adv.html'}, {'name': 'rechnungszentrale-authent-file-inclusion(25912)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25912'}, {'name': '1699', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1699'}, {'name': '19728', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19728'}]
CVE State: PUBLISHED
Explain CVE-2006-1956
The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.kapda.ir/advisory-313.html'}, {'name': '20060418 [KAPDA::#41] - Mambo/Joomla rss component vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431317/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://irannetjob.com/content/view/209/28/'}]
CVE State: PUBLISHED
Explain CVE-2006-1957
The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to cause a denial of service (disk consumption and possibly web-server outage) via multiple requests with different values of the feed parameter.
Affected Products: n/a
References: [{'name': '20060419 Re: [KAPDA::#41] - Mambo/Joomla rss component vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-04/0380.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.kapda.ir/advisory-313.html'}, {'name': '20060418 [KAPDA::#41] - Mambo/Joomla rss component vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431317/100/0/threaded'}, {'name': 'mambo-joomla-rss-dos(26131)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26131'}, {'tags': ['x_refsource_MISC'], 'url': 'http://irannetjob.com/content/view/209/28/'}]
CVE State: PUBLISHED
Explain CVE-2006-1958
Multiple SQL injection vulnerabilities in WWWThreads RC 3 allow remote attackers to execute arbitrary SQL commands via (1) the forumreferrer cookie to register.php and (2) the messages parameter in message_list.php.
Affected Products: n/a
References: [{'name': '739', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/739'}, {'name': 'wwwthreads-multiple-sql-injection(25936)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25936'}, {'name': 'ADV-2006-1447', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1447'}, {'name': '17615', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17615'}, {'name': '19732', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19732'}, {'name': '20060419 WWWThread RC 3 MultBugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431400/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2006-1959
PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Server 8.23 and earlier allows remote attackers to execute arbitrary code via a URL in the rf parameter.
Affected Products: n/a
References: [{'name': 'actualanalyzer-direct-file-include(25893)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25893'}, {'name': '19743', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19743'}, {'name': '1015967', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015967'}, {'name': 'ADV-2006-1430', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1430'}, {'name': '742', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/742'}, {'name': '17597', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17597'}, {'name': '24778', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24778'}, {'name': '20060419 [MajorSecurity]ActualAnalyzer - Remote File Include Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431351/100/0/threaded'}, {'name': '20060520 ActualAnalyzer Server <=8.23 - Remote File Include Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/434562/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2006-1960
Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13 allows remote attackers to inject arbitrary web script or HTML, possibly via the displayMsg parameter to archiveApplyDisplay.jsp, aka bug ID CSCsc01095.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.assurance.com.au/advisories/200604-cisco.txt'}, {'name': '17604', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17604'}, {'name': '20060419 Multiple vulnerabilities in Linux based Cisco products', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431371/30/5490/threaded'}, {'name': '19736', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19736'}, {'name': '20060419 Re: Multiple vulnerabilities in Linux based Cisco products', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431367/30/5490/threaded'}, {'name': 'ADV-2006-1434', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1434'}, {'name': '20060419 Multiple Vulnerabilities in the WLSE Appliance', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml'}, {'name': '1015965', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015965'}, {'name': '24812', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24812'}, {'name': 'cisco-wlse-user-xss(25883)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25883'}]
CVE State: PUBLISHED
Explain CVE-2006-1961
Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (URT) before 20060419, and all versions of Ethernet Subscriber Solution Engine (ESSE) and CiscoWorks2000 Service Management Solution (SMS) allow local users to gain Linux shell access via shell metacharacters in arguments to the "show" command in the application's command line interface (CLI), aka bug ID CSCsd21502 (WLSE), CSCsd22861 (URT), and CSCsd22859 (HSE).  NOTE: other issues might be addressed by the Cisco advisory.
Affected Products: n/a
References: [{'name': '24813', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24813'}, {'name': 'ADV-2006-1435', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1435'}, {'name': '17609', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17609'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.assurance.com.au/advisories/200604-cisco.txt'}, {'name': 'cisco-wlse-shell-privilege-escalation(25884)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25884'}, {'name': '20060419 Multiple vulnerabilities in Linux based Cisco products', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431371/30/5490/threaded'}, {'name': '19736', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19736'}, {'name': '20060419 Re: Multiple vulnerabilities in Linux based Cisco products', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431367/30/5490/threaded'}, {'name': '19739', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19739'}, {'name': 'ADV-2006-1434', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1434'}, {'name': '20060419 Multiple Vulnerabilities in the WLSE Appliance', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml'}, {'name': '19741', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19741'}, {'name': '20060419 Response to Privilege Escalation on Multiple Cisco Products', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sr-20060419-priv.shtml'}, {'name': '1015965', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015965'}]
CVE State: PUBLISHED
Explain CVE-2006-1962
SQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username field (login parameter) to main.php.
Affected Products: n/a
References: [{'name': 'pcpin-chat-main-sql-injection(25961)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25961'}, {'name': '20060604 Re: PCPIN Chat <= 5.0.4 "login/language" remote cmmnds xctn', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/436029/100/0/threaded'}, {'name': 'ADV-2006-1441', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1441'}, {'name': '1015968', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015968'}, {'name': '20060419 PCPIN Chat <= 5.0.4 "login/language" remote cmmnds xctn', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431390/100/0/threaded'}, {'name': '17632', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17632'}, {'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/pcpin_504_xpl.html'}, {'name': '19708', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19708'}]
CVE State: PUBLISHED
Explain CVE-2006-1963
Directory traversal vulnerability in main.php in PCPIN Chat 5.0.4 and earlier allows remote authenticated users to include and execute arbitrary PHP code via a ".." (dot dot) in a language cookie, as demonstrated by uploading then accessing a smiliefile image that actually contains PHP code.
Affected Products: n/a
References: [{'name': '20060604 Re: PCPIN Chat <= 5.0.4 "login/language" remote cmmnds xctn', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/436029/100/0/threaded'}, {'name': 'ADV-2006-1441', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1441'}, {'name': '1015968', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015968'}, {'name': '20060419 PCPIN Chat <= 5.0.4 "login/language" remote cmmnds xctn', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431390/100/0/threaded'}, {'name': '17632', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17632'}, {'name': 'pcpin-chat-main-file-include(25962)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25962'}, {'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/pcpin_504_xpl.html'}, {'name': '19708', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19708'}]
CVE State: PUBLISHED
Explain CVE-2006-1964
SQL injection vulnerability in Haberler.asp in ASPSitem 1.83 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.nukedx.com/?getxpl=23'}, {'name': '17616', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17616'}, {'name': '19693', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19693'}, {'name': 'aspsitem-haberler-sql-injection(25932)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25932'}, {'name': 'ADV-2006-1439', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1439'}, {'name': '20060419 ASPSitem <= 1.83 Remote SQL Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431469/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2006-1965
Multiple cross-site scripting (XSS) vulnerabilities in aasi media Net Clubs Pro 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) onuser, (2) pass, (3) chatsys, (4) room, (5) username, and (6) to parameters in (a) sendim.cgi; the (7) username parameter in (b) imessage.cgi; the (8) password parameter in (c) login.cgi; and the (9) cat_id parameter in (d) viewcat.cgi.
Affected Products: n/a
References: [{'name': '24757', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24757'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/net-clubs-pro-xss-vuln.html'}, {'name': '24754', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24754'}, {'name': 'ADV-2006-1436', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1436'}, {'name': '17622', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17622'}, {'name': 'netclubspro-multiple-xss(25957)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25957'}, {'name': '24755', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24755'}, {'name': '24756', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24756'}, {'name': '19651', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19651'}]
CVE State: PUBLISHED
Explain CVE-2006-1966
An unspecified Fortinet product, possibly Fortinet28, allows remote attackers to cause a denial of service via a "small synflood" to the SMTP port (TCP port 25), as demonstrated by a 10-microsecond wait between sending packets.  NOTE: this issue has been disputed in followup posts that suggest that a protection feature is triggering a RST.
Affected Products: n/a
References: [{'name': '20060416 Fortinet28 box does not resist has small synflood!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431404/100/0/threaded'}, {'name': '20060418 Re: Fortinet28 box does not resist has small synflood!', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0449.html'}, {'name': '20060418 Re: Fortinet28 box does not resist has small synflood!', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0472.html'}]
CVE State: PUBLISHED
Explain CVE-2006-1967
Cross-site scripting (XSS) vulnerability in calendar/Visitor.cgi in KCScripts Calendar, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the sort_order parameter.
Affected Products: n/a
References: [{'name': 'portalpack-multiple-xss(25940)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25940'}, {'name': 'ADV-2006-1440', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1440'}, {'name': '503', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/503'}, {'name': '19695', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19695'}, {'name': '17628', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17628'}, {'name': '24761', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24761'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html'}]
CVE State: PUBLISHED
Explain CVE-2006-1968
Cross-site scripting (XSS) vulnerability in news/NsVisitor.cgi in KCScripts News Publisher, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the sort_order parameter.
Affected Products: n/a
References: [{'name': 'portalpack-multiple-xss(25940)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25940'}, {'name': 'ADV-2006-1440', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1440'}, {'name': '19695', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19695'}, {'name': '17628', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17628'}, {'name': '24762', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24762'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html'}]
CVE State: PUBLISHED
Explain CVE-2006-1969
Cross-site scripting (XSS) vulnerability in search/search.cgi in an unspecified KCScripts script, probably Search Engine or Site Search, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the q parameter.
Affected Products: n/a
References: [{'name': 'portalpack-multiple-xss(25940)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25940'}, {'name': 'ADV-2006-1440', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1440'}, {'name': '19695', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19695'}, {'name': '24763', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24763'}, {'name': '17628', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17628'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html'}]
CVE State: PUBLISHED
Explain CVE-2006-1970
Cross-site scripting (XSS) vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter.
Affected Products: n/a
References: [{'name': 'portalpack-multiple-xss(25940)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25940'}, {'name': 'ADV-2006-1440', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1440'}, {'name': '24764', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24764'}, {'name': '19695', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19695'}, {'name': '17628', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17628'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html'}]
CVE State: PUBLISHED
Explain CVE-2006-1971
Cross-site scripting (XSS) vulnerability in login.php in KRANKIKOM ContentBoxX allows remote attackers to inject arbitrary web script or HTML via the action parameter.
Affected Products: n/a
References: [{'name': '779', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/779'}, {'name': '24768', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24768'}, {'name': 'ADV-2006-1438', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1438'}, {'name': '20060419 ContentBoxx Login.php Cross-Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431386/100/0/threaded'}, {'name': '19733', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19733'}, {'name': '17612', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17612'}, {'name': '740', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/740'}, {'name': 'contentboxx-login-xss(25952)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25952'}]
CVE State: PUBLISHED
Explain CVE-2006-1972
Cross-site scripting (XSS) vulnerability in EasyGallery.php in Wingnut EasyGallery allows remote attackers to inject arbitrary web script or HTML via the ordner parameter.
Affected Products: n/a
References: [{'name': '20060419 EasyGallery Cross-Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431430/100/0/threaded'}, {'name': '19713', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19713'}, {'name': 'easygallery-script-xss(25943)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25943'}, {'tags': ['x_refsource_MISC'], 'url': 'http://advisory.patriotichackers.com/index.php?itemid=5'}, {'name': 'ADV-2006-1437', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1437'}, {'name': '17624', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17624'}, {'name': '746', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/746'}]
CVE State: PUBLISHED
Explain CVE-2006-1973
Multiple unspecified vulnerabilities in Linksys RT31P2 VoIP router allow remote attackers to cause a denial of service via malformed Session Initiation Protocol (SIP) messages.
Affected Products: n/a
References: [{'name': '17631', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17631'}, {'name': 'linksys-rt31p2-sip-dos(25915)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25915'}, {'name': 'ADV-2006-1443', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1443'}, {'name': '24810', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24810'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.kb.cert.org/vuls/id/MIMG-6GMMW4'}, {'name': '19722', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19722'}, {'name': 'VU#621566', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/621566'}]
CVE State: PUBLISHED
Explain CVE-2006-1974
SQL injection vulnerability in index.php in MyBB (MyBulletinBoard) before 1.04 allows remote attackers to execute arbitrary SQL commands via the referrer parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/16443/exploit'}, {'name': '16443', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16443'}]
CVE State: PUBLISHED
Explain CVE-2006-1975
Cross-site scripting (XSS) vulnerability in guestbook_newentry.php in PHP-Gastebuch 1.61 allows remote attackers to inject arbitrary web script or HTML via the Kommentar field.
Affected Products: n/a
References: [{'name': '19810', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19810'}, {'tags': ['x_refsource_MISC'], 'url': 'http://osvdb.org/ref/23/23962-gastebuch.txt'}, {'name': '23962', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23962'}]
CVE State: PUBLISHED
Explain CVE-2006-1976
Cross-site scripting (XSS) vulnerability in addRequest.php in Prayer Request Board (PRB) Beta 1 before 20060320 allows remote attackers to inject arbitrary web script or HTML via the Request field.
Affected Products: n/a
References: [{'name': '23958', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23958'}, {'tags': ['x_refsource_MISC'], 'url': 'http://osvdb.org/ref/23/23958-prb.txt'}]
CVE State: PUBLISHED
Explain CVE-2006-1977
Cross-site scripting (XSS) vulnerability in FlexBB 0.5.7 BETA and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) message parameters.
Affected Products: n/a
References: [{'name': 'ADV-2006-1393', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1393'}, {'name': '777', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/777'}, {'name': '20060415 FlexBB <= 0.5.7 BETA XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431071/100/0/threaded'}, {'name': '1015946', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015946'}, {'name': 'flexbb-newthread-xss(25868)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25868'}]
CVE State: PUBLISHED
Explain CVE-2006-1978
SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_username COOKIE parameter.
Affected Products: n/a
References: [{'name': '1015949', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015949'}, {'name': '20060417 FlexBB 0.5.5 Bypass Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431156/100/0/threaded'}, {'name': '17568', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17568'}, {'name': '1686', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1686'}]
CVE State: PUBLISHED
Explain CVE-2006-1979
Cross-site scripting (XSS) vulnerability in mwguest.php in Manic Web MWGuest 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the homepage parameter.
Affected Products: n/a
References: [{'name': '747', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/747'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/122/summary.html'}, {'name': 'mwguest-mwguest-xss(25674)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25674'}, {'name': '20060420 [eVuln] MWGuest XSS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431507/100/0/threaded'}, {'name': '17630', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17630'}]
CVE State: PUBLISHED
Explain CVE-2006-1980
Cross-site scripting (XSS) vulnerability in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the (1) query string, (2) SID parameter, or (3) ilang parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/w2b-online-banking-vuln.html'}, {'name': 'ADV-2006-1445', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1445'}, {'name': '24759', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24759'}, {'name': '19717', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19717'}, {'name': 'w2bonlinebanking-sid-xss(25947)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25947'}, {'name': '17626', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17626'}]
CVE State: PUBLISHED
Explain CVE-2006-1981
Unspecified vulnerability in Java InputMethods on Mac OS X 10.4.5 may cause InputMethods to send input events for secure fields to the wrong text field, which might reveal the password to others who can view the screen.
Affected Products: n/a
References: [{'name': 'macosx-java-inputmethods-info-disclosure(26167)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26167'}, {'name': 'ADV-2006-1398', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1398'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=303658'}]
CVE State: PUBLISHED
Explain CVE-2006-1982
Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in applications that use ImageIO or AppKit, allows remote attackers to execute arbitrary code via crafted TIFF images.
Affected Products: n/a
References: [{'name': '17951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17951'}, {'name': 'ADV-2006-1779', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1779'}, {'name': 'TA06-132A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-132A.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://docs.info.apple.com/article.html?artnum=303411'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/sp-x24-advisory.php'}, {'name': 'APPLE-SA-2006-05-11', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/May/msg00003.html'}, {'name': 'ADV-2006-1452', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1452'}, {'name': '17634', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17634'}, {'name': '20077', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20077'}, {'name': '31837', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/31837'}, {'name': '19686', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19686'}]
CVE State: PUBLISHED
Explain CVE-2006-1983
Multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) PredictorVSetField function for TIFF or (2) CFAllocatorAllocate function for GIF, as used in applications that use ImageIO or AppKit.  NOTE: the BMP vector has been re-assigned to CVE-2006-2238 because it affects a separate product family.
Affected Products: n/a
References: [{'name': '17951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17951'}, {'name': 'ADV-2006-1779', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1779'}, {'name': 'TA06-132A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-132A.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233'}, {'name': '1016067', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016067'}, {'name': '24821', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24821'}, {'name': 'macosx-cfallocatorallocate-bo(25949)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25949'}, {'name': 'APPLE-SA-2006-05-11', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/May/msg00003.html'}, {'name': 'macosx-predictorvsetfield-bo(25951)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25951'}, {'name': 'ADV-2006-1452', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1452'}, {'name': '17634', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17634'}, {'name': '24822', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24822'}, {'name': '20077', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20077'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/sp-x28-advisory.php'}, {'name': '19686', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19686'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/sp-x30-advisory.php'}]
CVE State: PUBLISHED
Explain CVE-2006-1984
Unspecified vulnerability in the _cg_TIFFSetField function in Mac OS X 10.4.6 and earlier, as used in applications that use ImageIO or AppKit, allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers a null dereference.
Affected Products: n/a
References: [{'name': '17951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17951'}, {'name': 'ADV-2006-1779', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1779'}, {'name': 'TA06-132A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-132A.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233'}, {'name': 'APPLE-SA-2006-05-11', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/May/msg00003.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/sp-x29-advisory.php'}, {'name': 'macosx-tiffsetfield-bo(25950)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25950'}, {'name': 'ADV-2006-1452', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1452'}, {'name': '17634', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17634'}, {'name': '20077', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20077'}, {'name': '19686', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19686'}]
CVE State: PUBLISHED
Explain CVE-2006-1985
Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains long path names, which triggers an error in the BOMStackPop function.
Affected Products: n/a
References: [{'name': '17951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17951'}, {'name': '24819', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24819'}, {'name': 'ADV-2006-1779', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1779'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/sp-x25-advisory.php'}, {'name': 'TA06-132A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-132A.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233'}, {'name': '1016082', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016082'}, {'name': 'APPLE-SA-2006-05-11', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/May/msg00003.html'}, {'name': 'macosx-archivehelper-bo(25945)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25945'}, {'name': 'ADV-2006-1452', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1452'}, {'name': '17634', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17634'}, {'name': '20077', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20077'}, {'name': '19686', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19686'}]
CVE State: PUBLISHED
Explain CVE-2006-1986
Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via a large CELLSPACING attribute in a TABLE tag, which triggers an error in KWQListIteratorImpl::KWQListIteratorImpl.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://security-protocols.com/poc/sp-x26-1.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/sp-x26-advisory.php'}, {'name': 'macosx-safari-dos(25946)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25946'}, {'name': 'ADV-2006-1452', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1452'}, {'name': '17634', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17634'}, {'name': '24823', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24823'}, {'name': '19686', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19686'}]
CVE State: PUBLISHED