Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2006-0709
Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via e-mail messages with a long boundary attribute, a different vulnerability than CVE-2004-0105.
Affected Products: n/a
References: [{'name': '1015654', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015654'}, {'name': '18796', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18796'}, {'name': 'SUSE-SR:2006:005', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006_05_sr.html'}, {'name': '19226', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19226'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482'}, {'name': 'GLSA-200603-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml'}, {'name': 'metamail-boundary-bo(24702)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24702'}, {'name': 'MDKSA-2006:047', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:047'}, {'name': '18987', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18987'}, {'name': '19130', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19130'}, {'name': 'DSA-995', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-995'}, {'name': 'RHSA-2006:0217', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2006-0217.html'}, {'name': '19000', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19000'}, {'name': '16611', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16611'}, {'name': '19304', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19304'}, {'name': 'ADV-2006-0565', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0565'}]
CVE State: PUBLISHED
Explain CVE-2006-0710
Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote attackers to execute arbitrary code via a crafted LDAP request, as demonstrated by ProtoVer Sample LDAP.
Affected Products: n/a
References: [{'name': '18818', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18818'}, {'name': 'ADV-2006-0567', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0567'}, {'name': '[Dailydave] 20060213 eddy 0day', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.immunitysec.com/pipermail/dailydave/2006-February/002925.html'}, {'name': 'isode-mvault-ldap-dos(24700)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24700'}, {'name': '16635', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16635'}]
CVE State: PUBLISHED
Explain CVE-2006-0711
The (1) addfolder and (2) deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do not validate the Session ID, which allows remote attackers to add and delete arbitrary files, when configured with homedirfolders and homedirspools disabled.
Affected Products: n/a
References: [{'name': 'ADV-2006-0564', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0564'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2006-3/advisory/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=392562&group_id=2874'}, {'name': '16651', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16651'}, {'name': 'neomail-neomailprefs-bypass-security(24737)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24737'}, {'name': '18785', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18785'}]
CVE State: PUBLISHED
Explain CVE-2006-0712
mail_html template in Squishdot 1.5.0 and earlier does not properly validate the (1) email and (2) title variables, which allows remote attackers to bypass spam filters by injecting SMTP headers, probably due to a CRLF injection vulnerability.
Affected Products: n/a
References: [{'name': '18868', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18868'}, {'name': '16667', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16667'}, {'name': 'squishdot-mailhtml-header-injection(24659)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24659'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squishdot.org/1139510883'}, {'name': 'ADV-2006-0551', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0551'}]
CVE State: PUBLISHED
Explain CVE-2006-0713
Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via .. (dot dot) sequences in the (1) lang parameter in docs/index.php and the language parameter in (2) install/install.php, (3) install/sec_stage_install.php, (4) install/third_stage_install.php, and (5) install/forth_stage_install.php.  NOTE: direct static code injection is resultant from this issue, as demonstrated by inserting PHP code into the username, which is inserted into linpha.log, which is accessible from the directory traversal.
Affected Products: n/a
References: [{'name': '20060211 Linpha <= 1.0 multiple arbitrary local inclusion', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/424729/100/0/threaded'}, {'name': '18808', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18808'}, {'name': 'linpha-index-file-include(24663)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24663'}, {'name': '16592', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16592'}, {'name': '426', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/426'}, {'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/linpha_10_local.html'}, {'name': 'ADV-2006-0535', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0535'}]
CVE State: PUBLISHED
Explain CVE-2006-0714
Directory traversal vulnerability in the installation file (sql/install-0.9.7.php) in Flyspray 0.9.7 allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the adodbpath parameter.
Affected Products: n/a
References: [{'name': '20060213 EGS Enterprise Groupware System 1.0 rc4 remote commands execution & FlySpray 0.9.7 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/424902/100/0/threaded'}, {'name': 'ADV-2006-0569', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0569'}, {'name': '432', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/432'}, {'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/egs_10rc4_php5_incl_xpl.html'}, {'name': '16618', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16618'}, {'name': 'flyspray-adodbpath-file-include(24735)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24735'}, {'name': '18847', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18847'}]
CVE State: PUBLISHED
Explain CVE-2006-0715
Cross-site scripting (XSS) vulnerability in sNews 1.3 allows remote attackers to inject arbitrary web script or HTML via the comment field.
Affected Products: n/a
References: [{'name': '20060214 XSS bugs and SQL injection in sNews', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/424958/100/0/threaded'}, {'name': '20060214 XSS and SQL injection in sNews', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0297.html'}, {'name': 'snews-comment-xss(24674)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24674'}, {'name': '16647', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16647'}]
CVE State: PUBLISHED
Explain CVE-2006-0716
SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) id parameters.
Affected Products: n/a
References: [{'name': '20060214 XSS bugs and SQL injection in sNews', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/424958/100/0/threaded'}, {'name': '431', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/431'}, {'name': '20060214 XSS and SQL injection in sNews', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0297.html'}, {'name': 'snews-index-sql-injection(24675)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24675'}, {'name': '16647', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16647'}]
CVE State: PUBLISHED
Explain CVE-2006-0717
IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via a crafted LDAP request, as demonstrated by test 2532 in the ProtoVer Sample LDAP test suite.
Affected Products: n/a
References: [{'name': '1015653', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015653'}, {'name': 'ADV-2006-0537', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0537'}, {'name': 'tivoli-directory-ldap-dos(24619)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24619'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg21230820'}, {'name': '18779', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18779'}, {'name': '[Dailydave] 20060211 IBM Tivoli Directory Server 0day', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.immunitysec.com/pipermail/dailydave/2006-February/002921.html'}, {'name': '16593', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16593'}]
CVE State: PUBLISHED
Explain CVE-2006-0718
The Internet Key Exchange version 1 (IKEv1) implementation in Avaya VSU 100, 2000, 7500, 10000, and CSU 5000, when running IPSec, allows remote attackers to cause a denial of service (crash) via certain IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
Affected Products: n/a
References: [{'name': '18836', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18836'}, {'name': 'VU#226364', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/226364'}, {'name': '16613', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16613'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2006-043.htm'}]
CVE State: PUBLISHED
Explain CVE-2006-0719
SQL injection vulnerability in member_login.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute arbitrary SQL commands via the (1) username parameter, which is used by the E-mail address field, and (2) password parameter.
Affected Products: n/a
References: [{'name': '20060214 SQL injection in PHP Classifieds 6.20', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/424955/100/0/threaded'}, {'name': 'ADV-2006-0600', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0600'}, {'name': '18881', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18881'}, {'name': '424', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/424'}, {'name': '16642', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16642'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.deltascripts.com/board/viewtopic.php?id=7234'}]
CVE State: PUBLISHED
Explain CVE-2006-0720
Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player pauses or stops the file.
Affected Products: n/a
References: [{'name': '20060223 NSFOCUS SA2006-01 : Winamp m3u File Processing Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425888/100/0/threaded'}, {'name': '476', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/476'}, {'name': 'winamp-m3u-wma-bo(24740)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24740'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://forums.winamp.com/showthread.php?threadid=238648'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nsfocus.com/english/homepage/research/0601.htm'}, {'name': '16785', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16785'}, {'name': '1015675', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015675'}]
CVE State: PUBLISHED
Explain CVE-2006-0721
SQL injection vulnerability in pmlite.php in RunCMS 1.2 and 1.3a allows remote attackers to execute arbitrary SQL commands via the to_userid parameter.
Affected Products: n/a
References: [{'name': '18831', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18831'}, {'name': '1015626', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015626'}, {'tags': ['x_refsource_MISC'], 'url': 'http://hamid.ir/security/runcms.txt'}, {'name': 'ADV-2006-0572', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0572'}, {'name': 'runcms-pmlite-sql-injection(24676)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24676'}, {'name': '20060216 RUNCMS 1.3a SQL injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425293/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.runcms.org/public/modules/forum/viewtopic.php?topic_id=4003&forum=18'}, {'name': '16652', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16652'}]
CVE State: PUBLISHED
Explain CVE-2006-0722
settings.php in Reamday Enterprises Magic Downloads 1.1.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, (4) new_passwd, and (5) confirm_passwd variables, which are not initialized.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/73/summary.html'}, {'name': '468', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/468'}, {'name': '20060221 [eVuln] Magic Downloads Unauthorized Data Modification', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425601/30/6830/threaded'}, {'name': 'ADV-2006-0602', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0602'}, {'name': '18877', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18877'}, {'name': 'magicdownloads-settings-access(24615)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24615'}, {'name': '16665', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16665'}]
CVE State: PUBLISHED
Explain CVE-2006-0723
PHP remote file inclusion vulnerability in preview.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the php_script_path parameter.
Affected Products: n/a
References: [{'name': 'magicnewslite-preview-file-include(24608)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24608'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/72/summary.html'}, {'name': '18878', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18878'}, {'name': '16660', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16660'}, {'name': 'ADV-2006-0603', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0603'}, {'name': '16665', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16665'}]
CVE State: PUBLISHED
Explain CVE-2006-0724
profile.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, (4) new_passwd, and (5) confirm_passwd variables, which are not initialized.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/72/summary.html'}, {'name': '18878', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18878'}, {'name': 'ADV-2006-0603', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0603'}, {'name': '16665', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16665'}, {'name': 'magicnewslite-profile-access(24610)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24610'}]
CVE State: PUBLISHED
Explain CVE-2006-0725
PHP remote file inclusion vulnerability in prepend.php in Plume CMS 1.0.2, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the _PX_config[manager_path] parameter.  NOTE: this is a different executable and affected version than CVE-2006-2645.
Affected Products: n/a
References: [{'name': '1015624', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015624'}, {'name': 'plumecms-prepend-file-include(24697)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24697'}, {'name': 'plumecms-frontinc-prepend-file-include(27699)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/27699'}, {'name': '18883', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18883'}, {'name': 'ADV-2006-0599', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0599'}, {'name': '23204', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23204'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://plume-cms.net/news/77-Security-Notice-Please-Update-Your-Prependphp-File'}, {'name': '16662', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16662'}]
CVE State: PUBLISHED
Explain CVE-2006-0726
Cross-site scripting (XSS) vulnerability in linking.php in CPG-Nuke Dragonfly CMS 9.0.6.1 allows remote attackers to inject arbitrary web script or HTML via a URI that is generated when creating a list of online users.
Affected Products: n/a
References: [{'name': '23060', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23060'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dragonflycms.org/Forums/viewtopic/t=14751.html'}, {'name': '18919', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18919'}, {'name': '16781', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16781'}, {'name': 'cpg-dragonfly-linking-xss(24842)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24842'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dragonflycms.org/cvs/html/includes/functions/linking.php?b=9.19.2'}, {'name': 'ADV-2006-0688', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0688'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dragonflycms.org/Forums/viewtopic/t=14877/postdays=0/postorder=asc/start=15.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dragonflycms.org/cvs/html/includes/functions/linking.php?d=9.23-9.22'}]
CVE State: PUBLISHED
Explain CVE-2006-0727
SQL injection vulnerability in mstrack.php in MusOX DF MSAnalysis (DFMSA), as used in some environments that use CPG-Nuke Dragonfly CMS, allows remote attackers to trigger path disclosure from a SQL syntax error, and possibly execute arbitrary SQL commands, via certain query data, probably involving the profile name.
Affected Products: n/a
References: [{'name': '16783', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16783'}, {'name': '23060', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23060'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dragonflycms.org/Forums/viewtopic/t=14751.html'}, {'name': '23250', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23250'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dragonflycms.org/cvs/html/includes/functions/linking.php?b=9.19.2'}, {'name': 'ADV-2006-0688', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0688'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dragonflycms.org/Forums/viewtopic/t=14877/postdays=0/postorder=asc/start=15.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dragonflycms.org/cvs/html/includes/functions/linking.php?d=9.23-9.22'}]
CVE State: PUBLISHED
Explain CVE-2006-0728
SQL injection vulnerability in search.php in webSPELL 4.01.00 and earlier allows remote attackers to inject arbitrary SQL commands via the title_op parameter.
Affected Products: n/a
References: [{'name': '18885', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18885'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.webspell.org/index.php?site=news_comments&newsID=49&lang=en'}, {'name': '16673', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16673'}, {'name': 'webspell-search-sql-injection(24708)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24708'}, {'name': 'ADV-2006-0606', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0606'}]
CVE State: PUBLISHED
Explain CVE-2006-0729
SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) yy, (2) mm, and (3) dd parameters.
Affected Products: n/a
References: [{'name': '1015674', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015674'}, {'name': '18876', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18876'}, {'name': '477', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/477'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.evuln.com/vulns/75/summary.html'}, {'name': '16686', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16686'}, {'name': 'tecadiary-functions-sql-injection(24643)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24643'}, {'name': '20060223 [eVuln] Teca Diary PE SQL Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425892/30/6800/threaded'}, {'name': 'ADV-2006-0615', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0615'}]
CVE State: PUBLISHED
Explain CVE-2006-0730
Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service (application crash or hang) via unspecified vectors involving (1) "potential hangs" in the APPEND command and "potential crashes" in (2) dovecot-auth and (3) imap/pop3-login.  NOTE: vector 2 might be related to a double free vulnerability.
Affected Products: n/a
References: [{'name': '18870', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18870'}, {'name': 'dovecot-append-dos(24709)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24709'}, {'name': 'ADV-2006-0549', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0549'}, {'name': '[Dovecot] 20060208 1.0beta3 released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.dovecot.org/list/dovecot/2006-February/011367.html'}, {'name': '16672', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16672'}]
CVE State: PUBLISHED
Explain CVE-2006-0731
WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing (phishing) attacks via an absolute URL in the url parameter, which loads the URL inside a frame.
Affected Products: n/a
References: [{'name': '18880', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18880'}, {'name': '20060515 CYBSEC - Security Advisory: Phishing Vector in SAP BC (BusinessConnector)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/434012/30/4980/threaded'}, {'name': '1015639', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015639'}, {'name': '16671', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16671'}, {'name': '20060215 CYBSEC - Security Pre-Advisory: Phishing Vector in SAP BC', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425056/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.cybsec.com/vuln/CYBSEC_Security_Pre-Advisory_Phishing_Vector_in_SAP_BC.pdf'}, {'name': 'ADV-2006-0611', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0611'}, {'name': 'sapbc-admin-spoofing(24751)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24751'}]
CVE State: PUBLISHED
Explain CVE-2006-0732
Directory traversal vulnerability in SAP Business Connector (BC) 4.6 and 4.7 allows remote attackers to read or delete arbitrary files via the fullName parameter to (1) sapbc/SAP/chopSAPLog.dsp or (2) invoke/sap.monitor.rfcTrace/deleteSingle.  Details will be updated after the grace period has ended.  NOTE: SAP Business Connector is an OEM version of webMethods Integration Server.  webMethods states that this issue can only occur when the product is installed as root/admin, and if the attacker has access to a general purpose port; however, both are discouraged in the documentation.  In addition, the attacker must already have acquired administrative privileges through other means.
Affected Products: n/a
References: [{'name': '18880', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18880'}, {'name': '20060515 CYBSEC - Security Advisory: Arbitrary File Read/Delete in SAP BC(Business Connector)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/434014/30/4980/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_Arbitrary_File_Read_or_Delete_in_SAP_BC.pdf'}, {'name': '1016122', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016122'}, {'name': '16668', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16668'}, {'name': '1016090', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016090'}, {'name': '1015639', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015639'}, {'name': '20060215 CYBSEC - Security Pre-Advisory: Arbitrary File Read/Delete in SAPBC', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425048/100/0/threaded'}, {'name': 'ADV-2006-0611', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0611'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.cybsec.com/vuln/CYBSEC_Security_Pre-Advisory_Arbitrary_File_Read_or_Delete_in_SAP_BC.pdf'}]
CVE State: PUBLISHED
Explain CVE-2006-0733
Cross-site scripting (XSS) vulnerability in WordPress 2.0.0 allows remote attackers to inject arbitrary web script or HTML via scriptable attributes such as (1) onfocus and (2) onblur in the "author's website" field.  NOTE: followup comments to the researcher's web log suggest that this issue is only exploitable by the same user who injects the XSS, so this might not be a vulnerability
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://myimei.com/security/2006-02-15/wordpress200autors-websitexss-attack.html'}, {'name': 'wordpress-authorswebsite-xss(24736)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24736'}, {'name': '20060214 [myimei]WordPress2.0.0~autors?website~XSS attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425043/100/0/threaded'}, {'name': '16656', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16656'}]
CVE State: PUBLISHED
Explain CVE-2006-0734
The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.6 and earlier allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) via a backslash character at the end of a connection string to UDP port 27015.
Affected Products: n/a
References: [{'name': '16619', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16619'}, {'name': 'halflife-svcheckforduplicatenames-dos(33505)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/33505'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/csdos.txt'}]
CVE State: PUBLISHED
Explain CVE-2006-0735
Cross-site scripting (XSS) vulnerability in BBcode.pm in M. Blom HTML::BBCode 1.04 and earlier, as used in products such as My Blog before 1.65, allows remote attackers to inject arbitrary Javascript via a javascript URI in an (1) img or (2) url BBcode tag.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://fuzzymonkey.net/forum/viewtopic.php?t=856'}, {'name': '20060215 [eVuln] My Blog BBCode XSS Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425087/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/79/summary.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://evuln.com/vulns/80/summary.html'}, {'name': '18905', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18905'}, {'name': 'myblog-bbcode-xss(24668)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24668'}, {'name': 'ADV-2006-0642', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0642'}, {'name': '16659', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16659'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.evuln.com/vulns/80/summary.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://menno.b10m.net/perl/dists/HTML-BBCode-1.05.tar.gz'}, {'name': '18925', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18925'}, {'name': '20060215 [eVuln] M. Blom HTML::BBCode perl module XSS Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425113/100/0/threaded'}, {'name': 'ADV-2006-0614', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0614'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://menno.b10m.net/perl/HTML-BBCode/Changes'}]
CVE State: PUBLISHED
Explain CVE-2006-0736
Stack-based buffer overflow in the pam_micasa PAM authentication module in CASA on Novell Linux Desktop 9 and Open Enterprise Server 1 allows remote attackers to execute arbitrary code via unspecified vectors.
Affected Products: n/a
References: [{'name': 'SUSE-SA:2006:010', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006_10_casa.html'}, {'name': 'ADV-2006-0693', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0693'}, {'name': '16779', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16779'}, {'name': '18995', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18995'}]
CVE State: PUBLISHED
Explain CVE-2006-0737
eStara SIP softphone allows remote attackers to cause a denial of service (crash) via a SIP OPTIONS request with a negative Expires field.
Affected Products: n/a
References: [{'name': 'estara-neg-integer-dos(24677)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24677'}, {'name': '18872', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18872'}, {'name': 'ADV-2006-0607', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0607'}, {'name': '16629', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16629'}, {'name': '20060214 eStara SIP softphone several message-processing vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/424943/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2006-0738
Multiple format string vulnerabilities in eStara SIP softphone allow remote attackers to cause a denial of service (hang) via SIP INVITE requests with format string specifiers in the SDP session description, as demonstrated using (1) the field name, (2) the o field (owner/creator and session identifier), or (3) the m field (media name and transport address).
Affected Products: n/a
References: [{'name': '18872', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18872'}, {'name': 'ADV-2006-0607', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0607'}, {'name': 'estara-sdp-format-string(24678)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24678'}, {'name': '16629', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16629'}, {'name': '20060214 eStara SIP softphone several message-processing vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/424943/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2006-0739
eStara SIP softphone allows remote attackers to cause a denial of service (crash) via an INVITE request with a Content-Length field that has more than 9 digits.
Affected Products: n/a
References: [{'name': '18872', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18872'}, {'name': 'ADV-2006-0607', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0607'}, {'name': '16629', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16629'}, {'name': 'estara-content-length-dos(24679)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24679'}, {'name': '20060214 eStara SIP softphone several message-processing vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/424943/100/0/threaded'}]
CVE State: PUBLISHED
Explain CVE-2006-0743
Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.
Affected Products: n/a
References: [{'name': '22932', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22932'}, {'name': 'ADV-2006-0955', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0955'}, {'name': '19241', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19241'}, {'name': 'SUSE-SR:2006:026', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006_26_sr.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://issues.apache.org/jira/browse/LOG4NET-67'}, {'name': '23905', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23905'}, {'name': 'log4net-localsyslogappender-dos(25196)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25196'}, {'name': '17095', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17095'}]
CVE State: PUBLISHED
Explain CVE-2006-0746
Certain patches for kpdf do not include all relevant patches from xpdf that were associated with CVE-2005-3627, which allows context-dependent attackers to exploit vulnerabilities that were present in CVE-2005-3627.
Affected Products: n/a
References: [{'name': 'RHSA-2006:0262', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2006-0262.html'}, {'name': 'DSA-1008', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1008'}, {'name': 'MDKSA-2006:054', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:054'}, {'name': '20060310 [KDE Security Advisory] kpdf of KDE 3.3.x heap based buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427299/100/0/threaded'}, {'name': '19190', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19190'}, {'name': '19264', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19264'}, {'name': '19189', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19189'}, {'name': '17039', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17039'}, {'name': 'kde-kpdf-patch-bo(25146)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25146'}, {'name': 'oval:org.mitre.oval:def:11441', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11441'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20060202-1.txt'}, {'name': '566', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/566'}, {'name': '1015751', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015751'}]
CVE State: PUBLISHED
Explain CVE-2006-0750
SQL injection vulnerability in army.php in supersmashbrothers (SSB) Army System 2.1.0 for Invision Power Board (IPB) allows remote attackers to execute arbitrary SQL commands via the userstat parameter in an army action to index.php.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://secubox.shadock.net/Invision_Power_Board_Army_System_Mod_2.1_and_prior_SQL_Injection_Exploit.html'}, {'name': '18840', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18840'}, {'name': '16606', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16606'}, {'name': 'ADV-2006-0561', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0561'}, {'name': '20060212 Invision Power Board Army System Mod <= 2.1 SQL Injection Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/424846/100/0/threaded'}, {'name': 'ipb-armysystem-sql-injection(24654)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24654'}]
CVE State: PUBLISHED
Explain CVE-2006-0751
Multiple unspecified vulnerabilities in the (1) Filesystem in USErspace (FUSE) client and (2) NOOFS daemon in in Network Object Oriented File System (NOOFS) before 0.9.0 have unspecified impact and attack vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://freshmeat.net/projects/noofs/?branch_id=60557&release_id=218852'}, {'name': '[fm-news] 20060204 Newsletter for Friday, February 03rd 2006', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.neohapsis.com/archives/apps/freshmeat/2006-02/0003.html'}, {'name': '23052', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23052'}, {'name': '23053', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23053'}]
CVE State: PUBLISHED
Explain CVE-2006-0752
Niels Provos Honeyd before 1.5 replies to certain illegal IP packet fragments that other IP stack implementations would drop, which allows remote attackers to identify IP addresses that are being simulated using honeyd.
Affected Products: n/a
References: [{'name': '20060212 honeyd security advisory: remote detection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425112/100/0/threaded'}, {'name': 'honeyd-ipfrag-obtain-information(24728)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24728'}, {'name': '16595', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16595'}, {'name': '18867', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18867'}, {'name': 'ADV-2006-0552', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0552'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.honeyd.org/phpBB2/viewtopic.php?t=106'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.honeyd.org/adv.2006-01'}]
CVE State: PUBLISHED
Explain CVE-2006-0753
Memory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to cause a denial of service (memory consumption) via JavaScript that uses setInterval to repeatedly call a function to set the value of window.status.
Affected Products: n/a
References: [{'name': 'ie-windowstatus-dos(24846)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24846'}, {'name': '20060214 memory leak in IE?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/424959/100/0/threaded'}, {'name': '23307', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23307'}]
CVE State: PUBLISHED
Explain CVE-2006-0754
dotProject 2.0.1 and earlier allows remote attackers to obtain sensitive information via direct requests with an invalid baseDir to certain PHP scripts in the db directory, which reveal the path in an error message.  NOTE: the vendor disputes this issue, saying that it could only occur if the administrator ignores the installation instructions as well as warnings generated by check.php
Affected Products: n/a
References: [{'name': '23206', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23206'}, {'name': '20060214 dotproject <= 2.0.1 remote code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/424957/100/0/threaded'}, {'name': 'dotproject-phpinfo-check-obtain-info(24745)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24745'}, {'name': '18879', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18879'}, {'name': '16648', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16648'}, {'name': 'ADV-2006-0604', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0604'}, {'name': '20060215 Re: dotproject <= 2.0.1 remote code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425285/100/0/threaded'}]
CVE State: PUBLISHED