Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-5623 State: PUBLISHED Published: 2006-10-31T20:00:00 Last Updated: 2024-08-07T19:55:53.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in ip.inc.php in Electronic Engineering Tool (EE Tool) 0.4-1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cgipath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20780 - https://www.exploit-db.com/exploits/2667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29884 - http://www.vupen.com/english/advisories/2006/4231
CVE ID: CVE-2006-5624 State: PUBLISHED Published: 2006-10-31T20:00:00 Last Updated: 2024-08-07T19:55:53.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Multi-Page Comment System (MPCS) 1.0.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) include.php or (2) functions.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22578 - http://www.vupen.com/english/advisories/2006/4212 - http://www.securityfocus.com/bid/20751
ecunia.com/advisories/22578 - http://www.vupen.com/english/advisories/2006/4212 - http://www.securityfocus.com/bid/20751 - http://tpvgames.co.uk/web/mpcs/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/29823
CVE ID: CVE-2006-5625 State: PUBLISHED Published: 2006-10-31T20:00:00 Last Updated: 2024-08-07T19:55:54.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Content Management System (WCMS) 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the c[path] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2659 - http://secunia.com/advisories/22627 - http://www.vupen.com/english/advisories/2006/4227 - http://www.securityfocus.com/bid/20773
CVE ID: CVE-2006-5626 State: PUBLISHED Published: 2006-10-31T20:00:00 Last Updated: 2024-08-07T19:55:53.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cms_images/js/htmlarea/htmlarea.php in phpFaber Content Management System (CMS) before 1.3.36 on 20061026 allows remote attackers to inject arbitrary web script or HTML, probably via arbitrary parameters in the query string, as demonstrated with a vigilon parameter. NOTE: earlier downloads of 1.3.36 have the vulnerability; the software was updated without changing the version number. Additional Analyst Notes: - CVE Program Container: References: - http://www.vigilon.com/advisories/vg
he version number. Additional Analyst Notes: - CVE Program Container: References: - http://www.vigilon.com/advisories/vg-phpfaber-24-10-2006.txt - http://www.vigilon.com/resources/102506c.html - http://www.securityfocus.com/bid/20821 - http://secunia.com/advisories/22629 - http://securityreason.com/securityalert/1802 - http://www.vupen.com/english/advisories/2006/4260 - http://www.securityfocus.com/archive/1/449894/100/0/threaded
CVE ID: CVE-2006-5627 State: PUBLISHED Published: 2006-10-31T20:00:00 Last Updated: 2024-08-07T19:55:53.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in QnECMS 2.5.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the adminfolderpath parameter to (1) headerscripts.php, (2) footerhome.php, and (3) footermain.php in admin/include/; (4) photogallery/headerscripts.php; and (5) footerhome.php, (6) footermain.php, (7) headermain.php, (8) sitemapfooter.php, and (9) sitemapheader.php in templates/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22623 - ht
in templates/. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22623 - http://www.osvdb.org/30124 - http://www.osvdb.org/30122 - http://www.securityfocus.com/bid/20801 - http://www.vupen.com/english/advisories/2006/4258 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29871 - http://www.osvdb.org/30121 - http://www.securityfocus.com/archive/1/450056/100/0/threaded - http://www.osvdb.org/30117 - http://www.osvdb.org/30123 - https://www.exploit-db.com/exploits/2681 - http://www.securityfocus.com/archive/1/452356/100/0/threaded - http://www.osvdb.org/30119 - http://www.osvdb.org/30125 - http://www.osvdb.org/30118 - http://www.osvdb.org/30120
ded - http://www.osvdb.org/30119 - http://www.osvdb.org/30125 - http://www.osvdb.org/30118 - http://www.osvdb.org/30120 - http://advisories.echo.or.id/adv/adv53-K-159-2006.txt
CVE ID: CVE-2006-5628 State: PUBLISHED Published: 2006-10-31T20:00:00 Last Updated: 2024-08-07T19:55:53.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp in UNISOR Content Management System (CMS) allows remote attackers to execute arbitrary SQL commands via the (1) user or (2) pass fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20770 - http://www.securityfocus.com/archive/1/449905/100/0/threaded - http://securityreason.com/securityalert/1800 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29855
CVE ID: CVE-2006-5629 State: PUBLISHED Published: 2006-10-31T22:00:00 Last Updated: 2024-08-07T19:55:54.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Hosting Controller 6.1 before Hotfix 3.3 allow remote attackers to execute arbitrary SQL commands via the ForumID parameter in (1) DisableForum.asp and (2) enableForum.asp. NOTE: it was later reported that the vulnerability is present in 6.1 Hotfix 3.3 and earlier. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28973 - http://www.kapda.ir/advisory-442.html - http://www.securityfocus.com/archive/1/485028/100/0/threaded - http://securitytra
ttp://www.kapda.ir/advisory-442.html - http://www.securityfocus.com/archive/1/485028/100/0/threaded - http://securitytracker.com/id?1017103 - http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html - http://secunia.com/advisories/22607 - http://www.vupen.com/english/advisories/2006/4296 - https://www.exploit-db.com/exploits/4730 - http://www.securityfocus.com/bid/20661 - http://www.securityfocus.com/bid/26862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39036
CVE ID: CVE-2006-5630 State: PUBLISHED Published: 2006-10-31T22:00:00 Last Updated: 2024-08-07T19:55:54.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hosting Controller 6.1 before Hotfix 3.3 allows remote attackers to (1) delete the virtual directory of an arbitrary site via a modified ForumID parameter in a disableforum action in DisableForum.asp and (2) create an arbitrary forum virtual directory via an empty ForumID parameter in an enableforum action in EnableForum.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/449937/100/0/threaded - http://www.kapda.ir/advisory-442.html - http://securitytracker.com/id?101710
focus.com/archive/1/449937/100/0/threaded - http://www.kapda.ir/advisory-442.html - http://securitytracker.com/id?1017103 - http://secunia.com/advisories/22607 - http://securityreason.com/securityalert/1804 - http://www.vupen.com/english/advisories/2006/4296
CVE ID: CVE-2006-5631 State: PUBLISHED Published: 2006-10-31T22:00:00 Last Updated: 2024-08-07T19:55:54.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via arbitrary query strings when the action parameter is not "1", as demonstrated using script in the action parameter, a different vulnerability than CVE-2006-5632. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2006-October/001099.html - http://securitytracker.com/id?1017130 - http://secunia.com/advisories/22701 - https://exchange.xf
-October/001099.html - http://securitytracker.com/id?1017130 - http://secunia.com/advisories/22701 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29890
CVE ID: CVE-2006-5632 State: PUBLISHED Published: 2006-10-31T22:00:00.000Z Last Updated: 2025-04-03T15:34:45.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vulnerability than CVE-2006-5631. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.attrition.org/pipermail/vim/2006-October/001099.html - http://securitytracker.com/id?1017130 - http://sec
: - http://www.attrition.org/pipermail/vim/2006-October/001099.html - http://securitytracker.com/id?1017130 - http://secunia.com/advisories/22701 - http://www.securityfocus.com/bid/20768
CVE ID: CVE-2006-5633 State: PUBLISHED Published: 2006-10-31T22:00:00 Last Updated: 2024-08-07T19:55:54.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox 1.5.0.7 and 2.0, and Seamonkey 1.1b, allows remote attackers to cause a denial of service (crash) by creating a range object using createRange, calling selectNode on a DocType node (DOCUMENT_TYPE_NODE), then calling createContextualFragment on the range, which triggers a null dereference. NOTE: the original Bugtraq post mentioned that code execution was possible, but followup analysis has shown that it is only a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.
t is only a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/450682/100/200/threaded - http://www.securityfocus.com/archive/1/450155/100/0/threaded - http://www.securityfocus.com/archive/1/450168/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050416.html - https://bugzilla.mozilla.org/show_bug.cgi?id=358797 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29916 - http://www.securityfocus.com/archive/1/452803/100/0/threaded - http://www.gotfault.net/research/advisory/gadv-firefox.txt - http://www.securityfocus.com/archive/1/450167/100/0/threaded - http://www.securityfocus.com/bid/2
ory/gadv-firefox.txt - http://www.securityfocus.com/archive/1/450167/100/0/threaded - http://www.securityfocus.com/bid/20799 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=213237
CVE ID: CVE-2006-5634 State: PUBLISHED Published: 2006-11-01T00:00:00 Last Updated: 2024-08-07T19:55:53.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpProfiles 2.1 Beta allow remote attackers to execute arbitrary PHP code via a URL in the (1) reqpath parameter to (a) body.inc.php and (b) body_blog.inc.php in users/include/; or the (2) usrinc parameter in users/include/upload_ht.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/30138 - http://www.securityfocus.com/bid/20819 - http://www.osvdb.org/30137 - http://www.vupen.com/english/advisories/2006/4274 - https://www.exploit-
us.com/bid/20819 - http://www.osvdb.org/30137 - http://www.vupen.com/english/advisories/2006/4274 - https://www.exploit-db.com/exploits/2688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29900 - http://secunia.com/advisories/22644 - http://www.osvdb.org/displayvuln.php?osvdb_id=30136
CVE ID: CVE-2006-5635 State: PUBLISHED Published: 2006-11-01T00:00:00 Last Updated: 2024-08-07T19:55:54.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1801 - http://www.securityfocus.com/archive/1/450034/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29898 - http://www.securityfocus.com/bid/20778
CVE ID: CVE-2006-5636 State: PUBLISHED Published: 2006-11-01T00:00:00 Last Updated: 2024-08-07T19:55:53.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in common.php in Simple Website Software (SWS) 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SWSDIR parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4262 - http://securityreason.com/securityalert/1799 - https://www.exploit-db.com/exploits/2673 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29861 - http://www.securityfocus.com/archive/1/450050/100/0/threaded - http://s
ange.xforce.ibmcloud.com/vulnerabilities/29861 - http://www.securityfocus.com/archive/1/450050/100/0/threaded - http://secunia.com/advisories/22618 - http://www.osvdb.org/30131 - http://www.securityfocus.com/bid/20787
CVE ID: CVE-2006-5637 State: PUBLISHED Published: 2006-11-01T00:00:00 Last Updated: 2024-08-07T19:55:54.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in faq_reply.php in Faq Administrator 2.1b allows remote attackers to execute arbitrary PHP code via a URL in the email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2006-October/001100.html - http://secunia.com/advisories/22621 - http://www.securityfocus.com/bid/20796 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29868 - https://www.exploit-db.com/exploits/2678 - http://www.vupen.com/english/advisories/2006/42
d.com/vulnerabilities/29868 - https://www.exploit-db.com/exploits/2678 - http://www.vupen.com/english/advisories/2006/4254 - http://www.osvdb.org/30115
CVE ID: CVE-2006-5638 State: PUBLISHED Published: 2006-11-01T00:00:00 Last Updated: 2024-08-07T19:55:53.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in cherche.php in PHPMyRing 4.2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) limite and (2) mots parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29887 - https://www.exploit-db.com/exploits/2679 - http://secunia.com/advisories/22620 - http://www.vupen.com/english/advisories/2006/4261 - http://www.securityfocus.com/bid/20792
CVE ID: CVE-2006-5639 State: PUBLISHED Published: 2006-11-01T00:00:00 Last Updated: 2024-08-07T19:55:53.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the random number generator in OpenWBEM (Web Based Enterprise Management) 3.2.0 allows attackers to gain privileges via vectors related to "local or HTTP Digest authentication." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20807 - http://sourceforge.net/forum/forum.php?forum_id=625294 - http://secunia.com/advisories/22709 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29914 - http://www.vupen.com/english/advisories/2006/4238
CVE ID: CVE-2006-5640 State: PUBLISHED Published: 2006-11-01T00:00:00 Last Updated: 2024-08-07T19:55:53.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in guestbookview.asp in Techno Dreams Guest Book 1.0 earlier allows remote attackers to execute arbitrary SQL commands via the key parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22600 - http://www.securityfocus.com/bid/20802 - http://www.vupen.com/english/advisories/2006/4277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29869 - https://www.exploit-db.com/exploits/2684
CVE ID: CVE-2006-5641 State: PUBLISHED Published: 2006-11-01T00:00:00 Last Updated: 2024-08-07T19:55:53.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in MainAnnounce2.asp in Techno Dreams Announcement allows remote attackers to execute arbitrary SQL commands via the key parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29870 - http://secunia.com/advisories/22598 - https://www.exploit-db.com/exploits/2683 - http://www.vupen.com/english/advisories/2006/4276 - http://www.securityfocus.com/bid/20794
CVE ID: CVE-2006-5642 State: PUBLISHED Published: 2006-11-01T00:00:00 Last Updated: 2024-08-07T19:55:53.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in NmnLogger 1.0.0 and earlier has unknown impact and attack vectors related to configuration of mesasge drivers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20820 - http://www.vupen.com/english/advisories/2006/4237 - http://sourceforge.net/project/shownotes.php?release_id=456767&group_id=168715
CVE ID: CVE-2006-5643 State: PUBLISHED Published: 2006-11-01T00:00:00 Last Updated: 2024-08-07T19:55:54.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search_de.html in foresite CMS allows remote attackers to inject arbitrary web script or HTML via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017134 - http://www.securityfocus.com/bid/20818 - http://www.vupen.com/english/advisories/2006/4278 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls29 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29906 - http://secunia.com/advisories/22648 - http://w
ajor_rls29 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29906 - http://secunia.com/advisories/22648 - http://www.securityfocus.com/archive/1/450046/100/0/threaded
CVE ID: CVE-2006-5645 State: PUBLISHED Published: 2006-11-01T15:00:00 Last Updated: 2024-08-07T19:55:54.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled scanning of archives" is set, allows remote attackers to cause a denial of service (infinite loop) via a malformed RAR archive with an Archive Header section with the head_size and pack_size fields set to zero. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018450 - http://www.sophos.com/support/knowledgebase/article/7609.html - http://secu
http://www.securitytracker.com/id?1018450 - http://www.sophos.com/support/knowledgebase/article/7609.html - http://securitytracker.com/id?1017132 - http://www.vupen.com/english/advisories/2006/4239 - http://www.securityfocus.com/bid/20816 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=439 - http://www.securityfocus.com/archive/1/474683/100/0/threaded - http://secunia.com/advisories/22591
CVE ID: CVE-2006-5646 State: PUBLISHED Published: 2006-11-01T15:00:00 Last Updated: 2024-08-07T19:55:54.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when archive scanning is enabled, allows remote attackers to trigger a denial of service (memory corruption) via a CHM file with an LZX decompression header that specifies a Window_size of 0. Additional Analyst Notes: - CVE Program Container: References: - http://www.sophos.com/support/knowledgebase/article/7609.html - http://securitytracker.com/id?1017132 - http://www.vupen.c
tp://www.sophos.com/support/knowledgebase/article/7609.html - http://securitytracker.com/id?1017132 - http://www.vupen.com/english/advisories/2006/4239 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=452 - http://www.securityfocus.com/bid/20816 - http://secunia.com/advisories/22591
CVE ID: CVE-2006-5647 State: PUBLISHED Published: 2006-11-01T15:00:00 Last Updated: 2024-08-07T19:55:53.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a malformed CHM file with a large name length in the CHM chunk header, aka "CHM name length memory consumption vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.sophos.com/support/knowledgebase/article/7609.html - http://securitytracker.com/id?1017132 - h
References: - http://www.sophos.com/support/knowledgebase/article/7609.html - http://securitytracker.com/id?1017132 - http://www.vupen.com/english/advisories/2006/4239 - http://www.securityfocus.com/bid/20816 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=451 - http://secunia.com/advisories/22591
CVE ID: CVE-2006-5648 State: PUBLISHED Published: 2006-12-14T00:00:00.000Z Last Updated: 2025-04-03T15:31:11.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ubuntu Linux 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (resource consumption) by using the (1) sys_get_robust_list and (2) sys_set_robust_list functions to create processes that cannot be killed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.novell.com/linux/security/advisories/2006_79_kernel.html - http://secunia.com/advisories/23361 - http://secunia.com/advisories/23384 - http://www.securityfocus.com/bid/21582 - http://secunia.com/ad
/advisories/23361 - http://secunia.com/advisories/23384 - http://www.securityfocus.com/bid/21582 - http://secunia.com/advisories/23474 - http://www.ubuntu.com/usn/usn-395-1
CVE ID: CVE-2006-5649 State: PUBLISHED Published: 2006-12-14T00:00:00.000Z Last Updated: 2025-04-03T15:29:02.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the "alignment check exception handling" in Ubuntu 5.10, 6.06 LTS, and 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (kernel panic) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.novell.com/linux/security/advisories/2006_79_kernel.html - http://secunia.com/advisories/23361 - http://secunia.com/advisories/23384 - http://www.us.debian.org/security/2006/dsa-1237 - http://secunia.com/advisor
361 - http://secunia.com/advisories/23384 - http://www.us.debian.org/security/2006/dsa-1237 - http://secunia.com/advisories/23474 - http://www.us.debian.org/security/2006/dsa-1233 - http://secunia.com/advisories/23370 - http://www.ubuntu.com/usn/usn-395-1 - http://www.securityfocus.com/bid/21523 - http://secunia.com/advisories/23395
CVE ID: CVE-2006-5650 State: PUBLISHED Published: 2006-11-07T19:00:00 Last Updated: 2024-08-07T19:55:53.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute arbitrary code via the DownloadAgent function, as demonstrated using an ICQ avatar. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30059 - http://securityreason.com/securityalert/1830 - http://www.zerodayinitiative.com/advisories/ZDI-06-037.html - http://securitytracker.com/id?1017163 - http://www.vupen.com/english/advisories/2006/4362 - h
visories/ZDI-06-037.html - http://securitytracker.com/id?1017163 - http://www.vupen.com/english/advisories/2006/4362 - http://www.securityfocus.com/archive/1/450726/100/0/threaded - http://secunia.com/advisories/22670 - http://www.securityfocus.com/bid/20930